This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft File: f-aLEiNL1wNDAbyWsTiq4neGCj4.mft (raw, json) Hash identifier: 9w4pOMJ7FE7s7eLjkRMxANQs1X4BctTYM1DMQaPIalM= Subject key identifier: 3C:FA:3C:7B:4F:A4:A4:FB:C8:67:F7:21:F8:E0:24:2A:A9:53:9F:78 Authority key identifier: 7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E Certificate issuer: /CN=7fe68b12234bd7034301bc96b138aae277860a3e Certificate serial: 019C43596E2955533BE25D52773FC0CFBF67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft Manifest number: 067C Signing time: Mon 09 Feb 2026 17:01:00 +0000 Manifest this update: Mon 09 Feb 2026 17:01:00 +0000 Manifest next update: Tue 10 Feb 2026 17:01:00 +0000 Files and hashes: 1: GX3AB64QskbUOjQSGuXwQocGhH4.roa (hash: MQhJE1eeGiBKPeJQc1Z6DyxcBxWQ3yiE6MW/PeUdUgY=) 2: f-aLEiNL1wNDAbyWsTiq4neGCj4.crl (hash: VHJwLKB86sT9P0wiovd7hjrrpSUddMXUkXIHJyC+/gs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:6e:29:55:53:3b:e2:5d:52:77:3f:c0:cf:bf:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7fe68b12234bd7034301bc96b138aae277860a3e Validity Not Before: Feb 9 17:01:00 2026 GMT Not After : Feb 10 17:01:00 2026 GMT Subject: CN=3cfa3c7b4fa4a4fbc867f721f8e0242aa9539f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:2b:c9:5c:f7:dd:63:b9:05:03:81:3f:f5: 77:31:2e:c1:8c:ff:3f:dd:d9:23:a5:41:a9:a6:50: 99:ce:4e:06:86:89:f2:e3:22:c5:ef:d2:25:34:55: fe:3e:d9:51:a0:27:7b:ce:c7:8b:7a:93:86:ba:cb: de:1f:7e:45:29:0a:ee:ac:b9:b2:dd:e1:79:31:80: b7:99:5f:e4:08:7e:c4:3a:8f:16:0c:68:33:bc:dc: f5:dd:50:59:6b:ff:bb:d8:d8:3b:3b:0e:32:63:20: 71:45:d8:57:ea:b8:b5:a8:30:31:d7:4f:c8:a9:96: 88:61:56:67:cb:b7:3e:bc:79:79:76:74:18:8e:a8: 41:5b:3b:98:6c:55:22:ef:31:c2:26:38:b3:30:e0: c7:12:2b:11:ec:7b:8b:c6:d7:39:20:e7:17:66:84: c5:81:ff:f0:11:e2:91:5e:99:d0:70:ae:fa:e0:a0: ff:25:bb:81:78:73:cf:7b:a2:51:1c:6f:d3:08:8b: cd:d7:59:57:ad:28:e2:e9:ba:25:4c:53:c9:da:46: 9d:3b:65:3c:59:b9:03:40:76:2d:16:07:ed:2f:63: 21:24:15:12:d5:55:85:90:ef:b4:f4:72:3f:7a:65: ec:06:34:2d:23:52:c7:d1:66:33:c7:09:7a:8a:08: 54:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:FA:3C:7B:4F:A4:A4:FB:C8:67:F7:21:F8:E0:24:2A:A9:53:9F:78 X509v3 Authority Key Identifier: keyid:7F:E6:8B:12:23:4B:D7:03:43:01:BC:96:B1:38:AA:E2:77:86:0A:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-aLEiNL1wNDAbyWsTiq4neGCj4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/4a1111-8f3c-4edf-b77c-2fa2631bc31c/1/f-aLEiNL1wNDAbyWsTiq4neGCj4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e4:18:47:d9:84:ed:3e:f2:28:53:1a:17:1c:3e:a6:0b:ca: c7:65:50:92:c7:37:1d:62:f2:9e:6a:78:77:a7:0d:f9:67:96: 3f:02:c8:a7:f8:8e:d9:28:b1:d3:c7:a9:9d:1d:19:d3:2a:a6: 20:c5:e3:ae:b1:c7:df:a0:d5:45:84:d5:ea:64:50:81:62:7f: 37:33:f4:ac:e1:c4:d5:5e:de:fd:48:a7:15:6b:c6:13:31:25: 80:49:dd:63:96:1c:be:57:18:6d:1b:53:72:cf:9a:13:65:91: bb:7e:5e:5e:a4:db:0e:e5:ef:29:28:c8:e2:1f:1a:76:05:71: ff:dc:88:41:e1:77:53:56:f9:cc:8d:5d:e6:63:c4:91:04:f6: 41:3a:4a:c9:7e:01:3e:0a:1a:13:00:50:36:fe:27:c4:68:20: 1e:4c:5a:c2:80:1e:20:87:d1:8e:01:c2:00:eb:d2:ae:ce:40: 07:a1:6f:36:6e:b3:7a:c0:c6:7d:88:12:82:d8:f3:64:35:06: 83:9b:85:e6:22:41:9f:b3:9e:7e:78:a3:81:8f:ee:f9:20:18: 10:56:18:93:0a:b5:88:4d:5b:d9:22:fc:83:95:d6:3a:15:c1: 54:15:54:ae:4a:a6:3e:4c:7c:9a:2e:90:26:3f:5f:b2:59:87: 13:81:61:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWW4pVVM74l1Sdz/Az79nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmZTY4YjEyMjM0YmQ3MDM0MzAxYmM5NmIxMzhhYWUyNzc4 NjBhM2UwHhcNMjYwMjA5MTcwMTAwWhcNMjYwMjEwMTcwMTAwWjAzMTEwLwYDVQQD EygzY2ZhM2M3YjRmYTRhNGZiYzg2N2Y3MjFmOGUwMjQyYWE5NTM5Zjc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCwryVz33WO5BQOBP/V3MS7BjP8/ 3dkjpUGpplCZzk4Ghony4yLF79IlNFX+PtlRoCd7zseLepOGusveH35FKQrurLmy 3eF5MYC3mV/kCH7EOo8WDGgzvNz13VBZa/+72Ng7Ow4yYyBxRdhX6ri1qDAx10/I qZaIYVZny7c+vHl5dnQYjqhBWzuYbFUi7zHCJjizMODHEisR7HuLxtc5IOcXZoTF gf/wEeKRXpnQcK764KD/JbuBeHPPe6JRHG/TCIvN11lXrSji6bolTFPJ2kadO2U8 WbkDQHYtFgftL2MhJBUS1VWFkO+09HI/emXsBjQtI1LH0WYzxwl6ighUGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDz6PHtPpKT7yGf3IfjgJCqpU594MB8GA1UdIwQY MBaAFH/mixIjS9cDQwG8lrE4quJ3hgo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi80YTExMTEtOGYzYy00ZWRmLWI3N2Mt MmZhMjYzMWJjMzFjLzEvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi80YTExMTEtOGYzYy00ZWRmLWI3N2MtMmZhMjYzMWJjMzFj LzEvZi1hTEVpTkwxd05EQWJ5V3NUaXE0bmVHQ2o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOQYR9mE 7T7yKFMaFxw+pgvKx2VQksc3HWLynmp4d6cN+WeWPwLIp/iO2Six08epnR0Z0yqm IMXjrrHH36DVRYTV6mRQgWJ/NzP0rOHE1V7e/UinFWvGEzElgEndY5YcvlcYbRtT cs+aE2WRu35eXqTbDuXvKSjI4h8adgVx/9yIQeF3U1b5zI1d5mPEkQT2QTpKyX4B PgoaEwBQNv4nxGggHkxawoAeIIfRjgHCAOvSrs5AB6FvNm6zesDGfYgSgtjzZDUG g5uF5iJBn7OefnijgY/u+SAYEFYYkwq1iE1b2SL8g5XWOhXBVBVUrkqmPkx8mi6Q Jj9fslmHE4FhQA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:18 2026 by rpki-client