This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft File: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft (raw, json) Hash identifier: pWga2rDr2uJglSroXpUk1G7PPEF+tpDUKgPxGpVMTZc= Subject key identifier: FE:0C:DB:F6:68:97:8E:08:4E:38:9C:FD:01:C8:52:0B:D0:A0:64:C4 Authority key identifier: FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8 Certificate issuer: /CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8 Certificate serial: 019C438FC735FD2561F000A250DEB1376E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft Manifest number: 167F Signing time: Mon 09 Feb 2026 18:00:21 +0000 Manifest this update: Mon 09 Feb 2026 18:00:21 +0000 Manifest next update: Tue 10 Feb 2026 18:00:21 +0000 Files and hashes: 1: 1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl (hash: gOeACOq3MkgqSW4kGsyyNkXsBUnOrFRb6sGsKlVT7SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:c7:35:fd:25:61:f0:00:a2:50:de:b1:37:6e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa14cc20a70ef5a03146a7dc5a79ddb5065bede8 Validity Not Before: Feb 9 18:00:21 2026 GMT Not After : Feb 10 18:00:21 2026 GMT Subject: CN=fe0cdbf668978e084e389cfd01c8520bd0a064c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5c:50:ea:21:72:45:b4:05:e8:45:bb:6e:92: 51:4d:1f:a5:d3:db:68:70:cd:bf:47:37:b2:c1:5d: 04:be:24:89:08:1a:2e:16:67:1b:07:ad:8d:4f:1f: e3:42:1b:34:99:89:e6:be:5a:0e:81:0c:87:07:5f: 50:ce:ca:f7:ce:d8:f0:61:ca:52:03:41:e4:f1:3d: 87:e5:44:9a:8d:0b:ad:02:16:70:05:85:41:3f:a4: 49:2d:06:d5:37:04:e8:bb:bb:77:f0:3c:0a:8d:ca: fd:7a:2a:f0:73:58:a1:e5:b7:2e:68:34:51:e1:76: 41:c2:0f:d7:ea:23:77:a6:f6:3d:32:4f:0b:93:c1: 1c:d5:c2:24:50:8a:bb:87:35:38:84:37:26:f3:22: 7a:25:3e:6f:42:f9:b0:60:a0:ab:bc:ae:4f:9b:00: 06:73:3f:44:1c:2f:3a:1e:f0:f0:ca:79:c3:ec:c1: 07:6a:27:a6:3e:1a:76:36:83:e6:cb:5e:70:69:2e: 31:fd:1b:d6:21:f8:58:79:98:ee:e7:b2:97:5f:6d: 96:07:d2:d1:b9:0d:1e:7a:7c:99:6e:ed:8f:64:02: fd:c9:d3:65:e2:e4:e2:b6:d7:af:ed:41:4f:cb:e4: 3f:18:04:25:0b:9d:1e:29:51:81:19:09:56:88:b4: 6f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:0C:DB:F6:68:97:8E:08:4E:38:9C:FD:01:C8:52:0B:D0:A0:64:C4 X509v3 Authority Key Identifier: keyid:FA:14:CC:20:A7:0E:F5:A0:31:46:A7:DC:5A:79:DD:B5:06:5B:ED:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hTMIKcO9aAxRqfcWnndtQZb7eg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/50bfce-385e-4064-bde7-59fec2b9f914/1/1-hTMIKcO9aAxRqfcWnndtQZb7eg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:41:f3:d9:bf:28:02:3e:c8:48:9c:5d:3a:8b:bb:c3:a8:fc: 3d:66:61:30:96:73:6e:64:a4:72:3b:ec:30:61:d0:21:10:04: 5d:f8:39:38:c2:5b:a7:61:8d:e8:cb:75:fd:1a:0c:47:66:b6: fc:32:bd:23:5c:1c:dd:28:b7:5b:bd:cc:4e:20:2e:4c:43:49: 16:39:1e:e3:06:28:d2:79:db:e6:b6:c8:c5:ab:d0:44:df:da: bc:6a:c2:06:69:40:d1:d0:b2:5b:16:28:89:5a:c9:fe:c5:cb: e4:80:b0:9b:2a:b7:28:c7:bc:fe:fa:ec:d9:0a:11:76:df:8e: e7:84:ec:18:c1:ce:b1:c8:a2:28:53:bb:9c:52:f3:6a:6d:2e: 2d:7e:e2:50:07:a6:ef:5b:9e:35:9e:26:a2:57:53:6e:c1:30: 9a:5c:83:2b:be:90:85:fa:93:c7:66:12:30:a1:94:2f:b1:91: 51:87:b6:76:90:b7:05:a2:d1:32:03:f0:7d:24:28:66:f9:82: a3:0d:8e:30:84:1e:96:0b:0f:bd:79:8f:6a:e4:21:44:4a:df: b6:9c:d7:f1:08:43:76:aa:f3:b8:3e:82:0d:20:1e:9d:10:a8: 0b:7a:5a:98:93:ca:06:21:aa:f6:f3:a9:f6:a7:8d:90:b5:8b: 8a:cd:44:50 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDj8c1/SVh8ACiUN6xN24EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMTRjYzIwYTcwZWY1YTAzMTQ2YTdkYzVhNzlkZGI1MDY1 YmVkZTgwHhcNMjYwMjA5MTgwMDIxWhcNMjYwMjEwMTgwMDIxWjAzMTEwLwYDVQQD EyhmZTBjZGJmNjY4OTc4ZTA4NGUzODljZmQwMWM4NTIwYmQwYTA2NGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFxQ6iFyRbQF6EW7bpJRTR+l09to cM2/RzeywV0EviSJCBouFmcbB62NTx/jQhs0mYnmvloOgQyHB19Qzsr3ztjwYcpS A0Hk8T2H5USajQutAhZwBYVBP6RJLQbVNwTou7t38DwKjcr9eirwc1ih5bcuaDRR 4XZBwg/X6iN3pvY9Mk8Lk8Ec1cIkUIq7hzU4hDcm8yJ6JT5vQvmwYKCrvK5PmwAG cz9EHC86HvDwynnD7MEHaiemPhp2NoPmy15waS4x/RvWIfhYeZju57KXX22WB9LR uQ0eenyZbu2PZAL9ydNl4uTittev7UFPy+Q/GAQlC50eKVGBGQlWiLRvpwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFP4M2/Zol44ITjic/QHIUgvQoGTEMB8GA1UdIwQY MBaAFPoUzCCnDvWgMUan3Fp53bUGW+3oMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1oVE1JS2NPOWFBeFJxZmNXbm5kdFFaYjdlZy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMvNTBiZmNlLTM4NWUtNDA2NC1iZGU3 LTU5ZmVjMmI5ZjkxNC8xLzEtaFRNSUtjTzlhQXhScWZjV25uZHRRWmI3ZWcubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzljLzUwYmZjZS0zODVlLTQwNjQtYmRlNy01OWZlYzJiOWY5 MTQvMS8xLWhUTUlLY085YUF4UnFmY1dubmR0UVpiN2VnLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhUHz 2b8oAj7ISJxdOou7w6j8PWZhMJZzbmSkcjvsMGHQIRAEXfg5OMJbp2GN6Mt1/RoM R2a2/DK9I1wc3Si3W73MTiAuTENJFjke4wYo0nnb5rbIxavQRN/avGrCBmlA0dCy WxYoiVrJ/sXL5ICwmyq3KMe8/vrs2QoRdt+O54TsGMHOsciiKFO7nFLzam0uLX7i UAem71ueNZ4moldTbsEwmlyDK76QhfqTx2YSMKGUL7GRUYe2dpC3BaLRMgPwfSQo ZvmCow2OMIQelgsPvXmPauQhRErftpzX8QhDdqrzuD6CDSAenRCoC3pamJPKBiGq 9vOp9qeNkLWLis1EUA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:20 2026 by rpki-client