This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft File: fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft (raw, json) Hash identifier: u1ovkLFIswyqJf7cmFhsNWNuTKXCp+DiOYV6SxqLiH0= Subject key identifier: F1:3A:5E:DE:82:D7:95:FB:2A:79:4E:0F:E5:96:44:FF:46:1A:8C:73 Authority key identifier: 7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 Certificate issuer: /CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Certificate serial: 019C42B44BFABD3ABA7261B225A0CEC29F27 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft Manifest number: 051C Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl (hash: pgcAB45bGle/WB1dFRZ5HGdONQGO8NcyntrWYDmw4a4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4b:fa:bd:3a:ba:72:61:b2:25:a0:ce:c2:9f:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc55ddda414240269f05bf8e8cd708135dd7de5 Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=f13a5ede82d795fb2a794e0fe59644ff461a8c73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:2b:9a:0a:98:06:a5:ac:24:8f:61:03:26:fc: 4e:5b:25:01:06:b1:29:21:e7:2d:89:3a:e8:3f:92: 23:20:e4:2f:c8:33:13:92:fd:39:31:7b:9f:5e:63: 9b:9b:06:a4:45:88:83:72:cf:bc:4d:6f:d9:5b:b5: b0:07:9e:9c:e3:99:58:65:14:16:39:ab:b9:78:e8: 30:d0:fc:56:64:8d:9e:03:dd:37:4a:f0:97:c0:72: 7d:c9:e1:82:05:7d:71:38:ec:08:01:81:e7:bc:bc: 95:c5:cd:de:00:90:bd:39:1c:22:2f:21:9b:53:5f: 30:d3:2e:bc:40:0a:44:83:28:cc:0e:63:53:6f:b2: f9:44:c4:6d:54:90:b1:a2:cc:22:26:de:b0:8b:f1: 5c:67:e2:e5:f1:15:b9:b8:60:99:cb:ef:11:64:de: 58:58:16:7f:a4:f7:93:64:68:69:e1:25:df:53:09: 83:14:ef:c3:8d:b5:28:b0:ac:ae:69:41:bc:af:71: 45:89:55:84:f1:41:9f:ad:24:19:d2:77:bc:48:8d: b4:0a:5f:07:ab:e7:90:5d:7d:a4:85:82:b4:ca:cd: 52:b9:da:50:57:99:fc:a7:72:10:6a:87:74:87:42: 4a:f3:60:6c:d3:55:7b:7b:25:35:96:e8:de:77:07: 10:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3A:5E:DE:82:D7:95:FB:2A:79:4E:0F:E5:96:44:FF:46:1A:8C:73 X509v3 Authority Key Identifier: keyid:7D:C5:5D:DD:A4:14:24:02:69:F0:5B:F8:E8:CD:70:81:35:DD:7D:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcVd3aQUJAJp8Fv46M1wgTXdfeU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/780f29-f614-4f02-91e0-5d143e56af68/1/fcVd3aQUJAJp8Fv46M1wgTXdfeU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:8c:cc:07:02:32:68:bd:0e:e0:8a:57:48:82:6c:3f:19:d5: 17:60:09:21:ac:04:b3:30:ec:34:b7:07:ea:79:cd:3d:43:c5: b1:1e:3c:2a:24:b6:fe:fe:86:5b:ca:ef:12:6e:df:34:7b:6c: cd:2b:8f:e3:6f:90:ef:64:ba:26:28:f2:16:09:ba:6d:3a:80: d9:64:82:8d:1d:13:75:7c:89:dd:85:a1:00:dc:1f:6c:a7:ff: 98:e1:2a:51:ef:04:d5:cc:59:bd:83:6b:50:34:65:7c:2f:1a: 42:91:68:1c:7a:2c:51:25:bc:20:d4:11:99:01:9e:5f:d5:8e: 5f:f6:11:ba:15:82:1a:bb:50:8c:c5:53:77:e0:b0:1c:1b:78: 6f:34:a6:4b:09:bc:76:f2:71:19:7e:7d:e7:1a:f7:a6:99:c4: a2:eb:0e:7d:75:1f:2f:12:f1:9c:77:cf:cf:1c:56:2d:56:bc: b3:75:d6:e3:f5:d3:a2:01:49:11:1f:14:15:d7:fe:7d:83:a8: 18:da:59:6d:aa:e4:1f:53:40:0d:e6:8c:13:0c:e2:24:e3:53: 05:dd:f6:49:21:4d:b3:54:17:a6:43:19:3d:a8:c3:71:54:33: a7:b0:e9:36:52:0f:31:3f:df:0d:4b:11:de:17:1e:14:d0:ad: 44:03:b2:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEv6vTq6cmGyJaDOwp8nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzU1ZGRkYTQxNDI0MDI2OWYwNWJmOGU4Y2Q3MDgxMzVk ZDdkZTUwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD EyhmMTNhNWVkZTgyZDc5NWZiMmE3OTRlMGZlNTk2NDRmZjQ2MWE4YzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5CuaCpgGpawkj2EDJvxOWyUBBrEp IectiTroP5IjIOQvyDMTkv05MXufXmObmwakRYiDcs+8TW/ZW7WwB56c45lYZRQW Oau5eOgw0PxWZI2eA903SvCXwHJ9yeGCBX1xOOwIAYHnvLyVxc3eAJC9ORwiLyGb U18w0y68QApEgyjMDmNTb7L5RMRtVJCxoswiJt6wi/FcZ+Ll8RW5uGCZy+8RZN5Y WBZ/pPeTZGhp4SXfUwmDFO/DjbUosKyuaUG8r3FFiVWE8UGfrSQZ0ne8SI20Cl8H q+eQXX2khYK0ys1SudpQV5n8p3IQaod0h0JK82Bs01V7eyU1lujedwcQywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE6Xt6C15X7KnlOD+WWRP9GGoxzMB8GA1UdIwQY MBaAFH3FXd2kFCQCafBb+OjNcIE13X3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy83ODBmMjktZjYxNC00ZjAyLTkxZTAt NWQxNDNlNTZhZjY4LzEvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy83ODBmMjktZjYxNC00ZjAyLTkxZTAtNWQxNDNlNTZhZjY4 LzEvZmNWZDNhUVVKQUpwOEZ2NDZNMXdnVFhkZmVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4zMBwIy aL0O4IpXSIJsPxnVF2AJIawEszDsNLcH6nnNPUPFsR48KiS2/v6GW8rvEm7fNHts zSuP42+Q72S6JijyFgm6bTqA2WSCjR0TdXyJ3YWhANwfbKf/mOEqUe8E1cxZvYNr UDRlfC8aQpFoHHosUSW8INQRmQGeX9WOX/YRuhWCGrtQjMVTd+CwHBt4bzSmSwm8 dvJxGX595xr3ppnEousOfXUfLxLxnHfPzxxWLVa8s3XW4/XTogFJER8UFdf+fYOo GNpZbarkH1NADeaMEwziJONTBd32SSFNs1QXpkMZPajDcVQzp7DpNlIPMT/fDUsR 3hceFNCtRAOyxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:21 2026 by rpki-client