This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft File: F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft (raw, json) Hash identifier: aqx8tCl/HzbJ+0QMf/HMCuRm/hrEF7SFlKY27a1eduw= Subject key identifier: 4B:9C:18:B1:5E:DE:60:1D:17:1E:65:E1:D7:4F:AD:29:67:C3:F1:E9 Authority key identifier: 17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC Certificate issuer: /CN=179a0e21251f28c2328644620b0d279cac60d8cc Certificate serial: 019C427E0BB22A162796ABB9F5DDA1DACF72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft Manifest number: 0AFC Signing time: Mon 09 Feb 2026 13:01:22 +0000 Manifest this update: Mon 09 Feb 2026 13:01:22 +0000 Manifest next update: Tue 10 Feb 2026 13:01:22 +0000 Files and hashes: 1: F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl (hash: ClOwQqjkRzdTbSMeb1u3YfqXI7jDhtpP7tB6qtZ7s78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0b:b2:2a:16:27:96:ab:b9:f5:dd:a1:da:cf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=179a0e21251f28c2328644620b0d279cac60d8cc Validity Not Before: Feb 9 13:01:22 2026 GMT Not After : Feb 10 13:01:22 2026 GMT Subject: CN=4b9c18b15ede601d171e65e1d74fad2967c3f1e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:df:4e:00:b6:b5:43:59:e1:c0:29:df:c3:21: 5d:2b:ea:d7:22:56:b7:b1:e6:cc:a6:47:8d:a6:b9: 6a:8b:a3:9b:e2:db:fb:07:a0:6f:4d:1d:60:b9:b6: 50:a7:5c:be:99:93:8a:54:86:dc:01:73:6f:4e:33: 10:10:21:6b:90:9f:5a:30:88:96:5b:3d:5c:70:07: be:a4:74:85:d3:77:37:3a:47:bc:a1:ea:91:b9:d4: 49:ab:e2:19:24:da:64:4f:64:96:77:e0:2c:c8:55: 07:fb:16:93:df:66:88:7c:b8:6f:73:5c:d2:df:86: 07:09:c5:6f:94:15:c6:e9:3a:33:6b:88:78:04:b8: 69:58:d6:cb:58:63:76:48:67:d8:60:68:b1:6b:f8: 24:c4:8f:b6:ea:17:bf:e3:fb:79:7d:14:8d:a0:d9: ae:35:ea:aa:92:d4:49:9d:8f:89:2e:eb:21:9b:38: 50:98:ca:12:b1:10:4d:dd:52:ae:04:8f:68:ef:3d: 14:17:11:ba:5e:d4:e5:04:ea:d8:9e:48:b3:39:47: 1d:d4:1b:1a:fa:a7:52:05:54:68:eb:3e:c4:32:7e: 56:db:a5:2d:88:06:f6:71:c3:a4:51:aa:ba:f8:51: fb:f4:c3:61:e9:96:48:93:ec:7a:c9:f6:14:b4:7f: 37:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:9C:18:B1:5E:DE:60:1D:17:1E:65:E1:D7:4F:AD:29:67:C3:F1:E9 X509v3 Authority Key Identifier: keyid:17:9A:0E:21:25:1F:28:C2:32:86:44:62:0B:0D:27:9C:AC:60:D8:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5oOISUfKMIyhkRiCw0nnKxg2Mw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/653578-3f0a-4059-a71c-1316c4e6944a/1/F5oOISUfKMIyhkRiCw0nnKxg2Mw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:f3:23:99:d6:09:2f:f1:17:c4:6b:d6:d3:3d:ab:12:24:02: 24:c3:ea:55:99:08:1c:3e:85:0b:b7:8a:57:8b:8d:41:66:2a: 2b:b6:16:4d:b5:86:c2:cf:88:06:17:32:5f:80:b4:59:48:8f: c6:9d:1b:9e:15:1b:76:9a:f2:c7:cb:9c:12:6d:f0:99:6c:d0: 27:9b:86:a8:9b:e6:70:4f:a8:5b:8c:70:bd:83:ed:77:14:e8: 80:8c:43:dc:10:f9:97:63:28:ef:cd:de:b1:4b:bf:4f:d5:ab: 89:6a:20:e1:3b:82:53:94:3d:52:1e:74:84:89:fb:fa:a0:0d: 81:df:2d:9b:22:21:08:64:44:83:8d:b1:3b:ba:40:f0:ee:aa: 26:b3:ed:fa:7c:4a:54:93:4e:b4:49:6e:87:5c:32:a1:ef:6e: 13:03:91:34:0a:5a:07:fe:98:a4:0f:f6:e4:e4:cd:c5:c6:5d: 91:08:73:a5:14:87:8a:37:af:58:45:4c:ed:7e:39:db:32:24: 5d:1f:c0:f1:b2:90:ca:0f:31:c6:47:37:ce:14:5c:12:5a:76: 1d:81:96:a6:f6:22:ef:14:c3:62:4c:25:7b:b2:02:fb:8f:76: 52:65:48:24:d0:0a:8d:ab:1b:cc:ca:f6:73:25:6d:e5:25:1b: ed:4a:92:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfguyKhYnlqu59d2h2s9yMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3OWEwZTIxMjUxZjI4YzIzMjg2NDQ2MjBiMGQyNzljYWM2 MGQ4Y2MwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD Eyg0YjljMThiMTVlZGU2MDFkMTcxZTY1ZTFkNzRmYWQyOTY3YzNmMWU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd9OALa1Q1nhwCnfwyFdK+rXIla3 sebMpkeNprlqi6Ob4tv7B6BvTR1gubZQp1y+mZOKVIbcAXNvTjMQECFrkJ9aMIiW Wz1ccAe+pHSF03c3Oke8oeqRudRJq+IZJNpkT2SWd+AsyFUH+xaT32aIfLhvc1zS 34YHCcVvlBXG6Toza4h4BLhpWNbLWGN2SGfYYGixa/gkxI+26he/4/t5fRSNoNmu NeqqktRJnY+JLushmzhQmMoSsRBN3VKuBI9o7z0UFxG6XtTlBOrYnkizOUcd1Bsa +qdSBVRo6z7EMn5W26UtiAb2ccOkUaq6+FH79MNh6ZZIk+x6yfYUtH83RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEucGLFe3mAdFx5l4ddPrSlnw/HpMB8GA1UdIwQY MBaAFBeaDiElHyjCMoZEYgsNJ5ysYNjMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjVvT0lTVWZLTUl5aGtSaUN3MG5uS3hnMk13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS82NTM1NzgtM2YwYS00MDU5LWE3MWMt MTMxNmM0ZTY5NDRhLzEvRjVvT0lTVWZLTUl5aGtSaUN3MG5uS3hnMk13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS82NTM1NzgtM2YwYS00MDU5LWE3MWMtMTMxNmM0ZTY5NDRh LzEvRjVvT0lTVWZLTUl5aGtSaUN3MG5uS3hnMk13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP/MjmdYJ L/EXxGvW0z2rEiQCJMPqVZkIHD6FC7eKV4uNQWYqK7YWTbWGws+IBhcyX4C0WUiP xp0bnhUbdpryx8ucEm3wmWzQJ5uGqJvmcE+oW4xwvYPtdxTogIxD3BD5l2Mo783e sUu/T9WriWog4TuCU5Q9Uh50hIn7+qANgd8tmyIhCGREg42xO7pA8O6qJrPt+nxK VJNOtEluh1wyoe9uEwORNApaB/6YpA/25OTNxcZdkQhzpRSHijevWEVM7X452zIk XR/A8bKQyg8xxkc3zhRcElp2HYGWpvYi7xTDYkwle7IC+492UmVIJNAKjasbzMr2 cyVt5SUb7UqSFg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:06 2026 by rpki-client