This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft File: fdUdwQKkl1GOFgkeZegFwkOO8ls.mft (raw, json) Hash identifier: A0qQdyDMH2b6jDKK5KRZWVLGdThFOAP/C6CjOzbXWoA= Subject key identifier: FF:FD:65:A1:0A:45:8E:24:56:2F:E8:8C:41:F8:32:18:3E:23:C6:EB Authority key identifier: 7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B Certificate issuer: /CN=7dd51dc102a497518e16091e65e805c2438ef25b Certificate serial: 019C1E03A6638E783BF4EDE291C6DFF3721F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft Manifest number: 090F Signing time: Mon 02 Feb 2026 11:01:21 +0000 Manifest this update: Mon 02 Feb 2026 11:01:21 +0000 Manifest next update: Tue 03 Feb 2026 11:01:21 +0000 Files and hashes: 1: Wx2W2x44SbNMpet_nxHfcd54RRg.roa (hash: RaqqpE5anacxSOoNS8mABkC5o0iVF+x65+b349Ql+4w=) 2: fdUdwQKkl1GOFgkeZegFwkOO8ls.crl (hash: OfyA91CQtVwmBU8/u83Tel5iEss81Z9PtGuJDNrev4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 11:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:03:a6:63:8e:78:3b:f4:ed:e2:91:c6:df:f3:72:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dd51dc102a497518e16091e65e805c2438ef25b Validity Not Before: Feb 2 11:01:21 2026 GMT Not After : Feb 3 11:01:21 2026 GMT Subject: CN=fffd65a10a458e24562fe88c41f832183e23c6eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a5:b7:4c:4c:eb:87:85:79:a2:8e:8d:89:a4: b9:c7:bb:f7:b0:35:6a:8f:e1:d3:f5:81:ad:35:c1: 13:f8:22:74:13:98:75:37:c1:07:8b:d2:0e:62:b1: 7a:65:2d:5d:1c:60:5a:4b:98:91:7c:9c:a4:ee:2e: 78:3b:04:9a:99:05:16:84:01:57:c8:d2:3a:a8:03: 0e:5e:b4:92:4c:23:58:c4:48:3d:e6:db:d5:67:26: d2:f8:69:49:01:5b:f2:7d:1d:6f:db:63:f5:8b:4e: 3d:cf:99:08:27:42:09:8b:73:b6:b9:ca:62:ab:b9: 10:26:e8:4f:f5:27:6e:b6:81:1d:e8:7b:cb:7f:4c: 9c:7e:6d:3b:cc:e7:79:8a:35:77:8e:b8:f5:3a:6e: a0:3b:41:0e:c1:42:2b:b1:47:6c:9e:5b:10:b0:3f: 4c:04:fd:ea:42:98:c0:f1:ee:e7:6a:da:b8:79:43: 55:d8:88:a0:ba:77:5a:46:ef:ac:ea:66:bb:7f:b3: a2:94:ae:02:3b:9a:40:cb:bb:e7:d1:72:e4:e0:d4: 7c:e9:5b:19:a5:24:97:37:6f:b7:dc:38:65:92:86: 43:62:d4:1c:f8:91:2c:68:05:2e:22:52:5a:73:e8: b2:38:ff:bd:01:97:0c:d7:d2:8a:e1:92:3b:a4:59: 94:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FD:65:A1:0A:45:8E:24:56:2F:E8:8C:41:F8:32:18:3E:23:C6:EB X509v3 Authority Key Identifier: keyid:7D:D5:1D:C1:02:A4:97:51:8E:16:09:1E:65:E8:05:C2:43:8E:F2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdUdwQKkl1GOFgkeZegFwkOO8ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5f8a76-9215-45b5-938b-76e4e1c93606/1/fdUdwQKkl1GOFgkeZegFwkOO8ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:a1:6e:b7:48:e9:a5:b5:f2:f4:53:01:9e:74:ea:3a:6f:e1: 27:32:5f:c9:8c:51:d5:85:77:7b:fb:24:d2:45:e7:2b:0a:aa: d4:26:48:b6:f4:b6:14:80:2d:8f:3b:55:57:0c:03:8f:01:db: de:93:a1:52:61:39:d7:f9:f2:51:ad:eb:af:d0:8b:5e:00:a2: 27:12:03:88:1a:7c:c2:49:4a:f6:05:ab:d4:a7:ae:63:5a:cf: b1:42:57:da:40:9a:3e:e9:ea:9e:b2:ba:de:81:5d:f7:ac:21: d2:c1:6d:59:8f:68:5c:76:b6:fb:00:b9:d6:84:c4:85:2d:99: 56:00:11:e0:66:bf:91:bc:75:64:bf:41:e0:47:48:04:c9:0e: 29:1d:ce:77:fd:4d:b2:5b:2d:c9:6d:76:78:22:19:f6:74:d3: cf:7e:4a:b0:fa:ba:e3:2a:b3:48:06:40:0c:37:79:39:5c:27: bd:f3:8d:56:c8:91:86:75:1d:96:e9:45:46:03:9d:9d:8b:a7: f5:90:b8:8b:a5:05:05:ae:a1:33:48:82:a6:ca:a9:e0:4e:8e: b2:86:f1:b7:31:42:93:1d:51:97:23:a2:d8:33:e0:10:e6:06: 15:ff:1d:d6:b7:3d:be:96:ab:7d:69:2b:b2:e0:4f:05:97:8d: 26:53:cd:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweA6Zjjng79O3ikcbf83IfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZDUxZGMxMDJhNDk3NTE4ZTE2MDkxZTY1ZTgwNWMyNDM4 ZWYyNWIwHhcNMjYwMjAyMTEwMTIxWhcNMjYwMjAzMTEwMTIxWjAzMTEwLwYDVQQD EyhmZmZkNjVhMTBhNDU4ZTI0NTYyZmU4OGM0MWY4MzIxODNlMjNjNmViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaW3TEzrh4V5oo6NiaS5x7v3sDVq j+HT9YGtNcET+CJ0E5h1N8EHi9IOYrF6ZS1dHGBaS5iRfJyk7i54OwSamQUWhAFX yNI6qAMOXrSSTCNYxEg95tvVZybS+GlJAVvyfR1v22P1i049z5kIJ0IJi3O2ucpi q7kQJuhP9SdutoEd6HvLf0ycfm07zOd5ijV3jrj1Om6gO0EOwUIrsUdsnlsQsD9M BP3qQpjA8e7natq4eUNV2IigundaRu+s6ma7f7OilK4CO5pAy7vn0XLk4NR86VsZ pSSXN2+33DhlkoZDYtQc+JEsaAUuIlJac+iyOP+9AZcM19KK4ZI7pFmURwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/9ZaEKRY4kVi/ojEH4Mhg+I8brMB8GA1UdIwQY MBaAFH3VHcECpJdRjhYJHmXoBcJDjvJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGIt NzZlNGUxYzkzNjA2LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi81ZjhhNzYtOTIxNS00NWI1LTkzOGItNzZlNGUxYzkzNjA2 LzEvZmRVZHdRS2tsMUdPRmdrZVplZ0Z3a09POGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsaFut0jp pbXy9FMBnnTqOm/hJzJfyYxR1YV3e/sk0kXnKwqq1CZItvS2FIAtjztVVwwDjwHb 3pOhUmE51/nyUa3rr9CLXgCiJxIDiBp8wklK9gWr1KeuY1rPsUJX2kCaPunqnrK6 3oFd96wh0sFtWY9oXHa2+wC51oTEhS2ZVgAR4Ga/kbx1ZL9B4EdIBMkOKR3Od/1N slstyW12eCIZ9nTTz35KsPq64yqzSAZADDd5OVwnvfONVsiRhnUdlulFRgOdnYun 9ZC4i6UFBa6hM0iCpsqp4E6OsobxtzFCkx1RlyOi2DPgEOYGFf8d1rc9vparfWkr suBPBZeNJlPNLw== -----END CERTIFICATE-----Generated at Mon Feb 2 22:49:45 2026 by rpki-client