This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft File: fIJLILMxe7jIm-pPDzTQlC0dcU4.mft (raw, json) Hash identifier: N7OfIE/hcIbiEp2I9/y7QmrujEUyJrLRcPSxTmG13Qg= Subject key identifier: B9:7D:B4:1C:29:3D:AD:0C:72:A0:6B:BC:05:B4:75:D5:0D:FA:05:F8 Authority key identifier: 7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E Certificate issuer: /CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e Certificate serial: 019C42B43B84EAF91B98E0528CB62CA2323F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 14:00:33 +0000 Manifest this update: Mon 09 Feb 2026 14:00:33 +0000 Manifest next update: Tue 10 Feb 2026 14:00:33 +0000 Files and hashes: 1: fIJLILMxe7jIm-pPDzTQlC0dcU4.crl (hash: 8N9kEZoUG38VlgvLmDw9gFQ40M/lYiwQskHMHrf5AMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:3b:84:ea:f9:1b:98:e0:52:8c:b6:2c:a2:32:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c824b20b3317bb8c89bea4f0f34d0942d1d714e Validity Not Before: Feb 9 14:00:33 2026 GMT Not After : Feb 10 14:00:33 2026 GMT Subject: CN=b97db41c293dad0c72a06bbc05b475d50dfa05f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:80:8f:3e:73:87:ca:e3:e3:3f:c3:50:07:6c: a8:da:0c:66:cf:9c:bf:c4:0a:92:8a:65:2e:2d:7f: 94:26:29:41:83:9f:8d:09:49:d2:90:76:27:59:a9: f7:49:24:58:f3:26:f4:cd:c8:38:49:2a:a2:d1:00: 26:17:38:6e:f0:61:ba:94:35:41:b9:fb:11:10:23: 91:d6:09:04:af:bd:17:f1:a7:12:c0:ce:1e:a6:8c: ea:8c:64:cc:50:d0:30:ca:f2:c6:2b:f0:34:0f:b4: 97:46:5d:98:10:ef:3c:79:bf:4d:73:bb:b7:35:c1: 2e:e0:46:21:db:fa:0a:40:bf:9a:47:cb:be:be:01: 39:0a:4e:73:5d:00:ee:75:b1:89:90:00:e5:41:81: 8d:44:87:46:5d:39:a5:2d:23:a7:6c:5a:be:cf:33: 5e:c8:ac:6a:72:e2:63:cf:d3:0c:dd:3e:e6:82:68: 64:21:13:8b:14:c8:ae:13:a9:97:b0:d7:00:c3:56: f3:78:a3:5f:7f:23:c2:3a:96:14:13:07:cd:41:49: 67:db:01:03:26:22:4f:4c:fc:37:44:40:b5:70:9b: 03:aa:5a:5b:14:5d:90:ba:bc:2e:df:d1:9f:bf:f4: 90:25:c7:ec:0f:9a:6f:10:a2:44:35:6e:7e:a1:8c: d3:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7D:B4:1C:29:3D:AD:0C:72:A0:6B:BC:05:B4:75:D5:0D:FA:05:F8 X509v3 Authority Key Identifier: keyid:7C:82:4B:20:B3:31:7B:B8:C8:9B:EA:4F:0F:34:D0:94:2D:1D:71:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIJLILMxe7jIm-pPDzTQlC0dcU4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/382fdf-b73c-4979-86c5-ed4498115033/1/fIJLILMxe7jIm-pPDzTQlC0dcU4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:08:93:cf:4b:db:09:b5:ca:5b:2c:2b:7c:d5:05:1c:96:82: 61:d4:04:41:e6:12:46:cb:a9:5e:bd:74:df:37:79:0e:94:06: f1:42:f1:da:c4:ce:eb:8c:c0:17:57:b0:0f:fd:23:03:20:82: d9:e0:e4:41:b7:8b:1a:6b:49:11:98:81:9f:cf:5e:fc:9f:d5: ae:24:51:f7:20:71:de:50:e9:8a:da:f9:ac:fe:19:45:62:b7: 8a:3a:10:02:d7:b7:fa:ef:d4:c4:db:13:f8:3d:59:20:51:62: bf:a6:01:95:1c:38:9a:cd:26:d7:5e:f1:3a:e1:f8:a5:54:16: dc:f6:02:fe:c1:73:84:4e:da:3d:cc:12:37:f7:ec:07:69:90: d5:fc:fc:d3:ef:d8:90:05:8d:10:54:3f:2d:74:f7:71:ad:40: a2:6f:b0:89:89:b7:b9:7c:5b:aa:8c:48:b9:25:29:e1:8d:10: 69:61:9a:e8:28:3d:53:c0:f7:2a:a8:f3:93:83:76:41:be:3e: 4b:31:0b:10:79:20:28:67:02:43:44:e3:ee:2e:76:54:16:21: 9d:a2:98:97:0f:46:8c:88:47:08:69:4c:a1:43:b7:20:56:00: 88:dc:c0:b7:68:24:c9:0d:16:92:30:97:12:35:43:d8:cb:0b: fe:2f:e0:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDuE6vkbmOBSjLYsojI/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjODI0YjIwYjMzMTdiYjhjODliZWE0ZjBmMzRkMDk0MmQx ZDcxNGUwHhcNMjYwMjA5MTQwMDMzWhcNMjYwMjEwMTQwMDMzWjAzMTEwLwYDVQQD EyhiOTdkYjQxYzI5M2RhZDBjNzJhMDZiYmMwNWI0NzVkNTBkZmEwNWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ICPPnOHyuPjP8NQB2yo2gxmz5y/ xAqSimUuLX+UJilBg5+NCUnSkHYnWan3SSRY8yb0zcg4SSqi0QAmFzhu8GG6lDVB ufsRECOR1gkEr70X8acSwM4epozqjGTMUNAwyvLGK/A0D7SXRl2YEO88eb9Nc7u3 NcEu4EYh2/oKQL+aR8u+vgE5Ck5zXQDudbGJkADlQYGNRIdGXTmlLSOnbFq+zzNe yKxqcuJjz9MM3T7mgmhkIROLFMiuE6mXsNcAw1bzeKNffyPCOpYUEwfNQUln2wED JiJPTPw3REC1cJsDqlpbFF2Qurwu39Gfv/SQJcfsD5pvEKJENW5+oYzTdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl9tBwpPa0McqBrvAW0ddUN+gX4MB8GA1UdIwQY MBaAFHyCSyCzMXu4yJvqTw800JQtHXFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZklKTElMTXhlN2pJbS1wUER6VFFsQzBkY1U0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8zODJmZGYtYjczYy00OTc5LTg2YzUt ZWQ0NDk4MTE1MDMzLzEvZklKTElMTXhlN2pJbS1wUER6VFFsQzBkY1U0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS8zODJmZGYtYjczYy00OTc5LTg2YzUtZWQ0NDk4MTE1MDMz LzEvZklKTElMTXhlN2pJbS1wUER6VFFsQzBkY1U0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwiTz0vb CbXKWywrfNUFHJaCYdQEQeYSRsupXr103zd5DpQG8ULx2sTO64zAF1ewD/0jAyCC 2eDkQbeLGmtJEZiBn89e/J/VriRR9yBx3lDpitr5rP4ZRWK3ijoQAte3+u/UxNsT +D1ZIFFiv6YBlRw4ms0m117xOuH4pVQW3PYC/sFzhE7aPcwSN/fsB2mQ1fz80+/Y kAWNEFQ/LXT3ca1Aom+wiYm3uXxbqoxIuSUp4Y0QaWGa6Cg9U8D3Kqjzk4N2Qb4+ SzELEHkgKGcCQ0Tj7i52VBYhnaKYlw9GjIhHCGlMoUO3IFYAiNzAt2gkyQ0WkjCX EjVD2MsL/i/g9w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:26 2026 by rpki-client