This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft File: Frtbm9zrvdkzgc878jtIVFE1b58.mft (raw, json) Hash identifier: G10sYX1lqTUs4USAMrOwbAuBTZJw6fVJHqp2VkQ/TWE= Subject key identifier: B1:EB:44:90:D6:94:11:0A:1C:0B:DF:3C:17:A1:A3:D8:4D:24:3A:12 Authority key identifier: 16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F Certificate issuer: /CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f Certificate serial: 019C432255C8ACFBB2623CA3459FD5B138CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: Frtbm9zrvdkzgc878jtIVFE1b58.crl (hash: 9Qq1Dq/a2fes+zINXdFfWQWN4ApWpwDmXH7DSrLWNbQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:55:c8:ac:fb:b2:62:3c:a3:45:9f:d5:b1:38:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16bb5b9bdcebbdd93381cf3bf23b485451356f9f Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=b1eb4490d694110a1c0bdf3c17a1a3d84d243a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:f8:be:21:fc:6e:6e:7b:62:ce:75:51:bc: 07:3b:9e:ce:cb:2e:af:84:31:2a:e0:f1:e4:70:ef: b2:01:86:9e:0d:07:a1:89:b3:87:32:ff:77:d0:9c: 9a:e9:1c:df:db:7f:1d:00:c7:70:b8:e8:55:8a:1f: 6b:29:ab:b6:c5:50:23:6e:f0:1d:cd:76:5e:8f:38: dd:8e:15:0a:dd:ce:3f:92:91:3a:57:8a:2e:83:fc: 47:a6:f6:1d:ba:d4:2a:b0:d1:9e:2e:8d:e4:02:13: f1:0c:43:0a:ad:73:04:ba:50:29:c7:15:50:03:ed: 17:1e:41:64:c2:19:60:be:39:b4:b1:2f:63:dc:f5: da:5a:f1:10:75:eb:ae:4c:7e:1c:b6:5c:91:54:c2: ca:06:76:61:f3:9d:38:51:60:3a:a4:9f:30:9f:78: 46:53:e5:14:d9:29:44:d2:45:b7:d6:9d:a7:d6:02: 6f:6b:55:c6:5c:12:50:53:2e:75:00:4e:b2:b9:2a: ef:f7:01:c0:45:63:01:4e:d4:c6:90:6d:11:c5:bb: 7e:64:f2:4f:5c:99:63:8b:d5:2c:92:f9:dc:3f:dd: 31:3e:f6:ed:a1:59:b4:be:b6:c4:ef:20:b8:04:1d: ab:00:d6:cd:a2:55:86:27:b3:f1:c8:c8:d3:43:fb: 73:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:EB:44:90:D6:94:11:0A:1C:0B:DF:3C:17:A1:A3:D8:4D:24:3A:12 X509v3 Authority Key Identifier: keyid:16:BB:5B:9B:DC:EB:BD:D9:33:81:CF:3B:F2:3B:48:54:51:35:6F:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Frtbm9zrvdkzgc878jtIVFE1b58.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/d75a9c-7cb9-4527-aaa1-89e27078b0fe/1/Frtbm9zrvdkzgc878jtIVFE1b58.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c9:c9:92:6d:8e:fb:43:f3:59:44:e8:9d:31:3a:67:54:91: e1:94:04:73:04:75:93:41:4d:74:fe:dd:1f:ae:6a:d2:35:4c: 10:62:9a:25:e4:20:72:89:e3:da:35:5c:76:c6:4d:ae:ed:bb: a1:7a:b5:4e:94:a5:bf:84:c3:46:3b:18:52:49:4a:68:dc:d0: f0:b7:7f:08:a2:5f:89:c2:13:97:92:5b:5f:d3:cb:67:bb:6b: 48:10:11:d8:b3:66:af:59:bc:44:35:7d:d7:25:44:45:da:c4: ab:42:b9:2f:84:a0:c1:6c:30:0c:44:c8:93:b0:c4:a9:ac:6a: 2b:f7:16:8f:9d:9b:9b:5e:5f:b4:2d:80:46:70:26:08:a8:65: 18:d9:a9:80:13:5d:c1:95:a4:82:5c:61:c9:67:3f:4d:20:2f: 97:3e:62:14:f0:23:27:5f:6b:f8:4c:c8:a8:18:17:3f:a9:b2: df:17:87:4f:e8:13:37:ac:b8:7e:3d:66:f5:54:7f:30:ff:d8: a5:d2:02:1a:ee:69:aa:e8:1c:44:cf:a0:47:6b:4a:e8:66:cb: 6f:f0:38:d7:17:d7:80:54:49:c0:83:43:fe:8b:c2:43:b4:33: 50:a2:7e:06:ed:cb:b3:77:20:1c:56:f8:93:8e:22:8e:84:be: 27:d2:9e:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlXIrPuyYjyjRZ/VsTjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2YmI1YjliZGNlYmJkZDkzMzgxY2YzYmYyM2I0ODU0NTEz NTZmOWYwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD EyhiMWViNDQ5MGQ2OTQxMTBhMWMwYmRmM2MxN2ExYTNkODRkMjQzYTEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMz4viH8bm57Ys51UbwHO57Oyy6v hDEq4PHkcO+yAYaeDQehibOHMv930Jya6Rzf238dAMdwuOhVih9rKau2xVAjbvAd zXZejzjdjhUK3c4/kpE6V4oug/xHpvYdutQqsNGeLo3kAhPxDEMKrXMEulApxxVQ A+0XHkFkwhlgvjm0sS9j3PXaWvEQdeuuTH4ctlyRVMLKBnZh8504UWA6pJ8wn3hG U+UU2SlE0kW31p2n1gJva1XGXBJQUy51AE6yuSrv9wHARWMBTtTGkG0Rxbt+ZPJP XJlji9UskvncP90xPvbtoVm0vrbE7yC4BB2rANbNolWGJ7PxyMjTQ/tzSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLHrRJDWlBEKHAvfPBeho9hNJDoSMB8GA1UdIwQY MBaAFBa7W5vc673ZM4HPO/I7SFRRNW+fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEt ODllMjcwNzhiMGZlLzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NS9kNzVhOWMtN2NiOS00NTI3LWFhYTEtODllMjcwNzhiMGZl LzEvRnJ0Ym05enJ2ZGt6Z2M4NzhqdElWRkUxYjU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHMnJkm2O +0PzWUTonTE6Z1SR4ZQEcwR1k0FNdP7dH65q0jVMEGKaJeQgconj2jVcdsZNru27 oXq1TpSlv4TDRjsYUklKaNzQ8Ld/CKJficITl5JbX9PLZ7trSBAR2LNmr1m8RDV9 1yVERdrEq0K5L4SgwWwwDETIk7DEqaxqK/cWj52bm15ftC2ARnAmCKhlGNmpgBNd wZWkglxhyWc/TSAvlz5iFPAjJ19r+EzIqBgXP6my3xeHT+gTN6y4fj1m9VR/MP/Y pdICGu5pqugcRM+gR2tK6GbLb/A41xfXgFRJwIND/ovCQ7QzUKJ+Bu3Ls3cgHFb4 k44ijoS+J9Kexg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:43 2026 by rpki-client