This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft File: FVKrj2cfUIF_SRxB0fHqG13kbms.mft (raw, json) Hash identifier: Uy4gn1rm8Cr7VGBp3Hky7zrI6fVgnwFupXGKDEgQhf8= Subject key identifier: B5:3D:12:81:A9:26:F4:E4:08:6E:C7:CC:49:41:0C:F5:3D:71:37:35 Authority key identifier: 15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B Certificate issuer: /CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b Certificate serial: 019C42EB8BE96AAAD0F834060D6F2E6A6838 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: FVKrj2cfUIF_SRxB0fHqG13kbms.crl (hash: /TPu4KVqFG3xzj17hIiunCApcYoRu3SfQ6dHbX8OOh8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8b:e9:6a:aa:d0:f8:34:06:0d:6f:2e:6a:68:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1552ab8f671f50817f491c41d1f1ea1b5de46e6b Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=b53d1281a926f4e4086ec7cc49410cf53d713735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cc:0b:71:0f:bc:49:37:63:29:db:7c:41:24: 88:94:86:c5:26:1b:4e:7b:4c:be:e8:46:8c:a1:c9: 04:21:8c:9a:05:98:14:65:94:03:01:6a:aa:c1:e5: 04:b4:c3:7e:9e:fc:17:3c:3f:ef:bd:3f:de:8b:e1: 6f:d0:e7:0c:39:04:f7:e7:c0:53:c2:81:26:42:f1: 0d:f6:46:96:4f:27:83:87:c5:d0:89:8d:a4:bb:b7: 56:24:60:37:b7:23:69:b4:54:1f:15:77:f4:6b:9e: 24:d7:22:36:7d:d5:aa:3d:6e:85:c1:24:e8:85:6a: 4d:4c:b7:83:e7:89:43:c5:43:c1:9c:bb:b1:9a:69: 97:ff:e1:35:9c:49:d2:e5:4e:37:68:75:c4:2f:7d: 29:8c:73:f0:3e:ad:bb:a4:0a:6c:4a:5d:d2:45:1a: 48:7f:b9:09:ae:dc:8c:e6:c7:9a:15:65:9f:a4:40: c8:d1:a1:55:c7:7c:2a:08:02:d4:3c:b1:2c:26:0b: 2d:d8:e0:d1:9c:f7:e9:92:d9:28:09:21:2c:5c:12: 61:f2:88:7e:08:57:f7:74:20:04:99:d5:00:4e:48: 7e:44:64:48:bf:0b:11:e8:6b:47:b1:44:c3:41:d1: 96:f8:50:17:da:39:50:c3:be:f1:8c:6b:50:cd:ab: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3D:12:81:A9:26:F4:E4:08:6E:C7:CC:49:41:0C:F5:3D:71:37:35 X509v3 Authority Key Identifier: keyid:15:52:AB:8F:67:1F:50:81:7F:49:1C:41:D1:F1:EA:1B:5D:E4:6E:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FVKrj2cfUIF_SRxB0fHqG13kbms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7d8e3b-eeda-4cb2-a3be-c9f9ddad61d9/1/FVKrj2cfUIF_SRxB0fHqG13kbms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a9:ea:28:e2:b6:07:c8:18:7a:99:6b:21:ec:ba:2f:64:4b: 0a:80:89:db:02:a3:4b:46:37:e5:e7:12:6e:39:ef:b8:a1:6c: dd:3c:76:d1:64:49:6a:ad:58:bc:91:74:03:ed:cb:67:cf:86: eb:66:28:e1:e8:ac:97:d7:8e:aa:31:36:cf:2e:9b:68:6b:a7: ab:af:91:5a:4e:f9:b0:e9:0d:68:61:f7:46:4a:24:60:48:cf: f2:37:f4:99:f6:10:16:b7:64:31:ee:9f:f6:9f:8d:2a:9c:40: 30:3a:8d:1a:88:9a:31:49:76:37:3d:21:c0:dd:38:fe:29:c7: 22:ff:93:6a:00:b2:f0:07:84:43:3d:9f:c1:ad:63:66:02:ee: 03:9a:ee:29:38:69:9a:a4:cf:ec:31:8f:05:b2:01:f6:a6:fe: bd:37:d3:93:70:3c:5a:66:f0:da:eb:44:2c:f2:00:df:fe:3b: d8:ff:98:6e:c9:65:a2:bb:0d:3c:0d:db:ef:f2:c3:de:7e:77: 3e:7e:d2:b6:7a:ad:04:96:4e:48:36:dc:28:20:c0:41:5e:06: 96:f7:ce:96:90:a2:b2:83:16:f8:4d:13:67:af:69:76:b2:ae: 21:aa:45:dd:2a:bf:03:bd:d9:d7:fe:2b:2d:82:28:a0:fb:1c: 15:cc:d9:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64vpaqrQ+DQGDW8uamg4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1NTJhYjhmNjcxZjUwODE3ZjQ5MWM0MWQxZjFlYTFiNWRl NDZlNmIwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD EyhiNTNkMTI4MWE5MjZmNGU0MDg2ZWM3Y2M0OTQxMGNmNTNkNzEzNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28wLcQ+8STdjKdt8QSSIlIbFJhtO e0y+6EaMockEIYyaBZgUZZQDAWqqweUEtMN+nvwXPD/vvT/ei+Fv0OcMOQT358BT woEmQvEN9kaWTyeDh8XQiY2ku7dWJGA3tyNptFQfFXf0a54k1yI2fdWqPW6FwSTo hWpNTLeD54lDxUPBnLuxmmmX/+E1nEnS5U43aHXEL30pjHPwPq27pApsSl3SRRpI f7kJrtyM5seaFWWfpEDI0aFVx3wqCALUPLEsJgst2ODRnPfpktkoCSEsXBJh8oh+ CFf3dCAEmdUATkh+RGRIvwsR6GtHsUTDQdGW+FAX2jlQw77xjGtQzaudAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLU9EoGpJvTkCG7HzElBDPU9cTc1MB8GA1UdIwQY MBaAFBVSq49nH1CBf0kcQdHx6htd5G5rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUt YzlmOWRkYWQ2MWQ5LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy83ZDhlM2ItZWVkYS00Y2IyLWEzYmUtYzlmOWRkYWQ2MWQ5 LzEvRlZLcmoyY2ZVSUZfU1J4QjBmSHFHMTNrYm1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATanqKOK2 B8gYeplrIey6L2RLCoCJ2wKjS0Y35ecSbjnvuKFs3Tx20WRJaq1YvJF0A+3LZ8+G 62Yo4eisl9eOqjE2zy6baGunq6+RWk75sOkNaGH3RkokYEjP8jf0mfYQFrdkMe6f 9p+NKpxAMDqNGoiaMUl2Nz0hwN04/inHIv+TagCy8AeEQz2fwa1jZgLuA5ruKThp mqTP7DGPBbIB9qb+vTfTk3A8Wmbw2utELPIA3/472P+YbsllorsNPA3b7/LD3n53 Pn7StnqtBJZOSDbcKCDAQV4GlvfOlpCisoMW+E0TZ69pdrKuIapF3Sq/A73Z1/4r LYIooPscFczZTw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:27 2026 by rpki-client