This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft File: RFHoPa4So3HB3UnbNNm9Uqloi0o.mft (raw, json) Hash identifier: SAoJ4lpQDmqtVpjKv36fHB8MI9UNPht/ObC/tPevMvQ= Subject key identifier: 40:F6:F4:82:CE:FA:75:8F:F6:2F:C7:20:B8:4A:2B:45:15:B6:E3:DC Authority key identifier: 44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A Certificate issuer: /CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a Certificate serial: 019C43228EA66C93D734754C70A07D1F8D63 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft Manifest number: 0A73 Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: 7hkN41FQK4rNVtwj2BraoZnJuqg.roa (hash: 5m1MRTp35SIueLauNwTAW0LsW5mYAj38kHx8oT3d5Os=) 2: RFHoPa4So3HB3UnbNNm9Uqloi0o.crl (hash: CNZBzBLWzd9P/4PJHzbdFxVHUhH+cdbRqyLUUm0he6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8e:a6:6c:93:d7:34:75:4c:70:a0:7d:1f:8d:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4451e83dae12a371c1dd49db34d9bd52a9688b4a Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=40f6f482cefa758ff62fc720b84a2b4515b6e3dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:84:20:28:c2:7f:e0:67:95:a3:7f:69:36:83: 58:af:77:01:62:da:f4:c8:21:1f:98:47:a1:6e:0a: 4d:7c:70:e8:f2:e7:17:21:8a:07:e3:b5:be:55:2d: 11:5a:1a:64:03:e1:ca:89:6b:64:11:6d:c7:34:95: 92:75:c1:2c:bb:cc:65:25:d0:36:1a:e6:f3:fe:7e: 76:98:0a:d8:72:e2:e4:ec:07:36:b5:aa:8c:90:cb: c0:26:0f:9f:59:76:22:30:e6:ae:1d:ca:21:a9:93: e8:1a:9a:4b:0f:4f:b9:e7:5f:0a:69:eb:e6:c9:58: 34:5a:9e:28:e7:fb:fa:f4:da:12:a5:1f:94:91:42: 48:b7:57:b3:93:c6:01:99:63:d6:50:ba:bf:ab:f7: 01:1b:af:79:5f:39:2b:97:67:b0:62:2c:71:9b:19: c2:bc:a3:7b:55:60:1e:04:86:a6:85:73:37:37:b1: 16:3f:d4:2d:28:0a:cf:90:4d:09:2b:3d:3c:35:9d: b0:96:80:0b:43:49:24:05:fc:9a:d0:84:ff:8e:31: 29:0b:00:09:52:57:bf:33:9b:33:a1:ba:17:2c:f4: 59:d2:d0:4e:76:8d:d9:ac:6e:4c:16:02:1d:9c:48: e0:31:fc:3a:26:8f:45:3a:fa:b5:75:38:f7:c9:dd: 88:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F6:F4:82:CE:FA:75:8F:F6:2F:C7:20:B8:4A:2B:45:15:B6:E3:DC X509v3 Authority Key Identifier: keyid:44:51:E8:3D:AE:12:A3:71:C1:DD:49:DB:34:D9:BD:52:A9:68:8B:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFHoPa4So3HB3UnbNNm9Uqloi0o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/dd8f71-2b36-4fb7-b2d5-f997dbdc3e57/1/RFHoPa4So3HB3UnbNNm9Uqloi0o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:54:5a:e2:d0:55:63:1e:e4:16:ad:aa:55:2c:ea:c5:c9:6e: e7:f6:fe:53:17:4b:be:88:19:3d:25:0f:d6:2f:f0:c9:91:11: fc:b8:e5:aa:dd:40:0c:af:6c:28:fc:27:13:64:b7:28:fa:66: 22:fe:15:3b:69:2d:ac:c1:4d:48:e1:fe:89:b1:57:a1:1b:b6: e3:cf:c3:df:cb:44:54:08:a4:2c:22:a8:0a:87:22:89:e1:9e: 20:78:f4:5b:9f:05:5d:ab:ad:48:92:c8:0a:94:32:b4:88:d5: 28:4c:88:88:0d:b7:4b:18:b8:9c:5e:86:f0:6e:88:88:ba:7f: fe:b6:68:60:0f:ac:2d:9a:90:78:06:16:3f:6b:c2:8a:df:ff: c3:4f:9f:42:c3:07:0d:3d:7a:74:70:4d:0f:1d:65:31:74:c2: 9c:5b:0d:ad:2d:4d:2b:0e:d3:7e:47:b4:02:46:d6:e1:6a:18: 3d:4d:03:f7:63:00:ee:a9:79:8a:ff:7d:e8:fa:a7:2c:c5:69: c5:0d:3d:3d:55:c8:73:c9:73:22:d6:52:e9:62:a8:77:1e:fd: 0e:5b:d7:1f:8d:b8:bc:04:cb:f1:9b:73:70:6b:91:b7:78:12: 65:07:db:11:15:8b:2a:aa:f5:76:0a:ab:64:85:9b:32:0f:47: 37:99:f2:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIo6mbJPXNHVMcKB9H41jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTFlODNkYWUxMmEzNzFjMWRkNDlkYjM0ZDliZDUyYTk2 ODhiNGEwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD Eyg0MGY2ZjQ4MmNlZmE3NThmZjYyZmM3MjBiODRhMmI0NTE1YjZlM2RjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64QgKMJ/4GeVo39pNoNYr3cBYtr0 yCEfmEehbgpNfHDo8ucXIYoH47W+VS0RWhpkA+HKiWtkEW3HNJWSdcEsu8xlJdA2 Gubz/n52mArYcuLk7Ac2taqMkMvAJg+fWXYiMOauHcohqZPoGppLD0+5518Kaevm yVg0Wp4o5/v69NoSpR+UkUJIt1ezk8YBmWPWULq/q/cBG695Xzkrl2ewYixxmxnC vKN7VWAeBIamhXM3N7EWP9QtKArPkE0JKz08NZ2wloALQ0kkBfya0IT/jjEpCwAJ Ule/M5szoboXLPRZ0tBOdo3ZrG5MFgIdnEjgMfw6Jo9FOvq1dTj3yd2IbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED29ILO+nWP9i/HILhKK0UVtuPcMB8GA1UdIwQY MBaAFERR6D2uEqNxwd1J2zTZvVKpaItKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUt Zjk5N2RiZGMzZTU3LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9kZDhmNzEtMmIzNi00ZmI3LWIyZDUtZjk5N2RiZGMzZTU3 LzEvUkZIb1BhNFNvM0hCM1VuYk5ObTlVcWxvaTBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgFRa4tBV Yx7kFq2qVSzqxclu5/b+UxdLvogZPSUP1i/wyZER/Ljlqt1ADK9sKPwnE2S3KPpm Iv4VO2ktrMFNSOH+ibFXoRu248/D38tEVAikLCKoCociieGeIHj0W58FXautSJLI CpQytIjVKEyIiA23Sxi4nF6G8G6IiLp//rZoYA+sLZqQeAYWP2vCit//w0+fQsMH DT16dHBNDx1lMXTCnFsNrS1NKw7Tfke0AkbW4WoYPU0D92MA7ql5iv996PqnLMVp xQ09PVXIc8lzItZS6WKodx79DlvXH424vATL8ZtzcGuRt3gSZQfbERWLKqr1dgqr ZIWbMg9HN5nyBg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:11 2026 by rpki-client