This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft File: fGXsjueSu10KPMcJrcrptoWp3ls.mft (raw, json) Hash identifier: A056jBVDDlF5T/QWmcfTu5zjpOvt755B648GpFK5cqU= Subject key identifier: 4D:98:68:B6:15:98:86:17:BC:FF:C6:D6:C6:7B:BE:79:F5:6C:2F:38 Authority key identifier: 7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B Certificate issuer: /CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b Certificate serial: 019C432220E498B356D00F0B162FB1E9B1E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft Manifest number: 0917 Signing time: Mon 09 Feb 2026 16:00:35 +0000 Manifest this update: Mon 09 Feb 2026 16:00:35 +0000 Manifest next update: Tue 10 Feb 2026 16:00:35 +0000 Files and hashes: 1: fGXsjueSu10KPMcJrcrptoWp3ls.crl (hash: QgHY+ueY9M1Y7xvYoYJ0fNndKfkvRIyPgOwB7AIsyVo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:20:e4:98:b3:56:d0:0f:0b:16:2f:b1:e9:b1:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c65ec8ee792bb5d0a3cc709adcae9b685a9de5b Validity Not Before: Feb 9 16:00:35 2026 GMT Not After : Feb 10 16:00:35 2026 GMT Subject: CN=4d9868b615988617bcffc6d6c67bbe79f56c2f38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:f7:61:78:e1:bd:e2:8a:37:93:fd:6d:b8: 58:fc:aa:2f:81:51:e6:35:39:0f:74:40:80:42:06: 8e:27:35:f2:4f:5c:41:0b:d5:41:e1:3f:93:36:a4: f4:e6:9d:7c:41:5f:16:46:44:a3:22:78:6d:f2:eb: dd:a3:dc:3f:7e:2e:99:dc:13:61:12:fc:7e:47:5b: 64:cf:f0:83:4e:81:3a:9c:44:13:df:16:1e:d3:fa: 42:1c:c6:a4:8e:46:e7:5c:6d:f2:23:52:d5:93:e0: 6c:0e:c0:2a:d7:1d:37:7e:cc:08:de:35:86:c6:34: 2b:85:5c:26:ed:a4:9c:82:c4:16:e8:5a:a7:58:ec: 61:c2:36:ff:a8:70:c9:f5:b4:cc:69:36:67:db:4e: 3e:5e:f2:98:65:a7:79:1b:e2:47:5a:b5:9b:46:e1: 90:35:d4:a2:7c:fe:f5:b3:2c:ad:c3:0f:bc:09:7c: e1:3b:76:6b:e6:19:c4:dd:ee:71:7e:7e:bc:46:e0: cc:be:eb:d4:18:a5:1c:19:38:a1:b5:f0:7e:28:99: d6:e1:ef:b6:1f:9b:73:02:13:e3:1a:24:03:bd:48: 0c:2c:de:39:e0:ca:5a:70:64:d3:09:f8:5c:94:07: b5:ef:c9:35:dd:a1:d4:67:82:d6:5f:63:7c:7e:7b: 00:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:98:68:B6:15:98:86:17:BC:FF:C6:D6:C6:7B:BE:79:F5:6C:2F:38 X509v3 Authority Key Identifier: keyid:7C:65:EC:8E:E7:92:BB:5D:0A:3C:C7:09:AD:CA:E9:B6:85:A9:DE:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGXsjueSu10KPMcJrcrptoWp3ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/573e69-550e-44a9-a0cf-63b950aa3e1d/1/fGXsjueSu10KPMcJrcrptoWp3ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:f3:b1:85:25:c7:e6:77:c3:e6:cc:b7:7d:ed:e0:29:16:0c: 96:be:33:c6:e7:92:6d:b0:cf:ba:1a:d7:6e:4f:ee:a5:f8:5d: 45:39:ca:49:dc:24:1a:02:5e:6a:b8:96:5f:1b:20:60:d1:0b: 86:e0:f4:98:c7:d3:93:c7:6b:b8:1c:fb:fc:21:f4:57:5b:7b: 50:fa:34:9d:e7:f5:02:66:a8:f1:42:fb:e8:59:44:d5:79:d7: fe:78:8f:fe:8d:06:c5:33:4f:03:58:fc:6c:7a:4a:04:3f:50: a7:cc:31:6b:59:28:07:db:6e:ca:b8:5b:cd:86:71:96:c0:59: 72:10:89:30:3f:b4:5f:c4:b7:38:43:ae:e6:63:40:90:20:fc: 14:b5:89:97:af:8e:17:39:30:56:b8:af:bd:c3:fb:c3:6a:bc: 9c:52:b6:bf:db:8b:d2:b1:9c:b3:58:5e:74:0b:19:1e:a1:d3: 5a:bb:76:b0:bb:45:6b:86:1a:52:92:e2:a6:ae:61:9d:64:05: de:ee:8f:3e:c9:29:d2:66:e5:64:cb:b5:82:60:e5:a2:c9:1b: 81:83:30:ee:6e:5c:98:9c:c7:e9:90:4a:de:de:5c:42:cf:ef: e5:16:f2:68:4e:65:6f:24:c5:a0:0e:c6:f2:7d:0d:f2:38:e7: 35:8e:40:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiDkmLNW0A8LFi+x6bHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNjVlYzhlZTc5MmJiNWQwYTNjYzcwOWFkY2FlOWI2ODVh OWRlNWIwHhcNMjYwMjA5MTYwMDM1WhcNMjYwMjEwMTYwMDM1WjAzMTEwLwYDVQQD Eyg0ZDk4NjhiNjE1OTg4NjE3YmNmZmM2ZDZjNjdiYmU3OWY1NmMyZjM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1r3YXjhveKKN5P9bbhY/KovgVHm NTkPdECAQgaOJzXyT1xBC9VB4T+TNqT05p18QV8WRkSjInht8uvdo9w/fi6Z3BNh Evx+R1tkz/CDToE6nEQT3xYe0/pCHMakjkbnXG3yI1LVk+BsDsAq1x03fswI3jWG xjQrhVwm7aScgsQW6FqnWOxhwjb/qHDJ9bTMaTZn204+XvKYZad5G+JHWrWbRuGQ NdSifP71syytww+8CXzhO3Zr5hnE3e5xfn68RuDMvuvUGKUcGTihtfB+KJnW4e+2 H5tzAhPjGiQDvUgMLN454MpacGTTCfhclAe178k13aHUZ4LWX2N8fnsAeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2YaLYVmIYXvP/G1sZ7vnn1bC84MB8GA1UdIwQY MBaAFHxl7I7nkrtdCjzHCa3K6baFqd5bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2Yt NjNiOTUwYWEzZTFkLzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS81NzNlNjktNTUwZS00NGE5LWEwY2YtNjNiOTUwYWEzZTFk LzEvZkdYc2p1ZVN1MTBLUE1jSnJjcnB0b1dwM2xzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/OxhSXH 5nfD5sy3fe3gKRYMlr4zxueSbbDPuhrXbk/upfhdRTnKSdwkGgJeariWXxsgYNEL huD0mMfTk8druBz7/CH0V1t7UPo0nef1Amao8UL76FlE1XnX/niP/o0GxTNPA1j8 bHpKBD9Qp8wxa1koB9tuyrhbzYZxlsBZchCJMD+0X8S3OEOu5mNAkCD8FLWJl6+O FzkwVrivvcP7w2q8nFK2v9uL0rGcs1hedAsZHqHTWrt2sLtFa4YaUpLipq5hnWQF 3u6PPskp0mblZMu1gmDloskbgYMw7m5cmJzH6ZBK3t5cQs/v5RbyaE5lbyTFoA7G 8n0N8jjnNY5A5A== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:58 2026 by rpki-client