This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json) Hash identifier: pLLnGhhEgCGELShf95bzOYkubaepDhsVgeas8HJiBDA= Subject key identifier: 91:D3:BC:26:E4:AF:27:0B:B8:B2:9D:E3:17:16:1C:19:B0:B4:2D:D7 Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae Certificate serial: 019C424695211BBE524FC98452EDE2F359D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft Manifest number: 0160 Signing time: Mon 09 Feb 2026 12:00:47 +0000 Manifest this update: Mon 09 Feb 2026 12:00:47 +0000 Manifest next update: Tue 10 Feb 2026 12:00:47 +0000 Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: plRLLyOmWkz4BZ18SVtPcJWTA61NvFjAsqmbfhFnNis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:95:21:1b:be:52:4f:c9:84:52:ed:e2:f3:59:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae Validity Not Before: Feb 9 12:00:47 2026 GMT Not After : Feb 10 12:00:47 2026 GMT Subject: CN=91d3bc26e4af270bb8b29de317161c19b0b42dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:31:e2:60:c2:f6:b6:9d:da:90:6f:fa:09:21: cb:95:d6:da:85:7b:b5:4b:4c:6b:c9:7f:64:24:e6: e2:05:de:33:9a:bf:b2:4c:7b:9d:fd:16:1c:c1:44: e8:f8:dc:96:19:bc:79:80:7d:c0:87:e3:6f:0d:93: 58:b1:bb:8e:d8:dc:ae:b3:90:f6:43:62:d4:ef:14: a3:12:a6:de:d6:7e:94:0d:21:30:67:b2:e3:30:03: 3a:b3:33:58:af:c2:14:73:ef:7f:c5:24:26:3e:1e: 91:77:74:bb:77:16:99:f8:39:5d:f2:73:61:59:47: 43:70:5e:46:9b:ec:4b:54:3e:d2:fa:8c:ae:11:27: 04:b0:e0:7e:c2:0d:59:32:8c:59:4d:ed:de:da:c3: 93:23:a8:95:a0:7d:3f:73:9c:22:f9:04:29:ff:31: be:bd:a3:75:0e:ca:a2:66:c1:f6:5d:95:de:0f:95: 84:b0:71:e9:68:7d:fa:30:2c:cf:96:ba:d9:fc:83: 02:9d:70:18:6c:22:e8:61:81:f4:3e:6d:82:cd:ba: 31:d8:bf:4b:66:a7:e8:cb:33:54:9e:b8:7b:87:31: 4f:f6:1f:ff:9b:dc:e2:21:2e:c3:71:ef:ef:6d:ea: e3:c9:0b:ea:15:01:42:7e:54:2b:5d:81:27:c0:30: 9c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D3:BC:26:E4:AF:27:0B:B8:B2:9D:E3:17:16:1C:19:B0:B4:2D:D7 X509v3 Authority Key Identifier: keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:bb:06:81:35:e4:ec:87:1d:50:da:41:82:32:56:ea:da:a0: 1d:fe:7b:6f:af:3f:ae:ae:b7:24:bd:e6:35:7b:62:78:27:33: b6:02:17:c2:dd:21:40:9d:bc:71:61:0c:2a:db:23:a5:60:98: 99:cd:25:b4:0e:67:c5:ab:07:0e:38:8b:f0:54:9c:a7:ed:45: c8:9f:eb:e2:a8:43:7f:10:4b:58:a1:89:3e:c8:fb:43:e4:10: 08:72:c7:d0:d0:de:07:7e:77:45:34:91:0d:e3:8a:8d:9c:7b: d1:1a:1e:37:25:62:ee:c7:3a:8a:c5:b8:5a:fc:1a:6f:a9:6a: 7a:77:d9:38:a9:37:55:1d:ff:47:0e:99:96:bd:6c:56:5f:8e: 96:9c:81:e4:9c:9c:c9:f3:bb:92:32:1b:37:ec:99:4b:f6:14: d6:b0:8e:35:16:4a:cf:64:02:81:e1:3c:98:9c:98:4d:e9:ff: 7f:82:5f:95:fa:71:95:7d:d7:1a:88:4f:b4:59:09:4c:cc:c8: cf:9f:6c:5c:e1:0e:aa:ff:64:5e:4c:c9:74:3d:0b:31:bc:8a: 66:64:4d:b7:9b:23:2a:13:07:cf:ec:18:ec:b4:6d:96:bc:70: 0a:07:04:eb:05:e0:11:27:b1:22:8c:e1:86:fc:4f:54:dd:dc: e3:db:8c:ee -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxCRpUhG75ST8mEUu3i81nSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY5ZjdmODZjNmNlNzNkNWQ3NjM0MDNmNDk4ZWViMzJmNzBj NDc0YWUwHhcNMjYwMjA5MTIwMDQ3WhcNMjYwMjEwMTIwMDQ3WjAzMTEwLwYDVQQD Eyg5MWQzYmMyNmU0YWYyNzBiYjhiMjlkZTMxNzE2MWMxOWIwYjQyZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjHiYML2tp3akG/6CSHLldbahXu1 S0xryX9kJObiBd4zmr+yTHud/RYcwUTo+NyWGbx5gH3Ah+NvDZNYsbuO2Nyus5D2 Q2LU7xSjEqbe1n6UDSEwZ7LjMAM6szNYr8IUc+9/xSQmPh6Rd3S7dxaZ+Dld8nNh WUdDcF5Gm+xLVD7S+oyuEScEsOB+wg1ZMoxZTe3e2sOTI6iVoH0/c5wi+QQp/zG+ vaN1DsqiZsH2XZXeD5WEsHHpaH36MCzPlrrZ/IMCnXAYbCLoYYH0Pm2Czbox2L9L ZqfoyzNUnrh7hzFP9h//m9ziIS7Dce/vberjyQvqFQFCflQrXYEnwDCcwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJHTvCbkrycLuLKd4xcWHBmwtC3XMB8GA1UdIwQY MBaAFPn3+Gxs5z1ddjQD9Jjusy9wxHSuMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1mZjRiR3puUFYxMk5BUDBtTzZ6TDNERWRLNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZDY5ZDU4LWMyMjktNGMyYi1iZjU1 LTQ1NjM0NTMzMmY4Yi8xLzEtZmY0Ykd6blBWMTJOQVAwbU82ekwzREVkSzQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzI4L2Q2OWQ1OC1jMjI5LTRjMmItYmY1NS00NTYzNDUzMzJm OGIvMS8xLWZmNGJHem5QVjEyTkFQMG1PNnpMM0RFZEs0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7sG gTXk7IcdUNpBgjJW6tqgHf57b68/rq63JL3mNXtieCcztgIXwt0hQJ28cWEMKtsj pWCYmc0ltA5nxasHDjiL8FScp+1FyJ/r4qhDfxBLWKGJPsj7Q+QQCHLH0NDeB353 RTSRDeOKjZx70RoeNyVi7sc6isW4Wvwab6lqenfZOKk3VR3/Rw6Zlr1sVl+OlpyB 5JycyfO7kjIbN+yZS/YU1rCONRZKz2QCgeE8mJyYTen/f4JflfpxlX3XGohPtFkJ TMzIz59sXOEOqv9kXkzJdD0LMbyKZmRNt5sjKhMHz+wY7LRtlrxwCgcE6wXgESex IozhhvxPVN3c49uM7g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:55 2026 by rpki-client