This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft File: FKawhisrMDswLDwjSaWsjQ-QawY.mft (raw, json) Hash identifier: ex/dQH+mtzWfzvd7zBDUfDF9q0G4su+PQQIUsOl/koU= Subject key identifier: 64:5C:C1:BC:66:8C:20:21:51:CA:05:DD:97:13:73:D3:16:10:D0:CD Authority key identifier: 14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 Certificate issuer: /CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Certificate serial: 019C40FCF5AF464451E2F00682F4CF400E09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 06:00:45 +0000 Manifest this update: Mon 09 Feb 2026 06:00:45 +0000 Manifest next update: Tue 10 Feb 2026 06:00:45 +0000 Files and hashes: 1: Der6FTM0zFNBcUHHMY71MrqTmEc.roa (hash: 15RROQNtC1R+TRcA+13wCXLiC5eJf1QCPFeKw8n24YU=) 2: FKawhisrMDswLDwjSaWsjQ-QawY.crl (hash: 4AC0q1IO9qgR6CUNThL1Xi9nUmfrvIEis5s+hdSWiK0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fc:f5:af:46:44:51:e2:f0:06:82:f4:cf:40:0e:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14a6b0862b2b303b302c3c2349a5ac8d0f906b06 Validity Not Before: Feb 9 06:00:45 2026 GMT Not After : Feb 10 06:00:45 2026 GMT Subject: CN=645cc1bc668c202151ca05dd971373d31610d0cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:32:4e:93:d8:fc:cb:5c:ea:98:ac:91:96:80: da:16:40:cc:69:79:fc:06:a9:6a:6b:e5:f3:a2:e4: 0a:f3:9e:3e:fa:1b:da:5d:44:88:ff:86:8a:3d:c5: 3e:d5:de:cd:fa:42:6e:c8:7f:3c:a2:13:3b:b8:6c: be:0c:8c:94:8e:ae:05:67:40:8f:b4:3a:d0:1a:53: 02:52:46:b7:87:f1:f9:63:83:27:9b:9c:3f:c5:68: 6a:65:af:db:d4:c7:f0:c9:79:47:08:c4:e9:1c:cd: 3e:e4:d6:89:f5:7f:0e:04:75:c8:d4:a2:9e:5f:d4: 2d:17:b4:b5:eb:c3:24:85:4d:8f:81:12:b9:fa:ba: 30:1f:a7:b2:98:a9:08:00:e0:3b:68:77:bf:16:1a: 84:7d:55:63:0e:f1:f2:09:5b:1e:27:5c:df:dd:ae: 62:8f:28:ce:99:d5:ab:7a:f8:e6:66:f6:a4:00:4f: 8e:1e:5f:a5:13:fa:15:24:dd:fd:f7:b7:55:56:44: b7:a7:33:e9:f6:1f:8e:79:3d:e5:87:c5:e6:ce:2e: dd:39:d0:66:4e:a8:8a:97:5c:b7:7b:a6:14:ed:67: 13:24:27:5c:3a:d1:93:f0:cf:22:1c:f3:15:70:89: 11:24:d6:a0:87:a0:fd:4b:16:be:21:13:6e:a8:32: ed:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:5C:C1:BC:66:8C:20:21:51:CA:05:DD:97:13:73:D3:16:10:D0:CD X509v3 Authority Key Identifier: keyid:14:A6:B0:86:2B:2B:30:3B:30:2C:3C:23:49:A5:AC:8D:0F:90:6B:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FKawhisrMDswLDwjSaWsjQ-QawY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/8d991e-3ece-4a11-b463-751cf3a5e1e1/1/FKawhisrMDswLDwjSaWsjQ-QawY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:00:f6:ca:9c:69:d9:bf:1c:57:83:35:36:cd:af:63:aa: 52:b2:a7:bb:ea:3a:2a:f4:74:5c:4d:6f:0a:00:44:a0:9a:5d: bd:10:d2:a8:40:c8:6d:14:41:f8:a3:bc:4f:d0:7d:9e:dd:5a: a9:04:d1:6c:79:99:5a:b4:1c:5a:ad:45:01:13:9d:35:34:4f: 2a:1a:bc:2c:9b:18:d4:28:78:5a:39:c0:42:1e:73:8d:83:37: 4b:9d:de:89:8b:43:f8:49:02:30:7c:e7:58:8e:7e:56:0e:dc: 93:8a:31:4e:d8:ad:87:8c:6f:39:f9:af:65:77:9d:ee:a3:66: 4d:d7:dc:25:b8:b0:95:3a:32:29:d5:1a:6b:ce:49:18:0d:b7: 46:01:04:92:41:d7:e3:8f:36:90:33:82:bc:10:37:1d:c6:06: e6:66:b7:cf:0d:d6:65:89:a7:c9:19:2d:52:3c:f4:94:fc:6d: ec:76:9c:2e:f2:6b:1c:4a:31:7c:b6:4e:26:f2:ec:c7:ef:08: 62:01:d6:f4:9b:e0:0d:0b:d8:90:6c:c8:f9:d9:b4:a4:b2:42: 4c:d9:f6:ef:19:0a:5d:cf:19:f1:0f:f7:60:1d:c1:f7:30:c9: 46:47:c2:6b:17:92:c2:30:f8:a6:e3:56:26:59:01:88:21:3c: b0:73:34:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/PWvRkRR4vAGgvTPQA4JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YTZiMDg2MmIyYjMwM2IzMDJjM2MyMzQ5YTVhYzhkMGY5 MDZiMDYwHhcNMjYwMjA5MDYwMDQ1WhcNMjYwMjEwMDYwMDQ1WjAzMTEwLwYDVQQD Eyg2NDVjYzFiYzY2OGMyMDIxNTFjYTA1ZGQ5NzEzNzNkMzE2MTBkMGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDJOk9j8y1zqmKyRloDaFkDMaXn8 Bqlqa+XzouQK854++hvaXUSI/4aKPcU+1d7N+kJuyH88ohM7uGy+DIyUjq4FZ0CP tDrQGlMCUka3h/H5Y4Mnm5w/xWhqZa/b1MfwyXlHCMTpHM0+5NaJ9X8OBHXI1KKe X9QtF7S168MkhU2PgRK5+rowH6eymKkIAOA7aHe/FhqEfVVjDvHyCVseJ1zf3a5i jyjOmdWrevjmZvakAE+OHl+lE/oVJN3997dVVkS3pzPp9h+OeT3lh8Xmzi7dOdBm TqiKl1y3e6YU7WcTJCdcOtGT8M8iHPMVcIkRJNagh6D9Sxa+IRNuqDLtDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGRcwbxmjCAhUcoF3ZcTc9MWENDNMB8GA1UdIwQY MBaAFBSmsIYrKzA7MCw8I0mlrI0PkGsGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS84ZDk5MWUtM2VjZS00YTExLWI0NjMt NzUxY2YzYTVlMWUxLzEvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS84ZDk5MWUtM2VjZS00YTExLWI0NjMtNzUxY2YzYTVlMWUx LzEvRkthd2hpc3JNRHN3TER3alNhV3NqUS1RYXdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVSkA9sqc adm/HFeDNTbNr2OqUrKnu+o6KvR0XE1vCgBEoJpdvRDSqEDIbRRB+KO8T9B9nt1a qQTRbHmZWrQcWq1FAROdNTRPKhq8LJsY1Ch4WjnAQh5zjYM3S53eiYtD+EkCMHzn WI5+Vg7ck4oxTtith4xvOfmvZXed7qNmTdfcJbiwlToyKdUaa85JGA23RgEEkkHX 4482kDOCvBA3HcYG5ma3zw3WZYmnyRktUjz0lPxt7HacLvJrHEoxfLZOJvLsx+8I YgHW9JvgDQvYkGzI+dm0pLJCTNn27xkKXc8Z8Q/3YB3B9zDJRkfCaxeSwjD4puNW JlkBiCE8sHM06Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:25 2026 by rpki-client