This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft File: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft (raw, json) Hash identifier: fo3q9vmAHgrRzFqH09OraRoJDkBc8KCvPGqce9oNe5g= Subject key identifier: 2F:6B:D6:22:5B:2F:F1:12:DB:A0:88:FC:A8:41:1F:6B:1B:EC:B4:CA Authority key identifier: FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23 Certificate issuer: /CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23 Certificate serial: 019C43220A90CBF1F5C2F2ADE3E146A30CEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft Manifest number: 1169 Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: 1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl (hash: XoUkyfx7bU7LZqWbUz3xb1s/1o73y1by8K7/HXoLpaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0a:90:cb:f1:f5:c2:f2:ad:e3:e1:46:a3:0c:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa502d9a3d07d1fc0c832f967fdf3ef880dc3e23 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=2f6bd6225b2ff112dba088fca8411f6b1becb4ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:5c:2c:4d:2d:b7:06:1e:0a:ff:d6:74:4e: 9e:af:c3:29:d9:56:67:fe:03:f0:de:ba:07:4f:56: 44:eb:49:05:59:38:d9:f8:7c:93:21:12:24:93:cc: 26:3a:bc:2f:ab:58:91:6d:17:6d:3e:b5:15:14:37: 98:e1:0e:22:0e:ab:e6:b7:cd:2e:4d:cd:06:5f:0a: 81:f8:f7:da:9d:12:e4:1e:3d:c7:de:57:0c:36:bb: 66:fa:ef:be:76:42:c2:42:ad:20:11:98:55:5c:99: ec:86:da:b6:3b:7c:29:c1:27:ca:ef:19:5c:eb:f7: d3:a2:76:1d:f0:78:4b:34:9b:c9:53:5c:bd:62:71: a6:7d:45:80:8c:57:b1:b0:aa:c4:ce:51:dc:ee:69: c3:e9:02:47:21:66:17:0a:b3:1d:68:84:fc:6e:63: 0f:37:23:05:47:08:6f:16:de:4a:3b:c6:e9:97:87: 30:ca:08:4d:08:3d:f8:99:6c:f5:ce:68:eb:05:11: de:e6:26:32:b2:2e:f8:f3:9e:a5:d5:8b:17:6c:f5: 16:68:12:5d:4b:7d:67:4e:32:b7:99:cc:86:c1:04: b7:98:d5:7b:4b:86:50:88:63:c6:bb:2f:76:2e:fb: 5d:cf:28:81:33:c9:55:cf:30:24:a6:74:70:50:83: e7:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:6B:D6:22:5B:2F:F1:12:DB:A0:88:FC:A8:41:1F:6B:1B:EC:B4:CA X509v3 Authority Key Identifier: keyid:FA:50:2D:9A:3D:07:D1:FC:0C:83:2F:96:7F:DF:3E:F8:80:DC:3E:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-lAtmj0H0fwMgy-Wf98--IDcPiM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d5f2ab-0920-4628-85e1-bac442315ff4/1/1-lAtmj0H0fwMgy-Wf98--IDcPiM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:3b:c7:59:cf:1f:1c:df:71:76:84:64:64:5d:73:95:71:66: fb:9f:46:51:53:5d:17:b1:73:fe:c9:a1:2e:7e:74:cb:38:76: 6c:5f:d7:7d:6c:0c:14:f3:55:44:22:cb:bb:b2:bc:1e:d2:53: bf:71:99:52:1b:d6:7b:69:32:b6:9f:e0:98:21:32:41:4f:f1: 54:f6:a5:7b:07:c0:02:30:8b:e8:35:8e:be:9d:cd:18:86:94: 52:75:5a:13:3f:6b:86:45:12:b0:7f:a4:60:f0:38:ba:12:0d: 0e:8c:af:2b:d4:9c:ca:27:8a:95:d7:c4:c4:ac:da:64:81:1c: 76:48:f0:60:09:44:32:93:59:9b:3a:70:1e:65:de:71:55:40: 8a:ef:49:f8:bb:e7:7f:0d:46:84:2b:c6:b8:fd:fa:70:c8:8c: 06:f6:9d:1e:af:68:a5:ee:4b:a4:03:4a:26:71:c7:9b:64:71: 68:7b:e4:7e:9c:eb:82:a0:e0:77:1f:85:f3:71:a8:04:5c:6a: 5c:c5:28:72:9a:76:a3:d9:2b:da:7e:ef:92:43:72:62:97:b9: c1:07:44:0a:fc:0b:8a:a7:d1:61:35:7b:fe:00:4f:52:3f:a6: 06:7e:de:f1:b8:ba:fa:83:86:e3:1d:9a:15:e6:71:ca:45:41: 2f:8e:b7:2e -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIgqQy/H1wvKt4+FGowzqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNTAyZDlhM2QwN2QxZmMwYzgzMmY5NjdmZGYzZWY4ODBk YzNlMjMwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD EygyZjZiZDYyMjViMmZmMTEyZGJhMDg4ZmNhODQxMWY2YjFiZWNiNGNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArytcLE0ttwYeCv/WdE6er8Mp2VZn /gPw3roHT1ZE60kFWTjZ+HyTIRIkk8wmOrwvq1iRbRdtPrUVFDeY4Q4iDqvmt80u Tc0GXwqB+PfanRLkHj3H3lcMNrtm+u++dkLCQq0gEZhVXJnshtq2O3wpwSfK7xlc 6/fTonYd8HhLNJvJU1y9YnGmfUWAjFexsKrEzlHc7mnD6QJHIWYXCrMdaIT8bmMP NyMFRwhvFt5KO8bpl4cwyghNCD34mWz1zmjrBRHe5iYysi74856l1YsXbPUWaBJd S31nTjK3mcyGwQS3mNV7S4ZQiGPGuy92LvtdzyiBM8lVzzAkpnRwUIPnwQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFC9r1iJbL/ES26CI/KhBH2sb7LTKMB8GA1UdIwQY MBaAFPpQLZo9B9H8DIMvln/fPviA3D4jMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1sQXRtajBIMGZ3TWd5LVdmOTgtLUlEY1BpTS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2MvZDVmMmFiLTA5MjAtNDYyOC04NWUx LWJhYzQ0MjMxNWZmNC8xLzEtbEF0bWowSDBmd01neS1XZjk4LS1JRGNQaU0ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzNjL2Q1ZjJhYi0wOTIwLTQ2MjgtODVlMS1iYWM0NDIzMTVm ZjQvMS8xLWxBdG1qMEgwZndNZ3ktV2Y5OC0tSURjUGlNLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARDvH Wc8fHN9xdoRkZF1zlXFm+59GUVNdF7Fz/smhLn50yzh2bF/XfWwMFPNVRCLLu7K8 HtJTv3GZUhvWe2kytp/gmCEyQU/xVPalewfAAjCL6DWOvp3NGIaUUnVaEz9rhkUS sH+kYPA4uhINDoyvK9ScyieKldfExKzaZIEcdkjwYAlEMpNZmzpwHmXecVVAiu9J +Lvnfw1GhCvGuP36cMiMBvadHq9ope5LpANKJnHHm2RxaHvkfpzrgqDgdx+F83Go BFxqXMUocpp2o9kr2n7vkkNyYpe5wQdECvwLiqfRYTV7/gBPUj+mBn7e8bi6+oOG 4x2aFeZxykVBL463Lg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:37 2026 by rpki-client