This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft File: D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft (raw, json) Hash identifier: dbwijkDeERlh4PYmIOhUZpRdd2GZ+D+V0pBX4WngS+o= Subject key identifier: 02:E5:BE:D1:31:B8:AD:F7:0E:A1:9B:E5:47:13:26:CD:A4:9F:CB:D4 Authority key identifier: 0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 Certificate issuer: /CN=0fb7cdb05282b089b476759f69ed4a436b456362 Certificate serial: 019C3FB32828ED13C103AAE1926B9DAC6312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft Manifest number: B9 Signing time: Mon 09 Feb 2026 00:00:31 +0000 Manifest this update: Mon 09 Feb 2026 00:00:31 +0000 Manifest next update: Tue 10 Feb 2026 00:00:31 +0000 Files and hashes: 1: D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl (hash: pCzhiPzjAaxihuPL1B2KdfxS1eUGqJJKp0UWAFTSicw=) 2: Jv84iN2B8ANANDflC9HEXw5LA8Y.roa (hash: qNF0F5ELDvVzv6IS3eSh9XZM4TiIIZIYRSv7YJ85pZA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Feb 2026 21:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:3f:b3:28:28:ed:13:c1:03:aa:e1:92:6b:9d:ac:63:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fb7cdb05282b089b476759f69ed4a436b456362 Validity Not Before: Feb 9 00:00:31 2026 GMT Not After : Feb 10 00:00:31 2026 GMT Subject: CN=02e5bed131b8adf70ea19be5471326cda49fcbd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b6:9f:4b:9c:a3:83:a5:4e:c5:ca:63:cd:d5: ee:51:1e:67:21:3a:24:ac:e1:47:45:4d:bc:77:a9: 2a:ed:31:d8:68:2d:35:c4:0f:e2:b9:ba:fc:54:65: 42:75:30:40:2b:e8:03:db:a6:3f:b4:a4:75:64:2f: 8a:b0:7b:3d:6e:91:df:82:30:0e:42:30:6f:c7:d1: 44:65:c9:5a:bb:0e:25:59:e8:b0:a6:16:d1:9d:e4: 92:27:74:f0:94:18:3b:41:3b:1e:2d:ba:9e:e2:42: f2:3e:54:58:05:a9:c1:c1:ad:90:dc:2c:e4:5c:e7: f0:45:2b:74:05:74:ff:34:23:0a:6b:60:18:b3:99: d4:ad:56:c3:44:c4:b6:75:8e:2a:43:3f:32:2b:91: 41:ad:a5:56:22:cc:3b:1b:8d:38:17:ee:a0:d6:a4: 80:db:3c:d4:5c:8a:27:8f:bc:fe:0e:0d:cf:49:de: f1:0d:cb:ef:af:17:3b:61:c4:e3:4c:92:ec:11:b8: bd:9e:87:73:91:47:e0:43:6c:52:48:d9:8d:7b:7d: 49:53:c7:04:6e:76:40:37:a3:12:6c:b8:d2:cf:6e: fe:b2:a0:d9:4c:d6:e7:a5:5d:6e:4a:83:41:a9:ef: bf:c5:8a:d3:d8:26:8c:b2:e0:4d:1e:67:98:ae:c7: a1:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:E5:BE:D1:31:B8:AD:F7:0E:A1:9B:E5:47:13:26:CD:A4:9F:CB:D4 X509v3 Authority Key Identifier: keyid:0F:B7:CD:B0:52:82:B0:89:B4:76:75:9F:69:ED:4A:43:6B:45:63:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7fNsFKCsIm0dnWfae1KQ2tFY2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1a0790-f332-4a83-9fc9-018360cc0ba9/1/D7fNsFKCsIm0dnWfae1KQ2tFY2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:14:e2:79:a3:df:fd:26:65:24:80:15:f7:60:6f:48:56:00: c7:94:8a:01:07:1c:e4:b1:99:52:03:b0:55:c4:c3:97:f6:6a: d5:20:29:8d:d7:d9:8d:41:f1:04:59:6c:86:72:e5:0a:98:06: de:bc:9d:30:f0:01:e1:32:54:0e:c0:9e:08:96:4d:5a:15:fa: b5:5c:85:20:9c:78:02:06:5e:cf:cd:cb:17:4f:3f:9b:ef:b7: 7e:36:85:7f:1f:de:42:c9:e3:a2:f7:a4:cc:ee:dc:ff:5a:4b: 99:4f:35:0d:b1:e0:ba:ae:f2:56:8c:47:48:bd:43:57:e4:4c: f8:bd:fd:bf:df:57:be:8b:75:4f:f7:fe:44:16:8c:a6:6e:03: c9:b8:c9:e6:34:ad:c4:7f:4b:b4:13:2c:9f:88:dd:a3:e5:a7: 1c:db:09:f6:90:6c:77:e2:33:05:05:aa:91:89:8b:f4:38:fc: 1f:65:32:e8:db:68:9f:22:98:ae:08:8c:bb:92:1b:00:32:46: 56:dc:7d:f0:fb:38:01:23:1d:12:71:9e:99:ad:b0:38:da:3a: 8a:90:3d:1a:4f:ae:33:20:fa:f1:dd:9d:07:b6:38:27:61:c6: b0:9f:c1:29:5d:fe:97:f2:a2:23:06:91:dd:6a:5e:47:d3:55: 65:b5:be:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw/sygo7RPBA6rhkmudrGMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYjdjZGIwNTI4MmIwODliNDc2NzU5ZjY5ZWQ0YTQzNmI0 NTYzNjIwHhcNMjYwMjA5MDAwMDMxWhcNMjYwMjEwMDAwMDMxWjAzMTEwLwYDVQQD EygwMmU1YmVkMTMxYjhhZGY3MGVhMTliZTU0NzEzMjZjZGE0OWZjYmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LafS5yjg6VOxcpjzdXuUR5nITok rOFHRU28d6kq7THYaC01xA/iubr8VGVCdTBAK+gD26Y/tKR1ZC+KsHs9bpHfgjAO QjBvx9FEZclauw4lWeiwphbRneSSJ3TwlBg7QTseLbqe4kLyPlRYBanBwa2Q3Czk XOfwRSt0BXT/NCMKa2AYs5nUrVbDRMS2dY4qQz8yK5FBraVWIsw7G404F+6g1qSA 2zzUXIonj7z+Dg3PSd7xDcvvrxc7YcTjTJLsEbi9nodzkUfgQ2xSSNmNe31JU8cE bnZAN6MSbLjSz27+sqDZTNbnpV1uSoNBqe+/xYrT2CaMsuBNHmeYrseh2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALlvtExuK33DqGb5UcTJs2kn8vUMB8GA1UdIwQY MBaAFA+3zbBSgrCJtHZ1n2ntSkNrRWNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzkt MDE4MzYwY2MwYmE5LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8xYTA3OTAtZjMzMi00YTgzLTlmYzktMDE4MzYwY2MwYmE5 LzEvRDdmTnNGS0NzSW0wZG5XZmFlMUtRMnRGWTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQhTieaPf /SZlJIAV92BvSFYAx5SKAQcc5LGZUgOwVcTDl/Zq1SApjdfZjUHxBFlshnLlCpgG 3rydMPAB4TJUDsCeCJZNWhX6tVyFIJx4AgZez83LF08/m++3fjaFfx/eQsnjovek zO7c/1pLmU81DbHguq7yVoxHSL1DV+RM+L39v99Xvot1T/f+RBaMpm4DybjJ5jSt xH9LtBMsn4jdo+WnHNsJ9pBsd+IzBQWqkYmL9Dj8H2Uy6NtonyKYrgiMu5IbADJG Vtx98Ps4ASMdEnGema2wONo6ipA9Gk+uMyD68d2dB7Y4J2HGsJ/BKV3+l/KiIwaR 3WpeR9NVZbW+9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 03:08:30 2026 by rpki-client