This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json) Hash identifier: BPV25Zs+2d4A2b8SQNq7tsg2WTzUUgVK3pCKAprOMH4= Subject key identifier: 22:58:C9:D7:D3:21:77:B0:02:5E:93:A1:06:0E:64:1B:2B:A2:C2:D4 Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Certificate serial: 019C432202FEFEBF89BEC2F31EABEC186235 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft Manifest number: 0D19 Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: G9lKce1ng6+urne47LLTRKWCrauMqLyr+4fc9eNwbpY=) 2: iuDASUb0OcEG7E9NhPvGrlzMShY.roa (hash: ap/QCleQpzEp2XCCBDxsxK10769HbmIBZHWPFMwID/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:02:fe:fe:bf:89:be:c2:f3:1e:ab:ec:18:62:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9 Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=2258c9d7d32177b0025e93a1060e641b2ba2c2d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:f2:73:74:ca:76:09:a7:72:11:51:60:9a: 8c:59:d4:f5:05:cb:22:c3:e6:2a:10:30:37:48:6c: 96:2e:35:3c:cc:46:32:13:4e:fe:34:bc:e4:c5:b5: b0:b2:9e:96:4e:01:a7:49:cf:08:b2:40:db:36:3b: eb:33:e8:c9:a6:6c:f6:09:2d:8a:bb:1c:7b:3e:5a: e3:7c:5c:dc:cd:ed:95:2d:64:42:6a:b8:83:2e:a5: 38:42:3d:7a:24:24:29:c7:b0:c5:dd:43:80:1f:0b: a1:bc:e0:c1:c8:5d:6e:d1:6c:10:4a:34:7f:38:54: 79:0e:8a:5c:25:a7:06:ad:26:42:d8:a2:66:bd:12: da:fd:97:cf:56:c7:f1:2f:17:14:ba:99:64:6f:f5: c1:87:7d:22:c7:3a:d1:0c:ee:2a:d1:aa:b2:e4:9f: f3:71:4f:ad:d5:26:dd:4c:81:57:db:c9:10:a7:5e: db:1a:8f:39:7e:fb:d3:97:08:b6:67:a4:73:ca:c5: d1:46:f9:6e:4e:bf:7c:cc:f4:c0:b2:fc:d4:cd:d1: 5f:83:f2:9f:c7:bf:c3:0c:f5:8d:28:50:68:8f:2c: 63:28:2b:da:e5:0b:a5:e2:5a:bf:e3:2c:0c:6f:07: 7b:29:18:be:95:4d:4f:69:f1:95:8f:77:dc:b2:7e: da:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:58:C9:D7:D3:21:77:B0:02:5E:93:A1:06:0E:64:1B:2B:A2:C2:D4 X509v3 Authority Key Identifier: keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:70:31:d3:76:cf:30:f4:2f:8c:66:81:10:34:40:a0:9b:b4: 47:13:47:b3:b3:0a:93:62:d5:58:68:22:e0:6b:cf:10:5f:94: 19:59:15:4b:2d:43:41:59:e6:85:5a:1c:b1:05:08:2c:f7:d4: 00:53:1f:67:35:f1:2b:a1:6c:1c:12:ce:f4:77:fe:a5:7b:2a: a6:29:0f:7b:73:fa:21:a3:e9:8e:70:52:ec:2a:e4:11:65:b7: 78:d4:0b:26:9e:52:72:46:17:27:35:c6:f6:32:76:cf:45:b8: b2:39:b4:b8:bb:5f:e5:cc:10:1a:8e:e1:9a:1e:b7:6f:c6:3f: 4b:42:55:28:78:31:ce:27:d8:da:44:c3:8b:ac:a1:0b:95:d2: 2f:31:62:ba:db:23:57:c4:3a:71:20:19:82:90:74:72:d7:47: d7:e8:05:11:57:e7:32:47:58:81:9c:f2:8f:14:97:3b:d0:1a: 75:c7:70:cc:5f:ac:c0:d3:f8:50:ea:e2:cc:7e:92:47:d2:a4: a0:b2:4b:e6:30:96:dc:db:18:3c:0a:71:27:e9:7a:59:86:44: f6:22:33:2e:2f:a1:67:0a:64:8f:0a:95:f2:ae:bc:8d:47:59: e0:c6:a0:cc:45:b0:fc:7d:e9:64:97:62:67:d5:64:87:7e:8b: b0:19:18:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgL+/r+JvsLzHqvsGGI1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj MDFhZjkwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD EygyMjU4YzlkN2QzMjE3N2IwMDI1ZTkzYTEwNjBlNjQxYjJiYTJjMmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbDyc3TKdgmnchFRYJqMWdT1Bcsi w+YqEDA3SGyWLjU8zEYyE07+NLzkxbWwsp6WTgGnSc8IskDbNjvrM+jJpmz2CS2K uxx7PlrjfFzcze2VLWRCariDLqU4Qj16JCQpx7DF3UOAHwuhvODByF1u0WwQSjR/ OFR5DopcJacGrSZC2KJmvRLa/ZfPVsfxLxcUuplkb/XBh30ixzrRDO4q0aqy5J/z cU+t1SbdTIFX28kQp17bGo85fvvTlwi2Z6RzysXRRvluTr98zPTAsvzUzdFfg/Kf x7/DDPWNKFBojyxjKCva5Qul4lq/4ywMbwd7KRi+lU1PafGVj3fcsn7amwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJYydfTIXewAl6ToQYOZBsrosLUMB8GA1UdIwQY MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt Y2JlMDIwNjY1ZWZlLzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARHAx03bP MPQvjGaBEDRAoJu0RxNHs7MKk2LVWGgi4GvPEF+UGVkVSy1DQVnmhVocsQUILPfU AFMfZzXxK6FsHBLO9Hf+pXsqpikPe3P6IaPpjnBS7CrkEWW3eNQLJp5SckYXJzXG 9jJ2z0W4sjm0uLtf5cwQGo7hmh63b8Y/S0JVKHgxzifY2kTDi6yhC5XSLzFiutsj V8Q6cSAZgpB0ctdH1+gFEVfnMkdYgZzyjxSXO9AadcdwzF+swNP4UOrizH6SR9Kk oLJL5jCW3NsYPApxJ+l6WYZE9iIzLi+hZwpkjwqV8q68jUdZ4MagzEWw/H3pZJdi Z9Vkh36LsBkYRw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:00:26 2026 by rpki-client