This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft File: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft (raw, json) Hash identifier: Er9lmfUO4k2DOW588+g0xgIRYACnNgXv1xZRcNQ2AKk= Subject key identifier: 08:F5:CC:73:58:EC:16:6C:CE:9C:85:FA:88:34:8B:83:35:C7:21:CA Authority key identifier: FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 Certificate issuer: /CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Certificate serial: 019C4359586458D2775C738E9714CFBB5124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft Manifest number: 053C Signing time: Mon 09 Feb 2026 17:00:54 +0000 Manifest this update: Mon 09 Feb 2026 17:00:54 +0000 Manifest next update: Tue 10 Feb 2026 17:00:54 +0000 Files and hashes: 1: 1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl (hash: zUWo+func+iQ7/wbccFKVEdrzX9S5/2wR6EAwFJaFy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:58:64:58:d2:77:5c:73:8e:97:14:cf:bb:51:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa3585a105ee83c645e2eef13dc081e35caa2c04 Validity Not Before: Feb 9 17:00:54 2026 GMT Not After : Feb 10 17:00:54 2026 GMT Subject: CN=08f5cc7358ec166cce9c85fa88348b8335c721ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:82:70:aa:93:30:bc:c0:b3:bc:f4:f5:37: b7:4c:b9:6b:ec:59:e5:de:f8:21:22:d2:30:ea:47: db:7d:4a:f2:d4:af:3c:4f:66:a2:7d:3e:88:15:ff: e5:02:ca:ea:97:04:e8:eb:d3:51:1a:63:ef:2b:75: 9f:34:e4:a1:05:da:43:46:1b:08:d8:79:6d:09:ce: df:3c:2b:dc:30:0e:5e:70:a1:dc:5f:25:7b:2c:d6: b0:f7:d3:c3:62:31:6a:f6:b1:79:f4:70:66:f4:ef: 5a:74:d8:b6:df:76:67:0c:b3:42:e4:a5:a7:2d:b1: 7c:eb:73:60:76:9b:38:aa:73:34:f4:ec:86:0b:80: 3e:e1:ef:68:69:cb:18:11:15:9e:9d:5e:65:0a:b6: 0a:d7:6c:e3:bb:2a:2f:1e:b8:82:b2:49:39:29:07: c9:a5:28:ff:16:5d:44:f6:c0:3c:5e:23:1e:fa:1e: b2:db:84:a5:32:49:90:99:62:8e:a9:0f:46:7e:a9: cf:dc:bf:a1:ea:ed:ef:43:54:f1:8e:58:d5:93:14: cd:39:b6:18:70:f0:87:87:e8:00:d5:52:14:a1:d7: 31:82:26:98:69:e7:a8:6b:fa:39:46:05:2b:b9:66: 9a:1c:e3:29:49:d5:8a:6a:aa:ae:5e:33:51:4e:0b: 1e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F5:CC:73:58:EC:16:6C:CE:9C:85:FA:88:34:8B:83:35:C7:21:CA X509v3 Authority Key Identifier: keyid:FA:35:85:A1:05:EE:83:C6:45:E2:EE:F1:3D:C0:81:E3:5C:AA:2C:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f97aa1-6f3c-4bd5-91d4-c4a9b95765ac/1/1-jWFoQXug8ZF4u7xPcCB41yqLAQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:92:eb:ed:9a:7e:3a:dd:2f:6f:ae:bb:9d:f7:0b:3d:7d:21: 2b:d1:76:bc:f9:83:28:43:7a:c2:9c:40:17:a9:db:e6:e7:ba: 0b:77:6b:82:85:8a:67:65:a3:1a:3c:77:ea:c6:f2:9c:ca:51: 41:be:33:da:91:9e:da:fd:9f:b0:ac:ab:e6:a8:56:c2:95:8e: cf:a2:fb:68:d2:97:6e:d3:98:3e:e2:54:ca:80:3c:e6:4d:b2: 0c:db:db:cf:ee:5a:7f:f3:88:a9:38:0f:a5:bb:b1:e9:4f:66: 4f:f7:17:d0:73:7a:47:7f:ce:3b:c3:2d:64:d4:0c:f3:e1:64: 89:83:b9:e9:ec:cf:c9:bc:58:1d:29:b3:53:5a:33:34:86:62: 73:e6:d9:48:f3:68:9d:c3:83:fc:32:93:8f:fb:f5:3c:d6:27: 61:8c:c8:2d:45:54:b1:de:69:40:80:1e:04:ac:a1:af:9a:de: 77:ac:76:10:69:97:90:46:12:c4:61:fe:44:40:17:5a:ab:2f: 88:09:a2:9c:d7:a9:39:89:c6:f9:93:eb:a1:b7:a3:a2:b1:a7: 2c:bf:ce:bb:ec:70:35:ae:ba:b3:8e:9a:79:f2:ca:b6:c5:08: 73:10:f4:bd:d3:05:0a:c8:e0:4e:19:07:16:77:89:6d:db:7e: c0:27:6d:82 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDWVhkWNJ3XHOOlxTPu1EkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhMzU4NWExMDVlZTgzYzY0NWUyZWVmMTNkYzA4MWUzNWNh YTJjMDQwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD EygwOGY1Y2M3MzU4ZWMxNjZjY2U5Yzg1ZmE4ODM0OGI4MzM1YzcyMWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3WCcKqTMLzAs7z09Te3TLlr7Fnl 3vghItIw6kfbfUry1K88T2aifT6IFf/lAsrqlwTo69NRGmPvK3WfNOShBdpDRhsI 2HltCc7fPCvcMA5ecKHcXyV7LNaw99PDYjFq9rF59HBm9O9adNi233ZnDLNC5KWn LbF863Ngdps4qnM09OyGC4A+4e9oacsYERWenV5lCrYK12zjuyovHriCskk5KQfJ pSj/Fl1E9sA8XiMe+h6y24SlMkmQmWKOqQ9GfqnP3L+h6u3vQ1TxjljVkxTNObYY cPCHh+gA1VIUodcxgiaYaeeoa/o5RgUruWaaHOMpSdWKaqquXjNRTgseRwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFAj1zHNY7BZszpyF+og0i4M1xyHKMB8GA1UdIwQY MBaAFPo1haEF7oPGReLu8T3AgeNcqiwEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1qV0ZvUVh1ZzhaRjR1N3hQY0NCNDF5cUxBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmIvZjk3YWExLTZmM2MtNGJkNS05MWQ0 LWM0YTliOTU3NjVhYy8xLzEtaldGb1FYdWc4WkY0dTd4UGNDQjQxeXFMQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JiL2Y5N2FhMS02ZjNjLTRiZDUtOTFkNC1jNGE5Yjk1NzY1 YWMvMS8xLWpXRm9RWHVnOFpGNHU3eFBjQ0I0MXlxTEFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpLr 7Zp+Ot0vb667nfcLPX0hK9F2vPmDKEN6wpxAF6nb5ue6C3drgoWKZ2WjGjx36sby nMpRQb4z2pGe2v2fsKyr5qhWwpWOz6L7aNKXbtOYPuJUyoA85k2yDNvbz+5af/OI qTgPpbux6U9mT/cX0HN6R3/OO8MtZNQM8+FkiYO56ezPybxYHSmzU1ozNIZic+bZ SPNoncOD/DKTj/v1PNYnYYzILUVUsd5pQIAeBKyhr5red6x2EGmXkEYSxGH+REAX WqsviAminNepOYnG+ZProbejorGnLL/Ou+xwNa66s46aefLKtsUIcxD0vdMFCsjg ThkHFneJbdt+wCdtgg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:32 2026 by rpki-client