This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft File: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft (raw, json) Hash identifier: +mDOtSHTM4ZNeHXb6Wmsi2J3nuLUza9Cyju+ClDyinE= Subject key identifier: EA:9E:BE:C8:8A:C4:47:85:4A:BF:E5:EC:FC:22:D6:32:E5:B7:48:BA Authority key identifier: 17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 Certificate issuer: /CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Certificate serial: 019C44DA3F3DED1E4674E69E1EFF2CD8282D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft Manifest number: 0ACC Signing time: Tue 10 Feb 2026 00:01:19 +0000 Manifest this update: Tue 10 Feb 2026 00:01:19 +0000 Manifest next update: Wed 11 Feb 2026 00:01:19 +0000 Files and hashes: 1: Ec-2-sBBaXW1azB4lY6gRGycP60.roa (hash: 3Nh1xOi9IYnh19IBIvJ/NsERowhJFiSYsZXvECqtcPc=) 2: F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl (hash: 3f5SBRv8ZwFO2+ndyV2HjrdhMw0tbBw/457A7NDdHn8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:3f:3d:ed:1e:46:74:e6:9e:1e:ff:2c:d8:28:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1757277f02ce151d8d86bebf75dad90d9c2d6ff9 Validity Not Before: Feb 10 00:01:19 2026 GMT Not After : Feb 11 00:01:19 2026 GMT Subject: CN=ea9ebec88ac447854abfe5ecfc22d632e5b748ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:a9:3d:a6:b9:d9:54:8e:7d:7b:99:4a:4e: 36:f0:4b:cd:09:9c:0d:01:bc:8d:3f:b5:9d:a9:1d: 34:25:4c:0b:a5:e3:47:b4:07:e0:e0:a5:7c:55:4e: 88:95:83:cb:92:3b:5a:08:b6:f2:dc:2c:64:67:ca: ef:00:b2:a6:27:16:77:b1:50:da:08:e5:16:2e:a1: 26:84:63:23:65:b3:b3:40:96:4e:af:8c:8d:62:50: e9:49:93:9d:66:71:aa:cb:60:cc:61:fb:41:cb:72: f1:bf:f6:13:da:24:65:9e:f9:ea:9e:e1:80:93:e5: 92:2b:32:a4:d2:23:44:4f:2c:8f:79:e9:22:70:20: 04:23:cb:07:14:65:ce:95:b6:d0:95:34:99:8b:aa: 8c:4f:e0:fa:24:be:2a:35:1e:f5:b3:87:30:4d:a5: da:3f:76:53:06:db:07:96:6d:db:ea:e5:bf:4f:b6: f4:c2:79:dd:b4:91:55:cc:7e:ee:28:e5:42:52:8f: a5:81:29:44:1b:38:27:bd:42:af:19:6f:8e:55:58: 90:02:76:26:a4:64:fb:bc:1a:24:10:8c:65:86:47: f2:89:b0:bc:17:c8:22:9d:22:8b:88:b1:1e:ea:d9: c0:a9:8c:85:39:0d:be:eb:d7:f1:d5:2a:2e:db:67: 52:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9E:BE:C8:8A:C4:47:85:4A:BF:E5:EC:FC:22:D6:32:E5:B7:48:BA X509v3 Authority Key Identifier: keyid:17:57:27:7F:02:CE:15:1D:8D:86:BE:BF:75:DA:D9:0D:9C:2D:6F:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/dc352b-1b3b-45a1-adcc-22750cfa6ebf/1/F1cnfwLOFR2Nhr6_ddrZDZwtb_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2b:50:ea:37:2a:31:ba:11:9b:59:d5:78:ce:73:cd:75:8d: 1c:b1:cd:0d:3f:b9:23:9d:16:2c:39:6a:e2:8e:c0:b1:cb:0e: ef:f0:b2:fe:0f:7b:b2:4e:22:e8:c8:4d:aa:f4:6b:06:66:7e: 82:67:73:31:b5:e2:1c:84:23:1c:a3:37:11:f3:e6:8b:43:ac: 2f:7c:77:9d:77:67:86:6f:02:84:d3:de:ce:fe:a0:97:e0:84: 69:f7:e8:55:24:7b:2c:54:84:5d:39:0a:54:cf:1c:47:3c:06: 7c:30:3e:89:fb:8a:7d:a3:bb:0c:b4:90:a8:4d:1f:c8:47:ce: d6:fe:b5:8b:ef:57:39:2f:54:db:06:88:0f:0f:fb:12:04:15: 20:85:73:4b:36:a4:e5:8b:66:b5:a4:a5:08:17:28:b6:78:dd: aa:65:85:fc:b7:1c:b7:e0:ac:4f:54:14:59:36:4d:eb:e7:23: 91:4e:d7:be:28:36:f5:fb:c4:da:9f:ab:71:a7:23:95:ec:f1: a4:72:d3:11:8e:c4:d4:da:76:37:d1:22:e4:79:26:8e:db:bd: 1f:9d:5f:51:cb:09:f2:b2:9d:9c:93:20:08:c3:24:20:6e:66: 82:44:24:32:50:ad:3c:a6:eb:5e:85:78:ea:2e:d2:aa:f4:ac: a2:94:45:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2j897R5GdOaeHv8s2CgtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NTcyNzdmMDJjZTE1MWQ4ZDg2YmViZjc1ZGFkOTBkOWMy ZDZmZjkwHhcNMjYwMjEwMDAwMTE5WhcNMjYwMjExMDAwMTE5WjAzMTEwLwYDVQQD EyhlYTllYmVjODhhYzQ0Nzg1NGFiZmU1ZWNmYzIyZDYzMmU1Yjc0OGJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUepPaa52VSOfXuZSk428EvNCZwN AbyNP7WdqR00JUwLpeNHtAfg4KV8VU6IlYPLkjtaCLby3CxkZ8rvALKmJxZ3sVDa COUWLqEmhGMjZbOzQJZOr4yNYlDpSZOdZnGqy2DMYftBy3Lxv/YT2iRlnvnqnuGA k+WSKzKk0iNETyyPeekicCAEI8sHFGXOlbbQlTSZi6qMT+D6JL4qNR71s4cwTaXa P3ZTBtsHlm3b6uW/T7b0wnndtJFVzH7uKOVCUo+lgSlEGzgnvUKvGW+OVViQAnYm pGT7vBokEIxlhkfyibC8F8ginSKLiLEe6tnAqYyFOQ2+69fx1Sou22dSgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOqevsiKxEeFSr/l7Pwi1jLlt0i6MB8GA1UdIwQY MBaAFBdXJ38CzhUdjYa+v3Xa2Q2cLW/5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2Mt MjI3NTBjZmE2ZWJmLzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi9kYzM1MmItMWIzYi00NWExLWFkY2MtMjI3NTBjZmE2ZWJm LzEvRjFjbmZ3TE9GUjJOaHI2X2RkclpEWnd0Yl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlytQ6jcq MboRm1nVeM5zzXWNHLHNDT+5I50WLDlq4o7AscsO7/Cy/g97sk4i6MhNqvRrBmZ+ gmdzMbXiHIQjHKM3EfPmi0OsL3x3nXdnhm8ChNPezv6gl+CEaffoVSR7LFSEXTkK VM8cRzwGfDA+ifuKfaO7DLSQqE0fyEfO1v61i+9XOS9U2waIDw/7EgQVIIVzSzak 5YtmtaSlCBcotnjdqmWF/Lcct+CsT1QUWTZN6+cjkU7Xvig29fvE2p+rcacjlezx pHLTEY7E1Np2N9Ei5Hkmjtu9H51fUcsJ8rKdnJMgCMMkIG5mgkQkMlCtPKbrXoV4 6i7SqvSsopRFEQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:49 2026 by rpki-client