This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft File: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft (raw, json) Hash identifier: LP/ceeK7Le9cwmKjzoKUtYICSvy+1H/hWyHoDNUGctM= Subject key identifier: 2E:98:25:FE:20:13:A2:04:B0:E8:64:14:3B:44:FC:07:09:51:58:A9 Authority key identifier: 15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F Certificate issuer: /CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f Certificate serial: 019C42EAFB31415C19796AD1DEB4A818136E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft Manifest number: 066B Signing time: Mon 09 Feb 2026 15:00:21 +0000 Manifest this update: Mon 09 Feb 2026 15:00:21 +0000 Manifest next update: Tue 10 Feb 2026 15:00:21 +0000 Files and hashes: 1: Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl (hash: fTbZL+kPbjkzDe2ntPNJ317Dv4WCsTeg7QX7T13FHtM=) 2: aBV45nCtW7muN7ru-bpxU44kM1s.roa (hash: /y1XWSIqCBMFz5YEZLL16VNYk0h7Lda5evGQctWGrH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:fb:31:41:5c:19:79:6a:d1:de:b4:a8:18:13:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15ad6f24bcecdc8daec3e7454bc1283dc0cd931f Validity Not Before: Feb 9 15:00:21 2026 GMT Not After : Feb 10 15:00:21 2026 GMT Subject: CN=2e9825fe2013a204b0e864143b44fc07095158a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e9:2c:4b:cf:0f:7c:b3:4f:0f:5a:3b:5b:38: ef:e6:4a:be:1b:9c:1f:d6:b1:49:63:76:d6:43:47: a0:49:f0:4a:f1:35:43:6c:7f:a5:54:f8:9f:a7:e5: 8b:ea:81:a1:cd:40:1a:54:66:a7:94:37:0d:c0:66: e1:e3:3f:f9:1b:e5:f7:21:a2:b2:26:b6:8b:b0:46: 13:2c:84:27:da:2f:d2:58:39:9e:ae:cf:5c:d2:ae: f5:82:e6:5e:a6:7a:41:dd:f1:b0:e3:3f:4a:a5:53: ad:54:b2:67:67:0e:69:13:66:d5:fd:d2:88:28:82: 96:0f:a3:9d:e6:c7:db:ec:4c:d8:5b:f3:85:19:fc: 38:da:86:99:17:e8:11:0c:54:f5:45:00:57:da:14: 4a:0f:6e:00:fb:d0:dc:2e:dd:8a:00:53:e6:b0:f2: b2:e2:6c:f6:40:a3:a4:c6:eb:21:03:e7:44:9a:19: e3:eb:04:8e:03:31:73:d9:fc:c2:35:1b:44:14:4a: fb:ca:b4:15:6c:98:ba:14:5c:1c:ec:3b:e6:e3:f5: dc:ed:38:d2:8e:52:f1:5f:a5:54:f2:14:ad:28:96: 1c:3c:5f:0a:30:04:9d:f4:a1:1f:4b:1f:46:e7:7c: 88:46:ef:01:5e:05:83:3a:80:78:fd:83:a8:e4:35: ed:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:98:25:FE:20:13:A2:04:B0:E8:64:14:3B:44:FC:07:09:51:58:A9 X509v3 Authority Key Identifier: keyid:15:AD:6F:24:BC:EC:DC:8D:AE:C3:E7:45:4B:C1:28:3D:C0:CD:93:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f38a3e-53be-41d5-9c85-201d507345d9/1/Fa1vJLzs3I2uw-dFS8EoPcDNkx8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:d0:b0:d0:2f:34:d5:63:d7:3a:f2:a3:7e:e6:53:55:83:14: 05:8d:a4:65:e5:57:0b:74:5d:d5:c6:ad:35:f0:48:87:0f:6f: 74:f0:34:82:31:33:d4:58:56:4c:73:10:24:0a:3d:b2:b3:e3: 1e:95:0b:12:85:9b:11:ca:31:76:a5:aa:72:40:f9:88:73:8a: c2:4b:f6:32:2f:69:7d:ec:90:21:04:59:7c:c5:df:7f:1b:bf: 2c:f6:77:c0:6f:03:eb:8b:06:de:e5:13:bc:78:97:e3:6b:58: 2b:d8:37:8c:92:79:bc:ab:0c:e6:7b:2f:e6:37:83:e2:da:08: 42:91:23:7d:87:8b:d5:d8:09:fd:3c:30:a4:b6:26:15:16:c9: fe:24:cd:3e:6c:02:2c:b0:0b:3a:1a:b3:9e:34:c5:32:a6:b9: a7:74:1e:3f:01:6a:4f:37:bd:3a:34:d1:b1:12:7d:54:cb:48: 6a:a5:57:f0:c6:40:d2:ec:61:aa:0b:e4:5e:25:31:63:c4:ab: e0:66:7d:5c:1b:0d:7e:42:f3:41:ba:bf:81:0d:01:5f:49:48: 1a:a9:60:a4:da:33:1e:42:ac:34:56:c2:2b:17:69:1e:35:66: 6a:ad:83:12:54:8c:26:5a:bd:08:6e:cd:15:87:35:cd:84:af: 41:ba:a6:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vsxQVwZeWrR3rSoGBNuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1YWQ2ZjI0YmNlY2RjOGRhZWMzZTc0NTRiYzEyODNkYzBj ZDkzMWYwHhcNMjYwMjA5MTUwMDIxWhcNMjYwMjEwMTUwMDIxWjAzMTEwLwYDVQQD EygyZTk4MjVmZTIwMTNhMjA0YjBlODY0MTQzYjQ0ZmMwNzA5NTE1OGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquksS88PfLNPD1o7Wzjv5kq+G5wf 1rFJY3bWQ0egSfBK8TVDbH+lVPifp+WL6oGhzUAaVGanlDcNwGbh4z/5G+X3IaKy JraLsEYTLIQn2i/SWDmers9c0q71guZepnpB3fGw4z9KpVOtVLJnZw5pE2bV/dKI KIKWD6Od5sfb7EzYW/OFGfw42oaZF+gRDFT1RQBX2hRKD24A+9DcLt2KAFPmsPKy 4mz2QKOkxushA+dEmhnj6wSOAzFz2fzCNRtEFEr7yrQVbJi6FFwc7Dvm4/Xc7TjS jlLxX6VU8hStKJYcPF8KMASd9KEfSx9G53yIRu8BXgWDOoB4/YOo5DXtvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6YJf4gE6IEsOhkFDtE/AcJUVipMB8GA1UdIwQY MBaAFBWtbyS87NyNrsPnRUvBKD3AzZMfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmExdkpMenMzSTJ1dy1kRlM4RW9QY0ROa3g4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMzhhM2UtNTNiZS00MWQ1LTljODUt MjAxZDUwNzM0NWQ5LzEvRmExdkpMenMzSTJ1dy1kRlM4RW9QY0ROa3g4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy9mMzhhM2UtNTNiZS00MWQ1LTljODUtMjAxZDUwNzM0NWQ5 LzEvRmExdkpMenMzSTJ1dy1kRlM4RW9QY0ROa3g4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcNCw0C80 1WPXOvKjfuZTVYMUBY2kZeVXC3Rd1catNfBIhw9vdPA0gjEz1FhWTHMQJAo9srPj HpULEoWbEcoxdqWqckD5iHOKwkv2Mi9pfeyQIQRZfMXffxu/LPZ3wG8D64sG3uUT vHiX42tYK9g3jJJ5vKsM5nsv5jeD4toIQpEjfYeL1dgJ/TwwpLYmFRbJ/iTNPmwC LLALOhqznjTFMqa5p3QePwFqTze9OjTRsRJ9VMtIaqVX8MZA0uxhqgvkXiUxY8Sr 4GZ9XBsNfkLzQbq/gQ0BX0lIGqlgpNozHkKsNFbCKxdpHjVmaq2DElSMJlq9CG7N FYc1zYSvQbqm+w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:48 2026 by rpki-client