This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft File: fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft (raw, json) Hash identifier: NUp+rAkVnfiQ8onM2fU2STz863e159ZDjR56wVbhA7c= Subject key identifier: 84:01:AD:EA:A1:02:1A:BA:AA:FE:83:EF:58:21:CD:A7:40:FE:16:8C Authority key identifier: 7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8 Certificate issuer: /CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8 Certificate serial: 019C41A1648F4914695C53CEB29B3B2E8ED0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 09:00:21 +0000 Manifest this update: Mon 09 Feb 2026 09:00:21 +0000 Manifest next update: Tue 10 Feb 2026 09:00:21 +0000 Files and hashes: 1: fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl (hash: XP4YlkiLW2few6cPYdk8VXCVSU0OnUGVVaAHtwdL4l8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:64:8f:49:14:69:5c:53:ce:b2:9b:3b:2e:8e:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec0a1e50d1c008e1ffad5f2f75798294d5c4ed8 Validity Not Before: Feb 9 09:00:21 2026 GMT Not After : Feb 10 09:00:21 2026 GMT Subject: CN=8401adeaa1021abaaafe83ef5821cda740fe168c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:56:29:08:15:cf:38:ad:a7:91:62:bf:a2:20: 50:4c:e2:c6:71:34:dd:a9:2a:18:58:bc:94:9f:3b: e7:10:53:a6:43:e5:75:d3:13:fd:6c:a3:cd:62:8c: 6e:93:c4:3e:8b:05:68:e1:f1:c5:bd:cd:87:eb:75: 85:b9:f3:c2:d5:d5:48:3f:cf:2f:39:9e:df:07:23: ff:16:84:6a:4d:70:28:a1:77:6b:c5:7a:29:21:bd: ec:ba:52:7d:1f:33:e4:ab:53:d2:c8:6d:27:2b:30: a4:ed:dc:d2:3d:17:71:2e:bf:07:2a:77:e8:56:9e: 4b:0a:3a:61:55:e5:7f:5d:3b:cb:9b:5d:fc:d1:c9: fe:78:1e:35:97:94:29:27:5f:4c:d4:09:14:de:45: d9:52:17:1c:9c:75:29:64:63:df:d1:53:95:03:c0: 6d:d7:8f:f9:4d:76:b4:f8:3d:d0:42:38:03:f3:77: 2b:26:c6:dd:b9:76:ae:1e:7e:26:3d:1b:f7:cd:dc: c8:50:2e:98:96:9a:54:c7:03:50:3c:48:63:b1:24: 36:8a:b7:76:fb:4c:cb:47:cc:a4:77:d1:5e:1b:71: 03:55:20:33:fd:3a:f5:7d:6a:7d:a8:15:5a:43:37: 9f:cb:a7:44:21:f0:0e:55:dd:f1:11:38:43:72:61: e3:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:01:AD:EA:A1:02:1A:BA:AA:FE:83:EF:58:21:CD:A7:40:FE:16:8C X509v3 Authority Key Identifier: keyid:7E:C0:A1:E5:0D:1C:00:8E:1F:FA:D5:F2:F7:57:98:29:4D:5C:4E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsCh5Q0cAI4f-tXy91eYKU1cTtg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/f5d42d-d607-45f9-8099-372ff666be2e/1/fsCh5Q0cAI4f-tXy91eYKU1cTtg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:de:27:2b:fb:4a:ce:df:a2:fe:a6:8d:4f:b1:17:31:dc:b4: ce:c5:4e:a6:da:45:87:85:36:12:4f:e4:f9:2c:39:16:d5:35: 87:fb:02:72:5d:49:ca:e2:cb:9f:7d:d9:90:3d:9c:85:d3:4d: 24:56:81:b7:d1:93:65:e7:00:34:d1:d8:e3:93:e2:f3:19:05: 44:a8:2d:7a:7f:17:4e:9b:38:1b:e4:ed:07:55:24:c2:80:f7: 1a:6b:96:42:99:54:2c:cd:99:1d:02:24:08:4c:bf:cc:ff:1a: 1f:1d:e4:f1:0e:fa:3d:5e:61:9a:f8:68:8f:cc:b6:b6:20:d7: 59:4f:d8:89:41:e5:45:b0:f8:b8:c5:2e:05:a5:c0:2f:d2:43: ef:48:af:04:24:f5:2f:50:ee:0c:39:06:6d:8d:a2:f4:7a:2b: 6f:23:f1:f7:8e:db:fa:e0:23:92:ed:d4:06:18:ad:f5:5d:3d: 13:a8:b1:31:e2:05:d0:39:51:85:4a:6a:21:e0:eb:7d:c1:d3: 3b:8d:b0:3d:fc:e9:30:48:74:66:02:9a:4d:ad:2e:fb:24:93: 63:2e:33:ba:d6:86:1e:38:d8:7a:fc:4b:8c:de:c9:8e:ad:d7: c4:4f:d2:34:ae:23:41:17:22:c4:02:43:7e:8d:19:8e:bb:ba: 6d:6a:84:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWSPSRRpXFPOsps7Lo7QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzBhMWU1MGQxYzAwOGUxZmZhZDVmMmY3NTc5ODI5NGQ1 YzRlZDgwHhcNMjYwMjA5MDkwMDIxWhcNMjYwMjEwMDkwMDIxWjAzMTEwLwYDVQQD Eyg4NDAxYWRlYWExMDIxYWJhYWFmZTgzZWY1ODIxY2RhNzQwZmUxNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0lYpCBXPOK2nkWK/oiBQTOLGcTTd qSoYWLyUnzvnEFOmQ+V10xP9bKPNYoxuk8Q+iwVo4fHFvc2H63WFufPC1dVIP88v OZ7fByP/FoRqTXAooXdrxXopIb3sulJ9HzPkq1PSyG0nKzCk7dzSPRdxLr8HKnfo Vp5LCjphVeV/XTvLm1380cn+eB41l5QpJ19M1AkU3kXZUhccnHUpZGPf0VOVA8Bt 14/5TXa0+D3QQjgD83crJsbduXauHn4mPRv3zdzIUC6YlppUxwNQPEhjsSQ2ird2 +0zLR8ykd9FeG3EDVSAz/Tr1fWp9qBVaQzefy6dEIfAOVd3xEThDcmHjwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQBreqhAhq6qv6D71ghzadA/haMMB8GA1UdIwQY MBaAFH7AoeUNHACOH/rV8vdXmClNXE7YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTkt MzcyZmY2NjZiZTJlLzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9mNWQ0MmQtZDYwNy00NWY5LTgwOTktMzcyZmY2NjZiZTJl LzEvZnNDaDVRMGNBSTRmLXRYeTkxZVlLVTFjVHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnd4nK/tK zt+i/qaNT7EXMdy0zsVOptpFh4U2Ek/k+Sw5FtU1h/sCcl1JyuLLn33ZkD2chdNN JFaBt9GTZecANNHY45Pi8xkFRKgten8XTps4G+TtB1UkwoD3GmuWQplULM2ZHQIk CEy/zP8aHx3k8Q76PV5hmvhoj8y2tiDXWU/YiUHlRbD4uMUuBaXAL9JD70ivBCT1 L1DuDDkGbY2i9HorbyPx947b+uAjku3UBhit9V09E6ixMeIF0DlRhUpqIeDrfcHT O42wPfzpMEh0ZgKaTa0u+ySTYy4zutaGHjjYevxLjN7Jjq3XxE/SNK4jQRcixAJD fo0Zjru6bWqE+A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:00 2026 by rpki-client