This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json) Hash identifier: Oo1y3nguHAEPKFkmTs//e+m1gQv0FMafwWJgL5+zVik= Subject key identifier: D7:85:DB:1A:8D:BA:12:62:57:01:70:38:56:DD:7B:A7:C1:23:EC:F0 Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48 Certificate serial: 019C427DCAC29BE9E392438125DECF260C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft Manifest number: 0322 Signing time: Mon 09 Feb 2026 13:01:05 +0000 Manifest this update: Mon 09 Feb 2026 13:01:05 +0000 Manifest next update: Tue 10 Feb 2026 13:01:05 +0000 Files and hashes: 1: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: Tm7SemCR2J203gmJsV+H+NXvcJI5ypebVlWPs2aJDEc=) 2: UWFOafME42L6O6C8tCsylQ1qM5Y.roa (hash: kTp8dPuulE0KVt0WY/U+hGiw2jKgDTK8kmDYSbikY3M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ca:c2:9b:e9:e3:92:43:81:25:de:cf:26:0c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15fdb088e98e4e6415d944142212448369005b48 Validity Not Before: Feb 9 13:01:05 2026 GMT Not After : Feb 10 13:01:05 2026 GMT Subject: CN=d785db1a8dba12625701703856dd7ba7c123ecf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7f:0e:bf:81:9c:8b:a7:f7:d4:17:3b:f8:ab: e2:26:4e:a2:eb:29:8d:36:33:62:04:b2:8f:18:bf: 36:29:11:d5:1c:ad:e3:78:a7:7a:f0:f9:35:90:1c: 24:c7:cb:d0:11:70:39:bc:ba:fc:06:4f:f5:29:f2: 3b:f2:c1:32:c8:e5:4b:52:5a:9c:8d:be:45:cf:9e: 7d:28:28:9d:76:5f:0c:93:66:e6:0e:89:84:8f:98: ec:e2:c7:2a:62:f6:87:47:a4:1f:0e:3b:19:3b:3e: 50:b5:8a:71:76:23:07:f7:de:72:09:27:d8:6f:60: 93:dc:18:f7:7d:56:38:bc:63:1f:ef:e1:58:91:f1: 44:91:fb:33:90:63:69:50:b5:60:31:b4:9f:4f:9f: 0f:9d:99:0b:2e:a5:69:4e:75:67:6f:da:9f:cd:2b: 60:e4:60:73:e7:c5:03:5c:61:ac:1b:36:71:5f:93: 0d:be:45:c1:83:b8:5b:bb:7d:e8:0a:39:87:37:36: c2:35:b4:76:14:27:68:5e:80:8b:e8:33:91:78:5e: d6:19:a2:eb:3f:b7:cc:f2:1e:4b:2f:b7:ad:98:5e: 58:64:0c:2b:47:d1:a3:5d:d3:6c:20:b9:4a:66:0f: 89:24:9b:00:7d:6f:ed:06:8e:d2:40:3b:ba:7a:67: 70:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:85:DB:1A:8D:BA:12:62:57:01:70:38:56:DD:7B:A7:C1:23:EC:F0 X509v3 Authority Key Identifier: keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:2b:46:ed:9a:ae:a2:41:ae:2c:82:0e:11:5b:35:0c:6e:b0: 5e:bf:44:11:7b:e9:3a:10:9d:39:e7:ee:97:22:cc:1e:aa:d0: 0d:41:e4:fb:67:0c:47:e1:7e:28:6a:ff:3a:86:9e:e0:79:3c: 77:4b:c3:f1:bc:fa:cb:72:7d:74:64:a7:86:62:47:8b:75:6a: 9a:3b:98:5f:c8:5c:26:a9:d8:7d:4a:0b:df:a1:8c:60:b1:3b: a2:86:1f:d8:fb:99:e6:e0:19:5e:84:bd:bc:2a:ff:27:f8:6a: 7f:4d:9a:4b:7e:9b:f9:06:85:37:ef:67:ae:0e:da:7a:27:88: 0a:46:2a:4f:37:3c:2f:ba:a2:12:09:e9:b5:14:b0:d0:b9:0d: 08:e2:28:40:f0:13:4c:4e:30:c1:94:a7:c8:5e:c3:cb:7a:84: fc:6b:02:4b:e6:e1:17:b1:70:10:b1:62:44:a4:51:32:68:c7: be:67:bb:14:d3:ca:32:18:79:56:5b:22:9f:32:52:30:ce:a7: 1c:d0:f8:9e:f3:6f:44:de:6e:5a:bf:ff:25:d9:73:d5:7e:03: 63:1f:dc:d7:75:b5:3b:45:fb:d7:a7:5c:73:9f:d6:bc:de:73: 45:0a:08:9a:2e:48:7a:91:b1:6b:de:24:6d:b9:c1:18:80:cf: e5:89:4e:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcrCm+njkkOBJd7PJgxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1ZmRiMDg4ZTk4ZTRlNjQxNWQ5NDQxNDIyMTI0NDgzNjkw MDViNDgwHhcNMjYwMjA5MTMwMTA1WhcNMjYwMjEwMTMwMTA1WjAzMTEwLwYDVQQD EyhkNzg1ZGIxYThkYmExMjYyNTcwMTcwMzg1NmRkN2JhN2MxMjNlY2YwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX8Ov4Gci6f31Bc7+KviJk6i6ymN NjNiBLKPGL82KRHVHK3jeKd68Pk1kBwkx8vQEXA5vLr8Bk/1KfI78sEyyOVLUlqc jb5Fz559KCiddl8Mk2bmDomEj5js4scqYvaHR6QfDjsZOz5QtYpxdiMH995yCSfY b2CT3Bj3fVY4vGMf7+FYkfFEkfszkGNpULVgMbSfT58PnZkLLqVpTnVnb9qfzStg 5GBz58UDXGGsGzZxX5MNvkXBg7hbu33oCjmHNzbCNbR2FCdoXoCL6DOReF7WGaLr P7fM8h5LL7etmF5YZAwrR9GjXdNsILlKZg+JJJsAfW/tBo7SQDu6emdwYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNeF2xqNuhJiVwFwOFbde6fBI+zwMB8GA1UdIwQY MBaAFBX9sIjpjk5kFdlEFCISRINpAFtIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUt MmY2M2FiNDZmMzFjLzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYi9jYjg3N2MtMTY5OS00NGI5LTlkYzUtMmY2M2FiNDZmMzFj LzEvRmYyd2lPbU9UbVFWMlVRVUloSkVnMmtBVzBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoitG7Zqu okGuLIIOEVs1DG6wXr9EEXvpOhCdOefulyLMHqrQDUHk+2cMR+F+KGr/Ooae4Hk8 d0vD8bz6y3J9dGSnhmJHi3VqmjuYX8hcJqnYfUoL36GMYLE7ooYf2PuZ5uAZXoS9 vCr/J/hqf02aS36b+QaFN+9nrg7aeieICkYqTzc8L7qiEgnptRSw0LkNCOIoQPAT TE4wwZSnyF7Dy3qE/GsCS+bhF7FwELFiRKRRMmjHvme7FNPKMhh5VlsinzJSMM6n HND4nvNvRN5uWr//Jdlz1X4DYx/c13W1O0X716dcc5/WvN5zRQoImi5IepGxa94k bbnBGIDP5YlOJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:25 2026 by rpki-client