This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft File: FirzMC9qSffraRrElZ4az5XbbOc.mft (raw, json) Hash identifier: enztQlCxuM3CoBe5YySxa9zRg7cKNTzdlikehezGz04= Subject key identifier: E0:38:D3:34:5B:1B:B0:3D:2D:BA:3A:99:7B:83:B9:7F:17:4A:0A:8A Authority key identifier: 16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 Certificate issuer: /CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Certificate serial: 019C43C72A1B077FF00302A9471D36409F20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft Manifest number: 17F7 Signing time: Mon 09 Feb 2026 19:00:51 +0000 Manifest this update: Mon 09 Feb 2026 19:00:51 +0000 Manifest next update: Tue 10 Feb 2026 19:00:51 +0000 Files and hashes: 1: FirzMC9qSffraRrElZ4az5XbbOc.crl (hash: qJl9mjGzIQiWyXck2alnjE+3UN6Siy9s+/PP6Qvwh1k=) 2: PaB6Iu-OaufEYMBZiWD0zvYNa9Y.roa (hash: TjF06m/Mp/7aJVVxV+8vfqSIb8qTmO7jQ4Gg8K+F0O8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:2a:1b:07:7f:f0:03:02:a9:47:1d:36:40:9f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=162af3302f6a49f7eb691ac4959e1acf95db6ce7 Validity Not Before: Feb 9 19:00:51 2026 GMT Not After : Feb 10 19:00:51 2026 GMT Subject: CN=e038d3345b1bb03d2dba3a997b83b97f174a0a8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:04:3a:16:fd:0d:05:3e:f4:c5:90:03:35:27: 51:b8:c8:a2:be:39:ca:0b:4f:9d:ea:0e:db:ec:9a: 64:73:1d:29:09:b3:ba:94:b7:4a:44:da:9a:4d:e6: 59:15:68:c0:00:14:c7:51:4d:97:1c:d2:bf:81:3c: 7f:70:70:77:d9:df:11:6f:42:d6:db:36:b2:1f:89: 39:eb:48:11:bf:d6:09:d7:e5:98:36:61:b9:fc:fb: f1:f9:93:38:94:e0:43:e5:63:3f:30:ba:74:44:09: 38:6f:83:e5:35:21:aa:5b:22:8e:13:1a:5d:6f:93: c9:24:e6:b2:80:dc:24:57:01:7d:47:7a:e8:2f:25: 35:58:47:f1:d0:45:c7:4f:27:88:af:f3:f2:f5:b1: 51:45:ad:98:4e:7f:ac:ec:1e:5f:33:00:f3:ad:85: 7e:81:b6:3c:1e:d8:b8:1e:01:0d:ef:4e:20:56:1e: 66:d1:a6:af:70:43:35:0d:56:c0:ad:b5:10:bb:68: 01:02:cd:a7:b0:47:ba:26:27:95:8b:4d:c1:c8:8a: 7d:f8:78:97:8a:8a:cf:2b:67:fb:00:3a:83:94:e3: d8:26:19:b4:1b:85:e2:bd:e9:fa:4b:2a:b7:73:41: 49:17:66:f7:18:09:4b:b7:fd:2f:cb:e9:91:fa:d6: 6f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:38:D3:34:5B:1B:B0:3D:2D:BA:3A:99:7B:83:B9:7F:17:4A:0A:8A X509v3 Authority Key Identifier: keyid:16:2A:F3:30:2F:6A:49:F7:EB:69:1A:C4:95:9E:1A:CF:95:DB:6C:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FirzMC9qSffraRrElZ4az5XbbOc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/7db061-0bca-4b0e-9483-e775d5faa9e3/1/FirzMC9qSffraRrElZ4az5XbbOc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e8:d5:50:82:0d:37:09:99:4e:35:f0:e4:da:bf:38:e6:8a: d6:01:93:60:9f:b6:5d:e1:61:2a:18:b5:b3:4e:bf:46:ec:10: 6b:ba:d4:d7:9e:ba:0e:6c:f2:bb:ae:9e:64:27:d2:19:09:ac: 9c:cc:11:9b:0f:75:a1:d3:34:eb:f6:a0:fb:03:07:9b:ff:6b: c0:6c:1f:69:20:88:23:33:d8:67:94:7e:de:ba:80:73:00:fe: b6:7c:81:7b:ad:db:5a:54:35:d2:ae:2e:e6:aa:9c:43:7e:92: 2f:55:2a:9c:fb:5a:31:f0:72:2d:e2:09:bf:2a:5c:b1:04:f8: 7b:e2:c4:4f:a3:a0:d2:a7:ae:fb:43:65:db:72:0f:99:ec:f8: 1f:97:51:bd:63:37:f2:ec:40:6e:6a:5b:be:01:75:20:38:63: a7:52:a4:fc:4e:29:6b:dd:29:f6:6f:ec:f1:4e:59:be:2f:76: 21:85:13:c2:be:e2:88:60:6c:ba:a2:16:ab:df:27:e5:aa:36: a2:be:5f:9d:b4:4f:b1:f9:73:53:31:b3:2e:7e:e1:ba:02:f3: c2:ec:f1:ad:72:fb:98:30:69:66:63:f9:9a:17:23:fa:44:fa: 25:7c:61:98:ad:ad:25:73:27:61:e8:45:bc:a2:f4:4b:41:f5: 28:57:16:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxyobB3/wAwKpRx02QJ8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MmFmMzMwMmY2YTQ5ZjdlYjY5MWFjNDk1OWUxYWNmOTVk YjZjZTcwHhcNMjYwMjA5MTkwMDUxWhcNMjYwMjEwMTkwMDUxWjAzMTEwLwYDVQQD EyhlMDM4ZDMzNDViMWJiMDNkMmRiYTNhOTk3YjgzYjk3ZjE3NGEwYThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AQ6Fv0NBT70xZADNSdRuMiivjnK C0+d6g7b7Jpkcx0pCbO6lLdKRNqaTeZZFWjAABTHUU2XHNK/gTx/cHB32d8Rb0LW 2zayH4k560gRv9YJ1+WYNmG5/Pvx+ZM4lOBD5WM/MLp0RAk4b4PlNSGqWyKOExpd b5PJJOaygNwkVwF9R3roLyU1WEfx0EXHTyeIr/Py9bFRRa2YTn+s7B5fMwDzrYV+ gbY8Hti4HgEN704gVh5m0aavcEM1DVbArbUQu2gBAs2nsEe6JieVi03ByIp9+HiX iorPK2f7ADqDlOPYJhm0G4Xiven6Syq3c0FJF2b3GAlLt/0vy+mR+tZvdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOA40zRbG7A9Lbo6mXuDuX8XSgqKMB8GA1UdIwQY MBaAFBYq8zAvakn362kaxJWeGs+V22znMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMt ZTc3NWQ1ZmFhOWUzLzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS83ZGIwNjEtMGJjYS00YjBlLTk0ODMtZTc3NWQ1ZmFhOWUz LzEvRmlyek1DOXFTZmZyYVJyRWxaNGF6NVhiYk9jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOjVUIIN NwmZTjXw5Nq/OOaK1gGTYJ+2XeFhKhi1s06/RuwQa7rU1566Dmzyu66eZCfSGQms nMwRmw91odM06/ag+wMHm/9rwGwfaSCIIzPYZ5R+3rqAcwD+tnyBe63bWlQ10q4u 5qqcQ36SL1UqnPtaMfByLeIJvypcsQT4e+LET6Og0qeu+0Nl23IPmez4H5dRvWM3 8uxAbmpbvgF1IDhjp1Kk/E4pa90p9m/s8U5Zvi92IYUTwr7iiGBsuqIWq98n5ao2 or5fnbRPsflzUzGzLn7hugLzwuzxrXL7mDBpZmP5mhcj+kT6JXxhmK2tJXMnYehF vKL0S0H1KFcWrA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:50 2026 by rpki-client