This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft File: pFzsFmCtLf53GpoSNLHRKpxbghE.mft (raw, json) Hash identifier: Ar8Gdl+sYSNfLHWizl8a8ds8kl9KG2dkgtVSp2jc7CM= Subject key identifier: FE:1D:94:E1:C6:CB:4B:F8:6F:F0:1F:41:90:91:0F:02:9B:F2:F4:62 Authority key identifier: A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11 Certificate issuer: /CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211 Certificate serial: 019C4322143CE8E17C133D9081BFA089ED06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft Manifest number: 0262 Signing time: Mon 09 Feb 2026 16:00:32 +0000 Manifest this update: Mon 09 Feb 2026 16:00:32 +0000 Manifest next update: Tue 10 Feb 2026 16:00:32 +0000 Files and hashes: 1: COcv6oq5sDbpsP-8FRPQHVDfLWk.roa (hash: K+pmGXQPSyOf6hHKQS1u54A+Zj+KnwyEdp4hK5MQqRM=) 2: pFzsFmCtLf53GpoSNLHRKpxbghE.crl (hash: DqYoN/Vjd6I5apqblLZpzsGSzKTpj86B+KPCK+HnWPE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:14:3c:e8:e1:7c:13:3d:90:81:bf:a0:89:ed:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a45cec1660ad2dfe771a9a1234b1d12a9c5b8211 Validity Not Before: Feb 9 16:00:32 2026 GMT Not After : Feb 10 16:00:32 2026 GMT Subject: CN=fe1d94e1c6cb4bf86ff01f4190910f029bf2f462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:11:97:7e:d8:36:e0:c8:fe:74:03:4b:7b:cc: 6c:c1:01:e0:5a:52:59:e6:9b:29:68:c8:38:e0:eb: 1d:3b:62:68:02:c0:2e:d7:0f:46:2d:99:d5:a2:b0: c2:ef:92:ae:5e:de:96:4a:58:79:3c:97:a0:51:97: 32:f4:99:25:ee:07:ac:76:b2:a5:69:14:40:dc:c9: e2:16:99:78:5c:9a:7e:82:15:9c:88:36:2b:6f:60: ed:e3:02:d9:4b:b4:c9:f8:17:a4:5a:ac:d4:9a:34: 1f:a7:79:7a:ec:9b:c1:3b:ee:e3:aa:3b:81:71:07: da:f4:7e:84:3d:d3:76:67:b6:10:49:8c:66:ab:ff: 01:ca:ad:fd:ef:d9:35:90:36:4c:3d:e3:37:33:05: 34:c5:1c:ab:e9:3a:08:04:a5:a5:0a:c6:d4:bd:f9: 74:b1:f4:36:fd:89:03:2c:91:e4:6d:2c:11:39:80: 15:3b:a8:b5:62:02:8a:f2:19:0f:75:08:9a:13:6f: dc:fe:2c:e4:f4:52:fc:8e:3a:4c:92:b0:4b:21:20: ad:2f:b6:de:c2:1c:1f:f3:ba:0c:ab:ce:79:cd:b7: 39:13:3c:2b:e9:6a:f4:fd:47:83:5a:56:ef:af:b2: cc:22:2a:e0:d2:29:f9:77:89:70:c3:c5:45:eb:6b: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:1D:94:E1:C6:CB:4B:F8:6F:F0:1F:41:90:91:0F:02:9B:F2:F4:62 X509v3 Authority Key Identifier: keyid:A4:5C:EC:16:60:AD:2D:FE:77:1A:9A:12:34:B1:D1:2A:9C:5B:82:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFzsFmCtLf53GpoSNLHRKpxbghE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/3176ea-2f54-4472-9eb2-93a35694f685/1/pFzsFmCtLf53GpoSNLHRKpxbghE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:13:d2:b3:e3:35:90:ad:2f:02:f9:8f:f7:ef:2a:9d:1c:21: 31:87:92:39:09:b8:dd:a3:ce:60:27:52:d9:64:55:c2:7b:7f: af:ce:5d:db:15:98:6b:3d:97:0d:b7:5a:64:a5:49:7a:4f:18: 42:36:e1:0c:ea:be:39:2c:10:ee:08:2e:c0:3b:72:9e:8b:0b: 50:58:f3:2c:e0:eb:2d:d1:70:0c:ac:ef:25:de:72:d8:e4:30: 3c:ad:af:bf:04:e7:df:5b:fa:40:67:9a:8d:10:82:b8:1c:3c: 62:95:5e:a1:c3:b3:2d:c6:00:6f:4c:2d:27:0b:20:bc:01:57: a0:4a:4d:92:c9:a6:0b:f5:a4:fb:44:a2:22:f3:33:c7:5a:31: 49:53:12:08:c2:1f:5f:bd:73:ea:fe:9c:38:aa:a7:7a:37:15: 10:9a:ff:69:5b:69:d1:ce:38:b3:78:4d:c3:3c:fb:f6:d6:3b: 4b:93:3e:7a:36:d2:8a:ae:ee:40:ed:4e:a5:80:16:5e:cc:18: 3c:d9:cd:05:ca:83:6b:23:0b:2a:8c:cc:05:66:54:a7:6c:1d: 15:02:cc:bf:8c:8f:92:e9:9a:22:02:c7:04:4e:8a:90:06:12: af:40:91:d9:d9:48:21:a1:40:31:22:0e:9d:9e:23:d8:84:51: 76:26:b1:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhQ86OF8Ez2Qgb+gie0GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0NWNlYzE2NjBhZDJkZmU3NzFhOWExMjM0YjFkMTJhOWM1 YjgyMTEwHhcNMjYwMjA5MTYwMDMyWhcNMjYwMjEwMTYwMDMyWjAzMTEwLwYDVQQD EyhmZTFkOTRlMWM2Y2I0YmY4NmZmMDFmNDE5MDkxMGYwMjliZjJmNDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhGXftg24Mj+dANLe8xswQHgWlJZ 5pspaMg44OsdO2JoAsAu1w9GLZnVorDC75KuXt6WSlh5PJegUZcy9Jkl7gesdrKl aRRA3MniFpl4XJp+ghWciDYrb2Dt4wLZS7TJ+BekWqzUmjQfp3l67JvBO+7jqjuB cQfa9H6EPdN2Z7YQSYxmq/8Byq3979k1kDZMPeM3MwU0xRyr6ToIBKWlCsbUvfl0 sfQ2/YkDLJHkbSwROYAVO6i1YgKK8hkPdQiaE2/c/izk9FL8jjpMkrBLISCtL7be whwf87oMq855zbc5Ezwr6Wr0/UeDWlbvr7LMIirg0in5d4lww8VF62srbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP4dlOHGy0v4b/AfQZCRDwKb8vRiMB8GA1UdIwQY MBaAFKRc7BZgrS3+dxqaEjSx0SqcW4IRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8zMTc2ZWEtMmY1NC00NDcyLTllYjIt OTNhMzU2OTRmNjg1LzEvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy8zMTc2ZWEtMmY1NC00NDcyLTllYjItOTNhMzU2OTRmNjg1 LzEvcEZ6c0ZtQ3RMZjUzR3BvU05MSFJLcHhiZ2hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRPSs+M1 kK0vAvmP9+8qnRwhMYeSOQm43aPOYCdS2WRVwnt/r85d2xWYaz2XDbdaZKVJek8Y QjbhDOq+OSwQ7gguwDtynosLUFjzLODrLdFwDKzvJd5y2OQwPK2vvwTn31v6QGea jRCCuBw8YpVeocOzLcYAb0wtJwsgvAFXoEpNksmmC/Wk+0SiIvMzx1oxSVMSCMIf X71z6v6cOKqnejcVEJr/aVtp0c44s3hNwzz79tY7S5M+ejbSiq7uQO1OpYAWXswY PNnNBcqDayMLKozMBWZUp2wdFQLMv4yPkumaIgLHBE6KkAYSr0CR2dlIIaFAMSIO nZ4j2IRRdiaxqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:43 2026 by rpki-client