This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft File: FCKHkIfdKSaAJjvDlOMch1lyLZA.mft (raw, json) Hash identifier: fNz9qi9CgxL4NuWssZMDKFClAmF9TCciq/CjPWztkoM= Subject key identifier: ED:40:AB:8C:60:E5:42:DD:52:33:0C:03:4C:52:47:42:19:1C:83:3E Authority key identifier: 14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90 Certificate issuer: /CN=1422879087dd292680263bc394e31c8759722d90 Certificate serial: 019C446C1BD04D7D148857B3B2C110C1C1A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft Manifest number: 01D5 Signing time: Mon 09 Feb 2026 22:01:01 +0000 Manifest this update: Mon 09 Feb 2026 22:01:01 +0000 Manifest next update: Tue 10 Feb 2026 22:01:01 +0000 Files and hashes: 1: FCKHkIfdKSaAJjvDlOMch1lyLZA.crl (hash: CIS/wMSxQp+3UM0KSiUKyWjmOE6RVeqs/BfvenZx5mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:1b:d0:4d:7d:14:88:57:b3:b2:c1:10:c1:c1:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1422879087dd292680263bc394e31c8759722d90 Validity Not Before: Feb 9 22:01:01 2026 GMT Not After : Feb 10 22:01:01 2026 GMT Subject: CN=ed40ab8c60e542dd52330c034c524742191c833e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4c:77:a8:c7:4b:91:fd:6c:33:e3:b1:22:e0: 3a:f7:32:70:f7:a9:57:b1:06:49:05:33:03:45:72: 0c:65:f0:24:96:49:0e:3e:7a:a1:59:44:cb:80:61: 2c:40:c1:b8:b2:cc:46:dd:91:50:a2:19:bb:84:9d: 4b:57:9a:19:96:48:35:9c:98:4a:e3:dc:2c:73:98: 15:0f:28:2a:4b:0c:dc:54:a5:47:16:60:26:71:15: 21:81:24:d1:18:c4:9e:53:51:20:a9:87:00:31:f1: 1e:1f:7a:50:25:2c:22:c8:2b:83:74:b1:9f:32:40: 2e:94:4b:fe:56:50:45:5d:1c:d5:ea:32:14:88:28: 1f:99:47:82:52:8b:bb:ee:43:af:65:15:63:1d:d2: 39:fd:fd:c6:28:9b:09:32:3f:87:ec:24:4d:77:ff: 77:49:ed:8b:0c:da:19:03:42:f1:1f:ba:6d:d0:64: 7b:47:3a:08:c7:6d:91:8d:d5:1c:f6:e4:a7:55:f6: 4f:26:c1:64:c2:86:e5:0b:1c:72:9a:55:15:4b:23: a7:c1:10:5e:67:be:c9:5d:be:cb:00:d4:85:f0:4c: 3c:63:50:96:41:cb:04:13:67:32:ea:6c:cb:7f:8c: 11:7b:03:a9:d3:43:77:a0:79:91:2f:ea:76:25:a6: 13:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:40:AB:8C:60:E5:42:DD:52:33:0C:03:4C:52:47:42:19:1C:83:3E X509v3 Authority Key Identifier: keyid:14:22:87:90:87:DD:29:26:80:26:3B:C3:94:E3:1C:87:59:72:2D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FCKHkIfdKSaAJjvDlOMch1lyLZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/a2776f-abd0-44db-ae9e-7553a02c4297/1/FCKHkIfdKSaAJjvDlOMch1lyLZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d9:45:c9:3e:a7:98:17:ab:05:73:58:c4:a5:21:b8:c5:c6: dd:3a:8a:7b:7c:4c:9c:fd:3c:da:c5:76:40:79:fd:77:de:8a: 1c:ed:19:67:e3:00:0d:49:e2:e8:62:13:84:e6:e9:d4:db:60: 23:76:ac:d5:1e:6b:3d:10:fd:ff:7a:df:1b:66:08:57:45:80: 22:24:29:af:50:51:8e:fd:70:73:c0:5d:16:d0:b8:8b:7b:46: 18:33:88:8a:5f:5d:5c:2e:84:a5:14:f2:6b:92:b5:81:1b:8c: 6c:af:8e:e3:ad:73:09:a3:d9:18:8a:99:27:2f:55:a5:fa:bb: 43:24:d2:22:b1:0e:13:43:ee:0c:ec:77:5c:fd:32:88:3d:e9: b1:24:00:1e:13:17:54:4f:25:84:25:78:7c:cc:38:a7:ff:fa: 2e:e3:90:7e:94:8a:ec:8d:3a:e8:b2:2d:30:56:d0:64:65:dd: 4c:1c:56:d8:07:0a:fb:50:3f:19:2a:f1:91:8d:e8:25:95:8a: 05:97:03:ba:b5:44:8d:ff:56:87:88:92:0d:88:65:8c:67:0c: 11:08:1a:d0:cb:7a:45:60:e0:78:7d:ec:89:22:a1:33:db:30: 6f:cd:6e:37:aa:fa:be:37:bd:6e:06:a1:33:5a:3d:78:18:44: 4b:27:be:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbBvQTX0UiFezssEQwcGiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0MjI4NzkwODdkZDI5MjY4MDI2M2JjMzk0ZTMxYzg3NTk3 MjJkOTAwHhcNMjYwMjA5MjIwMTAxWhcNMjYwMjEwMjIwMTAxWjAzMTEwLwYDVQQD EyhlZDQwYWI4YzYwZTU0MmRkNTIzMzBjMDM0YzUyNDc0MjE5MWM4MzNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUx3qMdLkf1sM+OxIuA69zJw96lX sQZJBTMDRXIMZfAklkkOPnqhWUTLgGEsQMG4ssxG3ZFQohm7hJ1LV5oZlkg1nJhK 49wsc5gVDygqSwzcVKVHFmAmcRUhgSTRGMSeU1EgqYcAMfEeH3pQJSwiyCuDdLGf MkAulEv+VlBFXRzV6jIUiCgfmUeCUou77kOvZRVjHdI5/f3GKJsJMj+H7CRNd/93 Se2LDNoZA0LxH7pt0GR7RzoIx22RjdUc9uSnVfZPJsFkwoblCxxymlUVSyOnwRBe Z77JXb7LANSF8Ew8Y1CWQcsEE2cy6mzLf4wRewOp00N3oHmRL+p2JaYTBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1Aq4xg5ULdUjMMA0xSR0IZHIM+MB8GA1UdIwQY MBaAFBQih5CH3SkmgCY7w5TjHIdZci2QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUt NzU1M2EwMmM0Mjk3LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC9hMjc3NmYtYWJkMC00NGRiLWFlOWUtNzU1M2EwMmM0Mjk3 LzEvRkNLSGtJZmRLU2FBSmp2RGxPTWNoMWx5TFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNlFyT6n mBerBXNYxKUhuMXG3TqKe3xMnP082sV2QHn9d96KHO0ZZ+MADUni6GIThObp1Ntg I3as1R5rPRD9/3rfG2YIV0WAIiQpr1BRjv1wc8BdFtC4i3tGGDOIil9dXC6EpRTy a5K1gRuMbK+O461zCaPZGIqZJy9Vpfq7QyTSIrEOE0PuDOx3XP0yiD3psSQAHhMX VE8lhCV4fMw4p//6LuOQfpSK7I066LItMFbQZGXdTBxW2AcK+1A/GSrxkY3oJZWK BZcDurVEjf9Wh4iSDYhljGcMEQga0Mt6RWDgeH3siSKhM9swb81uN6r6vje9bgah M1o9eBhESye+Jg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:49 2026 by rpki-client