This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft File: D1IdJpUmx67jjk-yRUsvCH9p_rc.mft (raw, json) Hash identifier: /Tohva+tzutlaXSvExWPdVB9ypP4PRwxQmQAXm1af38= Subject key identifier: 03:3A:FC:7E:46:17:29:81:9F:12:24:AF:FA:76:2F:A8:C2:2D:70:EC Authority key identifier: 0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 Certificate issuer: /CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Certificate serial: 019C42B456645224FEC98521DD61389D048D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft Manifest number: 07FA Signing time: Mon 09 Feb 2026 14:00:40 +0000 Manifest this update: Mon 09 Feb 2026 14:00:40 +0000 Manifest next update: Tue 10 Feb 2026 14:00:40 +0000 Files and hashes: 1: 79yWfe1C0oJyorvH1Ndj5_ksS2E.roa (hash: VEEzicoUwIVdfyy7u/W5/zZAs5snmAOXbsnXFY4gVR0=) 2: D1IdJpUmx67jjk-yRUsvCH9p_rc.crl (hash: I7GEr3DmaCiHxvesW5gYuc2vCkCLIuOLAkd002PPJ0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:56:64:52:24:fe:c9:85:21:dd:61:38:9d:04:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f521d269526c7aee38e4fb2454b2f087f69feb7 Validity Not Before: Feb 9 14:00:40 2026 GMT Not After : Feb 10 14:00:40 2026 GMT Subject: CN=033afc7e461729819f1224affa762fa8c22d70ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5c:a6:84:44:95:e5:7e:07:e5:8d:c9:88:59: 05:83:05:4b:36:63:52:54:4f:de:a3:6d:ea:53:35: 7c:da:e3:59:f5:86:b2:62:1d:fa:1b:80:7d:cd:0f: 3f:1d:e1:df:da:32:7e:66:d6:ca:fa:31:3c:20:0a: cb:5f:35:0a:32:50:6a:50:00:72:b8:e9:85:46:10: ca:c0:eb:42:94:3b:5a:25:1d:0e:7f:88:9e:a7:ff: 8c:86:f4:95:f2:20:02:ee:81:4b:5e:77:ca:53:b4: d6:76:3b:77:24:3d:a5:17:05:0d:ff:5a:ec:55:08: 84:97:40:11:57:66:77:53:02:40:21:cd:de:f9:67: f8:fb:9b:fd:10:8e:b6:33:de:48:40:3f:be:16:8d: 0e:cc:4e:44:70:d0:43:20:40:e0:c8:b6:7d:9c:93: 2d:21:41:ec:bb:0c:b6:ac:0e:88:b1:17:80:ab:62: a6:90:dc:f3:9d:b7:30:a9:24:a6:b8:9f:0c:fb:71: 86:db:c6:64:5d:65:f1:91:5b:46:76:8f:fe:e0:1d: a7:43:5b:f8:26:26:5a:83:d7:35:b2:88:ee:92:5e: 75:99:34:83:a7:98:21:0a:01:aa:08:6d:50:ec:81: b5:a8:1f:81:4f:e4:6b:ef:24:d9:a3:c4:fa:3b:8d: 8e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3A:FC:7E:46:17:29:81:9F:12:24:AF:FA:76:2F:A8:C2:2D:70:EC X509v3 Authority Key Identifier: keyid:0F:52:1D:26:95:26:C7:AE:E3:8E:4F:B2:45:4B:2F:08:7F:69:FE:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1IdJpUmx67jjk-yRUsvCH9p_rc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/307bff-1eb1-4701-ac6b-c1eb0110bd3a/1/D1IdJpUmx67jjk-yRUsvCH9p_rc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:32:82:79:a9:8c:b9:98:49:7e:3e:a9:6d:d6:2e:b5:f5:77: 4c:27:a1:84:3a:6a:67:75:7b:2c:8b:3d:a1:84:31:2c:c5:2c: 3d:f3:ed:4d:ea:44:59:02:cf:67:b2:83:e1:2b:8b:b8:3c:fc: e6:2f:88:df:e5:7e:1e:c9:15:0a:81:ae:46:7d:28:08:81:5d: 8a:f7:8e:9a:78:88:b5:69:ac:f9:40:aa:5f:4d:20:19:73:65: 3e:89:86:dc:26:b7:b5:e1:6f:08:f3:24:6d:85:40:de:36:ce: cf:20:4c:b6:7b:29:78:65:4a:46:d4:43:68:76:1d:11:7b:d0: f6:05:2b:ef:f6:df:8b:5a:47:86:0b:17:b7:0e:85:4b:f3:07: 75:ef:31:39:f1:58:0e:15:7b:6d:b5:87:f6:7c:c0:d5:5f:3c: bd:cb:12:c3:a7:44:d3:a0:3f:7e:22:f7:d7:42:f0:0d:4f:3b: 4d:51:f2:3b:fe:30:07:89:4e:8f:6a:91:18:ac:f0:1c:43:e7: 54:a0:fb:00:5f:c0:f7:60:02:b8:07:7a:8d:2b:c0:5d:2a:2d: 8e:a8:4e:2a:8d:32:c0:71:fb:f3:67:d1:27:a0:74:ba:51:13: 71:c5:de:32:e4:05:c7:9d:1d:bf:20:68:76:8f:5e:2c:00:d9: 7b:bc:db:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFZkUiT+yYUh3WE4nQSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTIxZDI2OTUyNmM3YWVlMzhlNGZiMjQ1NGIyZjA4N2Y2 OWZlYjcwHhcNMjYwMjA5MTQwMDQwWhcNMjYwMjEwMTQwMDQwWjAzMTEwLwYDVQQD EygwMzNhZmM3ZTQ2MTcyOTgxOWYxMjI0YWZmYTc2MmZhOGMyMmQ3MGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1ymhESV5X4H5Y3JiFkFgwVLNmNS VE/eo23qUzV82uNZ9YayYh36G4B9zQ8/HeHf2jJ+ZtbK+jE8IArLXzUKMlBqUABy uOmFRhDKwOtClDtaJR0Of4iep/+MhvSV8iAC7oFLXnfKU7TWdjt3JD2lFwUN/1rs VQiEl0ARV2Z3UwJAIc3e+Wf4+5v9EI62M95IQD++Fo0OzE5EcNBDIEDgyLZ9nJMt IUHsuwy2rA6IsReAq2KmkNzznbcwqSSmuJ8M+3GG28ZkXWXxkVtGdo/+4B2nQ1v4 JiZag9c1sojukl51mTSDp5ghCgGqCG1Q7IG1qB+BT+Rr7yTZo8T6O42OlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM6/H5GFymBnxIkr/p2L6jCLXDsMB8GA1UdIwQY MBaAFA9SHSaVJseu445PskVLLwh/af63MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmIt YzFlYjAxMTBiZDNhLzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8zMDdiZmYtMWViMS00NzAxLWFjNmItYzFlYjAxMTBiZDNh LzEvRDFJZEpwVW14NjdqamsteVJVc3ZDSDlwX3JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASjKCeamM uZhJfj6pbdYutfV3TCehhDpqZ3V7LIs9oYQxLMUsPfPtTepEWQLPZ7KD4SuLuDz8 5i+I3+V+HskVCoGuRn0oCIFdiveOmniItWms+UCqX00gGXNlPomG3Ca3teFvCPMk bYVA3jbOzyBMtnspeGVKRtRDaHYdEXvQ9gUr7/bfi1pHhgsXtw6FS/MHde8xOfFY DhV7bbWH9nzA1V88vcsSw6dE06A/fiL310LwDU87TVHyO/4wB4lOj2qRGKzwHEPn VKD7AF/A92ACuAd6jSvAXSotjqhOKo0ywHH782fRJ6B0ulETccXeMuQFx50dvyBo do9eLADZe7zbsg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:24 2026 by rpki-client