This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft File: Fa8HL54VarwgxGhJjiMjFSxzaug.mft (raw, json) Hash identifier: YKCmFPUxOlX1R36HLyBB87vfklubi/Tuebcbd5ZaEjs= Subject key identifier: E9:04:34:56:22:EF:DC:C3:B7:5A:4F:C4:18:40:E6:8B:FC:C8:F0:2E Authority key identifier: 15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 Certificate issuer: /CN=15af072f9e156abc20c468498e2323152c736ae8 Certificate serial: 019C41D8578F2EE6363751E330AE164E46DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft Manifest number: 174F Signing time: Mon 09 Feb 2026 10:00:23 +0000 Manifest this update: Mon 09 Feb 2026 10:00:23 +0000 Manifest next update: Tue 10 Feb 2026 10:00:23 +0000 Files and hashes: 1: DP2ZVF5XMtIlb8PSMaOqb9pBnpY.roa (hash: jGqjs9xozz6rpTqRrKhgcskeRFoVeCtnOBzJB/wnJHI=) 2: Fa8HL54VarwgxGhJjiMjFSxzaug.crl (hash: hP+IDGAPYhr7t3dZE6nr3MXHJV6Z4zOPwz+zCDWQW5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:57:8f:2e:e6:36:37:51:e3:30:ae:16:4e:46:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15af072f9e156abc20c468498e2323152c736ae8 Validity Not Before: Feb 9 10:00:23 2026 GMT Not After : Feb 10 10:00:23 2026 GMT Subject: CN=e904345622efdcc3b75a4fc41840e68bfcc8f02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c1:aa:93:1d:8a:1e:85:34:d2:5d:4f:16:fb: fa:00:e7:4b:29:6f:75:95:6f:67:60:7f:11:b7:31: 24:b1:fb:f0:aa:25:6a:14:19:9c:58:2c:29:42:3e: d7:19:7e:6b:f3:90:e5:3a:d0:a1:67:c1:0a:3d:c6: db:0d:46:e5:57:29:4a:99:04:39:79:d7:67:8f:91: a8:d7:ac:a1:56:e3:5d:40:a2:fa:8a:d4:d0:ed:68: 71:26:61:3b:a9:41:c4:d9:54:89:b7:92:ab:49:c4: 40:8a:f1:ac:7b:6c:96:c2:d2:8f:79:e8:8b:b6:cb: 80:aa:cc:a3:2c:4c:65:52:f8:8a:d8:59:ef:6e:d3: 9e:9b:e1:1a:1e:f5:2b:c7:ef:03:63:e7:a3:23:1b: a7:a3:c2:dc:2c:72:13:99:52:b2:1e:fc:1a:53:96: 9c:33:95:c6:8a:aa:5b:34:db:eb:70:7d:1f:73:1f: e0:08:cf:82:e3:a7:9f:84:0b:5d:ef:7e:43:75:ac: d1:7b:9b:b5:58:2a:cc:69:60:41:d2:4f:8e:a4:3b: 6e:f5:6b:35:f5:08:51:2c:c1:6c:48:40:ee:41:65: ee:be:f9:41:0c:b8:27:12:3f:ff:ce:f1:8b:f8:b7: eb:8a:d8:53:fb:c0:49:f0:4e:89:33:69:fa:b5:5f: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:04:34:56:22:EF:DC:C3:B7:5A:4F:C4:18:40:E6:8B:FC:C8:F0:2E X509v3 Authority Key Identifier: keyid:15:AF:07:2F:9E:15:6A:BC:20:C4:68:49:8E:23:23:15:2C:73:6A:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa8HL54VarwgxGhJjiMjFSxzaug.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/12f26e-fb11-42e1-bacc-3969eca7b7d4/1/Fa8HL54VarwgxGhJjiMjFSxzaug.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:11:1e:35:ef:96:2d:e3:2e:0c:a0:f7:03:65:b4:b8:e3:4b: d4:ea:32:20:fe:40:3a:44:81:f5:0a:d6:e0:cb:32:97:dc:19: 80:c0:db:4f:9a:da:c1:06:87:9e:d9:da:07:21:76:10:85:5f: 68:e0:21:07:5a:26:46:04:da:07:d2:52:df:8d:6a:e7:09:72: 46:67:24:cd:4c:08:e3:70:c2:f1:35:be:23:db:8d:7b:b4:53: 93:12:e4:f1:f6:08:d4:67:03:1b:d4:64:4d:d5:34:22:fe:bd: 14:9b:1e:81:36:20:84:57:12:14:04:f9:f6:6c:05:c6:fc:91: 6b:e3:f2:63:64:d6:07:ac:d7:13:ae:35:a4:ea:c7:5b:c6:6f: 3f:35:d8:1e:a3:43:5c:ea:8e:d5:1f:33:08:9d:51:0f:d2:6f: 50:89:52:74:ea:70:73:e4:65:5a:3f:c1:87:b7:d7:06:74:20: a5:c6:1f:97:ba:69:b1:a4:ed:0c:a5:02:ad:83:8c:5b:6f:cc: 42:fe:d7:2a:02:3c:20:1a:e7:15:e1:3e:39:40:e4:af:63:68: a9:90:e8:f4:d9:59:3e:80:5e:cf:3d:66:84:ea:85:16:78:df: c4:1f:ea:86:d1:4f:90:d0:c1:27:9b:f5:d2:ce:e8:22:05:7a: e6:d2:27:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FePLuY2N1HjMK4WTkbeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWYwNzJmOWUxNTZhYmMyMGM0Njg0OThlMjMyMzE1MmM3 MzZhZTgwHhcNMjYwMjA5MTAwMDIzWhcNMjYwMjEwMTAwMDIzWjAzMTEwLwYDVQQD EyhlOTA0MzQ1NjIyZWZkY2MzYjc1YTRmYzQxODQwZTY4YmZjYzhmMDJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysGqkx2KHoU00l1PFvv6AOdLKW91 lW9nYH8RtzEksfvwqiVqFBmcWCwpQj7XGX5r85DlOtChZ8EKPcbbDUblVylKmQQ5 eddnj5Go16yhVuNdQKL6itTQ7WhxJmE7qUHE2VSJt5KrScRAivGse2yWwtKPeeiL tsuAqsyjLExlUviK2FnvbtOem+EaHvUrx+8DY+ejIxuno8LcLHITmVKyHvwaU5ac M5XGiqpbNNvrcH0fcx/gCM+C46efhAtd735DdazRe5u1WCrMaWBB0k+OpDtu9Ws1 9QhRLMFsSEDuQWXuvvlBDLgnEj//zvGL+LfrithT+8BJ8E6JM2n6tV/86QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOkENFYi79zDt1pPxBhA5ov8yPAuMB8GA1UdIwQY MBaAFBWvBy+eFWq8IMRoSY4jIxUsc2roMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2Mt Mzk2OWVjYTdiN2Q0LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xMmYyNmUtZmIxMS00MmUxLWJhY2MtMzk2OWVjYTdiN2Q0 LzEvRmE4SEw1NFZhcndneEdoSmppTWpGU3h6YXVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJREeNe+W LeMuDKD3A2W0uONL1OoyIP5AOkSB9QrW4Msyl9wZgMDbT5rawQaHntnaByF2EIVf aOAhB1omRgTaB9JS341q5wlyRmckzUwI43DC8TW+I9uNe7RTkxLk8fYI1GcDG9Rk TdU0Iv69FJsegTYghFcSFAT59mwFxvyRa+PyY2TWB6zXE641pOrHW8ZvPzXYHqND XOqO1R8zCJ1RD9JvUIlSdOpwc+RlWj/Bh7fXBnQgpcYfl7ppsaTtDKUCrYOMW2/M Qv7XKgI8IBrnFeE+OUDkr2NoqZDo9NlZPoBezz1mhOqFFnjfxB/qhtFPkNDBJ5v1 0s7oIgV65tIndw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:30 2026 by rpki-client