This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json) Hash identifier: eDqfAN055izrrDhDjMFC7kH4ayjsnG8xqhEyHJzSoWM= Subject key identifier: BC:1F:82:00:FC:F9:61:68:22:B2:B6:6B:F2:58:F9:DC:96:A8:CB:02 Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2 Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2 Certificate serial: 019C41A19F9CEE6AE3BC6535974FFEB5053A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft Manifest number: 1545 Signing time: Mon 09 Feb 2026 09:00:36 +0000 Manifest this update: Mon 09 Feb 2026 09:00:36 +0000 Manifest next update: Tue 10 Feb 2026 09:00:36 +0000 Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: XFyVviomiNvx9S17XuXKRSpdJQQJLQJGYm8+B5/R4xw=) 2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:9f:9c:ee:6a:e3:bc:65:35:97:4f:fe:b5:05:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2 Validity Not Before: Feb 9 09:00:36 2026 GMT Not After : Feb 10 09:00:36 2026 GMT Subject: CN=bc1f8200fcf9616822b2b66bf258f9dc96a8cb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:89:bc:62:a6:45:f8:67:2f:1b:c5:6e:3b:0f: 45:29:a6:3d:3c:de:a7:1d:14:fa:ac:65:64:c7:37: 9d:e5:57:af:2d:f3:96:67:29:71:42:b3:5c:8a:44: ef:78:8e:e1:a9:09:b3:c1:6b:07:f5:9f:44:a7:cf: 15:73:70:a5:bc:94:8a:5b:68:0d:6a:1a:64:58:76: 40:5a:c7:60:f3:d8:f7:ef:9e:99:96:ce:bc:4f:51: 3b:64:76:82:5f:a1:9a:d0:cc:09:f0:2c:8f:ef:d1: 20:7c:57:9f:1b:c9:93:2e:27:2f:e0:e7:46:71:c7: 82:55:9b:23:db:02:76:b5:06:c1:6f:84:fc:46:a6: ad:b7:ca:77:eb:d9:fe:47:e4:a4:18:e0:fe:41:b3: af:a6:6a:71:59:cd:ce:29:93:46:79:2e:9b:88:a8: c3:66:6d:f9:c9:d2:e2:27:ec:a7:0f:e1:ca:91:a7: 76:49:7a:59:02:00:6c:29:0c:d9:13:82:06:de:6c: e5:84:b0:db:42:02:7b:a2:0e:87:d5:5f:1f:f0:59: 64:df:a9:60:7a:d2:76:a5:32:fd:19:03:c5:74:6d: bd:9a:00:92:93:5a:e9:16:99:8e:ce:85:04:09:27: 46:b5:1f:d3:55:d7:dd:9c:5e:11:09:c4:1d:8c:74: 2b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1F:82:00:FC:F9:61:68:22:B2:B6:6B:F2:58:F9:DC:96:A8:CB:02 X509v3 Authority Key Identifier: keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:91:dd:be:95:f2:78:26:19:a5:e8:d2:d1:f2:85:7b:12:ed: 5b:f3:91:53:6c:43:c8:3e:f6:50:eb:7b:f5:6f:55:6c:f4:e0: df:86:61:a6:a6:e7:9d:fc:9d:4a:99:8b:83:d9:1e:73:b7:85: fc:93:97:61:5d:83:26:4e:9a:e4:57:bc:ee:e6:f6:40:0b:86: 49:aa:0c:c5:50:24:c2:5b:0f:c1:08:30:cd:49:60:01:15:de: c9:5b:62:b5:1b:22:65:5a:5f:c5:c1:89:eb:c7:bb:e8:34:80: 14:b5:d8:d7:06:3d:fc:0d:b0:24:ae:ab:b0:34:d2:99:8f:13: 30:67:07:85:88:74:cc:0d:b1:36:c9:5f:a0:35:50:83:69:89: 8b:da:d0:9f:e0:52:e3:64:f9:08:93:f5:b1:70:9a:70:c3:97: b4:1d:8d:fc:c8:5c:41:c4:fb:a2:5a:89:19:0e:92:6b:72:9c: 55:1f:b4:9d:c6:be:b8:62:5c:12:13:de:01:3b:7c:b2:01:8a: 8b:c4:be:95:ae:ce:68:57:7e:6f:68:ae:bc:e5:37:0c:4f:9f: 2d:80:9b:5a:d8:76:e1:e9:5f:47:0c:5c:37:7b:3c:59:75:1a: 2a:38:8a:33:40:19:a0:18:be:47:2a:f5:62:7d:72:79:c8:29: 0e:ab:c0:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBoZ+c7mrjvGU1l0/+tQU6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YWE3ZTQ3YjkxYTYyOTVjYmY3MThjMWYyZGRiMGEyNWMy NzZlYjIwHhcNMjYwMjA5MDkwMDM2WhcNMjYwMjEwMDkwMDM2WjAzMTEwLwYDVQQD EyhiYzFmODIwMGZjZjk2MTY4MjJiMmI2NmJmMjU4ZjlkYzk2YThjYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYm8YqZF+GcvG8VuOw9FKaY9PN6n HRT6rGVkxzed5VevLfOWZylxQrNcikTveI7hqQmzwWsH9Z9Ep88Vc3ClvJSKW2gN ahpkWHZAWsdg89j3756Zls68T1E7ZHaCX6Ga0MwJ8CyP79EgfFefG8mTLicv4OdG cceCVZsj2wJ2tQbBb4T8Rqatt8p369n+R+SkGOD+QbOvpmpxWc3OKZNGeS6biKjD Zm35ydLiJ+ynD+HKkad2SXpZAgBsKQzZE4IG3mzlhLDbQgJ7og6H1V8f8Flk36lg etJ2pTL9GQPFdG29mgCSk1rpFpmOzoUECSdGtR/TVdfdnF4RCcQdjHQryQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLwfggD8+WFoIrK2a/JY+dyWqMsCMB8GA1UdIwQY MBaAFPiqfke5GmKVy/cYwfLdsKJcJ26yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LcC1SN2thWXBYTDl4akI4dDJ3b2x3bmJySS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZGU0OTRmLTUxMjktNDlmOS05Mjll LTk3MGM4M2U5NmNiYy8xLzEtS3AtUjdrYVlwWEw5eGpCOHQyd29sd25ickkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzBmL2RlNDk0Zi01MTI5LTQ5ZjktOTI5ZS05NzBjODNlOTZj YmMvMS8xLUtwLVI3a2FZcFhMOXhqQjh0MndvbHduYnJJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVZHd vpXyeCYZpejS0fKFexLtW/ORU2xDyD72UOt79W9VbPTg34ZhpqbnnfydSpmLg9ke c7eF/JOXYV2DJk6a5Fe87ub2QAuGSaoMxVAkwlsPwQgwzUlgARXeyVtitRsiZVpf xcGJ68e76DSAFLXY1wY9/A2wJK6rsDTSmY8TMGcHhYh0zA2xNslfoDVQg2mJi9rQ n+BS42T5CJP1sXCacMOXtB2N/MhcQcT7olqJGQ6Sa3KcVR+0nca+uGJcEhPeATt8 sgGKi8S+la7OaFd+b2iuvOU3DE+fLYCbWth24elfRwxcN3s8WXUaKjiKM0AZoBi+ Ryr1Yn1yecgpDqvALg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:52 2026 by rpki-client