This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft File: RFJjMnSx2IapJ1f2UhnC51RuzfU.mft (raw, json) Hash identifier: t46WraB4zKEJIiNKxS287Vuyk2O1mZfmvxUliCharXM= Subject key identifier: 68:D2:45:DD:16:F7:A7:9E:65:73:F8:F2:F1:08:99:3A:FD:02:48:AC Authority key identifier: 44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5 Certificate issuer: /CN=4452633274b1d886a92757f65219c2e7546ecdf5 Certificate serial: 019C43593578A1A61629BBDEDA269AE4AFE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 17:00:45 +0000 Manifest this update: Mon 09 Feb 2026 17:00:45 +0000 Manifest next update: Tue 10 Feb 2026 17:00:45 +0000 Files and hashes: 1: RFJjMnSx2IapJ1f2UhnC51RuzfU.crl (hash: qzt0P4uI7c6s3AMW0p/VWits00xYfI8la9/NNO1mFWQ=) 2: eNko5h0Tp_p7b7ugEBiQkhXOA20.roa (hash: OK0LXbnfUa5IYm60HKsaC15u0Y3K/9dXchk7SJSUYf0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:35:78:a1:a6:16:29:bb:de:da:26:9a:e4:af:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4452633274b1d886a92757f65219c2e7546ecdf5 Validity Not Before: Feb 9 17:00:45 2026 GMT Not After : Feb 10 17:00:45 2026 GMT Subject: CN=68d245dd16f7a79e6573f8f2f108993afd0248ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c8:04:2f:4e:13:81:5a:de:20:fb:0b:7e:06: 04:fe:28:90:e4:69:6c:bf:b8:97:b9:c6:43:c0:14: a4:91:48:27:39:ff:7a:94:e1:28:7c:73:d6:a0:88: b3:13:14:f0:cd:c6:4f:cc:2d:d3:14:27:21:98:c6: d4:75:5a:b0:6c:0c:27:ab:95:6c:d3:c8:99:51:7d: b5:9b:e3:05:5c:09:c7:26:f0:a5:8e:05:85:00:62: 76:69:56:ee:50:26:44:bb:c6:94:c5:e5:c6:2c:03: 57:0f:57:d0:23:52:69:1e:80:41:30:49:dc:6e:77: b5:6d:e1:45:fa:bb:2a:b2:35:60:de:6e:42:46:42: da:f8:6b:51:b4:22:92:c2:d8:21:25:3d:61:ca:24: 19:24:ba:29:00:f9:e2:ef:89:48:63:eb:f6:6c:88: c4:e8:91:cd:ca:22:86:f9:e3:77:a2:20:e5:94:06: 2c:6a:42:8c:68:7b:52:cc:eb:0f:98:9a:39:dc:a5: dd:0b:75:70:f1:61:d5:34:81:b9:16:6d:79:71:92: 87:2d:56:8a:60:d5:f7:c0:f2:21:34:fc:08:21:ba: 2e:99:7d:a6:6e:6e:d4:74:73:10:5c:ed:8f:26:bc: 00:95:7e:bd:95:db:60:84:57:07:ba:e3:27:da:5e: bf:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D2:45:DD:16:F7:A7:9E:65:73:F8:F2:F1:08:99:3A:FD:02:48:AC X509v3 Authority Key Identifier: keyid:44:52:63:32:74:B1:D8:86:A9:27:57:F6:52:19:C2:E7:54:6E:CD:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFJjMnSx2IapJ1f2UhnC51RuzfU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8e4518-0dd0-4cbb-ba78-bb86d4ba02de/1/RFJjMnSx2IapJ1f2UhnC51RuzfU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:25:a1:83:2e:1f:8c:3f:1b:05:89:d8:5f:ce:98:81:17:61: 59:77:74:ae:af:c7:1d:51:b6:0b:f7:e2:a2:90:1f:03:bf:d8: 85:e3:cb:d3:e0:2c:63:de:76:9b:a2:5e:11:35:82:ad:45:70: 59:f3:dd:0e:a2:94:e9:d5:18:59:c7:30:8c:08:36:93:60:6c: 74:57:65:53:cc:59:9e:d9:40:21:fe:aa:08:93:04:66:d3:85: 77:4e:f3:f7:94:00:3e:5f:18:1e:8a:b9:19:46:14:c2:f4:70: cb:f6:b1:97:41:a1:31:72:2a:da:db:81:dd:d8:c3:56:0a:44: ba:8a:a2:fa:fb:68:4c:fb:2f:ff:b5:5a:54:5a:a2:07:c9:4f: 2e:b2:43:bb:30:9f:31:ec:d9:d3:4a:31:47:ba:6c:bb:02:1d: e5:ac:17:0d:c0:e2:cf:cb:86:6e:c6:ab:2b:5d:98:f5:51:2c: c8:f0:fe:c8:cf:37:e6:36:ea:bc:22:b0:a6:40:d4:77:75:4b: 33:19:7b:88:11:26:37:36:dd:50:62:5b:99:08:01:c5:3f:66: b1:a6:49:4c:cc:c8:9e:6a:7f:c2:53:03:c3:f0:a1:a4:44:bd: 0b:41:2b:a6:61:3b:53:9d:3d:55:c6:7c:05:ec:c5:12:c7:89: 99:ea:6c:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTV4oaYWKbve2iaa5K/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTI2MzMyNzRiMWQ4ODZhOTI3NTdmNjUyMTljMmU3NTQ2 ZWNkZjUwHhcNMjYwMjA5MTcwMDQ1WhcNMjYwMjEwMTcwMDQ1WjAzMTEwLwYDVQQD Eyg2OGQyNDVkZDE2ZjdhNzllNjU3M2Y4ZjJmMTA4OTkzYWZkMDI0OGFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8gEL04TgVreIPsLfgYE/iiQ5Gls v7iXucZDwBSkkUgnOf96lOEofHPWoIizExTwzcZPzC3TFCchmMbUdVqwbAwnq5Vs 08iZUX21m+MFXAnHJvCljgWFAGJ2aVbuUCZEu8aUxeXGLANXD1fQI1JpHoBBMEnc bne1beFF+rsqsjVg3m5CRkLa+GtRtCKSwtghJT1hyiQZJLopAPni74lIY+v2bIjE 6JHNyiKG+eN3oiDllAYsakKMaHtSzOsPmJo53KXdC3Vw8WHVNIG5Fm15cZKHLVaK YNX3wPIhNPwIIboumX2mbm7UdHMQXO2PJrwAlX69ldtghFcHuuMn2l6/ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjSRd0W96eeZXP48vEImTr9AkisMB8GA1UdIwQY MBaAFERSYzJ0sdiGqSdX9lIZwudUbs31MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgt YmI4NmQ0YmEwMmRlLzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC84ZTQ1MTgtMGRkMC00Y2JiLWJhNzgtYmI4NmQ0YmEwMmRl LzEvUkZKak1uU3gySWFwSjFmMlVobkM1MVJ1emZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAziWhgy4f jD8bBYnYX86YgRdhWXd0rq/HHVG2C/fiopAfA7/YhePL0+AsY952m6JeETWCrUVw WfPdDqKU6dUYWccwjAg2k2BsdFdlU8xZntlAIf6qCJMEZtOFd07z95QAPl8YHoq5 GUYUwvRwy/axl0GhMXIq2tuB3djDVgpEuoqi+vtoTPsv/7VaVFqiB8lPLrJDuzCf MezZ00oxR7psuwId5awXDcDiz8uGbsarK12Y9VEsyPD+yM835jbqvCKwpkDUd3VL Mxl7iBEmNzbdUGJbmQgBxT9msaZJTMzInmp/wlMDw/ChpES9C0ErpmE7U509VcZ8 BezFEseJmepstw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:55 2026 by rpki-client