This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft File: 1-2fE4ThzE8A0RTje_SzPoDTnwww.mft (raw, json) Hash identifier: 0gwnPCBy3/+pXAVAYHsPMGR9Ar3UWEniJ6SIwXIzONI= Subject key identifier: AA:B0:B1:55:2F:3E:E0:F1:15:C0:63:72:1F:86:7C:2F:17:9A:2E:B2 Authority key identifier: FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C Certificate issuer: /CN=fb67c4e1387313c0344538defd2ccfa034e7c30c Certificate serial: 019C41341B95D76EB1B90589E3163D4A2EAE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft Manifest number: 0DD2 Signing time: Mon 09 Feb 2026 07:00:59 +0000 Manifest this update: Mon 09 Feb 2026 07:00:59 +0000 Manifest next update: Tue 10 Feb 2026 07:00:59 +0000 Files and hashes: 1: 1-2fE4ThzE8A0RTje_SzPoDTnwww.crl (hash: yHLw2YtLyYEZAJahyL2l6tb0wUetPgW+ZyHQLaUhxKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:1b:95:d7:6e:b1:b9:05:89:e3:16:3d:4a:2e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb67c4e1387313c0344538defd2ccfa034e7c30c Validity Not Before: Feb 9 07:00:59 2026 GMT Not After : Feb 10 07:00:59 2026 GMT Subject: CN=aab0b1552f3ee0f115c063721f867c2f179a2eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:2b:8e:16:f3:f8:4e:3e:06:0e:af:7f:ae:1b: fe:86:88:fc:45:b8:25:2a:f1:ac:66:e4:92:c5:f8: 99:44:63:51:04:cf:ff:1c:44:eb:ab:51:38:08:36: f9:d4:b9:b8:6f:58:d2:53:39:c0:4f:2b:2c:88:02: 04:86:89:46:aa:de:d4:43:52:7a:fd:b5:00:1d:4b: cb:9c:05:1d:de:43:96:45:8a:e0:18:3a:57:1c:42: b0:65:b5:fd:36:dc:e1:2b:85:26:39:12:f9:d3:8b: 54:88:f7:96:47:9d:46:32:48:cd:fa:e5:be:fc:c3: 76:00:e4:83:9d:84:05:92:96:31:ea:45:39:c1:57: f9:64:eb:69:96:e5:af:eb:9b:96:3c:77:a0:bc:07: d5:eb:22:e8:62:52:8f:48:e0:16:e4:35:f1:57:8a: 5e:86:03:20:fa:57:0f:4f:f4:e2:2f:4b:d6:29:e2: 3e:39:e4:42:d9:3e:3d:8b:29:96:8f:09:1d:cc:fb: 4e:d0:e6:26:42:3e:e6:90:2c:b2:fc:c1:86:cb:43: 5d:8d:67:e8:f0:29:b5:26:2b:30:05:76:49:94:a2: 01:12:fb:c6:a2:4b:df:8d:33:b0:70:aa:48:50:bd: a0:ef:fe:22:11:ca:76:ed:6a:0f:41:8e:aa:46:8d: 1a:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B0:B1:55:2F:3E:E0:F1:15:C0:63:72:1F:86:7C:2F:17:9A:2E:B2 X509v3 Authority Key Identifier: keyid:FB:67:C4:E1:38:73:13:C0:34:45:38:DE:FD:2C:CF:A0:34:E7:C3:0C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2fE4ThzE8A0RTje_SzPoDTnwww.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/43b363-d64a-4507-a6fd-e50ce5367e7b/1/1-2fE4ThzE8A0RTje_SzPoDTnwww.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:ea:4f:12:c3:f4:33:28:d2:7b:c2:af:86:71:b3:bd:a8:f9: d1:88:eb:ad:35:35:16:21:a5:5a:a1:88:11:5c:1d:0b:1b:7c: 29:6b:51:84:b3:54:be:90:0e:a3:e5:e7:27:e9:ec:94:41:46: b1:89:be:33:17:8e:bf:12:c7:ff:a0:3f:de:f4:5c:27:3d:cf: ba:19:03:b7:64:e3:08:c3:8d:55:f3:7c:e4:65:fc:c6:77:be: 43:32:17:1b:ec:b2:e9:13:28:b9:e9:1d:a9:d0:f8:2a:72:7c: e9:51:d2:7e:bf:74:cc:68:ad:d7:39:d5:83:2e:23:c0:23:b9: cf:7f:b6:0e:6f:36:23:c2:87:31:a7:86:ce:41:3c:d7:af:cd: bf:47:a5:ca:80:59:1f:ae:19:95:ea:d4:2c:15:4a:d3:30:d7: 17:65:d7:65:5d:78:47:53:03:1b:17:52:51:c0:f2:90:af:cb: 58:9b:85:64:2a:f6:21:fc:fb:be:19:56:1e:14:52:c5:59:77: 27:5f:7b:27:a3:a4:34:74:05:44:6c:ca:f7:d9:0b:d3:79:4e: 35:d6:94:02:45:e4:90:8c:82:58:9b:b4:b9:aa:15:d6:b4:36: 32:1e:22:b3:9b:bc:5a:6a:21:9d:78:dd:56:10:fc:52:8a:1c: ed:39:d6:bd -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBNBuV126xuQWJ4xY9Si6uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiNjdjNGUxMzg3MzEzYzAzNDQ1MzhkZWZkMmNjZmEwMzRl N2MzMGMwHhcNMjYwMjA5MDcwMDU5WhcNMjYwMjEwMDcwMDU5WjAzMTEwLwYDVQQD EyhhYWIwYjE1NTJmM2VlMGYxMTVjMDYzNzIxZjg2N2MyZjE3OWEyZWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyuOFvP4Tj4GDq9/rhv+hoj8Rbgl KvGsZuSSxfiZRGNRBM//HETrq1E4CDb51Lm4b1jSUznATyssiAIEholGqt7UQ1J6 /bUAHUvLnAUd3kOWRYrgGDpXHEKwZbX9NtzhK4UmORL504tUiPeWR51GMkjN+uW+ /MN2AOSDnYQFkpYx6kU5wVf5ZOtpluWv65uWPHegvAfV6yLoYlKPSOAW5DXxV4pe hgMg+lcPT/TiL0vWKeI+OeRC2T49iymWjwkdzPtO0OYmQj7mkCyy/MGGy0NdjWfo 8Cm1JiswBXZJlKIBEvvGokvfjTOwcKpIUL2g7/4iEcp27WoPQY6qRo0acQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFKqwsVUvPuDxFcBjch+GfC8Xmi6yMB8GA1UdIwQY MBaAFPtnxOE4cxPANEU43v0sz6A058MMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS0yZkU0VGh6RThBMFJUamVfU3pQb0RUbnd3dy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMWMvNDNiMzYzLWQ2NGEtNDUwNy1hNmZk LWU1MGNlNTM2N2U3Yi8xLzEtMmZFNFRoekU4QTBSVGplX1N6UG9EVG53d3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzFjLzQzYjM2My1kNjRhLTQ1MDctYTZmZC1lNTBjZTUzNjdl N2IvMS8xLTJmRTRUaHpFOEEwUlRqZV9TelBvRFRud3d3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1OpP EsP0MyjSe8KvhnGzvaj50YjrrTU1FiGlWqGIEVwdCxt8KWtRhLNUvpAOo+XnJ+ns lEFGsYm+MxeOvxLH/6A/3vRcJz3PuhkDt2TjCMONVfN85GX8xne+QzIXG+yy6RMo uekdqdD4KnJ86VHSfr90zGit1znVgy4jwCO5z3+2Dm82I8KHMaeGzkE816/Nv0el yoBZH64ZlerULBVK0zDXF2XXZV14R1MDGxdSUcDykK/LWJuFZCr2Ifz7vhlWHhRS xVl3J197J6OkNHQFRGzK99kL03lONdaUAkXkkIyCWJu0uaoV1rQ2Mh4is5u8Wmoh nXjdVhD8Uooc7TnWvQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:36 2026 by rpki-client