This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft File: f0LSfCHahsfp-_RK4OVsmPPS-As.mft (raw, json) Hash identifier: u7ugYrbUBlknYTi+19L9oYy63+xyL/SCTeIhaeu0J4k= Subject key identifier: F3:CD:FB:55:B7:B8:45:24:C0:13:6A:40:AD:94:22:56:99:CD:2A:7A Authority key identifier: 7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B Certificate issuer: /CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Certificate serial: 019C427DBC7166A0A06CD76404DB87F32AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft Manifest number: 0FAD Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: f0LSfCHahsfp-_RK4OVsmPPS-As.crl (hash: yaYJTW9Bynkw5kS5KoREh9QHaIv+WK1CiC8RI5dL/KU=) 2: tauHtMalszupNYYuBs8Guj0KLFg.roa (hash: gc2v8u+MqnwJxcknut+JafkulUVpld8Kb67/cVdhhLw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bc:71:66:a0:a0:6c:d7:64:04:db:87:f3:2a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f42d27c21da86c7e9fbf44ae0e56c98f3d2f80b Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=f3cdfb55b7b84524c0136a40ad94225699cd2a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:67:d7:05:ae:f6:e3:56:2b:8d:9b:a8:e1:a4: c5:2f:24:a3:19:80:b3:e9:60:34:67:8d:1b:3c:27: 55:a3:e5:3d:b9:3f:f0:b5:f1:98:f2:69:60:f0:09: 12:3b:d1:57:14:59:c6:60:74:71:bc:03:aa:05:03: 6a:45:a8:7f:58:2a:07:b4:39:76:d7:95:33:24:ac: 91:41:3c:fa:3b:9a:86:6e:59:b0:90:ee:a2:a6:6e: 48:ad:26:b3:e4:c7:2f:0e:72:6c:49:fa:0a:04:50: d5:0e:d4:95:6d:c3:f1:94:28:15:7e:d2:b5:e2:92: 3e:a0:f3:7b:39:ca:35:03:bc:2b:7f:19:49:f0:fc: 1a:61:2a:8b:2c:52:74:bc:9e:88:71:08:ff:ec:de: 93:1f:58:a5:6d:5c:d9:0c:70:09:73:49:98:aa:75: 75:8f:a8:c2:c4:c3:5b:d8:ab:ed:39:06:14:bb:3f: 3b:2c:cc:4b:6b:ea:86:df:8c:3a:ad:03:f9:a8:7b: 02:0d:ec:48:c7:10:c5:8f:20:70:e4:bd:7a:f4:e9: 07:35:d3:27:5a:95:12:d7:c2:eb:7c:62:7e:57:91: 39:3c:5a:f9:6a:2e:e5:43:4e:6c:80:5c:8d:24:ba: 24:e5:8f:eb:3b:79:22:1f:a9:e0:47:fb:0b:46:f4: 24:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:CD:FB:55:B7:B8:45:24:C0:13:6A:40:AD:94:22:56:99:CD:2A:7A X509v3 Authority Key Identifier: keyid:7F:42:D2:7C:21:DA:86:C7:E9:FB:F4:4A:E0:E5:6C:98:F3:D2:F8:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0LSfCHahsfp-_RK4OVsmPPS-As.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/98b024-9d8f-4869-a2a9-0afb7c3fbf30/1/f0LSfCHahsfp-_RK4OVsmPPS-As.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:3b:cf:73:1c:af:88:10:ca:5e:e4:b9:62:b7:1a:51:36:1d: b0:6c:3f:d5:6c:55:25:ae:ef:4e:e3:50:c4:8c:d4:8b:06:d6: 91:a1:55:49:2a:d1:46:b8:cb:c6:52:42:a5:89:3e:95:16:00: 48:79:3c:fe:a2:8c:48:5a:46:da:23:46:11:23:75:9a:a5:33: cf:03:2b:a1:70:b2:59:40:4c:20:4b:68:b9:de:1b:46:1a:bb: e5:a5:1e:cb:5b:dd:0b:11:95:25:1c:29:44:43:1d:d2:a5:5a: 33:ab:94:43:59:59:f3:5c:db:38:1b:6a:a5:2d:d9:19:0e:b9: 38:2e:2c:e4:2e:9e:72:3e:21:7a:42:f7:0b:1b:09:ee:dd:8b: e9:90:a7:4f:5d:5f:38:08:de:12:4d:1b:8e:98:81:8b:48:0f: 63:66:47:b8:35:4b:ef:5d:7b:dd:60:13:81:79:4c:09:66:2c: ae:92:dd:fd:b4:a6:d4:ba:3d:a5:c4:41:32:77:73:69:6a:02: 38:94:a0:51:be:bf:28:c4:81:8e:5f:6c:b5:f7:7b:ae:99:11: b7:49:ce:d2:1d:b0:19:e3:f8:08:ba:4a:38:1b:84:ef:09:ec: 0d:1d:a1:2a:6d:e8:4f:90:d1:63:1d:f1:98:f7:94:60:08:34: 14:29:d6:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbxxZqCgbNdkBNuH8yrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNDJkMjdjMjFkYTg2YzdlOWZiZjQ0YWUwZTU2Yzk4ZjNk MmY4MGIwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD EyhmM2NkZmI1NWI3Yjg0NTI0YzAxMzZhNDBhZDk0MjI1Njk5Y2QyYTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWfXBa7241YrjZuo4aTFLySjGYCz 6WA0Z40bPCdVo+U9uT/wtfGY8mlg8AkSO9FXFFnGYHRxvAOqBQNqRah/WCoHtDl2 15UzJKyRQTz6O5qGblmwkO6ipm5IrSaz5McvDnJsSfoKBFDVDtSVbcPxlCgVftK1 4pI+oPN7Oco1A7wrfxlJ8PwaYSqLLFJ0vJ6IcQj/7N6TH1ilbVzZDHAJc0mYqnV1 j6jCxMNb2KvtOQYUuz87LMxLa+qG34w6rQP5qHsCDexIxxDFjyBw5L169OkHNdMn WpUS18LrfGJ+V5E5PFr5ai7lQ05sgFyNJLok5Y/rO3kiH6ngR/sLRvQkUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPN+1W3uEUkwBNqQK2UIlaZzSp6MB8GA1UdIwQY MBaAFH9C0nwh2obH6fv0SuDlbJjz0vgLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTkt MGFmYjdjM2ZiZjMwLzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS85OGIwMjQtOWQ4Zi00ODY5LWEyYTktMGFmYjdjM2ZiZjMw LzEvZjBMU2ZDSGFoc2ZwLV9SSzRPVnNtUFBTLUFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQzvPcxyv iBDKXuS5YrcaUTYdsGw/1WxVJa7vTuNQxIzUiwbWkaFVSSrRRrjLxlJCpYk+lRYA SHk8/qKMSFpG2iNGESN1mqUzzwMroXCyWUBMIEtoud4bRhq75aUey1vdCxGVJRwp REMd0qVaM6uUQ1lZ81zbOBtqpS3ZGQ65OC4s5C6ecj4hekL3CxsJ7t2L6ZCnT11f OAjeEk0bjpiBi0gPY2ZHuDVL71173WATgXlMCWYsrpLd/bSm1Lo9pcRBMndzaWoC OJSgUb6/KMSBjl9stfd7rpkRt0nO0h2wGeP4CLpKOBuE7wnsDR2hKm3oT5DRYx3x mPeUYAg0FCnWfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:50 2026 by rpki-client