This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft File: FtQJAygYpijNKyg4OALXfnSUolI.mft (raw, json) Hash identifier: f6trB+/c9O/EgwWwoxJYFETvs1FasXAVRu74YkWF1fQ= Subject key identifier: 08:4C:F9:47:AE:A2:4D:0C:4B:8B:F8:53:C9:FB:9E:92:B3:F4:1E:BC Authority key identifier: 16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 Certificate issuer: /CN=16d409032818a628cd2b28383802d77e7494a252 Certificate serial: 019C41D8970E419927F22520F1FE31CAB156 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft Manifest number: 01D1 Signing time: Mon 09 Feb 2026 10:00:39 +0000 Manifest this update: Mon 09 Feb 2026 10:00:39 +0000 Manifest next update: Tue 10 Feb 2026 10:00:39 +0000 Files and hashes: 1: FtQJAygYpijNKyg4OALXfnSUolI.crl (hash: nax1dhs7DaZLKyyhhAV+oAupCjSlVX83b5CM6ZS8/NA=) 2: LaKgTWrQkobeVQ1YjLHD79ykJ5M.roa (hash: aWACl4kesdkEy6/Xa5+RkoBL499zzk7WgONY6WBsSTw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:97:0e:41:99:27:f2:25:20:f1:fe:31:ca:b1:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16d409032818a628cd2b28383802d77e7494a252 Validity Not Before: Feb 9 10:00:39 2026 GMT Not After : Feb 10 10:00:39 2026 GMT Subject: CN=084cf947aea24d0c4b8bf853c9fb9e92b3f41ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:45:e7:ea:37:74:db:f9:5f:6f:60:d2:c7:83: 31:0b:37:37:c3:86:a9:bc:97:91:d6:77:ee:c3:94: cd:57:5d:ca:e1:63:b3:eb:bf:d8:b1:7e:02:23:bf: b7:eb:83:1b:25:14:3e:d3:4c:0b:53:30:88:f7:5b: 0e:e9:96:8a:76:b9:b8:d2:e5:94:83:3b:bb:54:d8: 90:c9:0b:f8:63:6b:60:db:95:a9:ac:73:3d:c4:f7: 6c:37:f6:45:40:51:ae:d4:b7:18:51:bc:f4:61:20: db:54:ca:3f:17:7b:c8:7f:84:b8:62:d7:f2:23:4f: 7c:84:a7:10:d9:ed:e6:c4:9b:f2:39:5b:35:d3:19: 2f:d5:97:70:13:51:d0:7b:ac:97:df:57:f7:c8:6b: b8:0a:03:da:51:6f:fc:df:a4:e2:0c:84:c8:60:07: 74:fe:d6:bd:cc:f6:d1:29:44:52:e4:0e:36:b0:db: 46:f0:c2:47:5a:d7:2b:c1:75:a2:42:86:e4:e1:22: 28:47:e9:09:e0:c1:f8:1e:3d:d7:94:4a:5a:d0:9a: 35:a9:12:92:ac:22:b7:df:98:a1:46:05:12:50:42: 3f:b9:d7:01:fb:bf:ce:2a:09:39:df:1a:3e:7b:4f: eb:58:01:88:4b:b6:fa:27:7e:62:be:79:e3:d3:ed: e9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:4C:F9:47:AE:A2:4D:0C:4B:8B:F8:53:C9:FB:9E:92:B3:F4:1E:BC X509v3 Authority Key Identifier: keyid:16:D4:09:03:28:18:A6:28:CD:2B:28:38:38:02:D7:7E:74:94:A2:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtQJAygYpijNKyg4OALXfnSUolI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/586375-bc8d-4065-83dc-0aeb9d37787e/1/FtQJAygYpijNKyg4OALXfnSUolI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:f1:30:48:8b:49:22:74:26:6a:d6:9f:4c:c0:2b:4f:f0:f6: a0:1e:2f:37:76:39:9d:04:e8:f7:17:68:e9:43:3f:b1:5b:41: 34:22:99:89:9b:dc:a7:bc:eb:87:09:78:e2:83:dd:89:ab:26: 31:16:9b:7d:0f:96:57:01:ee:70:a4:12:56:ee:a1:99:f2:bc: 19:f2:e2:e3:a2:1d:cd:77:61:35:22:5d:87:14:07:24:61:9b: 37:17:20:70:2b:e1:0b:81:07:fa:b2:34:2c:53:27:aa:79:5d: f2:56:5b:35:9d:0a:2e:7c:28:c8:41:a4:0a:a0:1d:0b:d2:03: 56:a7:bd:bc:10:b4:08:22:2f:75:6c:a4:84:a1:a5:c3:fd:77: fb:83:c1:7c:29:8f:1d:07:ee:0f:1b:53:ee:de:61:f6:77:f5: 64:1f:dd:e2:63:d2:42:6b:45:c2:33:41:81:a3:2f:63:65:24: f1:75:55:3e:36:26:03:2b:e6:f8:23:44:8b:ca:fe:53:f5:d1: 54:39:43:9a:bf:48:c4:ae:3d:82:a6:42:9d:75:c7:e2:85:1e: 9a:f6:cd:79:52:8d:37:38:d9:8f:0f:87:92:fa:a1:e6:98:8f: aa:c0:8b:51:9a:3a:3a:0d:49:d7:a6:4f:14:4b:e1:c9:ed:85: a0:b2:2f:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JcOQZkn8iUg8f4xyrFWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2ZDQwOTAzMjgxOGE2MjhjZDJiMjgzODM4MDJkNzdlNzQ5 NGEyNTIwHhcNMjYwMjA5MTAwMDM5WhcNMjYwMjEwMTAwMDM5WjAzMTEwLwYDVQQD EygwODRjZjk0N2FlYTI0ZDBjNGI4YmY4NTNjOWZiOWU5MmIzZjQxZWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEXn6jd02/lfb2DSx4MxCzc3w4ap vJeR1nfuw5TNV13K4WOz67/YsX4CI7+364MbJRQ+00wLUzCI91sO6ZaKdrm40uWU gzu7VNiQyQv4Y2tg25WprHM9xPdsN/ZFQFGu1LcYUbz0YSDbVMo/F3vIf4S4Ytfy I098hKcQ2e3mxJvyOVs10xkv1ZdwE1HQe6yX31f3yGu4CgPaUW/836TiDITIYAd0 /ta9zPbRKURS5A42sNtG8MJHWtcrwXWiQobk4SIoR+kJ4MH4Hj3XlEpa0Jo1qRKS rCK335ihRgUSUEI/udcB+7/OKgk53xo+e0/rWAGIS7b6J35ivnnj0+3pcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAhM+Ueuok0MS4v4U8n7npKz9B68MB8GA1UdIwQY MBaAFBbUCQMoGKYozSsoODgC1350lKJSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMt MGFlYjlkMzc3ODdlLzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS81ODYzNzUtYmM4ZC00MDY1LTgzZGMtMGFlYjlkMzc3ODdl LzEvRnRRSkF5Z1lwaWpOS3lnNE9BTFhmblNVb2xJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/EwSItJ InQmatafTMArT/D2oB4vN3Y5nQTo9xdo6UM/sVtBNCKZiZvcp7zrhwl44oPdiasm MRabfQ+WVwHucKQSVu6hmfK8GfLi46IdzXdhNSJdhxQHJGGbNxcgcCvhC4EH+rI0 LFMnqnld8lZbNZ0KLnwoyEGkCqAdC9IDVqe9vBC0CCIvdWykhKGlw/13+4PBfCmP HQfuDxtT7t5h9nf1ZB/d4mPSQmtFwjNBgaMvY2Uk8XVVPjYmAyvm+CNEi8r+U/XR VDlDmr9IxK49gqZCnXXH4oUemvbNeVKNNzjZjw+Hkvqh5piPqsCLUZo6Og1J16ZP FEvhye2FoLIvZw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:44 2026 by rpki-client