This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft File: FctDavZPjQbSzBktBIAMslYoQnI.mft (raw, json) Hash identifier: 6sWbWRcM3J/mj2oAsNeqQrdzFu1B/yD4pDgxO6vR9Sg= Subject key identifier: 29:21:28:76:35:D2:C1:E3:7E:19:A1:9A:75:ED:1F:D4:0B:F3:4F:70 Authority key identifier: 15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 Certificate issuer: /CN=15cb436af64f8d06d2cc192d04800cb256284272 Certificate serial: 019C439064B25F5C70D338C845A55CE294F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft Manifest number: 030F Signing time: Mon 09 Feb 2026 18:01:02 +0000 Manifest this update: Mon 09 Feb 2026 18:01:02 +0000 Manifest next update: Tue 10 Feb 2026 18:01:02 +0000 Files and hashes: 1: FctDavZPjQbSzBktBIAMslYoQnI.crl (hash: o1JbcOXwhFy6RWjAlYTl1whW8GxyhzEaiV8JqVJ+jQM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:64:b2:5f:5c:70:d3:38:c8:45:a5:5c:e2:94:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15cb436af64f8d06d2cc192d04800cb256284272 Validity Not Before: Feb 9 18:01:02 2026 GMT Not After : Feb 10 18:01:02 2026 GMT Subject: CN=2921287635d2c1e37e19a19a75ed1fd40bf34f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:94:40:9d:8d:68:b6:be:4a:d1:5b:c4:33:46: a6:a6:68:bf:c6:12:ff:63:94:b2:17:fe:25:b7:8b: 17:a2:e3:14:d9:55:40:ef:a8:65:13:16:79:34:32: c8:54:d4:86:97:e9:bf:f4:dd:cc:31:43:a5:33:02: e6:68:1d:13:1f:8e:a8:01:1a:5a:e7:e1:b6:3c:29: b6:13:de:d6:4a:e7:4a:37:02:c2:66:5d:00:c7:ef: 4a:f8:14:36:6e:03:a0:61:4e:cf:ed:87:d6:e4:70: 23:6c:a2:6e:04:5e:b2:79:3c:25:65:8e:4a:73:86: 5e:56:eb:77:8f:98:14:4a:47:4b:89:0a:8c:cf:3c: aa:20:ad:ef:40:b1:e0:f0:aa:54:49:c2:f1:89:36: 8f:49:0c:cb:98:84:b7:e7:69:96:5f:6c:c7:ac:90: a8:b3:c8:27:23:7d:b8:7e:05:b3:27:fe:a5:d9:71: 9f:bf:a0:91:e9:ba:7e:0f:8c:77:0e:29:0f:02:f5: 0e:98:58:30:bc:d2:e8:96:c5:7b:a3:da:e8:30:14: 1a:18:74:ca:e4:d2:50:2e:2b:26:d6:4c:ef:c3:14: 39:e2:3c:61:e9:3c:94:7b:12:71:10:48:b4:49:09: b0:d3:01:1c:3a:a0:f4:e7:d9:f0:a3:8b:b4:fd:cc: d6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:21:28:76:35:D2:C1:E3:7E:19:A1:9A:75:ED:1F:D4:0B:F3:4F:70 X509v3 Authority Key Identifier: keyid:15:CB:43:6A:F6:4F:8D:06:D2:CC:19:2D:04:80:0C:B2:56:28:42:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FctDavZPjQbSzBktBIAMslYoQnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/3513a0-a528-4386-9527-09c2a66208a3/1/FctDavZPjQbSzBktBIAMslYoQnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:66:71:d4:b9:96:4c:0c:e7:72:49:60:d7:4a:eb:3e:e9:40: a3:fc:27:a2:ca:39:a5:6f:92:01:96:3d:91:08:32:c1:f4:4d: 86:72:65:ba:38:a1:4f:4e:a7:f5:97:44:37:8d:67:f3:07:98: a6:ff:38:b2:70:0c:b5:9a:90:e4:70:e3:1d:bd:22:12:16:2e: 13:18:f3:25:13:f8:e7:12:7f:94:52:14:91:f5:62:7f:58:4a: 59:81:15:82:03:d4:f7:f1:52:46:71:49:19:2b:28:11:a4:d1: d8:10:6f:64:f8:5c:05:e4:5c:2a:61:1a:69:a8:19:2f:e4:37: 90:5b:a6:d8:0b:e1:a2:a2:96:7f:58:b5:92:b1:25:9f:44:4d: 1e:dd:19:62:2f:32:4b:25:ab:f8:78:5f:b7:4a:b3:ff:d5:7d: bc:76:99:c3:75:0d:54:3e:70:2a:3b:f1:67:15:f0:01:71:0a: b6:11:7d:34:17:2d:57:99:6c:ba:76:43:f4:98:a1:f2:4e:59: e8:94:9b:2b:4f:6e:a5:74:ec:f3:9d:20:c3:c5:52:b3:69:3e: 7f:9d:95:93:49:58:8e:19:ad:85:3c:c6:73:39:78:fb:ca:28: 19:56:be:64:ab:04:d3:dd:92:ce:85:ed:ac:3b:c6:46:f8:00: 10:ea:f6:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGSyX1xw0zjIRaVc4pT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1Y2I0MzZhZjY0ZjhkMDZkMmNjMTkyZDA0ODAwY2IyNTYy ODQyNzIwHhcNMjYwMjA5MTgwMTAyWhcNMjYwMjEwMTgwMTAyWjAzMTEwLwYDVQQD EygyOTIxMjg3NjM1ZDJjMWUzN2UxOWExOWE3NWVkMWZkNDBiZjM0ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5RAnY1otr5K0VvEM0ampmi/xhL/ Y5SyF/4lt4sXouMU2VVA76hlExZ5NDLIVNSGl+m/9N3MMUOlMwLmaB0TH46oARpa 5+G2PCm2E97WSudKNwLCZl0Ax+9K+BQ2bgOgYU7P7YfW5HAjbKJuBF6yeTwlZY5K c4ZeVut3j5gUSkdLiQqMzzyqIK3vQLHg8KpUScLxiTaPSQzLmIS352mWX2zHrJCo s8gnI324fgWzJ/6l2XGfv6CR6bp+D4x3DikPAvUOmFgwvNLolsV7o9roMBQaGHTK 5NJQLism1kzvwxQ54jxh6TyUexJxEEi0SQmw0wEcOqD059nwo4u0/czWvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkhKHY10sHjfhmhmnXtH9QL809wMB8GA1UdIwQY MBaAFBXLQ2r2T40G0swZLQSADLJWKEJyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1Mjct MDljMmE2NjIwOGEzLzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8zNTEzYTAtYTUyOC00Mzg2LTk1MjctMDljMmE2NjIwOGEz LzEvRmN0RGF2WlBqUWJTekJrdEJJQU1zbFlvUW5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmZx1LmW TAzncklg10rrPulAo/wnoso5pW+SAZY9kQgywfRNhnJlujihT06n9ZdEN41n8weY pv84snAMtZqQ5HDjHb0iEhYuExjzJRP45xJ/lFIUkfVif1hKWYEVggPU9/FSRnFJ GSsoEaTR2BBvZPhcBeRcKmEaaagZL+Q3kFum2AvhoqKWf1i1krEln0RNHt0ZYi8y SyWr+Hhft0qz/9V9vHaZw3UNVD5wKjvxZxXwAXEKthF9NBctV5lsunZD9Jih8k5Z 6JSbK09upXTs850gw8VSs2k+f52Vk0lYjhmthTzGczl4+8ooGVa+ZKsE092SzoXt rDvGRvgAEOr2oA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:06 2026 by rpki-client