This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json) Hash identifier: xP5MSzTsPwrMOVSLsIKrd0e8mXq9WNIlzsUcw2OmXNk= Subject key identifier: A9:D7:C7:95:7E:74:C2:89:D3:1E:AF:7A:02:E1:F8:7B:9F:DA:89:89 Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12 Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712 Certificate serial: 019C43C6CC3E6FCA30A450646FFDF63CF7CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft Manifest number: 1170 Signing time: Mon 09 Feb 2026 19:00:27 +0000 Manifest this update: Mon 09 Feb 2026 19:00:27 +0000 Manifest next update: Tue 10 Feb 2026 19:00:27 +0000 Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: 3ee9XHjBU/U2fWUcYrDWdK4551wBzrLIPM7G9+kyKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:cc:3e:6f:ca:30:a4:50:64:6f:fd:f6:3c:f7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712 Validity Not Before: Feb 9 19:00:27 2026 GMT Not After : Feb 10 19:00:27 2026 GMT Subject: CN=a9d7c7957e74c289d31eaf7a02e1f87b9fda8989 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:78:35:88:ed:6d:5a:d1:64:c0:99:7e:e0: ac:3f:92:39:6d:62:e4:8c:09:e9:df:0b:f6:78:e5: 6d:64:c9:b9:b0:83:fb:6b:0b:f3:1c:da:fd:83:d7: 8a:58:17:e8:35:b0:d7:99:ae:52:73:3a:66:14:3c: b3:e6:ff:0c:0f:65:7d:da:50:6a:38:f9:cc:91:ee: 18:66:84:51:7f:ea:4b:c3:be:a9:62:92:bf:2d:cc: c1:d9:eb:d0:5e:f6:53:76:90:32:53:51:b9:cd:1a: e0:8b:93:5f:3d:f6:35:d2:cc:14:c7:9f:c4:f5:e5: db:66:24:b5:24:f6:8d:d1:5a:38:ae:d9:7c:e3:36: 7e:89:74:42:17:1c:20:34:b6:57:48:b9:04:44:ef: 80:4a:0d:06:39:de:a6:14:3a:c1:c2:b3:64:fa:3d: 8a:b8:e2:e2:15:52:6e:00:ba:00:b1:e9:a9:1d:c6: 55:dd:bf:6d:92:b1:21:29:86:f7:4f:54:ba:7a:7b: 41:ac:a5:c1:0d:ca:da:62:9f:5f:13:3e:10:75:1a: 24:9e:e1:59:54:b0:87:5d:a2:89:12:ab:73:65:52: 9b:df:72:44:ac:ba:7a:9f:02:c8:2e:63:23:9d:93: 56:10:7a:22:e3:c2:21:27:a5:62:f5:98:c5:aa:6e: 03:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D7:C7:95:7E:74:C2:89:D3:1E:AF:7A:02:E1:F8:7B:9F:DA:89:89 X509v3 Authority Key Identifier: keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:3f:af:4a:a1:0b:51:ef:9e:4e:8e:b0:ce:e4:70:2b:09:8f: 5d:1f:0c:31:f2:73:c0:24:1f:f6:5e:29:12:71:95:7f:e7:77: 90:bd:bb:dc:4e:05:52:46:42:cf:f0:7a:ad:a6:16:19:62:12: 23:7e:67:ab:d1:b3:b0:35:3f:95:93:40:b3:2b:21:16:dd:a1: e3:09:17:23:be:4f:69:8a:57:8c:47:be:d4:08:13:e4:68:33: 8f:80:6e:48:a9:5c:42:80:45:69:f9:da:69:1a:ca:59:8b:90: b5:68:77:59:73:55:67:7f:3a:38:09:76:c5:ac:8c:81:f7:d2: 5b:3a:97:d7:69:a7:d8:41:43:32:9b:15:da:4c:1f:59:52:b2: 3b:1a:c5:29:16:77:44:cd:68:be:65:46:5a:ed:30:75:72:f9: 69:ea:7e:7c:81:47:95:92:82:2c:49:39:bd:02:13:1a:c9:d4: d1:cd:d6:b7:8d:c6:ca:7c:e5:e7:17:00:af:4a:86:ad:6b:2a: 64:b3:e8:d8:52:63:50:98:3e:6a:b9:12:c9:5b:c7:08:8f:92: 1e:e8:56:86:a4:c9:b7:81:e8:a0:13:69:58:9a:4f:dd:c3:92: c8:dd:fd:64:02:ac:16:ce:4a:1d:ce:e6:cb:08:d7:9a:c6:0e: a2:61:3d:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxsw+b8owpFBkb/32PPfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MjhmYzg3MTdlOTE5YWUwNzI2MWFhZTI4ZDhjODQ1NjRj OGE3MTIwHhcNMjYwMjA5MTkwMDI3WhcNMjYwMjEwMTkwMDI3WjAzMTEwLwYDVQQD EyhhOWQ3Yzc5NTdlNzRjMjg5ZDMxZWFmN2EwMmUxZjg3YjlmZGE4OTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxF4NYjtbVrRZMCZfuCsP5I5bWLk jAnp3wv2eOVtZMm5sIP7awvzHNr9g9eKWBfoNbDXma5SczpmFDyz5v8MD2V92lBq OPnMke4YZoRRf+pLw76pYpK/LczB2evQXvZTdpAyU1G5zRrgi5NfPfY10swUx5/E 9eXbZiS1JPaN0Vo4rtl84zZ+iXRCFxwgNLZXSLkERO+ASg0GOd6mFDrBwrNk+j2K uOLiFVJuALoAsempHcZV3b9tkrEhKYb3T1S6entBrKXBDcraYp9fEz4QdRoknuFZ VLCHXaKJEqtzZVKb33JErLp6nwLILmMjnZNWEHoi48IhJ6Vi9ZjFqm4DHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKnXx5V+dMKJ0x6vegLh+Huf2omJMB8GA1UdIwQY MBaAFBUo/IcX6RmuByYarijYyEVkyKcSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTkt NjcxMDcyZjkxYTEzLzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy82ZGZiYjYtNGFmYS00YmJjLTlkMTktNjcxMDcyZjkxYTEz LzEvRlNqOGh4ZnBHYTRISmhxdUtOaklSV1RJcHhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnj+vSqEL Ue+eTo6wzuRwKwmPXR8MMfJzwCQf9l4pEnGVf+d3kL273E4FUkZCz/B6raYWGWIS I35nq9GzsDU/lZNAsyshFt2h4wkXI75PaYpXjEe+1AgT5Ggzj4BuSKlcQoBFafna aRrKWYuQtWh3WXNVZ386OAl2xayMgffSWzqX12mn2EFDMpsV2kwfWVKyOxrFKRZ3 RM1ovmVGWu0wdXL5aep+fIFHlZKCLEk5vQITGsnU0c3Wt43Gynzl5xcAr0qGrWsq ZLPo2FJjUJg+arkSyVvHCI+SHuhWhqTJt4HooBNpWJpP3cOSyN39ZAKsFs5KHc7m ywjXmsYOomE9Dw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:07 2026 by rpki-client