This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft File: F2YCXZOeDHsc9GwCGez6JaGVOCU.mft (raw, json) Hash identifier: hJ+z5weI18klhSj6wq3JPyZomSRCANuwR9ayPp3IpXU= Subject key identifier: 6A:C2:85:11:1F:D9:63:F9:9B:10:5D:69:3F:47:C6:6D:F4:E8:3E:CF Authority key identifier: 17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25 Certificate issuer: /CN=1766025d939e0c7b1cf46c0219ecfa25a1953825 Certificate serial: 019C41D8F4E1E784EFDB332B9049E32BA98C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 10:01:03 +0000 Manifest this update: Mon 09 Feb 2026 10:01:03 +0000 Manifest next update: Tue 10 Feb 2026 10:01:03 +0000 Files and hashes: 1: F2YCXZOeDHsc9GwCGez6JaGVOCU.crl (hash: JDm3kGSbEhuXpjnztlkdwJM8GMhRzhMJZzhv87o4WSo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f4:e1:e7:84:ef:db:33:2b:90:49:e3:2b:a9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1766025d939e0c7b1cf46c0219ecfa25a1953825 Validity Not Before: Feb 9 10:01:03 2026 GMT Not After : Feb 10 10:01:03 2026 GMT Subject: CN=6ac285111fd963f99b105d693f47c66df4e83ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1c:bf:b6:66:18:55:09:a9:db:c4:6d:ec:d7: f0:eb:6e:c3:5b:0b:f8:29:48:33:79:01:71:aa:fb: e3:7f:f6:90:54:e6:88:e9:1d:1c:1d:8b:15:95:63: f3:92:73:16:61:ef:06:77:4b:fc:15:d9:0e:db:94: ee:94:ee:70:d2:34:eb:49:70:05:93:69:be:74:d6: 6b:ce:7d:8c:03:7b:3d:8f:50:4a:75:a1:19:2a:06: 23:54:cd:ee:78:00:9a:b7:5f:4d:12:7d:6a:e3:ca: e0:d4:95:ac:fb:3b:09:29:33:84:f8:6d:2d:bb:f2: a4:f9:c5:62:76:8b:1b:98:d8:58:f5:bc:31:e9:15: e8:28:b8:1d:e4:07:a8:07:50:4d:5e:c6:11:db:60: 4d:45:42:bb:3e:5c:b6:3b:e7:82:69:07:46:cd:0e: cc:c1:ac:3e:4a:13:9c:8d:04:67:a8:42:90:1c:c5: 98:55:22:59:39:0d:b2:30:2a:17:b2:23:5b:71:67: 5f:22:04:1d:da:0b:6d:13:9b:38:05:ed:2f:3c:f5: bc:ec:24:b4:6d:1c:a2:53:9b:0f:aa:c9:47:b1:82: ba:20:1a:56:55:4f:fa:d3:ea:19:74:91:64:14:68: ad:91:0e:ee:94:38:87:b9:3a:bf:b5:56:be:8f:29: d9:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C2:85:11:1F:D9:63:F9:9B:10:5D:69:3F:47:C6:6D:F4:E8:3E:CF X509v3 Authority Key Identifier: keyid:17:66:02:5D:93:9E:0C:7B:1C:F4:6C:02:19:EC:FA:25:A1:95:38:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F2YCXZOeDHsc9GwCGez6JaGVOCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4f1419-6e5c-4d05-a5b7-e28352e79f7d/1/F2YCXZOeDHsc9GwCGez6JaGVOCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ca:30:81:cb:a6:d7:58:6e:0e:17:3c:ed:52:5c:6a:16:93: cb:c7:01:7d:d6:e2:4f:96:7d:8d:68:3a:78:52:c5:26:2a:d3: 4f:74:14:07:d6:3d:0e:34:68:b7:ed:63:98:4d:c9:f9:c7:e5: 2a:43:72:81:e0:9d:2b:a0:12:7f:17:78:cd:54:02:9c:bb:c7: fd:4d:07:e0:7d:a1:70:60:49:05:11:5e:9f:21:47:77:1e:4b: c4:11:e1:e3:dc:30:63:f3:09:d5:54:67:b0:d3:a5:5f:93:68: 07:aa:f4:d7:aa:59:5e:dd:35:ae:16:19:66:06:17:3c:6f:e2: 23:2b:92:aa:86:3e:6c:73:b3:7e:0d:4c:bc:d7:02:91:5c:8a: 5d:81:0f:38:f6:39:d5:b0:23:21:00:22:43:c9:46:06:7e:b5: 06:4f:a8:94:11:04:b3:b7:3d:e7:2a:5d:d6:a0:97:22:67:9f: be:ae:dd:c7:9e:b7:18:54:6e:e3:73:8f:76:ee:b8:87:53:af: a2:2f:dc:07:fe:64:fd:f4:0b:90:cc:75:53:a3:ed:af:45:c0: af:a5:18:46:7a:1f:06:6f:6a:80:e6:b5:b1:b9:54:63:1a:bc: 94:83:de:00:37:37:06:8b:08:eb:7d:fd:93:35:61:0c:fb:78: 4f:54:90:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PTh54Tv2zMrkEnjK6mMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NjYwMjVkOTM5ZTBjN2IxY2Y0NmMwMjE5ZWNmYTI1YTE5 NTM4MjUwHhcNMjYwMjA5MTAwMTAzWhcNMjYwMjEwMTAwMTAzWjAzMTEwLwYDVQQD Eyg2YWMyODUxMTFmZDk2M2Y5OWIxMDVkNjkzZjQ3YzY2ZGY0ZTgzZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBy/tmYYVQmp28Rt7Nfw627DWwv4 KUgzeQFxqvvjf/aQVOaI6R0cHYsVlWPzknMWYe8Gd0v8FdkO25TulO5w0jTrSXAF k2m+dNZrzn2MA3s9j1BKdaEZKgYjVM3ueACat19NEn1q48rg1JWs+zsJKTOE+G0t u/Kk+cVidosbmNhY9bwx6RXoKLgd5AeoB1BNXsYR22BNRUK7Ply2O+eCaQdGzQ7M waw+ShOcjQRnqEKQHMWYVSJZOQ2yMCoXsiNbcWdfIgQd2gttE5s4Be0vPPW87CS0 bRyiU5sPqslHsYK6IBpWVU/60+oZdJFkFGitkQ7ulDiHuTq/tVa+jynZEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrChREf2WP5mxBdaT9Hxm306D7PMB8GA1UdIwQY MBaAFBdmAl2Tngx7HPRsAhns+iWhlTglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1Yjct ZTI4MzUyZTc5ZjdkLzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC80ZjE0MTktNmU1Yy00ZDA1LWE1YjctZTI4MzUyZTc5Zjdk LzEvRjJZQ1haT2VESHNjOUd3Q0dlejZKYUdWT0NVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcowgcum 11huDhc87VJcahaTy8cBfdbiT5Z9jWg6eFLFJirTT3QUB9Y9DjRot+1jmE3J+cfl KkNygeCdK6ASfxd4zVQCnLvH/U0H4H2hcGBJBRFenyFHdx5LxBHh49wwY/MJ1VRn sNOlX5NoB6r016pZXt01rhYZZgYXPG/iIyuSqoY+bHOzfg1MvNcCkVyKXYEPOPY5 1bAjIQAiQ8lGBn61Bk+olBEEs7c95ypd1qCXImefvq7dx563GFRu43OPdu64h1Ov oi/cB/5k/fQLkMx1U6Ptr0XAr6UYRnofBm9qgOa1sblUYxq8lIPeADc3BosI6339 kzVhDPt4T1SQrg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:01 2026 by rpki-client