This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft File: fE6qxnNkfEicoVs_GEx64mfB6ms.mft (raw, json) Hash identifier: VpBeCYGq8283vJ1i4rY3AFcKJDzlMapTu2f6WA1EH0U= Subject key identifier: 1E:5B:7F:70:03:A9:11:35:1C:E7:01:DE:EC:23:7D:78:29:80:8E:87 Authority key identifier: 7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B Certificate issuer: /CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Certificate serial: 019C41A1AA9144684CD618FBC5C3E9D13251 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft Manifest number: 118B Signing time: Mon 09 Feb 2026 09:00:39 +0000 Manifest this update: Mon 09 Feb 2026 09:00:39 +0000 Manifest next update: Tue 10 Feb 2026 09:00:39 +0000 Files and hashes: 1: fE6qxnNkfEicoVs_GEx64mfB6ms.crl (hash: TjnFypKtYxSHmu8B4MJfrz+yl2dH/7NsyLY+k2D8AZE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:aa:91:44:68:4c:d6:18:fb:c5:c3:e9:d1:32:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c4eaac673647c489ca15b3f184c7ae267c1ea6b Validity Not Before: Feb 9 09:00:39 2026 GMT Not After : Feb 10 09:00:39 2026 GMT Subject: CN=1e5b7f7003a911351ce701deec237d7829808e87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:7c:85:b0:d9:e7:e3:8c:50:82:c0:04:0c: b5:48:9c:9b:1b:02:76:e3:a4:9f:2e:91:ac:27:9a: c5:d2:fb:f2:d7:f6:d5:19:3d:fd:c9:b3:fd:b8:bb: 37:f2:ef:02:8a:22:7b:cc:68:e7:1a:1c:b9:6f:70: 02:0f:d4:06:25:d1:09:99:87:54:49:cb:71:d8:39: 31:cc:92:4d:d2:19:24:08:61:18:67:52:e0:ae:e1: 09:3f:d6:4d:74:0b:d3:92:9a:ec:49:34:dd:f7:e0: c3:a5:5e:4f:fe:4f:af:c3:34:a9:1d:b1:d3:74:dd: 63:9c:94:a6:16:80:d2:c3:ce:e6:75:d2:cd:17:ce: 47:92:64:a4:e0:6e:39:f6:49:6c:b1:21:46:df:e1: 6c:a9:4a:5c:bf:1f:5d:84:c0:0d:5c:24:42:da:df: 66:aa:07:c8:9b:a1:02:49:c6:19:bf:52:4c:b6:52: 78:bd:35:c0:19:6c:9f:0e:85:52:c6:e6:17:c4:fe: a8:fd:db:24:31:19:ff:bf:6c:6c:30:2d:76:01:a4: 4b:60:b5:21:4a:2d:9b:a3:1f:1a:f5:fc:10:0e:90: 68:74:82:7f:a9:a2:ef:44:7f:59:69:84:fb:ac:5d: 86:65:f7:34:80:8f:34:c2:d8:48:7d:33:5a:35:f1: 83:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5B:7F:70:03:A9:11:35:1C:E7:01:DE:EC:23:7D:78:29:80:8E:87 X509v3 Authority Key Identifier: keyid:7C:4E:AA:C6:73:64:7C:48:9C:A1:5B:3F:18:4C:7A:E2:67:C1:EA:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fE6qxnNkfEicoVs_GEx64mfB6ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9dc695-ae76-4d33-b074-e81142543d86/1/fE6qxnNkfEicoVs_GEx64mfB6ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:48:bb:96:2e:38:3c:09:30:02:e2:45:fd:13:5b:a1:d8:36: df:96:b4:ea:5d:25:01:15:49:7e:c6:71:ed:81:20:e2:7c:89: 54:8f:bd:ce:3e:89:ec:d0:e4:b8:b7:27:e0:b4:ee:ac:6d:46: e9:23:f6:7d:30:47:43:47:da:61:9e:78:5c:ed:02:a8:99:aa: 98:19:d8:b2:d0:05:b7:52:cd:21:90:a1:74:a7:c1:00:1c:69: af:29:f9:86:4c:12:82:05:7b:00:1d:5f:ff:9e:ca:a9:37:4c: a0:92:c6:64:5d:f4:83:57:3e:e2:0f:89:50:34:6b:9d:1c:0e: 68:86:d1:7e:76:99:c8:a5:4c:33:46:6a:b2:24:4f:3f:7f:86: 8b:d9:be:50:b4:2f:4e:ed:a3:1e:99:0f:05:cb:2d:bc:12:d3: 74:c5:e7:9f:85:5c:80:52:fb:e4:98:69:5e:48:8a:b3:b9:45: ca:18:06:44:2a:b5:23:de:fd:c8:54:da:2e:ea:20:be:8f:35: e0:28:a8:1c:75:4e:91:90:55:04:eb:36:a6:11:25:e0:a4:e2: a0:50:21:1c:3b:9e:b9:73:14:66:40:f4:5e:aa:01:ce:f3:a3: 96:9d:ad:6c:d7:82:fa:d1:24:3b:8d:2a:70:7a:3b:50:0e:e5: 66:32:a2:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaqRRGhM1hj7xcPp0TJRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNGVhYWM2NzM2NDdjNDg5Y2ExNWIzZjE4NGM3YWUyNjdj MWVhNmIwHhcNMjYwMjA5MDkwMDM5WhcNMjYwMjEwMDkwMDM5WjAzMTEwLwYDVQQD EygxZTViN2Y3MDAzYTkxMTM1MWNlNzAxZGVlYzIzN2Q3ODI5ODA4ZTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtER8hbDZ5+OMUILABAy1SJybGwJ2 46SfLpGsJ5rF0vvy1/bVGT39ybP9uLs38u8CiiJ7zGjnGhy5b3ACD9QGJdEJmYdU Sctx2DkxzJJN0hkkCGEYZ1LgruEJP9ZNdAvTkprsSTTd9+DDpV5P/k+vwzSpHbHT dN1jnJSmFoDSw87mddLNF85HkmSk4G459klssSFG3+FsqUpcvx9dhMANXCRC2t9m qgfIm6ECScYZv1JMtlJ4vTXAGWyfDoVSxuYXxP6o/dskMRn/v2xsMC12AaRLYLUh Si2box8a9fwQDpBodIJ/qaLvRH9ZaYT7rF2GZfc0gI80wthIfTNaNfGDKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5bf3ADqRE1HOcB3uwjfXgpgI6HMB8GA1UdIwQY MBaAFHxOqsZzZHxInKFbPxhMeuJnweprMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQt ZTgxMTQyNTQzZDg2LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS85ZGM2OTUtYWU3Ni00ZDMzLWIwNzQtZTgxMTQyNTQzZDg2 LzEvZkU2cXhuTmtmRWljb1ZzX0dFeDY0bWZCNm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv0i7li44 PAkwAuJF/RNbodg235a06l0lARVJfsZx7YEg4nyJVI+9zj6J7NDkuLcn4LTurG1G 6SP2fTBHQ0faYZ54XO0CqJmqmBnYstAFt1LNIZChdKfBABxpryn5hkwSggV7AB1f /57KqTdMoJLGZF30g1c+4g+JUDRrnRwOaIbRfnaZyKVMM0ZqsiRPP3+Gi9m+ULQv Tu2jHpkPBcstvBLTdMXnn4VcgFL75JhpXkiKs7lFyhgGRCq1I979yFTaLuogvo81 4CioHHVOkZBVBOs2phEl4KTioFAhHDueuXMUZkD0XqoBzvOjlp2tbNeC+tEkO40q cHo7UA7lZjKidg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:29 2026 by rpki-client