This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json) Hash identifier: uEdreJ1Dgv//pS7yUKjyvkyshcSorNcTY2taNIFkTws= Subject key identifier: 98:A4:D2:39:52:0A:4C:46:BF:1E:9D:C6:BA:79:42:E4:97:03:3B:D8 Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24 Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424 Certificate serial: 019C427D4AF8360A5FBD72BFEDFECEBEBAC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft Manifest number: 1565 Signing time: Mon 09 Feb 2026 13:00:33 +0000 Manifest this update: Mon 09 Feb 2026 13:00:33 +0000 Manifest next update: Tue 10 Feb 2026 13:00:33 +0000 Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: ewgsbE3/+42BkEFPN5JCjrLxY3E9uaKH2DeQEYhSRcQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:4a:f8:36:0a:5f:bd:72:bf:ed:fe:ce:be:ba:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424 Validity Not Before: Feb 9 13:00:33 2026 GMT Not After : Feb 10 13:00:33 2026 GMT Subject: CN=98a4d239520a4c46bf1e9dc6ba7942e497033bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:58:1d:ef:fa:f9:1c:73:7b:e6:63:dd:7c:08: 21:eb:a5:a7:c3:83:64:be:c3:03:09:87:60:01:1d: 6b:48:d6:d4:65:7e:0e:7e:9c:f2:55:64:5f:f7:eb: 4a:de:a9:c6:8b:6f:28:b8:55:46:93:56:e3:67:d6: 44:9f:b4:d8:78:6a:59:cf:cf:06:05:18:5f:f9:c8: 18:94:6b:fe:db:f3:7e:55:ce:c9:4e:1c:d4:0a:ea: b3:9c:92:07:92:18:7c:b0:41:e3:18:9e:02:07:14: 7b:92:f1:77:98:62:e2:d2:ba:7e:2c:a7:23:eb:93: c5:65:46:26:16:77:ed:df:03:a8:a5:12:d8:f2:91: f1:b9:81:d3:fa:3a:d3:ba:a7:e8:c6:67:53:e4:98: 7f:45:c3:65:ed:9f:13:ec:60:b6:7d:f2:77:05:3b: b5:db:d1:45:40:6c:94:11:5a:af:7c:8c:f4:f1:31: d9:e6:72:2f:6c:bb:25:28:c2:99:a0:4d:29:09:d4: de:10:6e:10:de:ab:e4:81:98:f1:0b:57:53:8e:55: 83:db:31:fd:4e:79:f0:6c:c8:1b:76:41:71:fe:f1: 74:e4:23:f3:05:ba:a8:48:6c:ed:f5:95:44:43:c9: f0:0f:e4:f1:a4:c9:ad:ae:d0:cd:6d:ca:cf:d6:34: cc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A4:D2:39:52:0A:4C:46:BF:1E:9D:C6:BA:79:42:E4:97:03:3B:D8 X509v3 Authority Key Identifier: keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:9e:62:cc:12:fd:74:7f:b1:a0:cd:42:32:13:ad:84:c7:79: 11:b4:9a:f5:cb:ef:22:70:7d:29:3e:2a:a1:a3:95:1e:05:2f: b3:56:2c:56:bd:46:55:a2:b3:b4:bb:9b:7b:bc:61:a7:2d:52: 47:32:b6:c9:e9:44:df:cc:5b:e5:81:a3:ad:0e:66:2f:89:7b: c2:70:56:88:9c:3b:7f:9d:ff:6a:4f:8d:67:00:47:4b:ad:f1: c3:73:35:01:98:53:59:54:d8:5d:ae:de:6d:f0:b8:f7:08:58: 44:84:12:26:5b:a2:68:25:f0:3a:1b:b1:4e:39:94:ef:35:f6: ef:b9:a8:03:32:6d:12:fd:65:a7:ec:f8:43:25:83:7b:81:9a: f4:ba:6b:25:39:4a:9f:68:44:29:88:7a:9f:2e:a1:35:92:90: 9c:05:9b:33:84:b7:7d:83:d0:35:7b:97:9a:82:9d:74:c9:d1: b2:b0:81:45:21:67:53:a0:88:f3:55:0e:48:db:36:bb:ee:10: cf:48:ed:00:cd:82:f3:94:bb:df:b2:1b:03:48:bc:61:9f:81: 4f:9a:b6:68:25:df:39:96:3c:ea:31:70:df:c2:9e:ac:6b:ac: 4f:b2:90:b9:1a:46:17:9d:2f:59:69:15:80:9d:93:06:e9:0d: e6:36:89:9d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfUr4NgpfvXK/7f7OvrrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYWY1NzE0YzUwNTZjYmUyNjlkMTJmYTMwOTkzNzhhOTU3 Mjg0MjQwHhcNMjYwMjA5MTMwMDMzWhcNMjYwMjEwMTMwMDMzWjAzMTEwLwYDVQQD Eyg5OGE0ZDIzOTUyMGE0YzQ2YmYxZTlkYzZiYTc5NDJlNDk3MDMzYmQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVgd7/r5HHN75mPdfAgh66Wnw4Nk vsMDCYdgAR1rSNbUZX4OfpzyVWRf9+tK3qnGi28ouFVGk1bjZ9ZEn7TYeGpZz88G BRhf+cgYlGv+2/N+Vc7JThzUCuqznJIHkhh8sEHjGJ4CBxR7kvF3mGLi0rp+LKcj 65PFZUYmFnft3wOopRLY8pHxuYHT+jrTuqfoxmdT5Jh/RcNl7Z8T7GC2ffJ3BTu1 29FFQGyUEVqvfIz08THZ5nIvbLslKMKZoE0pCdTeEG4Q3qvkgZjxC1dTjlWD2zH9 TnnwbMgbdkFx/vF05CPzBbqoSGzt9ZVEQ8nwD+TxpMmtrtDNbcrP1jTMuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJik0jlSCkxGvx6dxrp5QuSXAzvYMB8GA1UdIwQY MBaAFH6vVxTFBWy+Jp0S+jCZN4qVcoQkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzkt ZjIwZDRlODY4MDNiLzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lODdhYTgtNmU1YS00YzRjLWJjYzktZjIwZDRlODY4MDNi LzEvZnE5WEZNVUZiTDRtblJMNk1KazNpcFZ5aENRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJ5izBL9 dH+xoM1CMhOthMd5EbSa9cvvInB9KT4qoaOVHgUvs1YsVr1GVaKztLube7xhpy1S RzK2yelE38xb5YGjrQ5mL4l7wnBWiJw7f53/ak+NZwBHS63xw3M1AZhTWVTYXa7e bfC49whYRIQSJluiaCXwOhuxTjmU7zX277moAzJtEv1lp+z4QyWDe4Ga9LprJTlK n2hEKYh6ny6hNZKQnAWbM4S3fYPQNXuXmoKddMnRsrCBRSFnU6CI81UOSNs2u+4Q z0jtAM2C85S737IbA0i8YZ+BT5q2aCXfOZY86jFw38KerGusT7KQuRpGF50vWWkV gJ2TBukN5jaJnQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:03 2026 by rpki-client