This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft File: fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft (raw, json) Hash identifier: MWDz6Dj2OgK8VyKhAVdgFtNGvqnvWmBeg1Z25j2H0ro= Subject key identifier: C5:D1:5D:D1:9D:0A:16:ED:E9:93:E3:64:CF:F2:6A:70:9B:A5:26:53 Authority key identifier: 7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D Certificate issuer: /CN=7e3987d5ee9c893d471e44985664397191103f7d Certificate serial: 019C42B44B08ECF9892FD0CC2A4A679E873E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft Manifest number: 20 Signing time: Mon 09 Feb 2026 14:00:37 +0000 Manifest this update: Mon 09 Feb 2026 14:00:37 +0000 Manifest next update: Tue 10 Feb 2026 14:00:37 +0000 Files and hashes: 1: fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl (hash: Uov/4VpSB9R3D2eJQ7rxxTyZT/vT31gXJ80yAwHlKoI=) 2: hiqnGKYGj-WhG8_O9GaEv4rC0GY.roa (hash: 15L8jWjWJZXBu2em4tCUMNmqfpGGdBu7LQHu48MUm7s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4b:08:ec:f9:89:2f:d0:cc:2a:4a:67:9e:87:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e3987d5ee9c893d471e44985664397191103f7d Validity Not Before: Feb 9 14:00:37 2026 GMT Not After : Feb 10 14:00:37 2026 GMT Subject: CN=c5d15dd19d0a16ede993e364cff26a709ba52653 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5a:a5:35:e2:bb:16:09:a4:56:6d:2c:83:ff: f1:90:1a:a7:a4:5a:88:18:01:b0:a5:2b:ca:10:3d: a9:fb:f6:e8:18:3e:04:de:69:18:63:35:f7:66:f5: ad:80:e0:28:c6:f2:c0:e7:c6:e5:7d:d2:e7:78:63: c0:a6:90:18:f2:fe:9c:b6:3b:c7:f3:98:75:35:94: e8:66:cf:07:3f:c6:e0:b6:3e:b6:ba:90:23:4b:d1: 56:75:47:78:33:56:00:59:c2:33:15:d6:fc:e0:7c: 14:8f:13:b1:0c:9a:e2:f2:ef:e8:19:37:a2:a9:82: 1e:01:19:e3:94:60:e6:93:dd:f6:ed:2c:2f:7b:67: 66:3d:76:ed:c7:6c:41:81:84:7e:b5:d0:ad:e9:c1: cb:96:45:2c:1c:31:d2:37:71:8d:3c:c8:da:7c:3b: 16:cf:9e:ae:5a:39:16:bb:a0:e4:91:6d:8d:81:1b: cc:11:4f:d2:61:75:1b:6d:23:b2:4c:cf:05:8e:aa: 37:39:fc:5e:c6:40:6d:9c:9e:c2:de:54:3e:d0:f8: 13:38:e6:53:91:72:03:74:5b:49:90:7e:02:d8:98: a0:82:6e:26:d7:76:88:5f:19:e7:e5:80:be:15:62: e3:85:3c:f7:98:16:b4:52:5b:e9:8a:18:17:99:98: c5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D1:5D:D1:9D:0A:16:ED:E9:93:E3:64:CF:F2:6A:70:9B:A5:26:53 X509v3 Authority Key Identifier: keyid:7E:39:87:D5:EE:9C:89:3D:47:1E:44:98:56:64:39:71:91:10:3F:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmH1e6ciT1HHkSYVmQ5cZEQP30.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b97590-6c93-4ead-8e58-26d1f94d9867/1/fjmH1e6ciT1HHkSYVmQ5cZEQP30.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2d:46:72:84:78:7e:70:4f:46:08:60:10:41:5a:00:94:e5: 2c:9e:4c:c0:f4:e9:ad:33:04:40:e6:71:85:c0:8f:24:ed:d9: 07:2c:d1:2c:da:25:ce:57:29:3b:40:23:fa:b6:8f:02:00:95: 1e:6d:8f:f7:d2:e1:40:3b:be:e4:52:8b:a2:a3:53:c9:d0:10: 0a:5f:f9:af:53:07:83:3e:0f:10:40:ae:a6:83:44:d4:6d:02: 65:cb:36:51:29:46:24:ed:bb:ca:4d:5e:f8:f1:7f:6f:a4:b8: 32:07:19:1c:9c:c7:72:a4:c0:b5:ab:bc:e9:21:8c:8b:83:35: 86:1a:63:f4:86:cb:8b:73:54:03:37:d4:d2:5c:bf:40:7f:91: cc:02:19:66:92:6f:80:b1:24:78:91:ee:04:bd:d7:d5:b5:c3: 22:cb:f3:75:be:13:35:6a:71:fe:d5:32:a4:5d:db:9a:3c:de: 48:d4:ea:5f:1b:77:f7:69:db:9d:f2:63:f6:86:c1:f7:dd:19: 5b:dd:40:f2:f5:22:4d:90:6a:02:5a:c5:2b:ab:e3:49:91:32: 40:e0:9c:67:fe:97:47:da:3f:3e:e0:6d:36:08:8e:ac:ab:32: e6:b7:7b:26:94:b1:80:7c:ff:5e:db:8d:89:42:19:7a:08:76: c2:bd:6f:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEsI7PmJL9DMKkpnnoc+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlMzk4N2Q1ZWU5Yzg5M2Q0NzFlNDQ5ODU2NjQzOTcxOTEx MDNmN2QwHhcNMjYwMjA5MTQwMDM3WhcNMjYwMjEwMTQwMDM3WjAzMTEwLwYDVQQD EyhjNWQxNWRkMTlkMGExNmVkZTk5M2UzNjRjZmYyNmE3MDliYTUyNjUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFqlNeK7FgmkVm0sg//xkBqnpFqI GAGwpSvKED2p+/boGD4E3mkYYzX3ZvWtgOAoxvLA58blfdLneGPAppAY8v6ctjvH 85h1NZToZs8HP8bgtj62upAjS9FWdUd4M1YAWcIzFdb84HwUjxOxDJri8u/oGTei qYIeARnjlGDmk9327Swve2dmPXbtx2xBgYR+tdCt6cHLlkUsHDHSN3GNPMjafDsW z56uWjkWu6DkkW2NgRvMEU/SYXUbbSOyTM8Fjqo3OfxexkBtnJ7C3lQ+0PgTOOZT kXIDdFtJkH4C2Jiggm4m13aIXxnn5YC+FWLjhTz3mBa0UlvpihgXmZjFFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXRXdGdChbt6ZPjZM/yanCbpSZTMB8GA1UdIwQY MBaAFH45h9XunIk9Rx5EmFZkOXGRED99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmptSDFlNmNpVDFISGtTWVZtUTVjWkVRUDMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iOTc1OTAtNmM5My00ZWFkLThlNTgt MjZkMWY5NGQ5ODY3LzEvZmptSDFlNmNpVDFISGtTWVZtUTVjWkVRUDMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iOTc1OTAtNmM5My00ZWFkLThlNTgtMjZkMWY5NGQ5ODY3 LzEvZmptSDFlNmNpVDFISGtTWVZtUTVjWkVRUDMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC1GcoR4 fnBPRghgEEFaAJTlLJ5MwPTprTMEQOZxhcCPJO3ZByzRLNolzlcpO0Aj+raPAgCV Hm2P99LhQDu+5FKLoqNTydAQCl/5r1MHgz4PEECupoNE1G0CZcs2USlGJO27yk1e +PF/b6S4MgcZHJzHcqTAtau86SGMi4M1hhpj9IbLi3NUAzfU0ly/QH+RzAIZZpJv gLEkeJHuBL3X1bXDIsvzdb4TNWpx/tUypF3bmjzeSNTqXxt392nbnfJj9obB990Z W91A8vUiTZBqAlrFK6vjSZEyQOCcZ/6XR9o/PuBtNgiOrKsy5rd7JpSxgHz/XtuN iUIZegh2wr1vBQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:44 2026 by rpki-client