This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft File: rFjrfGF1DM4zPNACbHfJPL5GXZg.mft (raw, json) Hash identifier: Q7YBQDMc+t9CwE2b8tulQRaMNX6PjqKEz5RDEAP29uM= Subject key identifier: 0F:1B:7A:5F:F5:69:17:7E:A6:4E:71:A7:14:72:5B:85:0B:D7:2B:AB Authority key identifier: AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 Certificate issuer: /CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Certificate serial: 019C4321E9C7FFF9B4EE0D83E8608D631D95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft Manifest number: 0C5F Signing time: Mon 09 Feb 2026 16:00:21 +0000 Manifest this update: Mon 09 Feb 2026 16:00:21 +0000 Manifest next update: Tue 10 Feb 2026 16:00:21 +0000 Files and hashes: 1: d2SprZfdS0SY1x1Wy17T8YC1idA.roa (hash: RB7moJ155dUdkZifnr4mmDfclVM/fofVaHiCzJRd3n4=) 2: rFjrfGF1DM4zPNACbHfJPL5GXZg.crl (hash: 3lkhK0M5GMznWCYUJ1NspwJV3b8p3fhRjXkMtAb9LDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:e9:c7:ff:f9:b4:ee:0d:83:e8:60:8d:63:1d:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac58eb7c61750cce333cd0026c77c93cbe465d98 Validity Not Before: Feb 9 16:00:21 2026 GMT Not After : Feb 10 16:00:21 2026 GMT Subject: CN=0f1b7a5ff569177ea64e71a714725b850bd72bab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5e:63:cb:fc:2a:7c:8c:0e:c4:1b:f6:a5:ed: 94:61:cc:6d:6d:ef:5d:16:17:39:17:de:07:2a:61: 7a:f0:9c:f6:62:76:a7:5e:dc:6e:ac:89:40:34:81: 3d:f8:81:a3:33:ab:29:95:cb:5a:bc:41:25:0b:11: d4:c7:75:54:93:bc:2f:06:d9:9d:97:94:12:5f:20: 12:27:c8:3b:1c:d5:6a:1c:49:75:8c:3b:3f:a4:18: 4e:69:65:67:bc:c1:ae:42:6f:17:f2:d8:19:c0:62: a7:42:4b:83:29:6a:35:2e:24:c9:51:6b:65:04:43: 5f:92:73:38:5e:6d:fa:6a:27:f4:ef:73:36:7d:eb: d4:15:30:47:01:04:db:a1:94:02:b4:a9:f4:94:eb: ae:73:73:68:56:59:80:86:64:da:4f:08:8d:bf:cd: 01:ac:38:5c:b6:df:93:6e:62:67:f5:87:1c:8a:47: ba:8d:93:99:8d:1a:ba:91:c8:25:d0:57:e3:a8:25: 6e:d7:7a:f3:ce:2c:89:d3:c7:49:f1:47:88:8e:13: e4:f8:0f:94:1e:7c:a7:3d:d4:3a:70:02:e9:9a:1a: d6:71:d2:2c:85:62:66:f3:87:9c:c4:62:4b:e4:3c: 80:bc:7f:1e:98:27:06:5f:af:db:46:0c:c4:cd:ea: 74:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:1B:7A:5F:F5:69:17:7E:A6:4E:71:A7:14:72:5B:85:0B:D7:2B:AB X509v3 Authority Key Identifier: keyid:AC:58:EB:7C:61:75:0C:CE:33:3C:D0:02:6C:77:C9:3C:BE:46:5D:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFjrfGF1DM4zPNACbHfJPL5GXZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ebd0c9-7a36-4036-8658-1de00bd8912c/1/rFjrfGF1DM4zPNACbHfJPL5GXZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:86:7f:79:6b:a1:0a:64:5d:b5:b2:3d:23:4f:51:10:32:59: 06:b6:34:5d:b9:82:7a:f0:33:43:ff:5e:58:9e:a0:c3:6d:a3: a5:1f:90:92:fb:71:b3:b6:b9:f3:48:71:83:63:fd:4d:14:26: 30:09:8b:59:3d:5c:ba:b5:8a:64:89:1c:09:32:63:22:f2:f2: 14:3f:a9:cf:90:a1:81:98:d5:52:0c:9e:82:04:37:3c:a0:70: a0:95:60:d0:b9:fb:db:e5:4a:ef:51:88:ce:60:6c:ad:39:6a: 4a:59:5d:98:74:db:f6:8f:55:25:b2:e2:d2:6e:fe:38:5d:b7: 78:68:c3:d5:a1:38:7d:fa:39:2f:80:c2:e2:db:8c:95:5f:9c: 47:93:05:7c:18:75:db:04:7c:20:62:ba:d8:51:6b:86:13:85: 73:c7:de:74:d3:72:9e:33:61:10:fc:bd:12:b6:b3:b2:e3:be: ec:de:59:6a:9f:ca:be:d6:bf:c1:b0:3c:54:45:7b:bd:71:84: bd:0e:4c:f6:28:2d:d6:0e:9c:67:12:0e:d2:b6:b7:4c:78:2c: 11:4c:d3:19:04:63:96:4f:21:55:04:56:2e:df:d7:a7:6e:1c: 44:d8:9c:34:f5:f4:ac:85:fa:8f:f3:2a:1c:ec:9b:1e:34:a1: ec:02:0c:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIenH//m07g2D6GCNYx2VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjNThlYjdjNjE3NTBjY2UzMzNjZDAwMjZjNzdjOTNjYmU0 NjVkOTgwHhcNMjYwMjA5MTYwMDIxWhcNMjYwMjEwMTYwMDIxWjAzMTEwLwYDVQQD EygwZjFiN2E1ZmY1NjkxNzdlYTY0ZTcxYTcxNDcyNWI4NTBiZDcyYmFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15jy/wqfIwOxBv2pe2UYcxtbe9d Fhc5F94HKmF68Jz2YnanXtxurIlANIE9+IGjM6splctavEElCxHUx3VUk7wvBtmd l5QSXyASJ8g7HNVqHEl1jDs/pBhOaWVnvMGuQm8X8tgZwGKnQkuDKWo1LiTJUWtl BENfknM4Xm36aif073M2fevUFTBHAQTboZQCtKn0lOuuc3NoVlmAhmTaTwiNv80B rDhctt+TbmJn9Yccike6jZOZjRq6kcgl0FfjqCVu13rzziyJ08dJ8UeIjhPk+A+U HnynPdQ6cALpmhrWcdIshWJm84ecxGJL5DyAvH8emCcGX6/bRgzEzep0HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8bel/1aRd+pk5xpxRyW4UL1yurMB8GA1UdIwQY MBaAFKxY63xhdQzOMzzQAmx3yTy+Rl2YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgt MWRlMDBiZDg5MTJjLzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9lYmQwYzktN2EzNi00MDM2LTg2NTgtMWRlMDBiZDg5MTJj LzEvckZqcmZHRjFETTR6UE5BQ2JIZkpQTDVHWFpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4Z/eWuh CmRdtbI9I09REDJZBrY0XbmCevAzQ/9eWJ6gw22jpR+Qkvtxs7a580hxg2P9TRQm MAmLWT1curWKZIkcCTJjIvLyFD+pz5ChgZjVUgyeggQ3PKBwoJVg0Ln72+VK71GI zmBsrTlqSlldmHTb9o9VJbLi0m7+OF23eGjD1aE4ffo5L4DC4tuMlV+cR5MFfBh1 2wR8IGK62FFrhhOFc8fedNNynjNhEPy9ErazsuO+7N5Zap/Kvta/wbA8VEV7vXGE vQ5M9igt1g6cZxIO0ra3THgsEUzTGQRjlk8hVQRWLt/Xp24cRNicNPX0rIX6j/Mq HOybHjSh7AIMLQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:49 2026 by rpki-client