This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft File: 1pFUReDotwOKo9ekUX6Qtpx_cgo.mft (raw, json) Hash identifier: PDtD8noEOkjHvw4K0WhZrZ+sbUsevHnYX3rxRu4TrGg= Subject key identifier: 3D:72:4C:80:84:C0:20:FC:76:CD:53:78:B7:0B:9E:CA:27:31:BF:52 Authority key identifier: D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A Certificate issuer: /CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Certificate serial: 019C446B89BCBC97307A2FEBF6F90AD071D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft Manifest number: 0A49 Signing time: Mon 09 Feb 2026 22:00:24 +0000 Manifest this update: Mon 09 Feb 2026 22:00:24 +0000 Manifest next update: Tue 10 Feb 2026 22:00:24 +0000 Files and hashes: 1: 1pFUReDotwOKo9ekUX6Qtpx_cgo.crl (hash: DYS9vAe3JGdCI+FvrawaOAkQnKTYixJ2fAANMSkuvw8=) 2: SpCVnDCeEekxdblga7xr60e2Z5Q.roa (hash: 38e7O6zFRveFVAruc/e0fsqYdqeGU4GrUOL6ww1G6oQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:89:bc:bc:97:30:7a:2f:eb:f6:f9:0a:d0:71:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d6915445e0e8b7038aa3d7a4517e90b69c7f720a Validity Not Before: Feb 9 22:00:24 2026 GMT Not After : Feb 10 22:00:24 2026 GMT Subject: CN=3d724c8084c020fc76cd5378b70b9eca2731bf52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:12:c8:19:db:ac:2f:52:11:a0:e5:03:2d:c4: af:6b:1f:bf:89:10:3b:24:25:d3:d6:fd:97:0d:8e: 4f:f9:78:e4:47:83:73:61:5a:92:a8:e7:f4:d9:bd: 45:32:6b:a4:6d:23:72:d0:2a:81:d3:69:47:fa:7c: 85:4d:0f:2c:40:10:8b:89:42:40:75:42:b0:97:43: 99:94:5a:83:4a:56:05:f7:1b:4d:69:b9:53:62:fb: 94:c4:3a:03:86:01:b2:ae:16:12:4e:03:40:78:33: 7f:ec:90:f4:dc:49:11:32:81:d1:ed:25:39:f1:12: cc:de:85:55:81:b8:66:ee:d9:4f:9f:ad:a7:19:09: de:63:17:a5:d0:d3:b3:4b:b3:ff:89:35:4d:5b:ca: 55:a0:6c:d7:00:1a:f1:e7:30:d0:c6:07:09:a5:92: e8:d6:ca:87:48:8e:6e:c8:dd:c0:0b:78:8e:e8:f8: 52:78:bd:0e:fb:6f:30:b7:9c:c3:e9:12:01:d8:6e: 2a:a1:e0:67:13:fd:d1:d6:9f:56:30:cd:05:57:7e: 29:a4:84:b4:57:f0:30:eb:76:14:09:b1:5b:1c:89: 63:c6:14:44:46:74:21:77:3e:56:da:09:02:b5:5e: 56:d2:ba:aa:ad:9f:cd:c2:a3:d6:49:b3:53:df:d5: f6:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:72:4C:80:84:C0:20:FC:76:CD:53:78:B7:0B:9E:CA:27:31:BF:52 X509v3 Authority Key Identifier: keyid:D6:91:54:45:E0:E8:B7:03:8A:A3:D7:A4:51:7E:90:B6:9C:7F:72:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pFUReDotwOKo9ekUX6Qtpx_cgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7be2d9-a185-4811-bc93-c3c67fffdaad/1/1pFUReDotwOKo9ekUX6Qtpx_cgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a8:7a:60:5e:bd:03:ae:1e:d6:85:0f:ad:33:e9:50:61:12: 7f:e2:2a:fc:9a:1f:a2:18:72:78:68:73:36:bd:2e:8a:56:15: 8e:78:cc:6d:af:95:4f:3f:b4:67:c4:4b:dc:4c:e8:54:b7:58: 04:66:71:fb:b9:92:47:af:73:7c:b5:f0:88:2a:40:5f:e5:38: d7:85:bb:d1:73:1e:88:57:b9:48:53:b0:db:5c:96:29:27:c4: 19:4c:81:1a:3c:c8:02:37:c5:93:68:02:14:e4:c6:2d:7d:d5: c1:d5:5e:44:c3:7d:77:95:e7:4a:cb:64:9a:bf:5f:04:9f:ce: 2b:02:c8:a2:ac:9e:43:98:e0:18:99:b4:48:f9:ff:6b:f5:eb: 17:48:13:59:a3:3e:a5:ce:59:ff:63:e5:89:05:fb:4f:f9:cd: 8d:95:e7:a5:3e:12:95:9e:2a:6d:c0:26:86:c3:12:ef:2c:ff: aa:7f:38:50:de:b0:b3:02:25:18:76:b4:37:65:ee:d9:53:d5: fd:ec:f8:ea:ec:d3:2e:29:d4:6f:d4:15:aa:72:98:02:6c:62: 67:ed:83:1b:81:99:13:36:89:59:a3:f4:ca:3e:fe:d5:f5:09: 8b:c8:21:07:79:b9:69:05:0e:71:9b:62:62:6f:e2:aa:67:83: d8:55:c5:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa4m8vJcwei/r9vkK0HHRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2OTE1NDQ1ZTBlOGI3MDM4YWEzZDdhNDUxN2U5MGI2OWM3 ZjcyMGEwHhcNMjYwMjA5MjIwMDI0WhcNMjYwMjEwMjIwMDI0WjAzMTEwLwYDVQQD EygzZDcyNGM4MDg0YzAyMGZjNzZjZDUzNzhiNzBiOWVjYTI3MzFiZjUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RLIGdusL1IRoOUDLcSvax+/iRA7 JCXT1v2XDY5P+XjkR4NzYVqSqOf02b1FMmukbSNy0CqB02lH+nyFTQ8sQBCLiUJA dUKwl0OZlFqDSlYF9xtNablTYvuUxDoDhgGyrhYSTgNAeDN/7JD03EkRMoHR7SU5 8RLM3oVVgbhm7tlPn62nGQneYxel0NOzS7P/iTVNW8pVoGzXABrx5zDQxgcJpZLo 1sqHSI5uyN3AC3iO6PhSeL0O+28wt5zD6RIB2G4qoeBnE/3R1p9WMM0FV34ppIS0 V/Aw63YUCbFbHIljxhRERnQhdz5W2gkCtV5W0rqqrZ/NwqPWSbNT39X2SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1yTICEwCD8ds1TeLcLnsonMb9SMB8GA1UdIwQY MBaAFNaRVEXg6LcDiqPXpFF+kLacf3IKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMt YzNjNjdmZmZkYWFkLzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi83YmUyZDktYTE4NS00ODExLWJjOTMtYzNjNjdmZmZkYWFk LzEvMXBGVVJlRG90d09Lbzlla1VYNlF0cHhfY2dvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWKh6YF69 A64e1oUPrTPpUGESf+Iq/JofohhyeGhzNr0uilYVjnjMba+VTz+0Z8RL3EzoVLdY BGZx+7mSR69zfLXwiCpAX+U414W70XMeiFe5SFOw21yWKSfEGUyBGjzIAjfFk2gC FOTGLX3VwdVeRMN9d5XnSstkmr9fBJ/OKwLIoqyeQ5jgGJm0SPn/a/XrF0gTWaM+ pc5Z/2PliQX7T/nNjZXnpT4SlZ4qbcAmhsMS7yz/qn84UN6wswIlGHa0N2Xu2VPV /ez46uzTLinUb9QVqnKYAmxiZ+2DG4GZEzaJWaP0yj7+1fUJi8ghB3m5aQUOcZti Ym/iqmeD2FXFAw== -----END CERTIFICATE-----Generated at Tue Feb 10 09:02:36 2026 by rpki-client