This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft File: f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft (raw, json) Hash identifier: bXMBxxt5jnzB5jeVaIFYaZkOKbrBj2PD9W3uZ3ZVSeA= Subject key identifier: 64:32:C6:5D:24:B6:F4:AD:5F:D7:80:A2:19:8C:93:91:22:4A:AF:E2 Authority key identifier: 7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E Certificate issuer: /CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e Certificate serial: 019C42B47F95BF37AFACE8684214ABB1575D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft Manifest number: 1398 Signing time: Mon 09 Feb 2026 14:00:51 +0000 Manifest this update: Mon 09 Feb 2026 14:00:51 +0000 Manifest next update: Tue 10 Feb 2026 14:00:51 +0000 Files and hashes: 1: G6WXhyvVtMAy_hDzbTynLKDz6nI.roa (hash: hU50SCH6HViVYgZI7FoCwUv3dNNmWkj31LMFtbg1FRw=) 2: f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl (hash: 5xKM5JCZmOGPw8HTUpIGDwnnh526yyFuLxIRvVXbstY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7f:95:bf:37:af:ac:e8:68:42:14:ab:b1:57:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fd62e42c08e1601c4571e0d88a349a0509dea5e Validity Not Before: Feb 9 14:00:51 2026 GMT Not After : Feb 10 14:00:51 2026 GMT Subject: CN=6432c65d24b6f4ad5fd780a2198c9391224aafe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:01:9c:10:81:5a:ee:b8:1d:ac:94:5c:89:6a: f9:20:ff:dc:ce:5f:41:97:e6:b1:04:8e:86:15:0c: ee:8e:d9:c4:d7:a2:cd:82:24:3e:1f:5d:b7:04:cb: 34:ce:0a:c7:b0:3c:85:0a:bb:33:5c:bb:06:a6:ea: c3:fa:78:bc:0c:2b:67:e1:c4:99:ca:04:e5:3e:a2: b2:25:7c:d9:b2:e0:e0:b0:0c:9c:3d:ff:42:70:43: 3f:79:62:3f:64:f2:c3:c1:ec:5e:ef:8a:af:e0:c1: ba:50:c7:c8:de:3e:b0:1e:28:2a:52:2e:25:be:60: fc:cc:5d:a9:14:e1:c1:a6:c5:aa:a7:86:e4:3a:f0: 30:a0:c1:bc:56:a1:c9:db:40:42:83:6a:ac:cd:b0: b7:88:64:a6:9c:18:81:dc:81:73:1c:31:8e:2e:da: f1:80:5d:10:85:40:11:52:2b:f0:19:7e:1c:53:39: 29:64:9d:91:af:fd:7b:c0:b8:b4:81:4d:29:11:76: 38:61:b8:64:4d:c5:3f:65:a7:fd:60:02:38:5f:b1: 2a:a7:6d:fa:be:cf:66:3d:2d:fd:bb:c0:d8:a5:73: fa:e1:67:74:ec:3c:18:8f:7a:c5:b3:d7:97:c7:7b: 83:46:af:14:dd:3e:ef:8a:52:91:ce:70:8b:18:6f: 6f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:32:C6:5D:24:B6:F4:AD:5F:D7:80:A2:19:8C:93:91:22:4A:AF:E2 X509v3 Authority Key Identifier: keyid:7F:D6:2E:42:C0:8E:16:01:C4:57:1E:0D:88:A3:49:A0:50:9D:EA:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9YuQsCOFgHEVx4NiKNJoFCd6l4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b934ee-c4ba-4391-80b0-e75a5ea89fd1/1/f9YuQsCOFgHEVx4NiKNJoFCd6l4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:eb:ca:71:25:6f:8b:2a:5f:76:e7:24:1b:18:e2:e5:58:92: d0:ec:28:50:e9:bd:57:09:df:01:eb:6f:b2:95:1e:ef:2a:de: 07:3f:45:ad:92:a1:f2:81:13:8b:f3:d6:ca:ae:5a:fe:99:d1: 98:ee:41:7f:5d:a8:6b:61:f6:1c:54:01:78:88:1a:29:33:d7: 22:c9:88:a7:50:9a:f1:bc:23:6c:f4:37:07:6c:97:5e:1f:ee: 4a:e1:2f:28:bb:4c:98:5b:28:5e:51:e2:fb:8f:7d:73:cf:e9: 68:80:33:3e:ae:c4:19:80:6a:5e:96:06:fe:d8:bf:f9:93:d6: b8:b0:cc:1a:2c:58:36:9a:87:b3:cd:69:2b:3a:0c:86:c6:c5: 57:15:43:ae:56:6a:d3:09:c1:9e:36:e2:27:dd:60:19:47:10: d8:14:6e:a9:8d:11:07:3d:d6:61:9b:0a:8a:32:3c:68:c7:0e: 37:09:eb:75:48:40:bb:fa:09:86:a9:28:23:d5:7e:30:66:fa: a6:17:93:91:88:62:bd:37:dd:b5:99:2c:14:17:b6:08:fb:e4: e9:0f:41:c7:16:e2:d9:84:b3:43:a5:46:68:f3:db:00:db:39: 23:0e:e8:f1:05:db:a3:53:47:ec:50:2e:06:2b:83:b6:21:09: f3:a6:95:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtH+VvzevrOhoQhSrsVddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZDYyZTQyYzA4ZTE2MDFjNDU3MWUwZDg4YTM0OWEwNTA5 ZGVhNWUwHhcNMjYwMjA5MTQwMDUxWhcNMjYwMjEwMTQwMDUxWjAzMTEwLwYDVQQD Eyg2NDMyYzY1ZDI0YjZmNGFkNWZkNzgwYTIxOThjOTM5MTIyNGFhZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gGcEIFa7rgdrJRciWr5IP/czl9B l+axBI6GFQzujtnE16LNgiQ+H123BMs0zgrHsDyFCrszXLsGpurD+ni8DCtn4cSZ ygTlPqKyJXzZsuDgsAycPf9CcEM/eWI/ZPLDwexe74qv4MG6UMfI3j6wHigqUi4l vmD8zF2pFOHBpsWqp4bkOvAwoMG8VqHJ20BCg2qszbC3iGSmnBiB3IFzHDGOLtrx gF0QhUARUivwGX4cUzkpZJ2Rr/17wLi0gU0pEXY4YbhkTcU/Zaf9YAI4X7Eqp236 vs9mPS39u8DYpXP64Wd07DwYj3rFs9eXx3uDRq8U3T7vilKRznCLGG9vRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQyxl0ktvStX9eAohmMk5EiSq/iMB8GA1UdIwQY MBaAFH/WLkLAjhYBxFceDYijSaBQnepeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAt ZTc1YTVlYTg5ZmQxLzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9iOTM0ZWUtYzRiYS00MzkxLTgwYjAtZTc1YTVlYTg5ZmQx LzEvZjlZdVFzQ09GZ0hFVng0TmlLTkpvRkNkNmw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaevKcSVv iypfduckGxji5ViS0OwoUOm9VwnfAetvspUe7yreBz9FrZKh8oETi/PWyq5a/pnR mO5Bf12oa2H2HFQBeIgaKTPXIsmIp1Ca8bwjbPQ3B2yXXh/uSuEvKLtMmFsoXlHi +499c8/paIAzPq7EGYBqXpYG/ti/+ZPWuLDMGixYNpqHs81pKzoMhsbFVxVDrlZq 0wnBnjbiJ91gGUcQ2BRuqY0RBz3WYZsKijI8aMcONwnrdUhAu/oJhqkoI9V+MGb6 pheTkYhivTfdtZksFBe2CPvk6Q9Bxxbi2YSzQ6VGaPPbANs5Iw7o8QXbo1NH7FAu BiuDtiEJ86aVFA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:47 2026 by rpki-client