This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft File: frHgvC-KBA2BVYCM9LKcVM2tlEI.mft (raw, json) Hash identifier: SS3weSg5hA9/YNg5rdVJDWtwhr9+rZ3ZiwT/S9oVvEY= Subject key identifier: 74:1B:36:5D:8B:80:47:8C:68:5F:E2:3D:B1:DA:42:C4:B3:2D:5E:82 Authority key identifier: 7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42 Certificate issuer: /CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442 Certificate serial: 019C43593FB1DAB2BC1799F6EF6B873298BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft Manifest number: 0172 Signing time: Mon 09 Feb 2026 17:00:48 +0000 Manifest this update: Mon 09 Feb 2026 17:00:48 +0000 Manifest next update: Tue 10 Feb 2026 17:00:48 +0000 Files and hashes: 1: frHgvC-KBA2BVYCM9LKcVM2tlEI.crl (hash: FdvHScMZ9fUf82JohhF/K1UrBN25DojmMb42cAFyueQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:3f:b1:da:b2:bc:17:99:f6:ef:6b:87:32:98:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb1e0bc2f8a040d8155808cf4b29c54cdad9442 Validity Not Before: Feb 9 17:00:48 2026 GMT Not After : Feb 10 17:00:48 2026 GMT Subject: CN=741b365d8b80478c685fe23db1da42c4b32d5e82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:93:91:d6:5f:f9:4d:87:41:6f:70:5c:a8:00: 12:f8:e7:55:82:ef:07:0c:d5:31:6b:c5:0e:c1:6f: 57:f4:56:12:fd:c3:ce:42:75:1f:28:05:f7:80:ef: 53:97:67:b7:81:11:c7:bd:a5:4e:9c:e2:8c:a6:51: 0f:da:82:bf:dc:96:43:da:19:9e:0e:68:2f:e5:74: f4:1d:bd:93:4b:55:47:29:3e:4a:94:69:f9:9f:a6: a2:d5:10:a7:24:43:d2:4b:17:dd:4f:63:03:12:f0: 5c:f0:48:3c:a2:31:88:48:3e:58:bf:05:b4:9f:8f: dc:10:2f:3e:ad:02:c5:1d:e6:f7:8a:a4:04:1e:ad: ef:42:cc:61:8c:f7:74:9f:da:7b:34:9b:f6:84:6c: 5c:dc:d2:31:0b:15:55:78:a9:2e:12:62:c3:27:87: 38:cd:a4:e7:93:f7:ad:7d:fb:43:5b:91:0f:de:d1: 1f:0e:3a:18:12:60:2c:0f:b9:f3:39:94:62:c2:05: 7d:39:91:e8:31:0b:7e:d8:ff:c3:85:44:58:35:1e: f5:f3:9f:58:89:28:85:d6:e4:18:f3:6e:ac:84:e9: 96:3a:cc:e9:60:e3:3f:33:77:fe:f6:8e:ef:16:7a: c6:fb:71:bf:58:4e:96:ea:ff:2a:b0:92:ac:2d:a8: 23:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:1B:36:5D:8B:80:47:8C:68:5F:E2:3D:B1:DA:42:C4:B3:2D:5E:82 X509v3 Authority Key Identifier: keyid:7E:B1:E0:BC:2F:8A:04:0D:81:55:80:8C:F4:B2:9C:54:CD:AD:94:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frHgvC-KBA2BVYCM9LKcVM2tlEI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/751724-da83-4295-a548-a89ed2aecb51/1/frHgvC-KBA2BVYCM9LKcVM2tlEI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:72:f9:1e:55:db:e1:27:3f:81:bb:f6:68:b3:9c:3e:90:5b: 26:60:1d:aa:80:d8:d2:fe:49:57:6d:a9:7f:ee:93:17:fa:fa: 06:6d:a1:d5:7e:a2:82:4b:54:07:42:a7:9b:50:76:97:b1:4c: f2:d2:07:cd:c4:64:b6:c6:14:4b:de:b5:0d:7a:37:75:d4:3d: b3:c9:d3:61:37:1d:27:24:03:d4:42:7a:79:6a:7f:c4:52:49: d5:84:71:53:f2:cc:51:2b:be:ef:f2:6a:66:4d:d7:2a:79:9c: 9b:7e:68:e2:8f:56:66:20:9a:9d:87:85:bc:89:52:39:7f:97: 42:d3:b9:18:34:39:7f:98:38:d2:75:89:91:bd:11:c5:83:87: 73:99:a9:2a:cb:c9:ed:fc:29:58:dc:6b:ca:57:ea:ae:fa:a5: e0:93:88:30:39:96:16:f5:73:78:39:dd:80:81:21:50:c2:56: 5d:3d:be:d9:c5:40:f6:c5:94:95:ba:b2:c3:c6:d1:16:c7:94: 14:0f:6a:2b:78:10:8b:c5:33:ad:2e:7a:d5:f4:ea:87:b9:33: 34:c3:45:e0:d9:03:fb:cb:d1:d5:fc:2c:f8:4c:49:a8:0d:30: a3:a2:5a:41:ec:2f:1a:83:2a:02:eb:d2:93:c7:64:04:73:ae: dd:ef:7f:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWT+x2rK8F5n272uHMpi+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYjFlMGJjMmY4YTA0MGQ4MTU1ODA4Y2Y0YjI5YzU0Y2Rh ZDk0NDIwHhcNMjYwMjA5MTcwMDQ4WhcNMjYwMjEwMTcwMDQ4WjAzMTEwLwYDVQQD Eyg3NDFiMzY1ZDhiODA0NzhjNjg1ZmUyM2RiMWRhNDJjNGIzMmQ1ZTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOR1l/5TYdBb3BcqAAS+OdVgu8H DNUxa8UOwW9X9FYS/cPOQnUfKAX3gO9Tl2e3gRHHvaVOnOKMplEP2oK/3JZD2hme Dmgv5XT0Hb2TS1VHKT5KlGn5n6ai1RCnJEPSSxfdT2MDEvBc8Eg8ojGISD5YvwW0 n4/cEC8+rQLFHeb3iqQEHq3vQsxhjPd0n9p7NJv2hGxc3NIxCxVVeKkuEmLDJ4c4 zaTnk/etfftDW5EP3tEfDjoYEmAsD7nzOZRiwgV9OZHoMQt+2P/DhURYNR71859Y iSiF1uQY826shOmWOszpYOM/M3f+9o7vFnrG+3G/WE6W6v8qsJKsLagjKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHQbNl2LgEeMaF/iPbHaQsSzLV6CMB8GA1UdIwQY MBaAFH6x4LwvigQNgVWAjPSynFTNrZRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnJIZ3ZDLUtCQTJCVllDTTlMS2NWTTJ0bEVJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC83NTE3MjQtZGE4My00Mjk1LWE1NDgt YTg5ZWQyYWVjYjUxLzEvZnJIZ3ZDLUtCQTJCVllDTTlMS2NWTTJ0bEVJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC83NTE3MjQtZGE4My00Mjk1LWE1NDgtYTg5ZWQyYWVjYjUx LzEvZnJIZ3ZDLUtCQTJCVllDTTlMS2NWTTJ0bEVJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXL5HlXb 4Sc/gbv2aLOcPpBbJmAdqoDY0v5JV22pf+6TF/r6Bm2h1X6igktUB0Knm1B2l7FM 8tIHzcRktsYUS961DXo3ddQ9s8nTYTcdJyQD1EJ6eWp/xFJJ1YRxU/LMUSu+7/Jq Zk3XKnmcm35o4o9WZiCanYeFvIlSOX+XQtO5GDQ5f5g40nWJkb0RxYOHc5mpKsvJ 7fwpWNxrylfqrvql4JOIMDmWFvVzeDndgIEhUMJWXT2+2cVA9sWUlbqyw8bRFseU FA9qK3gQi8UzrS561fTqh7kzNMNF4NkD+8vR1fws+ExJqA0wo6JaQewvGoMqAuvS k8dkBHOu3e9/LQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:28 2026 by rpki-client