This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft File: 1fD0usX5pQIvwty8Sj20zGsRZkQ.mft (raw, json) Hash identifier: YaITei3sNUEMcus8XFTy11mCssdjAJHVaSfXzy0X5eY= Subject key identifier: 8F:FA:FE:4E:40:69:D5:BA:73:74:0B:D0:11:E0:FC:E6:CE:72:E8:FF Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Certificate serial: 019C424674D98B1A91C918418EB51D8D521E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft Manifest number: 16F7 Signing time: Mon 09 Feb 2026 12:00:39 +0000 Manifest this update: Mon 09 Feb 2026 12:00:39 +0000 Manifest next update: Tue 10 Feb 2026 12:00:39 +0000 Files and hashes: 1: 1fD0usX5pQIvwty8Sj20zGsRZkQ.crl (hash: PnbzYzxB204Efa6KQoY7Wwp2AEoK1ulUzlz6J/OpYDo=) 2: 37hbQJ7zVxzVagSbASxlGNa7rGQ.roa (hash: ZiPWwSin+eQu8Naroa7jWI6Yudz7OyFOeo7L1bmKWLo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:74:d9:8b:1a:91:c9:18:41:8e:b5:1d:8d:52:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644 Validity Not Before: Feb 9 12:00:39 2026 GMT Not After : Feb 10 12:00:39 2026 GMT Subject: CN=8ffafe4e4069d5ba73740bd011e0fce6ce72e8ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:74:04:b2:a2:32:06:ae:e1:63:83:f3:e6: 09:3b:55:bb:d3:12:eb:0f:2e:18:11:60:ab:f7:9a: 51:47:16:13:12:57:1e:66:e1:68:9a:f1:66:c3:a0: 71:3c:e5:d5:de:44:c5:81:8d:78:96:af:5e:1d:56: 46:87:07:cf:28:dd:6c:91:28:e8:81:5b:7c:ef:9f: c1:2d:94:48:ea:e4:b4:a9:c6:cd:2d:77:6a:3f:bf: 48:fd:48:a1:9e:00:8f:30:19:57:9a:c0:10:bf:bf: 21:af:22:ba:f1:46:20:ea:13:25:71:47:b6:56:f5: a2:d2:79:7b:55:b4:12:98:5a:91:2f:c3:9a:20:86: 7c:84:86:b3:89:60:5d:39:d7:73:de:5d:84:aa:fa: 09:c4:42:79:16:16:e0:97:f7:d7:22:b6:e5:bb:99: 7d:98:e5:a6:6d:82:98:fc:4f:55:76:ba:ca:96:9a: 30:bc:18:d4:45:c1:b7:47:d6:d6:ac:c5:30:31:78: d7:64:17:de:42:b2:31:a0:f7:95:d2:ac:8c:a1:77: 69:6a:9c:ed:f7:04:5b:9b:e1:fa:d8:68:48:77:b0: 81:60:63:bc:36:4d:66:a6:d2:04:46:a2:be:67:fe: 4d:97:76:0c:6d:9d:44:ca:1d:dd:57:d7:a0:b3:09: 94:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:FA:FE:4E:40:69:D5:BA:73:74:0B:D0:11:E0:FC:E6:CE:72:E8:FF X509v3 Authority Key Identifier: keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:82:ee:f5:0a:98:f3:40:fe:d0:2b:37:c9:e3:09:0c:c4:cf: 7a:b3:f4:45:33:76:0c:54:06:37:94:90:1f:a5:b1:01:7b:82: 0f:05:61:93:d5:46:db:d8:a4:a6:2c:0b:22:e5:01:a1:23:ed: 3e:63:78:e0:85:06:3d:0f:04:b4:6b:89:5f:b7:12:71:f1:77: 4e:b6:ec:12:8a:c3:08:86:af:cb:6c:aa:42:26:30:61:26:f0: b4:20:43:4d:15:5c:94:c9:43:b5:f9:52:f4:ec:e5:e2:87:3b: 80:61:f2:6f:7e:2f:0d:dc:7e:64:9a:a4:c5:6f:31:45:b4:1c: 59:48:06:f7:7d:ef:62:2b:fb:c2:a5:cc:f2:29:a4:61:86:e1: b0:ee:c7:23:d3:72:43:ee:64:47:96:1a:ba:51:35:a6:b6:a0: ee:c7:d7:7a:f4:a2:1a:5d:7d:0e:c6:5f:60:53:49:13:9f:82: 23:73:c8:c1:1c:dc:eb:49:2b:3b:69:a7:92:ab:f4:10:f5:d7: 01:c7:e0:35:08:d5:5d:87:db:23:88:1c:64:9e:3f:62:2b:d3: 65:4a:62:7b:e1:f3:3b:1d:ed:d9:db:0b:16:0d:9d:62:ce:ca: 6f:67:dd:0f:59:32:f2:7b:44:20:df:be:51:0d:1a:fc:23:5b: e7:b2:cc:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnTZixqRyRhBjrUdjVIeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ZjBmNGJhYzVmOWE1MDIyZmMyZGNiYzRhM2RiNGNjNmIx MTY2NDQwHhcNMjYwMjA5MTIwMDM5WhcNMjYwMjEwMTIwMDM5WjAzMTEwLwYDVQQD Eyg4ZmZhZmU0ZTQwNjlkNWJhNzM3NDBiZDAxMWUwZmNlNmNlNzJlOGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5zh0BLKiMgau4WOD8+YJO1W70xLr Dy4YEWCr95pRRxYTElceZuFomvFmw6BxPOXV3kTFgY14lq9eHVZGhwfPKN1skSjo gVt875/BLZRI6uS0qcbNLXdqP79I/UihngCPMBlXmsAQv78hryK68UYg6hMlcUe2 VvWi0nl7VbQSmFqRL8OaIIZ8hIaziWBdOddz3l2EqvoJxEJ5Fhbgl/fXIrblu5l9 mOWmbYKY/E9VdrrKlpowvBjURcG3R9bWrMUwMXjXZBfeQrIxoPeV0qyMoXdpapzt 9wRbm+H62GhId7CBYGO8Nk1mptIERqK+Z/5Nl3YMbZ1Eyh3dV9egswmU/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/6/k5AadW6c3QL0BHg/ObOcuj/MB8GA1UdIwQY MBaAFNXw9LrF+aUCL8LcvEo9tMxrEWZEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAt OTkyNTQxZmRlYmVhLzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9hNmQ1NzItMzA0My00ZDE5LTkxNDAtOTkyNTQxZmRlYmVh LzEvMWZEMHVzWDVwUUl2d3R5OFNqMjB6R3NSWmtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb4Lu9QqY 80D+0Cs3yeMJDMTPerP0RTN2DFQGN5SQH6WxAXuCDwVhk9VG29ikpiwLIuUBoSPt PmN44IUGPQ8EtGuJX7cScfF3TrbsEorDCIavy2yqQiYwYSbwtCBDTRVclMlDtflS 9Ozl4oc7gGHyb34vDdx+ZJqkxW8xRbQcWUgG933vYiv7wqXM8imkYYbhsO7HI9Ny Q+5kR5YaulE1prag7sfXevSiGl19DsZfYFNJE5+CI3PIwRzc60krO2mnkqv0EPXX AcfgNQjVXYfbI4gcZJ4/YivTZUpie+HzOx3t2dsLFg2dYs7Kb2fdD1ky8ntEIN++ UQ0a/CNb57LMhw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:53 2026 by rpki-client