This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft File: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft (raw, json) Hash identifier: IEU4g6gcpswEtIaTgwChTCiK+cHp5Gw2wm4e7kTlNUY= Subject key identifier: FC:5E:3B:28:FD:BA:61:66:D1:7E:60:8E:18:82:18:30:C3:73:30:12 Authority key identifier: D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4 Certificate issuer: /CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4 Certificate serial: 019C427D4E24EEE413D39F0084FBFAA0D649 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft Manifest number: 0F5B Signing time: Mon 09 Feb 2026 13:00:33 +0000 Manifest this update: Mon 09 Feb 2026 13:00:33 +0000 Manifest next update: Tue 10 Feb 2026 13:00:33 +0000 Files and hashes: 1: 1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl (hash: 8oCjcDwNSckaYjO3Btj8kfbonj8YVMaq/Mzpj7rNFvM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:4e:24:ee:e4:13:d3:9f:00:84:fb:fa:a0:d6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d63f8e42fb8442a48a7d47ef4c0b6e147514bfc4 Validity Not Before: Feb 9 13:00:33 2026 GMT Not After : Feb 10 13:00:33 2026 GMT Subject: CN=fc5e3b28fdba6166d17e608e18821830c3733012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:9e:78:82:8b:8a:e5:c9:e7:55:b9:83:f1: c4:71:78:9d:e7:92:1a:40:db:2b:74:58:5d:c9:c0: c7:75:4a:66:ea:fb:35:ff:94:19:fd:b3:1e:d2:9b: 73:be:03:e1:94:21:ec:f5:fe:aa:96:96:10:2f:73: 56:32:b1:a9:aa:3a:30:30:1e:e4:44:f9:41:ba:2d: f4:95:35:0f:ce:43:68:83:6e:04:7d:1a:07:bc:ea: 81:9b:d6:bf:19:d5:db:b2:b1:ba:07:fc:dc:d9:35: 4e:91:fa:7f:c7:7c:32:6a:8b:4b:09:39:e1:d5:f3: e1:56:cb:2f:6b:79:9d:a0:ba:1e:0d:ff:d5:8b:2c: fd:ba:a4:cc:32:17:bf:d4:8f:d2:e5:be:d3:b4:cd: 58:af:9e:fb:6b:1b:e9:4f:cb:25:e1:a8:b0:ad:17: 95:8b:17:23:f9:b9:e6:c6:db:e5:14:0e:2a:39:4c: 34:fe:c0:09:f4:54:0c:07:6d:27:37:2c:24:b8:0f: bc:6b:f4:f1:31:a9:b0:12:64:ef:71:4e:35:53:43: 62:32:74:dc:d0:de:9c:89:53:31:0c:bd:a8:92:d4: 1d:d7:36:6d:19:60:ab:26:a2:3a:00:1c:79:55:f3: 7f:17:c0:98:ff:86:19:5b:97:59:c4:be:4f:22:c8: a2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:5E:3B:28:FD:BA:61:66:D1:7E:60:8E:18:82:18:30:C3:73:30:12 X509v3 Authority Key Identifier: keyid:D6:3F:8E:42:FB:84:42:A4:8A:7D:47:EF:4C:0B:6E:14:75:14:BF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ee5f33-b1eb-4d08-9e87-2ed7a715f8d7/1/1j-OQvuEQqSKfUfvTAtuFHUUv8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:b7:39:41:e2:bc:3f:dc:6e:fb:c5:5a:a1:75:c6:68:c5:90: f4:52:ad:3c:ce:b3:9b:59:80:3e:3a:8b:dc:58:d2:ef:08:cf: 0d:6d:fb:78:69:cb:5d:c9:bb:98:64:d9:6c:7d:a7:48:98:d6: 32:a2:d5:da:ce:3a:7f:a8:cb:a3:f8:ac:8b:c6:03:e5:26:c6: 1a:cd:71:ad:dd:02:fd:f6:3e:1c:92:f9:38:b8:d8:1a:62:2a: 9e:cf:1d:0d:cb:7b:b9:56:0b:29:b0:27:dc:df:d1:b7:a3:8c: cc:75:f2:02:dc:31:ec:cb:15:64:9a:79:dc:98:30:d5:00:d3: 0d:71:1b:63:49:bc:82:53:91:27:fa:92:47:ad:ca:14:05:6e: 36:6c:63:78:ae:5f:75:69:06:2e:0c:79:4a:ee:fd:df:2f:68: d8:47:ae:f3:cb:ee:cc:c4:9f:40:88:ed:69:0c:6f:b1:85:25: 32:0f:e3:47:20:fe:c2:7f:66:32:52:1a:a3:23:55:46:8b:c7: 11:82:65:d4:4c:c2:f9:61:bf:42:05:8f:a6:d0:66:15:e5:ea: 6f:bf:17:85:da:26:2d:77:93:78:34:ac:09:e0:a2:ce:fe:42: b3:2a:d9:99:02:9b:1c:6f:a8:70:a8:a4:dc:97:8d:47:72:75: 5d:de:0e:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfU4k7uQT058AhPv6oNZJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2M2Y4ZTQyZmI4NDQyYTQ4YTdkNDdlZjRjMGI2ZTE0NzUx NGJmYzQwHhcNMjYwMjA5MTMwMDMzWhcNMjYwMjEwMTMwMDMzWjAzMTEwLwYDVQQD EyhmYzVlM2IyOGZkYmE2MTY2ZDE3ZTYwOGUxODgyMTgzMGMzNzMzMDEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoqeeIKLiuXJ51W5g/HEcXid55Ia QNsrdFhdycDHdUpm6vs1/5QZ/bMe0ptzvgPhlCHs9f6qlpYQL3NWMrGpqjowMB7k RPlBui30lTUPzkNog24EfRoHvOqBm9a/GdXbsrG6B/zc2TVOkfp/x3wyaotLCTnh 1fPhVssva3mdoLoeDf/Viyz9uqTMMhe/1I/S5b7TtM1Yr577axvpT8sl4aiwrReV ixcj+bnmxtvlFA4qOUw0/sAJ9FQMB20nNywkuA+8a/TxMamwEmTvcU41U0NiMnTc 0N6ciVMxDL2oktQd1zZtGWCrJqI6ABx5VfN/F8CY/4YZW5dZxL5PIsii1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxeOyj9umFm0X5gjhiCGDDDczASMB8GA1UdIwQY MBaAFNY/jkL7hEKkin1H70wLbhR1FL/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODct MmVkN2E3MTVmOGQ3LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lZTVmMzMtYjFlYi00ZDA4LTllODctMmVkN2E3MTVmOGQ3 LzEvMWotT1F2dUVRcVNLZlVmdlRBdHVGSFVVdjhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzLc5QeK8 P9xu+8VaoXXGaMWQ9FKtPM6zm1mAPjqL3FjS7wjPDW37eGnLXcm7mGTZbH2nSJjW MqLV2s46f6jLo/isi8YD5SbGGs1xrd0C/fY+HJL5OLjYGmIqns8dDct7uVYLKbAn 3N/Rt6OMzHXyAtwx7MsVZJp53Jgw1QDTDXEbY0m8glORJ/qSR63KFAVuNmxjeK5f dWkGLgx5Su793y9o2Eeu88vuzMSfQIjtaQxvsYUlMg/jRyD+wn9mMlIaoyNVRovH EYJl1EzC+WG/QgWPptBmFeXqb78XhdomLXeTeDSsCeCizv5CsyrZmQKbHG+ocKik 3JeNR3J1Xd4Omw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:39 2026 by rpki-client