This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft File: 1-puJ82fU-5UCh3AfYtSgObf2yyA.mft (raw, json) Hash identifier: szTiEoSfafxNZrTXBTUWMJlbRqbTKVATvfETejExSOg= Subject key identifier: E2:B1:40:4B:F7:25:EB:5F:A9:AD:B7:BF:E7:73:FD:02:55:6C:A6:56 Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20 Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20 Certificate serial: 019C43227D27E5DAC34D0C0D96759E24B2C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft Manifest number: 161E Signing time: Mon 09 Feb 2026 16:00:59 +0000 Manifest this update: Mon 09 Feb 2026 16:00:59 +0000 Manifest next update: Tue 10 Feb 2026 16:00:59 +0000 Files and hashes: 1: 1-puJ82fU-5UCh3AfYtSgObf2yyA.crl (hash: 6lntFTytAr+OleB26+EmyySGl2dLX+a5wLJwahMg+Rg=) 2: 5VBqrJ3l2bBgVNFXgKoPrPjtOoo.roa (hash: pw/y5AALVmMkOsomb76pGvibV4sU9NfaodslXc53Ans=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7d:27:e5:da:c3:4d:0c:0d:96:75:9e:24:b2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20 Validity Not Before: Feb 9 16:00:59 2026 GMT Not After : Feb 10 16:00:59 2026 GMT Subject: CN=e2b1404bf725eb5fa9adb7bfe773fd02556ca656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:40:5e:ce:7d:47:29:26:73:81:56:70:4c:73: 43:be:78:05:5d:35:90:8d:f9:8c:0a:a3:2b:15:93: 7e:7f:cd:83:30:18:29:01:63:95:a7:db:5d:68:fe: f9:2b:b3:57:48:93:8e:51:f5:dd:fc:17:c0:cb:b3: 34:a4:2d:e8:d8:9b:ad:c2:16:7d:c7:8b:4b:9a:5e: 96:2e:ed:d6:b5:cb:cf:58:be:8b:1f:d3:a4:29:98: 04:5b:12:1d:76:ac:13:21:57:0d:b7:e6:95:81:c3: c3:80:fd:76:b8:58:57:cc:3b:e9:30:81:91:92:03: 96:23:46:6a:bc:93:95:8d:5a:25:06:84:8e:96:8f: c9:fb:88:7f:28:7c:0c:d6:3c:92:22:7c:3a:60:c7: f6:68:bf:5e:96:a8:6a:b9:8d:7f:90:29:d9:55:15: 83:95:bd:2e:fa:a3:38:b2:10:72:eb:f3:bb:e0:67: 70:8a:cf:51:50:24:2c:e4:40:09:57:ec:a1:af:0f: 47:97:87:74:28:a5:32:97:f0:fd:57:b2:2e:22:14: f4:10:a9:02:e5:86:26:5c:2f:0b:2d:e1:f6:2d:01: 5b:35:d2:08:de:18:d8:80:0c:ee:3b:14:26:c8:69: 21:e4:cd:26:f4:2b:34:5a:b0:fe:49:88:7a:81:80: 3f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:B1:40:4B:F7:25:EB:5F:A9:AD:B7:BF:E7:73:FD:02:55:6C:A6:56 X509v3 Authority Key Identifier: keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:42:1e:0f:3e:fc:af:41:06:f0:fa:2f:e2:18:df:d3:67:3f: 84:3b:a0:fc:15:5e:c1:32:b4:72:b1:8e:11:2b:fb:c3:7f:34: 37:6f:5c:57:7a:0b:c3:7f:75:aa:d6:f5:b9:7d:ad:55:a3:6d: fe:ae:c0:65:78:19:65:de:e2:32:36:d3:6e:a0:1f:10:e0:1f: db:dd:aa:e0:98:6a:72:0a:6e:5d:08:f4:8b:f3:cb:ba:f7:18: d1:2e:64:08:a5:8c:fe:02:43:74:a1:2b:f5:0f:ce:9f:ae:79: d9:dc:8d:2d:b1:30:41:7c:c5:bd:32:06:60:ae:27:b1:51:ac: f6:a3:91:0b:18:d3:51:cc:ec:9a:15:f3:10:90:63:9a:98:01: 69:d0:ec:2b:1b:dd:13:ef:99:58:47:f3:9b:e9:21:b6:e0:8a: db:ea:30:9d:61:48:7e:0d:b7:e6:40:64:60:00:e1:65:5b:49: 30:30:11:6a:8a:d7:b8:d0:c5:a1:a7:41:6c:a1:41:19:49:92: 1b:7f:fd:cb:74:ee:10:9e:1e:15:c9:9f:6e:c7:9e:61:c3:46: d2:dd:2d:a9:87:e6:c7:9c:40:d9:ec:6e:60:2a:32:7d:8a:92: 59:17:63:d3:56:50:97:74:d8:f3:f1:5d:9b:c5:d6:fd:20:b7: c9:63:4e:87 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIn0n5drDTQwNlnWeJLLHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm NmNiMjAwHhcNMjYwMjA5MTYwMDU5WhcNMjYwMjEwMTYwMDU5WjAzMTEwLwYDVQQD EyhlMmIxNDA0YmY3MjVlYjVmYTlhZGI3YmZlNzczZmQwMjU1NmNhNjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApEBezn1HKSZzgVZwTHNDvngFXTWQ jfmMCqMrFZN+f82DMBgpAWOVp9tdaP75K7NXSJOOUfXd/BfAy7M0pC3o2JutwhZ9 x4tLml6WLu3WtcvPWL6LH9OkKZgEWxIddqwTIVcNt+aVgcPDgP12uFhXzDvpMIGR kgOWI0ZqvJOVjVolBoSOlo/J+4h/KHwM1jySInw6YMf2aL9elqhquY1/kCnZVRWD lb0u+qM4shBy6/O74Gdwis9RUCQs5EAJV+yhrw9Hl4d0KKUyl/D9V7IuIhT0EKkC 5YYmXC8LLeH2LQFbNdII3hjYgAzuOxQmyGkh5M0m9Cs0WrD+SYh6gYA/xwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOKxQEv3Jetfqa23v+dz/QJVbKZWMB8GA1UdIwQY MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx LTBlMWE2OGM3NTYzYi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY1Lzk4OTMzYS03NTgxLTQ5NzktOTEyMS0wZTFhNjhjNzU2 M2IvMS8xLXB1SjgyZlUtNVVDaDNBZll0U2dPYmYyeXlBLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkIe Dz78r0EG8Pov4hjf02c/hDug/BVewTK0crGOESv7w380N29cV3oLw391qtb1uX2t VaNt/q7AZXgZZd7iMjbTbqAfEOAf292q4JhqcgpuXQj0i/PLuvcY0S5kCKWM/gJD dKEr9Q/On6552dyNLbEwQXzFvTIGYK4nsVGs9qORCxjTUczsmhXzEJBjmpgBadDs KxvdE++ZWEfzm+khtuCK2+ownWFIfg235kBkYADhZVtJMDARaorXuNDFoadBbKFB GUmSG3/9y3TuEJ4eFcmfbseeYcNG0t0tqYfmx5xA2exuYCoyfYqSWRdj01ZQl3TY 8/Fdm8XW/SC3yWNOhw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:53 2026 by rpki-client