This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft File: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft (raw, json) Hash identifier: 5BuVSO+ojkQBmAOnuFg4qmNAs5MCILS6eo937qnfb2E= Subject key identifier: E6:3A:A1:FF:0B:73:5A:C3:3E:43:99:6D:78:97:05:76:D5:50:27:B2 Authority key identifier: FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 Certificate issuer: /CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Certificate serial: 019C4434EF8F3547A495856EC6B400ECE379 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft Manifest number: 17A6 Signing time: Mon 09 Feb 2026 21:00:45 +0000 Manifest this update: Mon 09 Feb 2026 21:00:45 +0000 Manifest next update: Tue 10 Feb 2026 21:00:45 +0000 Files and hashes: 1: 1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl (hash: vemOoB+GmO9XpFZqK1Lh7YXbfTnJPy+xwWtYeIhzn28=) 2: YPTBhCi-2wZ5UQb5ApiuqyrwwNM.roa (hash: XFRYmJaoPXSuRaNORpMPCGlJK9aNC4fFNx6j6pcG01w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:ef:8f:35:47:a4:95:85:6e:c6:b4:00:ec:e3:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa630c3d23c6046c2f1a7e0c8fccbd83e20ed4c7 Validity Not Before: Feb 9 21:00:45 2026 GMT Not After : Feb 10 21:00:45 2026 GMT Subject: CN=e63aa1ff0b735ac33e43996d78970576d55027b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:f2:02:45:84:02:89:aa:11:3b:db:4a:2e: a8:7c:7d:33:f4:d8:45:7a:ef:74:f2:00:be:af:23: df:fa:76:5a:b4:f0:09:15:28:fd:86:b7:e4:bf:60: 91:b6:c7:69:99:c4:8a:91:a3:8f:8a:20:e3:6f:43: 0d:a1:d1:fe:b2:73:5d:f6:f4:98:c4:08:bc:db:fb: cd:bd:83:6a:02:75:8d:8e:05:c0:8c:13:66:00:7b: fd:8b:99:80:87:a2:37:83:87:53:af:c1:3c:64:85: 5b:c0:44:12:c3:77:d9:36:20:7d:3a:74:1e:c5:e1: 70:cc:72:be:dd:33:3d:f8:d8:55:07:60:26:98:d4: 80:06:5a:9b:7f:99:ab:90:db:7a:e8:c4:e0:54:36: 4d:ba:bc:0b:de:be:b2:0a:eb:79:12:46:e0:da:82: 8d:b7:26:d4:dc:e5:d7:ce:d7:d8:31:b2:0c:60:c9: 15:21:ce:19:86:1c:7e:92:1b:85:90:96:6e:11:33: ec:c4:7d:21:b0:79:0e:89:c2:aa:de:c0:45:c6:67: 8c:80:6e:4e:de:0b:e2:c8:f9:6c:73:c2:5a:ab:9b: e2:b4:7a:cf:b8:4f:0e:67:3a:11:10:c1:00:56:c9: c7:1c:7f:52:a0:e9:8a:72:69:0e:65:27:bf:d5:52: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:3A:A1:FF:0B:73:5A:C3:3E:43:99:6D:78:97:05:76:D5:50:27:B2 X509v3 Authority Key Identifier: keyid:FA:63:0C:3D:23:C6:04:6C:2F:1A:7E:0C:8F:CC:BD:83:E2:0E:D4:C7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/49ad97-21f1-4cc9-b776-8cbee5a027c3/1/1-mMMPSPGBGwvGn4Mj8y9g-IO1Mc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5d:f7:a5:46:b6:bf:d7:80:48:fe:f1:76:8d:3e:35:2e:a2: 30:38:6f:dd:5c:74:df:39:2f:f0:6e:00:f1:3d:ca:b9:30:34: aa:c6:fd:16:4b:50:2e:44:f7:c0:9c:c2:fc:41:17:e8:c3:35: bf:47:15:aa:02:f3:17:f5:b9:ae:38:f6:73:52:63:52:06:95: 4e:bc:b5:57:28:b6:3b:ad:a6:98:e2:87:c3:87:94:6d:d8:5d: 76:42:51:d2:46:fc:8a:a6:9d:af:bb:fc:d3:7d:d1:3b:8a:b2: ce:a9:df:75:27:98:fa:63:a1:61:cc:ef:c5:94:13:a2:47:e2: fd:4b:e7:b9:e8:b9:bc:ac:37:04:1a:f7:67:f9:ca:13:74:bb: 15:e3:96:b4:07:9f:5d:f7:65:03:ef:8e:3d:f3:73:23:78:ab: bb:b8:02:97:f3:b9:2a:0f:77:0f:2a:1d:6e:fc:db:59:9e:94: 45:37:60:86:24:07:0c:30:bf:f7:a8:1c:b3:67:42:42:75:cf: af:cb:36:56:7d:6b:a9:4b:9d:93:7b:4b:21:4e:1b:5d:11:9d: 7d:a9:aa:e4:9c:1f:35:ea:5c:fc:fd:41:86:8d:ad:64:dd:91: 17:f2:19:b2:3e:1a:67:14:95:9b:30:ff:5d:d4:b6:2c:d4:c2: 80:af:60:b0 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxENO+PNUeklYVuxrQA7ON5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhNjMwYzNkMjNjNjA0NmMyZjFhN2UwYzhmY2NiZDgzZTIw ZWQ0YzcwHhcNMjYwMjA5MjEwMDQ1WhcNMjYwMjEwMjEwMDQ1WjAzMTEwLwYDVQQD EyhlNjNhYTFmZjBiNzM1YWMzM2U0Mzk5NmQ3ODk3MDU3NmQ1NTAyN2IyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL7yAkWEAomqETvbSi6ofH0z9NhF eu908gC+ryPf+nZatPAJFSj9hrfkv2CRtsdpmcSKkaOPiiDjb0MNodH+snNd9vSY xAi82/vNvYNqAnWNjgXAjBNmAHv9i5mAh6I3g4dTr8E8ZIVbwEQSw3fZNiB9OnQe xeFwzHK+3TM9+NhVB2AmmNSABlqbf5mrkNt66MTgVDZNurwL3r6yCut5Ekbg2oKN tybU3OXXztfYMbIMYMkVIc4Zhhx+khuFkJZuETPsxH0hsHkOicKq3sBFxmeMgG5O 3gviyPlsc8Jaq5vitHrPuE8OZzoREMEAVsnHHH9SoOmKcmkOZSe/1VJK4wIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFOY6of8Lc1rDPkOZbXiXBXbVUCeyMB8GA1UdIwQY MBaAFPpjDD0jxgRsLxp+DI/MvYPiDtTHMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1tTU1QU1BHQkd3dkduNE1qOHk5Zy1JTzFNYy5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmMvNDlhZDk3LTIxZjEtNGNjOS1iNzc2 LThjYmVlNWEwMjdjMy8xLzEtbU1NUFNQR0JHd3ZHbjRNajh5OWctSU8xTWMubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JjLzQ5YWQ5Ny0yMWYxLTRjYzktYjc3Ni04Y2JlZTVhMDI3 YzMvMS8xLW1NTVBTUEdCR3d2R240TWo4eTlnLUlPMU1jLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUV33 pUa2v9eASP7xdo0+NS6iMDhv3Vx03zkv8G4A8T3KuTA0qsb9FktQLkT3wJzC/EEX 6MM1v0cVqgLzF/W5rjj2c1JjUgaVTry1Vyi2O62mmOKHw4eUbdhddkJR0kb8iqad r7v8033RO4qyzqnfdSeY+mOhYczvxZQTokfi/Uvnuei5vKw3BBr3Z/nKE3S7FeOW tAefXfdlA++OPfNzI3iru7gCl/O5Kg93DyodbvzbWZ6URTdghiQHDDC/96gcs2dC QnXPr8s2Vn1rqUudk3tLIU4bXRGdfamq5JwfNepc/P1Bho2tZN2RF/IZsj4aZxSV mzD/XdS2LNTCgK9gsA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:46 2026 by rpki-client