This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft File: fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft (raw, json) Hash identifier: W57h+tV7VuRgX0MrisgoHqfe96X1x5Vl+QU1+1kkIBU= Subject key identifier: CA:C2:BD:B2:02:B1:1D:55:FE:E2:61:20:B8:5F:DE:23:DC:B7:8B:E5 Authority key identifier: 7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 Certificate issuer: /CN=7e058377510a3a9245ce72cbe88e0efa19719204 Certificate serial: 019C43C6BCA3BF45DE3FFD353EBCB3A6E0E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft Manifest number: 1259 Signing time: Mon 09 Feb 2026 19:00:23 +0000 Manifest this update: Mon 09 Feb 2026 19:00:23 +0000 Manifest next update: Tue 10 Feb 2026 19:00:23 +0000 Files and hashes: 1: beJshXTCFytgHzjAamZUfkQuubM.roa (hash: Lh9/62VbhV+tIPQCobGS97fKdIV26rAllSw/ibORPkA=) 2: fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl (hash: T2n7KqqG9h82Hf8+sXW4SrLkhXC6lh02Q+9oIuMoRMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:bc:a3:bf:45:de:3f:fd:35:3e:bc:b3:a6:e0:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e058377510a3a9245ce72cbe88e0efa19719204 Validity Not Before: Feb 9 19:00:23 2026 GMT Not After : Feb 10 19:00:23 2026 GMT Subject: CN=cac2bdb202b11d55fee26120b85fde23dcb78be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:82:8e:f3:25:9a:70:ab:04:76:ee:43:ee:78: 1b:81:83:81:76:2c:57:f0:99:2b:31:a1:3f:a5:3c: 7b:79:e6:da:ab:7f:1b:65:87:d0:2d:38:92:81:12: 71:09:9b:13:39:35:59:7b:1c:5f:7e:75:02:e3:02: 9f:04:4e:d3:45:f7:58:89:16:e9:f8:ad:46:00:e6: b5:50:82:d2:c0:ff:1c:44:c0:31:11:f9:15:15:05: 4c:62:0b:59:e4:b8:d1:eb:c4:52:15:57:77:02:f8: 84:b9:e5:78:03:d4:2e:5c:53:f0:c0:1a:9f:e5:58: fd:29:2f:2b:e1:e8:18:fa:28:be:2a:5e:47:23:84: d0:c7:5b:10:d1:d4:e6:6e:b8:7d:22:c9:29:c6:5f: 6b:37:52:9d:bd:2f:f5:6e:b3:fc:d2:2b:27:83:7f: d7:39:ba:42:18:37:70:32:77:2d:e4:ff:7a:79:b7: 01:fe:25:22:a7:61:aa:23:a0:0d:4b:cd:c9:77:37: bd:f6:22:66:7f:39:1d:06:c5:f0:62:19:f4:d7:1c: f1:f2:43:ef:eb:2d:98:24:7b:ae:dd:0f:cf:6b:1c: a2:ac:3a:fd:75:7f:32:1b:09:fc:b9:f9:87:a2:bf: f3:d0:5f:ab:7e:4c:ea:ed:63:6f:8e:7a:45:f6:fd: 40:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:C2:BD:B2:02:B1:1D:55:FE:E2:61:20:B8:5F:DE:23:DC:B7:8B:E5 X509v3 Authority Key Identifier: keyid:7E:05:83:77:51:0A:3A:92:45:CE:72:CB:E8:8E:0E:FA:19:71:92:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fgWDd1EKOpJFznLL6I4O-hlxkgQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0205f2-df2a-41d6-bc2d-72827fe6d7af/1/fgWDd1EKOpJFznLL6I4O-hlxkgQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:be:99:5c:d0:86:fa:3c:d1:23:82:83:50:a6:11:a2:f7:bd: da:4a:5c:e6:d4:35:f6:b5:44:65:b4:4d:81:32:51:cf:70:a5: d0:44:1d:05:68:a6:d3:b1:03:0b:c0:e9:25:08:01:86:5a:53: d9:2f:22:8c:eb:d0:2e:89:2e:93:a6:d7:44:3e:18:69:fc:f9: 47:ef:54:75:e1:62:95:0f:f9:64:68:51:1e:ec:da:0c:1e:c0: 89:eb:a1:e9:44:b9:05:e4:7f:56:0d:67:75:61:f4:2b:f2:d3: a7:27:0b:d7:bf:16:62:8a:15:e0:cb:59:2f:fb:66:9f:49:83: 23:8c:96:2f:56:97:33:64:ad:7f:77:09:95:02:f5:29:33:c9: 9c:d0:57:c9:ee:b0:96:60:dd:a8:ac:83:fc:30:bf:6f:67:15: cb:1f:6e:30:65:7f:e1:a7:e5:5b:4f:be:af:a0:76:30:29:f6: 92:58:e0:67:e9:c4:62:6d:24:d1:04:6a:8d:db:f7:cd:2b:52: 68:48:06:a2:b6:7e:89:6d:15:6d:46:83:d3:2b:49:3f:eb:b2: 01:95:dc:d3:8e:c7:2d:4c:3c:93:8d:56:a2:55:03:ee:56:ce: 08:5e:bc:68:31:56:78:e3:fe:68:82:0e:eb:05:fe:78:e0:6d: 11:bb:dd:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxryjv0XeP/01PryzpuDlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMDU4Mzc3NTEwYTNhOTI0NWNlNzJjYmU4OGUwZWZhMTk3 MTkyMDQwHhcNMjYwMjA5MTkwMDIzWhcNMjYwMjEwMTkwMDIzWjAzMTEwLwYDVQQD EyhjYWMyYmRiMjAyYjExZDU1ZmVlMjYxMjBiODVmZGUyM2RjYjc4YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYKO8yWacKsEdu5D7ngbgYOBdixX 8JkrMaE/pTx7eebaq38bZYfQLTiSgRJxCZsTOTVZexxffnUC4wKfBE7TRfdYiRbp +K1GAOa1UILSwP8cRMAxEfkVFQVMYgtZ5LjR68RSFVd3AviEueV4A9QuXFPwwBqf 5Vj9KS8r4egY+ii+Kl5HI4TQx1sQ0dTmbrh9Iskpxl9rN1KdvS/1brP80isng3/X ObpCGDdwMnct5P96ebcB/iUip2GqI6ANS83Jdze99iJmfzkdBsXwYhn01xzx8kPv 6y2YJHuu3Q/PaxyirDr9dX8yGwn8ufmHor/z0F+rfkzq7WNvjnpF9v1ARQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMrCvbICsR1V/uJhILhf3iPct4vlMB8GA1UdIwQY MBaAFH4Fg3dRCjqSRc5yy+iODvoZcZIEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQt NzI4MjdmZTZkN2FmLzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8wMjA1ZjItZGYyYS00MWQ2LWJjMmQtNzI4MjdmZTZkN2Fm LzEvZmdXRGQxRUtPcEpGem5MTDZJNE8taGx4a2dRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATb6ZXNCG +jzRI4KDUKYRove92kpc5tQ19rVEZbRNgTJRz3Cl0EQdBWim07EDC8DpJQgBhlpT 2S8ijOvQLokuk6bXRD4Yafz5R+9UdeFilQ/5ZGhRHuzaDB7Aieuh6US5BeR/Vg1n dWH0K/LTpycL178WYooV4MtZL/tmn0mDI4yWL1aXM2Stf3cJlQL1KTPJnNBXye6w lmDdqKyD/DC/b2cVyx9uMGV/4aflW0++r6B2MCn2kljgZ+nEYm0k0QRqjdv3zStS aEgGorZ+iW0VbUaD0ytJP+uyAZXc047HLUw8k41WolUD7lbOCF68aDFWeOP+aIIO 6wX+eOBtEbvduQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:49 2026 by rpki-client