This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft File: fF27C541OBhfPm1uPH2i-JIsjOA.mft (raw, json) Hash identifier: /AqH1GMWA7BmNzs+KYvFAgUeiwH5rXwKr387pmfHxVM= Subject key identifier: C4:1F:16:1E:4A:E3:68:D5:09:A7:6D:3E:0C:8E:07:42:2D:94:7E:85 Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0 Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0 Certificate serial: 019C2DE495481A75D30E558AAC7062692263 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft Manifest number: 0978 Signing time: Thu 05 Feb 2026 13:01:20 +0000 Manifest this update: Thu 05 Feb 2026 13:01:20 +0000 Manifest next update: Fri 06 Feb 2026 13:01:20 +0000 Files and hashes: 1: fF27C541OBhfPm1uPH2i-JIsjOA.crl (hash: XAzVGBZQDUur7yhiDL0F7AplWqmHpBZKxaeeVYhHkAU=) 2: wwGJXI1Q4Ez5sml_ZmTVacx8kBM.roa (hash: sku+gN8eL3JC9irfaIS3rJD2l21DtLI/BG8hhkJ6nL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:2d:e4:95:48:1a:75:d3:0e:55:8a:ac:70:62:69:22:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0 Validity Not Before: Feb 5 13:01:20 2026 GMT Not After : Feb 6 13:01:20 2026 GMT Subject: CN=c41f161e4ae368d509a76d3e0c8e07422d947e85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:ac:d8:0d:5d:44:a1:2f:bd:ab:81:3b:71: 8c:97:63:fa:0c:95:a2:8e:22:60:0f:58:1b:6c:50: 5a:55:b6:c6:23:d2:f4:68:81:44:04:21:8f:f6:f9: 2a:f1:4a:be:a7:60:f9:7c:8a:46:48:02:04:64:65: 34:7b:40:3c:81:1e:10:f1:a6:00:d7:9d:1d:93:1f: c8:2b:e7:0f:f7:80:8f:30:3e:2b:7f:dd:ac:77:cf: 58:ca:e9:c4:0c:a9:f0:da:0d:03:e4:25:81:0b:c7: 60:1b:2a:fd:cc:33:21:c0:b7:5e:5f:b5:8e:92:f4: 7b:11:cf:59:b0:bf:f0:3d:c3:92:bc:88:0c:05:81: 91:f6:fc:72:73:c4:26:39:f5:d2:d6:c9:81:98:96: d5:36:08:68:b8:8c:fc:82:62:6d:6c:59:61:0f:00: c2:c4:30:00:6e:d1:43:d2:50:d7:04:25:f3:05:b7: 6d:01:b4:de:57:3c:e4:b3:69:ef:ed:03:32:ce:c1: c8:15:12:03:be:03:e1:fb:04:61:5d:c7:93:69:fc: 4f:7a:02:3f:fa:13:a5:ae:42:82:a7:68:b8:b9:26: 33:01:e6:ac:de:21:d3:4f:4b:9a:50:92:74:e2:22: 2a:fd:bd:ee:1b:77:a7:dd:ef:82:de:24:73:59:ef: 3c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1F:16:1E:4A:E3:68:D5:09:A7:6D:3E:0C:8E:07:42:2D:94:7E:85 X509v3 Authority Key Identifier: keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b9:8c:2e:17:02:83:de:49:45:7c:5d:da:38:05:ea:2d:b5: a9:03:b1:bb:29:d6:36:56:a4:0d:1d:21:12:27:aa:c1:8e:5b: 70:02:ee:4f:6f:00:37:46:4f:8b:09:f8:76:79:41:84:2b:4a: 33:ff:8c:1e:5f:07:94:70:ec:97:ca:bd:9d:e8:9f:fa:93:e1: 99:47:ec:01:dd:8f:3d:18:fe:76:0e:d6:54:68:98:e8:57:95: a2:5c:9d:72:26:fa:0e:86:55:e1:a8:03:28:1c:20:bf:2b:a1: 03:54:80:1a:73:7d:cb:4a:33:5d:70:ce:8c:c8:c1:df:46:1f: c1:be:c9:e5:76:b1:68:a1:c7:99:d3:32:5f:1d:4e:a5:c4:f6: 9c:45:3d:e0:38:5f:86:99:12:d8:b0:69:ca:f0:ca:26:10:31: 23:fd:25:57:36:bd:09:df:de:a5:69:36:80:a2:d5:be:6b:6f: 2f:09:3e:34:5c:8a:bd:c9:7b:2e:50:4d:29:6d:f3:59:82:8e: b5:32:78:18:87:d5:ba:e9:8c:c0:c8:08:d1:9f:bb:4d:a6:91: fd:93:d3:0d:b1:87:8c:e5:f1:37:b5:28:7d:ff:30:f0:7c:f0: 37:60:3d:a2:60:4f:f5:f9:a8:30:d8:07:05:8e:28:de:07:47: 62:8d:da:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwt5JVIGnXTDlWKrHBiaSJjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjNWRiYjBiOWUzNTM4MTg1ZjNlNmQ2ZTNjN2RhMmY4OTIy YzhjZTAwHhcNMjYwMjA1MTMwMTIwWhcNMjYwMjA2MTMwMTIwWjAzMTEwLwYDVQQD EyhjNDFmMTYxZTRhZTM2OGQ1MDlhNzZkM2UwYzhlMDc0MjJkOTQ3ZTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRGs2A1dRKEvvauBO3GMl2P6DJWi jiJgD1gbbFBaVbbGI9L0aIFEBCGP9vkq8Uq+p2D5fIpGSAIEZGU0e0A8gR4Q8aYA 150dkx/IK+cP94CPMD4rf92sd89YyunEDKnw2g0D5CWBC8dgGyr9zDMhwLdeX7WO kvR7Ec9ZsL/wPcOSvIgMBYGR9vxyc8QmOfXS1smBmJbVNghouIz8gmJtbFlhDwDC xDAAbtFD0lDXBCXzBbdtAbTeVzzks2nv7QMyzsHIFRIDvgPh+wRhXceTafxPegI/ +hOlrkKCp2i4uSYzAeas3iHTT0uaUJJ04iIq/b3uG3en3e+C3iRzWe883wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQfFh5K42jVCadtPgyOB0ItlH6FMB8GA1UdIwQY MBaAFHxduwueNTgYXz5tbjx9oviSLIzgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAt NzVmNmU1MjkxODZmLzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My9lODEyMGMtNzQ1MS00NWFlLTg5YjAtNzVmNmU1MjkxODZm LzEvZkYyN0M1NDFPQmhmUG0xdVBIMmktSklzak9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7mMLhcC g95JRXxd2jgF6i21qQOxuynWNlakDR0hEieqwY5bcALuT28AN0ZPiwn4dnlBhCtK M/+MHl8HlHDsl8q9neif+pPhmUfsAd2PPRj+dg7WVGiY6FeVolydcib6DoZV4agD KBwgvyuhA1SAGnN9y0ozXXDOjMjB30Yfwb7J5XaxaKHHmdMyXx1OpcT2nEU94Dhf hpkS2LBpyvDKJhAxI/0lVza9Cd/epWk2gKLVvmtvLwk+NFyKvcl7LlBNKW3zWYKO tTJ4GIfVuumMwMgI0Z+7TaaR/ZPTDbGHjOXxN7Uoff8w8HzwN2A9omBP9fmoMNgH BY4o3gdHYo3aNQ== -----END CERTIFICATE-----Generated at Thu Feb 5 18:33:13 2026 by rpki-client