This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft File: RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft (raw, json) Hash identifier: vRhrvHB59oZae9uPOFGIIxECrcVwmSj4Ov3UBMaFxyE= Subject key identifier: 40:28:B7:D8:1A:E4:EB:4E:0B:DC:DB:89:45:80:75:0D:1E:E5:98:BB Authority key identifier: 44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33 Certificate issuer: /CN=44814ea7e83b4019bfd5797eba989da06dd90e33 Certificate serial: 019C42104B5A4B8A215A45E667FAF1359940 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft Manifest number: 0FD7 Signing time: Mon 09 Feb 2026 11:01:30 +0000 Manifest this update: Mon 09 Feb 2026 11:01:30 +0000 Manifest next update: Tue 10 Feb 2026 11:01:30 +0000 Files and hashes: 1: RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl (hash: tiM9mCQ7hMknguwfz/lxvX7MVAg/JlN3h/l6245wtpE=) 2: c4pt8vUVaeXjMXnofvH8CstQg9I.roa (hash: JquKoOYBsn6huX/IMn7g4cc/ok8BfYvy/bpSr/C0iVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:4b:5a:4b:8a:21:5a:45:e6:67:fa:f1:35:99:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44814ea7e83b4019bfd5797eba989da06dd90e33 Validity Not Before: Feb 9 11:01:30 2026 GMT Not After : Feb 10 11:01:30 2026 GMT Subject: CN=4028b7d81ae4eb4e0bdcdb894580750d1ee598bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6d:06:c8:2d:89:83:5f:aa:64:19:08:51:bf: 44:61:40:5a:40:83:59:b5:ea:93:8c:27:ef:f1:43: b7:a4:4e:04:d4:a1:ee:0e:36:f5:a2:53:4c:0c:cc: b1:50:d6:f8:a0:b2:fd:43:e2:c3:e0:d4:88:0d:95: 32:d0:73:d4:b7:c0:07:1d:c3:aa:12:62:b2:9d:b4: 42:c7:38:ce:a3:cc:03:50:07:5b:4a:11:5e:72:13: 22:67:a4:b9:23:7d:5c:b7:5a:5a:0e:bf:7b:b0:9f: 47:7a:6a:ff:48:13:95:d1:95:c5:fd:85:cb:52:bf: c4:37:e7:55:c2:0d:6e:91:d6:7c:73:07:7f:2e:91: 4c:00:f4:b8:9f:a2:fd:0f:0b:20:10:af:cb:86:c5: a0:3f:fb:d4:55:5a:cf:e6:6c:b1:87:9c:15:54:39: 62:0e:16:33:0f:30:3b:b3:f8:d9:8f:a2:f9:ba:01: 79:74:b2:50:be:11:86:4a:8c:51:69:a1:5e:c9:f7: 55:23:4c:c4:cf:ba:0e:b6:3b:9f:c4:26:2f:c5:4c: 08:40:de:fe:84:03:18:a1:4e:89:29:da:46:4c:0f: e0:a7:cd:9e:f5:ed:2b:47:ef:92:81:ac:86:54:a6: fb:02:5d:6e:a8:fa:b7:a9:6f:8a:f3:ae:fe:09:ba: 9e:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:28:B7:D8:1A:E4:EB:4E:0B:DC:DB:89:45:80:75:0D:1E:E5:98:BB X509v3 Authority Key Identifier: keyid:44:81:4E:A7:E8:3B:40:19:BF:D5:79:7E:BA:98:9D:A0:6D:D9:0E:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RIFOp-g7QBm_1Xl-upidoG3ZDjM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ac44b-565a-4286-a40c-d7e01ac02a75/1/RIFOp-g7QBm_1Xl-upidoG3ZDjM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:9d:b3:c4:1c:39:71:89:61:44:23:93:91:28:55:cd:76:9c: 94:35:44:dd:e0:e7:14:36:f1:64:d5:8c:01:6b:46:03:94:ef: 32:54:b9:4d:ac:bc:d3:cb:01:c3:bb:72:6b:a1:19:c1:e2:9a: 4d:8c:3e:fb:dd:a2:52:44:29:1a:05:e0:bd:be:a3:55:30:74: 4b:88:44:67:56:98:57:aa:8f:32:fc:46:7a:b8:25:a9:ac:9d: cd:54:77:c8:59:7d:94:d4:74:ac:67:ec:25:f9:cd:2e:e4:34: 46:6e:11:c6:b3:c4:72:bf:66:24:db:a1:25:51:3e:fb:95:43: 0d:c6:d2:8b:6a:9e:26:73:49:92:b6:2b:b6:c1:0c:a6:34:e5: 8d:92:69:48:4d:06:03:c5:9e:df:6e:d2:89:14:5f:f3:4d:f6: ff:38:44:fb:1c:44:98:04:14:e6:48:8d:87:4f:b0:0f:24:b1: 15:28:dc:91:39:63:a6:ab:f4:80:17:0c:32:7e:eb:cb:d7:c2: 03:c5:05:a5:33:18:ba:24:19:7e:65:d4:d9:57:77:ef:a3:a2: b8:04:1d:d8:aa:a6:4f:a9:94:f0:26:e3:f2:14:fb:c8:74:ab: e6:55:e9:43:da:87:e5:03:9c:d4:a1:8c:9f:b1:6c:eb:d8:53: 86:fa:71:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEEtaS4ohWkXmZ/rxNZlAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ODE0ZWE3ZTgzYjQwMTliZmQ1Nzk3ZWJhOTg5ZGEwNmRk OTBlMzMwHhcNMjYwMjA5MTEwMTMwWhcNMjYwMjEwMTEwMTMwWjAzMTEwLwYDVQQD Eyg0MDI4YjdkODFhZTRlYjRlMGJkY2RiODk0NTgwNzUwZDFlZTU5OGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA220GyC2Jg1+qZBkIUb9EYUBaQINZ teqTjCfv8UO3pE4E1KHuDjb1olNMDMyxUNb4oLL9Q+LD4NSIDZUy0HPUt8AHHcOq EmKynbRCxzjOo8wDUAdbShFechMiZ6S5I31ct1paDr97sJ9Hemr/SBOV0ZXF/YXL Ur/EN+dVwg1ukdZ8cwd/LpFMAPS4n6L9DwsgEK/LhsWgP/vUVVrP5myxh5wVVDli DhYzDzA7s/jZj6L5ugF5dLJQvhGGSoxRaaFeyfdVI0zEz7oOtjufxCYvxUwIQN7+ hAMYoU6JKdpGTA/gp82e9e0rR++SgayGVKb7Al1uqPq3qW+K867+Cbqe7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEAot9ga5OtOC9zbiUWAdQ0e5Zi7MB8GA1UdIwQY MBaAFESBTqfoO0AZv9V5frqYnaBt2Q4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMt ZDdlMDFhYzAyYTc1LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8zYWM0NGItNTY1YS00Mjg2LWE0MGMtZDdlMDFhYzAyYTc1 LzEvUklGT3AtZzdRQm1fMVhsLXVwaWRvRzNaRGpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW52zxBw5 cYlhRCOTkShVzXaclDVE3eDnFDbxZNWMAWtGA5TvMlS5Tay808sBw7tya6EZweKa TYw++92iUkQpGgXgvb6jVTB0S4hEZ1aYV6qPMvxGerglqaydzVR3yFl9lNR0rGfs JfnNLuQ0Rm4RxrPEcr9mJNuhJVE++5VDDcbSi2qeJnNJkrYrtsEMpjTljZJpSE0G A8We327SiRRf8032/zhE+xxEmAQU5kiNh0+wDySxFSjckTljpqv0gBcMMn7ry9fC A8UFpTMYuiQZfmXU2Vd376OiuAQd2KqmT6mU8Cbj8hT7yHSr5lXpQ9qH5QOc1KGM n7Fs69hThvpx9w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:11 2026 by rpki-client