This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft File: fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft (raw, json) Hash identifier: gIc9ihTaVevu8XwhLPEaXeINsV/G8pB6CP2XFgb6UhA= Subject key identifier: 9E:A8:90:8C:B3:04:91:56:2A:3C:22:91:E6:E3:F4:49:1B:FD:E3:22 Authority key identifier: 7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 Certificate issuer: /CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Certificate serial: 019C41A16BC471EE4F067D0D3C26F10EBAD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft Manifest number: 102A Signing time: Mon 09 Feb 2026 09:00:23 +0000 Manifest this update: Mon 09 Feb 2026 09:00:23 +0000 Manifest next update: Tue 10 Feb 2026 09:00:23 +0000 Files and hashes: 1: Gtwjc7NNuv58O6hnKDqBYDJmyRQ.roa (hash: LK5oiJ5hBo2z5XWsMY/8RHb1LgIogizoQEzKylCXOUQ=) 2: fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl (hash: piNrwgts3VuzfBwEgXEyd6QgbiaO6W/EgrDBbX5Zu78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:6b:c4:71:ee:4f:06:7d:0d:3c:26:f1:0e:ba:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca8898ff6212b4d65cf323fc8330af98803bf76 Validity Not Before: Feb 9 09:00:23 2026 GMT Not After : Feb 10 09:00:23 2026 GMT Subject: CN=9ea8908cb30491562a3c2291e6e3f4491bfde322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:0a:7c:5c:3d:c0:88:65:d2:97:f4:e3:a1: d6:f7:cd:ca:8e:da:69:8d:2e:77:e2:8b:d9:91:0a: 2b:24:33:6c:ce:6f:81:05:0a:72:af:9d:e2:5f:31: 74:13:93:7e:1a:38:b0:ce:30:a9:24:d4:c0:d8:6f: 8d:18:cd:21:56:33:e1:79:11:d9:1b:b7:17:63:c2: fc:c0:ff:6f:c1:8e:56:12:68:59:d7:57:de:4a:c5: e0:01:ff:b3:d8:ed:c1:18:8a:eb:72:8b:e8:41:f6: 23:19:48:96:04:9b:58:18:a7:a0:25:09:7e:96:98: 5c:40:29:58:34:a3:23:b9:ee:22:45:f7:2d:59:22: 8e:9a:cf:b8:4b:04:a4:88:3c:25:44:cd:94:92:59: 61:e8:a5:e1:2f:97:f5:51:41:a5:85:04:4e:bc:5c: 8c:86:3f:d8:4d:61:ed:64:19:d6:49:33:29:4b:cf: b8:2c:3c:d2:1a:f9:c8:b0:b6:89:83:8f:a5:88:bd: c6:32:c7:f0:9d:52:1b:f3:1f:9f:1a:52:95:c6:e5: 69:d4:82:1f:56:94:8b:37:5a:16:94:71:cc:f4:f6: 31:99:6c:63:6c:43:41:46:29:6e:df:e9:96:d0:f4: 03:ad:4d:35:31:e2:61:c5:b7:46:10:c7:d9:21:a2: 20:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:A8:90:8C:B3:04:91:56:2A:3C:22:91:E6:E3:F4:49:1B:FD:E3:22 X509v3 Authority Key Identifier: keyid:7C:A8:89:8F:F6:21:2B:4D:65:CF:32:3F:C8:33:0A:F9:88:03:BF:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKiJj_YhK01lzzI_yDMK-YgDv3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3b4e21-0fc1-454f-97df-cee2d1430e6c/1/fKiJj_YhK01lzzI_yDMK-YgDv3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d9:1d:c8:d2:f0:40:33:d5:70:79:8d:4a:7f:9e:cc:96:bc: 7a:50:4c:46:07:00:2a:da:b9:55:b0:7c:c8:eb:fe:78:8f:90: cc:9f:f0:1d:72:b5:8a:97:69:94:51:4c:2a:13:07:de:cd:d3: 42:ae:c1:ee:36:8b:97:26:07:48:dd:56:fb:dd:35:a6:d0:60: 35:5c:3f:da:e9:39:da:65:85:bd:92:08:20:1d:07:2a:f3:15: a6:e5:13:ac:b0:db:23:09:c0:48:20:1a:94:d5:a7:74:6e:45: 0d:eb:a8:74:d4:55:41:08:11:62:fb:49:81:79:57:06:7f:69: 38:b5:b6:62:e7:5c:bc:76:6e:aa:3c:3a:1d:36:14:80:e8:62: aa:80:44:8f:74:38:67:9e:d7:24:05:62:62:eb:92:76:d3:53: dd:7a:cb:bb:52:50:82:93:06:f5:de:9c:da:a3:94:66:99:f7: d6:4f:84:bd:dc:f8:f2:a7:cb:95:80:a7:95:ba:77:8e:27:75: 7f:20:e5:5c:f2:a2:91:44:5c:4a:a9:7a:92:a3:45:74:a1:aa: 54:a0:fb:30:f2:37:f8:e9:5a:48:03:14:0f:49:06:05:a8:3e: 74:f1:f0:14:c9:42:08:c0:a8:6f:4b:72:67:50:77:6b:ce:83: 0a:8a:80:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWvEce5PBn0NPCbxDrrZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTg4OThmZjYyMTJiNGQ2NWNmMzIzZmM4MzMwYWY5ODgw M2JmNzYwHhcNMjYwMjA5MDkwMDIzWhcNMjYwMjEwMDkwMDIzWjAzMTEwLwYDVQQD Eyg5ZWE4OTA4Y2IzMDQ5MTU2MmEzYzIyOTFlNmUzZjQ0OTFiZmRlMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIsKfFw9wIhl0pf046HW983Kjtpp jS534ovZkQorJDNszm+BBQpyr53iXzF0E5N+GjiwzjCpJNTA2G+NGM0hVjPheRHZ G7cXY8L8wP9vwY5WEmhZ11feSsXgAf+z2O3BGIrrcovoQfYjGUiWBJtYGKegJQl+ lphcQClYNKMjue4iRfctWSKOms+4SwSkiDwlRM2Ukllh6KXhL5f1UUGlhQROvFyM hj/YTWHtZBnWSTMpS8+4LDzSGvnIsLaJg4+liL3GMsfwnVIb8x+fGlKVxuVp1IIf VpSLN1oWlHHM9PYxmWxjbENBRilu3+mW0PQDrU01MeJhxbdGEMfZIaIgLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ6okIyzBJFWKjwikebj9Ekb/eMiMB8GA1UdIwQY MBaAFHyoiY/2IStNZc8yP8gzCvmIA792MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYt Y2VlMmQxNDMwZTZjLzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zYjRlMjEtMGZjMS00NTRmLTk3ZGYtY2VlMmQxNDMwZTZj LzEvZktpSmpfWWhLMDFsenpJX3lETUstWWdEdjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWNkdyNLw QDPVcHmNSn+ezJa8elBMRgcAKtq5VbB8yOv+eI+QzJ/wHXK1ipdplFFMKhMH3s3T Qq7B7jaLlyYHSN1W+901ptBgNVw/2uk52mWFvZIIIB0HKvMVpuUTrLDbIwnASCAa lNWndG5FDeuodNRVQQgRYvtJgXlXBn9pOLW2YudcvHZuqjw6HTYUgOhiqoBEj3Q4 Z57XJAViYuuSdtNT3XrLu1JQgpMG9d6c2qOUZpn31k+Evdz48qfLlYCnlbp3jid1 fyDlXPKikURcSql6kqNFdKGqVKD7MPI3+OlaSAMUD0kGBag+dPHwFMlCCMCob0ty Z1B3a86DCoqAyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:26 2026 by rpki-client