This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft File: 1-IesflsonOaBskdMOPeVLMqcD7g.mft (raw, json) Hash identifier: t5OjWqnc1WVVgH00GzGYC2yJprdYcjqrhOVACyzTZic= Subject key identifier: 35:53:18:21:0E:88:C4:68:E5:1A:C7:EB:49:3D:C4:12:BE:C6:B9:63 Authority key identifier: F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 Certificate issuer: /CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Certificate serial: 019C4358F01ADB697612D4F2CE3CB67AB4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft Manifest number: 02F2 Signing time: Mon 09 Feb 2026 17:00:27 +0000 Manifest this update: Mon 09 Feb 2026 17:00:27 +0000 Manifest next update: Tue 10 Feb 2026 17:00:27 +0000 Files and hashes: 1: 1-IesflsonOaBskdMOPeVLMqcD7g.crl (hash: DTr5eo9/Ddto1Cw1SFMhrFGfjsAvJ6p85EYX2d3qAkA=) 2: 7xuiCxAV9pPv_Ekyw3-_YLNS1uA.roa (hash: MCVYToIwnCC1cCLBpzOqMu2Pvd8YhgVDSgwS714t8N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:f0:1a:db:69:76:12:d4:f2:ce:3c:b6:7a:b4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f887ac7e5b289ce681b2474c38f7952cca9c0fb8 Validity Not Before: Feb 9 17:00:27 2026 GMT Not After : Feb 10 17:00:27 2026 GMT Subject: CN=355318210e88c468e51ac7eb493dc412bec6b963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:30:61:ea:cb:95:7e:dd:40:b5:14:9e:3d:01: ad:0f:7b:85:e2:5d:40:6a:eb:a3:e0:da:21:20:ef: 60:5a:e0:ed:1b:66:d8:a5:03:e0:02:55:4b:51:ad: 13:4e:23:fb:98:73:4e:8d:f3:dd:bf:f9:5b:cf:80: 3a:02:0d:4d:7f:7d:f5:82:0b:f3:a0:a3:df:9a:07: cb:86:ba:93:2f:65:9c:74:ab:14:02:9f:a3:5b:98: 88:70:80:e7:9b:03:f6:d0:fd:2f:ec:d5:0c:0a:79: e1:85:fe:b7:71:e5:eb:d3:92:80:46:53:12:3a:45: a1:1c:3a:0a:e8:6b:52:ae:37:4b:5e:f3:fa:15:9d: 0e:c7:b1:14:48:71:e7:9c:ec:f4:c2:a0:de:97:4f: 9c:3b:8f:8e:10:4a:78:f0:d9:50:7d:ba:fa:ef:bf: 27:f5:b2:e0:21:18:d9:93:da:a1:e4:df:f6:7c:50: 58:24:cf:12:b0:18:df:76:aa:df:7b:34:30:a7:e5: b3:5b:1f:ee:be:fb:00:2d:5f:a2:71:33:06:eb:58: f5:fa:7b:fe:f7:2e:db:d4:01:ec:af:94:71:52:e2: c5:bf:04:09:f3:7f:7e:dd:c7:51:ec:8c:39:f2:cd: c3:de:5d:e4:f5:35:a6:5f:12:9c:be:9f:40:04:e4: 0a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:53:18:21:0E:88:C4:68:E5:1A:C7:EB:49:3D:C4:12:BE:C6:B9:63 X509v3 Authority Key Identifier: keyid:F8:87:AC:7E:5B:28:9C:E6:81:B2:47:4C:38:F7:95:2C:CA:9C:0F:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IesflsonOaBskdMOPeVLMqcD7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/cc3ad4-ff1a-4497-82da-8d51db65db66/1/1-IesflsonOaBskdMOPeVLMqcD7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:1e:a0:ee:5b:b8:7b:71:56:52:13:9c:75:aa:1b:bd:48:f4: f6:1c:8e:6c:4a:a9:18:2e:51:e5:64:00:7c:09:7c:ba:85:8b: e7:8a:a6:33:a9:6c:2b:09:e0:9c:24:5f:74:44:46:d0:04:f4: 3d:d5:9a:40:6f:a7:bd:6c:24:58:b6:91:25:22:a4:b3:13:bc: 2d:5c:ad:35:dd:b2:69:8e:cc:0c:fb:ad:38:fd:c6:97:70:3b: be:f7:ab:84:66:c2:05:f0:36:24:17:4b:2d:55:82:34:6f:cc: 21:87:0b:a1:93:4c:d8:00:83:90:3a:75:26:c9:d1:27:6f:02: 27:71:27:97:7b:5a:ee:96:3b:eb:c8:53:5b:16:6c:48:3a:15: 38:00:64:d6:b6:3a:61:9a:71:c7:3e:f6:ad:b7:88:02:97:43: 6b:a2:1d:ba:50:5d:00:10:57:6e:95:86:6c:c5:c0:fd:bc:e2: 76:9e:aa:88:51:64:cf:6d:4b:94:58:7f:8c:d5:c6:c9:96:d1: 3e:fb:7c:d0:74:7a:5c:e0:99:54:fe:fb:28:21:68:9d:2c:b7: 1f:0f:f5:c7:64:41:1b:1e:f7:85:c2:8b:d6:2b:95:7f:0b:96: 46:a6:26:dd:c1:3b:48:9a:4d:c0:de:b8:ad:1b:ab:99:24:ec: 7e:8a:87:f2 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDWPAa22l2EtTyzjy2erSzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4ODdhYzdlNWIyODljZTY4MWIyNDc0YzM4Zjc5NTJjY2E5 YzBmYjgwHhcNMjYwMjA5MTcwMDI3WhcNMjYwMjEwMTcwMDI3WjAzMTEwLwYDVQQD EygzNTUzMTgyMTBlODhjNDY4ZTUxYWM3ZWI0OTNkYzQxMmJlYzZiOTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDBh6suVft1AtRSePQGtD3uF4l1A auuj4NohIO9gWuDtG2bYpQPgAlVLUa0TTiP7mHNOjfPdv/lbz4A6Ag1Nf331ggvz oKPfmgfLhrqTL2WcdKsUAp+jW5iIcIDnmwP20P0v7NUMCnnhhf63ceXr05KARlMS OkWhHDoK6GtSrjdLXvP6FZ0Ox7EUSHHnnOz0wqDel0+cO4+OEEp48NlQfbr6778n 9bLgIRjZk9qh5N/2fFBYJM8SsBjfdqrfezQwp+WzWx/uvvsALV+icTMG61j1+nv+ 9y7b1AHsr5RxUuLFvwQJ839+3cdR7Iw58s3D3l3k9TWmXxKcvp9ABOQK+wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDVTGCEOiMRo5RrH60k9xBK+xrljMB8GA1UdIwQY MBaAFPiHrH5bKJzmgbJHTDj3lSzKnA+4MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1JZXNmbHNvbk9hQnNrZE1PUGVWTE1xY0Q3Zy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDkvY2MzYWQ0LWZmMWEtNDQ5Ny04MmRh LThkNTFkYjY1ZGI2Ni8xLzEtSWVzZmxzb25PYUJza2RNT1BlVkxNcWNEN2cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ5L2NjM2FkNC1mZjFhLTQ0OTctODJkYS04ZDUxZGI2NWRi NjYvMS8xLUllc2Zsc29uT2FCc2tkTU9QZVZMTXFjRDdnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuh6g 7lu4e3FWUhOcdaobvUj09hyObEqpGC5R5WQAfAl8uoWL54qmM6lsKwngnCRfdERG 0AT0PdWaQG+nvWwkWLaRJSKksxO8LVytNd2yaY7MDPutOP3Gl3A7vverhGbCBfA2 JBdLLVWCNG/MIYcLoZNM2ACDkDp1JsnRJ28CJ3Enl3ta7pY768hTWxZsSDoVOABk 1rY6YZpxxz72rbeIApdDa6IdulBdABBXbpWGbMXA/bzidp6qiFFkz21LlFh/jNXG yZbRPvt80HR6XOCZVP77KCFonSy3Hw/1x2RBGx73hcKL1iuVfwuWRqYm3cE7SJpN wN64rRurmSTsfoqH8g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:42 2026 by rpki-client