This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft File: 1-_zUUVtJMDkhZ1jec45PGujjIkw.mft (raw, json) Hash identifier: rTDh0g2jKN0+TXJmU30UCGD4Y5i71Wd5GwGNjhd7gOs= Subject key identifier: 96:66:6C:F3:7D:F8:4A:0F:49:DE:96:6D:EC:1F:53:5A:03:71:25:6B Authority key identifier: FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C Certificate issuer: /CN=fbfcd4515b493039216758de738e4f1ae8e3224c Certificate serial: 019C43FE285E50808C487D54F840E0DA7B08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft Manifest number: 1234 Signing time: Mon 09 Feb 2026 20:00:55 +0000 Manifest this update: Mon 09 Feb 2026 20:00:55 +0000 Manifest next update: Tue 10 Feb 2026 20:00:55 +0000 Files and hashes: 1: 1-_zUUVtJMDkhZ1jec45PGujjIkw.crl (hash: t7ZLGWpyKJ2fAdgHPBH2JOnV6xBBtJP2bJ62iYpZWco=) 2: 1-sZNf9muu9U1hhvyCSyDMfB8YpI.roa (hash: ZTCQU0Xa904Op6SoRgBrlLkJy0zOrm95WiClUW4+PNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:28:5e:50:80:8c:48:7d:54:f8:40:e0:da:7b:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbfcd4515b493039216758de738e4f1ae8e3224c Validity Not Before: Feb 9 20:00:55 2026 GMT Not After : Feb 10 20:00:55 2026 GMT Subject: CN=96666cf37df84a0f49de966dec1f535a0371256b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4b:1b:9b:5c:2a:b8:dc:2f:ec:ed:b9:01:d4: 35:93:89:a4:23:e1:16:41:94:99:79:12:bc:df:f3: 29:55:21:d4:97:9f:c3:ce:ec:ac:c2:ef:6e:66:fa: 4b:c6:8f:4d:5e:61:62:38:8b:8d:72:54:ef:77:8d: 90:fb:20:28:77:98:d1:a1:9d:31:f8:4a:b1:7a:b2: 1d:87:7d:94:9f:22:6f:a9:37:29:ad:7c:b4:6e:e0: b1:4b:77:97:b9:2a:45:5d:db:74:db:95:03:a1:46: c7:3f:0d:e0:78:6f:44:b5:4c:de:f8:35:89:02:ac: be:88:0e:20:5c:b5:62:af:48:d8:bc:9c:df:ed:5f: e1:41:6b:6f:3d:0e:47:75:cb:dc:f7:4f:1b:89:58: 0e:83:3f:8e:7e:d3:66:0b:b0:70:42:45:c9:ad:5d: e2:7b:7d:7c:70:40:e8:7c:e1:e3:6f:70:6b:fa:34: c2:4c:0e:6a:14:3c:e7:22:67:be:78:f6:54:3e:fe: b3:b7:e8:3d:60:24:b7:f0:bb:33:98:7f:00:61:39: b8:e4:20:5a:c2:a9:46:f6:d9:55:0d:81:dc:19:47: 21:86:e0:dd:d5:4e:a9:20:b3:6f:b4:ac:68:3f:74: b5:43:6a:a3:a6:e8:e9:7d:16:7b:2f:c5:37:cc:8b: 22:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:66:6C:F3:7D:F8:4A:0F:49:DE:96:6D:EC:1F:53:5A:03:71:25:6B X509v3 Authority Key Identifier: keyid:FB:FC:D4:51:5B:49:30:39:21:67:58:DE:73:8E:4F:1A:E8:E3:22:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_zUUVtJMDkhZ1jec45PGujjIkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d6486a-8ff7-426f-8d86-098d04ce51b2/1/1-_zUUVtJMDkhZ1jec45PGujjIkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:04:96:15:d6:5b:7a:d4:38:b4:c4:c9:07:95:6b:ea:62:db: a3:c9:cb:f8:df:8b:3f:b9:a0:c3:7b:26:72:4d:f9:43:ff:7d: 48:55:6a:20:b8:6c:46:09:9b:8e:78:3d:a2:6c:39:cf:d8:6c: ca:c0:bb:e1:b7:8b:b8:38:d8:5c:52:3d:21:b9:fc:92:47:35: d6:7d:ab:1c:6d:a7:c6:cc:98:28:65:9b:b4:03:93:a5:02:50: d9:7e:02:45:2a:89:a0:43:c0:24:11:97:e6:e0:bb:c1:1d:c4: 5f:41:34:c7:20:b0:8d:17:25:ae:9e:5a:3d:60:e9:d8:57:6b: f2:af:3f:fb:8d:f3:06:02:3f:c2:a8:60:3e:ab:e7:10:08:47: 9e:eb:54:66:89:6a:da:89:c8:3f:73:40:4b:78:80:3d:9b:a2: c3:10:9d:47:5e:4b:91:93:c7:ef:68:01:d2:e9:b4:56:73:c8: b2:50:ea:67:c9:88:da:90:9c:39:27:73:2d:29:ad:79:a6:e3: 3e:76:d9:9e:ce:62:5b:47:43:e9:51:04:a6:d7:8a:d3:55:12: 09:1b:33:2b:24:bf:a1:0b:37:73:63:cf:59:88:e2:59:a8:13: e3:a2:ab:66:9a:61:95:a0:fc:ee:27:03:18:f4:5a:69:18:4a: 39:c0:ea:dc -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxD/iheUICMSH1U+EDg2nsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZmNkNDUxNWI0OTMwMzkyMTY3NThkZTczOGU0ZjFhZThl MzIyNGMwHhcNMjYwMjA5MjAwMDU1WhcNMjYwMjEwMjAwMDU1WjAzMTEwLwYDVQQD Eyg5NjY2NmNmMzdkZjg0YTBmNDlkZTk2NmRlYzFmNTM1YTAzNzEyNTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA60sbm1wquNwv7O25AdQ1k4mkI+EW QZSZeRK83/MpVSHUl5/Dzuyswu9uZvpLxo9NXmFiOIuNclTvd42Q+yAod5jRoZ0x +EqxerIdh32UnyJvqTcprXy0buCxS3eXuSpFXdt025UDoUbHPw3geG9EtUze+DWJ Aqy+iA4gXLVir0jYvJzf7V/hQWtvPQ5Hdcvc908biVgOgz+OftNmC7BwQkXJrV3i e318cEDofOHjb3Br+jTCTA5qFDznIme+ePZUPv6zt+g9YCS38LszmH8AYTm45CBa wqlG9tlVDYHcGUchhuDd1U6pILNvtKxoP3S1Q2qjpujpfRZ7L8U3zIsixwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJZmbPN9+EoPSd6WbewfU1oDcSVrMB8GA1UdIwQY MBaAFPv81FFbSTA5IWdY3nOOTxro4yJMMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1felVVVnRKTURraFoxamVjNDVQR3Vqaklrdy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjgvZDY0ODZhLThmZjctNDI2Zi04ZDg2 LTA5OGQwNGNlNTFiMi8xLzEtX3pVVVZ0Sk1Ea2haMWplYzQ1UEd1ampJa3cubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzY4L2Q2NDg2YS04ZmY3LTQyNmYtOGQ4Ni0wOThkMDRjZTUx YjIvMS8xLV96VVVWdEpNRGtoWjFqZWM0NVBHdWpqSWt3LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnwSW FdZbetQ4tMTJB5Vr6mLbo8nL+N+LP7mgw3smck35Q/99SFVqILhsRgmbjng9omw5 z9hsysC74beLuDjYXFI9Ibn8kkc11n2rHG2nxsyYKGWbtAOTpQJQ2X4CRSqJoEPA JBGX5uC7wR3EX0E0xyCwjRclrp5aPWDp2Fdr8q8/+43zBgI/wqhgPqvnEAhHnutU Zolq2onIP3NAS3iAPZuiwxCdR15LkZPH72gB0um0VnPIslDqZ8mI2pCcOSdzLSmt eabjPnbZns5iW0dD6VEEpteK01USCRszKyS/oQs3c2PPWYjiWagT46KrZpphlaD8 7icDGPRaaRhKOcDq3A== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:44 2026 by rpki-client