This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft File: Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft (raw, json) Hash identifier: RQgAoa1SxlX94wfFG3LD/GSxxhIiQcSHCCYdvrc+/fU= Subject key identifier: B2:52:91:FA:79:03:FA:59:17:67:94:C3:10:DB:E3:81:77:0D:C7:B1 Authority key identifier: 16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98 Certificate issuer: /CN=1627b80681f5b48e126898295983e0df29971b98 Certificate serial: 019C41D8E6C048B6CD4F5E5EEDDE850293AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft Manifest number: 120A Signing time: Mon 09 Feb 2026 10:00:59 +0000 Manifest this update: Mon 09 Feb 2026 10:00:59 +0000 Manifest next update: Tue 10 Feb 2026 10:00:59 +0000 Files and hashes: 1: Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl (hash: FYayoqVnjJ5dC8FgPxBJpoRfnCGVL+mQ419WWPotPgE=) 2: WrFi9wM8-MBxaZss80dQCIHVjIA.roa (hash: T4A9s6KUh5deKQT7uVYVm6QXd45Uqa2wbOgRg/X9a94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e6:c0:48:b6:cd:4f:5e:5e:ed:de:85:02:93:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1627b80681f5b48e126898295983e0df29971b98 Validity Not Before: Feb 9 10:00:59 2026 GMT Not After : Feb 10 10:00:59 2026 GMT Subject: CN=b25291fa7903fa59176794c310dbe381770dc7b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:17:d5:6e:7f:02:63:9a:44:0e:35:1c:cc:5e: b1:79:0f:a8:ef:63:01:83:0b:c6:8d:3b:a1:14:bb: cc:8c:44:e7:a4:05:00:22:dc:a2:72:52:02:02:57: 14:fd:6f:c3:41:18:5f:4d:79:55:01:0e:c8:5d:67: c9:58:7d:60:55:6a:a2:11:88:ab:bd:c8:b4:d5:f1: 93:fd:95:14:16:35:e9:94:40:10:2b:91:89:d1:de: 66:ac:2f:1c:f7:9b:3e:bf:5e:a1:c5:f0:3a:a7:31: ed:21:90:ea:e6:ff:34:a8:0f:95:eb:f0:a0:6d:da: 7e:5d:1b:8e:1a:16:d3:f9:e1:e0:7e:9f:de:1e:c8: 6b:07:71:43:9c:06:41:38:3c:9b:d5:66:b5:7b:93: 81:b2:42:ab:28:e1:a1:d4:b8:6b:49:7a:4b:ed:11: 42:c5:c2:92:75:ac:65:0e:36:89:6b:6c:2a:c2:1d: 0b:51:7d:8c:12:ec:5d:1f:15:f7:d8:f0:2e:7c:07: 5f:9f:fb:8e:78:eb:7e:4d:ed:89:02:29:ec:8e:3c: 20:c3:69:b0:6b:e0:01:c9:2c:b6:10:d5:5f:b5:f9: 79:0a:c7:9c:91:42:62:ac:37:b8:6e:d2:6b:6a:56: f5:08:e9:d4:28:a1:34:89:cf:76:0f:b2:c2:cc:5f: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:52:91:FA:79:03:FA:59:17:67:94:C3:10:DB:E3:81:77:0D:C7:B1 X509v3 Authority Key Identifier: keyid:16:27:B8:06:81:F5:B4:8E:12:68:98:29:59:83:E0:DF:29:97:1B:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fie4BoH1tI4SaJgpWYPg3ymXG5g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/bf86b0-c5ed-4bdd-a917-682cd3bd4102/1/Fie4BoH1tI4SaJgpWYPg3ymXG5g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f0:ad:12:db:89:62:54:e9:46:cb:6e:15:d0:a3:53:52:65: 30:2f:03:f4:65:05:66:c7:3f:75:09:14:eb:d2:fc:eb:00:e6: d5:ef:fc:e7:cb:a7:f7:a0:37:c8:39:59:6a:1d:ba:91:93:41: 94:1b:20:76:de:f5:90:a7:90:64:0e:15:62:70:30:bb:be:65: d8:cf:42:a6:4d:02:2d:a6:50:0c:b6:e1:0b:b4:5b:ba:e6:41: c4:2b:47:15:5d:47:c1:da:2c:a1:cd:38:76:4b:47:77:85:71: 4f:a6:60:bd:74:35:8f:d1:95:ae:2c:ae:30:e1:a0:b1:4a:ca: 84:2c:bd:3f:55:05:53:7e:df:44:c5:8b:65:b1:89:b3:91:8c: 2d:5b:70:3a:ef:ce:fc:87:22:1f:70:b7:8f:2f:a5:a0:e0:6c: 51:e4:56:18:a6:08:00:24:72:46:73:8a:28:40:0f:72:3c:ea: b8:9e:67:d0:0b:0d:17:7a:5a:1a:36:86:fa:de:12:7a:76:5f: 0d:1a:1f:d5:ff:e4:92:a5:92:5f:89:19:ba:a0:0c:c0:04:4b: 5b:dd:d2:0f:6b:8c:e5:3b:fa:6c:98:92:b6:7b:db:77:57:d0: 06:11:65:80:d4:68:ab:76:d0:8a:cf:f8:be:74:a6:23:1e:a5: fc:03:bb:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2ObASLbNT15e7d6FApOsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MjdiODA2ODFmNWI0OGUxMjY4OTgyOTU5ODNlMGRmMjk5 NzFiOTgwHhcNMjYwMjA5MTAwMDU5WhcNMjYwMjEwMTAwMDU5WjAzMTEwLwYDVQQD EyhiMjUyOTFmYTc5MDNmYTU5MTc2Nzk0YzMxMGRiZTM4MTc3MGRjN2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RfVbn8CY5pEDjUczF6xeQ+o72MB gwvGjTuhFLvMjETnpAUAItyiclICAlcU/W/DQRhfTXlVAQ7IXWfJWH1gVWqiEYir vci01fGT/ZUUFjXplEAQK5GJ0d5mrC8c95s+v16hxfA6pzHtIZDq5v80qA+V6/Cg bdp+XRuOGhbT+eHgfp/eHshrB3FDnAZBODyb1Wa1e5OBskKrKOGh1LhrSXpL7RFC xcKSdaxlDjaJa2wqwh0LUX2MEuxdHxX32PAufAdfn/uOeOt+Te2JAinsjjwgw2mw a+ABySy2ENVftfl5CseckUJirDe4btJralb1COnUKKE0ic92D7LCzF954wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLJSkfp5A/pZF2eUwxDb44F3DcexMB8GA1UdIwQY MBaAFBYnuAaB9bSOEmiYKVmD4N8plxuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTct NjgyY2QzYmQ0MTAyLzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iZjg2YjAtYzVlZC00YmRkLWE5MTctNjgyY2QzYmQ0MTAy LzEvRmllNEJvSDF0STRTYUpncFdZUGczeW1YRzVnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvCtEtuJ YlTpRstuFdCjU1JlMC8D9GUFZsc/dQkU69L86wDm1e/858un96A3yDlZah26kZNB lBsgdt71kKeQZA4VYnAwu75l2M9Cpk0CLaZQDLbhC7RbuuZBxCtHFV1Hwdosoc04 dktHd4VxT6ZgvXQ1j9GVriyuMOGgsUrKhCy9P1UFU37fRMWLZbGJs5GMLVtwOu/O /IciH3C3jy+loOBsUeRWGKYIACRyRnOKKEAPcjzquJ5n0AsNF3paGjaG+t4SenZf DRof1f/kkqWSX4kZuqAMwARLW93SD2uM5Tv6bJiStnvbd1fQBhFlgNRoq3bQis/4 vnSmIx6l/AO7JA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:57 2026 by rpki-client