This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft File: 1-z2QpIni1JxWTgijovNEX7LI1AQ.mft (raw, json) Hash identifier: 0hxCLKCGbgC6AviUMSdHoENh4rguPEzBp3K9jueu4EM= Subject key identifier: 35:E1:44:65:1D:73:CE:E7:B4:81:64:52:83:F7:FA:DA:F6:88:5E:59 Authority key identifier: FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 Certificate issuer: /CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Certificate serial: 019C416A8FE1C795DD3404E755D53DA1B3E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft Manifest number: 12A7 Signing time: Mon 09 Feb 2026 08:00:28 +0000 Manifest this update: Mon 09 Feb 2026 08:00:28 +0000 Manifest next update: Tue 10 Feb 2026 08:00:28 +0000 Files and hashes: 1: 1-z2QpIni1JxWTgijovNEX7LI1AQ.crl (hash: VERwLoMzQcdeshst8AXULo1jqxecqU2IbAxWVptQu0s=) 2: q8ALlbE4IIvLhKys6r6M1Hgfxyo.roa (hash: k/Wh/c00eZEFbymGhdaEUynKj87Lx/1rWZSCYQ9Ry88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:8f:e1:c7:95:dd:34:04:e7:55:d5:3d:a1:b3:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb3d90a489e2d49c564e08a3a2f3445fb2c8d404 Validity Not Before: Feb 9 08:00:28 2026 GMT Not After : Feb 10 08:00:28 2026 GMT Subject: CN=35e144651d73cee7b481645283f7fadaf6885e59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:8e:dc:19:c1:18:9f:de:ef:b3:2d:6c:b4: b2:24:40:11:43:99:da:0b:32:31:f2:a9:da:fe:95: 39:8f:cb:c7:0a:10:f7:23:62:fa:27:6e:e4:c8:bb: 09:1b:f6:4f:ca:86:64:cb:e0:6c:0f:b6:a5:28:86: c9:9f:ae:f5:46:06:20:8d:58:e3:dd:1a:ae:ab:41: c8:47:52:9e:e6:34:0c:67:f2:e2:ee:f2:df:c9:7c: 87:63:0c:26:e8:78:b6:c8:47:74:91:94:e5:92:2b: a1:e8:3c:ed:43:c7:31:d7:45:88:5e:e1:19:3f:78: 6b:2c:9d:2e:6c:a7:4a:f5:27:0b:d1:cc:b6:77:59: da:d8:e0:c5:e2:02:ec:f7:68:d9:bf:05:a8:02:fc: e9:4d:1c:c4:a1:ef:b3:cf:e6:7f:fe:7f:1b:ee:de: e4:9b:60:bf:8a:e6:1f:26:92:c9:13:14:10:0b:4f: 2c:18:9f:32:bb:7d:fe:7f:d9:8e:c5:a8:2d:57:77: 9a:16:53:cc:43:51:eb:d8:95:aa:e3:23:21:00:ec: 3c:0c:42:2c:a6:39:3f:cf:d5:35:f4:b6:56:e7:7b: 19:95:3f:3f:ac:7c:67:de:ec:58:bb:4f:ff:ef:74: 8e:35:f3:57:74:a0:2c:b7:e3:02:da:cf:e9:a4:ad: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:E1:44:65:1D:73:CE:E7:B4:81:64:52:83:F7:FA:DA:F6:88:5E:59 X509v3 Authority Key Identifier: keyid:FB:3D:90:A4:89:E2:D4:9C:56:4E:08:A3:A2:F3:44:5F:B2:C8:D4:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-z2QpIni1JxWTgijovNEX7LI1AQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/30a55d-9959-48e8-9a81-9ab0ff870d23/1/1-z2QpIni1JxWTgijovNEX7LI1AQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:a8:dd:3a:64:17:f5:e3:62:62:be:5d:c6:76:ef:02:bc:2e: bd:9c:db:68:66:56:4c:c7:92:f2:13:11:26:8f:7f:15:f3:7e: 0d:21:cc:11:eb:20:e1:f8:2e:84:cc:3b:d1:17:0c:82:ed:e2: 95:e8:39:82:c6:92:71:56:f7:df:41:f5:36:30:41:03:eb:d3: b5:2f:34:97:9f:df:b1:a1:6a:a2:2b:26:3c:0b:eb:bd:2b:1f: a4:15:9f:60:c3:66:05:d3:89:9a:48:1d:1c:c4:20:2e:42:6d: 3b:76:4a:36:16:7c:4f:1c:68:f0:71:d6:e1:4c:66:48:dd:f7: 1a:5e:3f:83:7e:80:b4:03:75:98:0f:8c:0b:58:88:7a:24:0d: 16:05:44:19:0a:31:11:3c:9d:97:17:b0:a0:33:4b:fb:c4:21: d1:01:82:3d:49:cc:7c:71:07:70:d2:e6:0c:82:6f:34:df:97: 2c:8c:e9:86:fc:7d:3b:ce:7e:08:b1:12:56:dd:30:71:45:b0: 9b:a0:bc:a3:c3:81:40:b0:22:18:ec:34:13:b8:56:e0:d1:14: aa:a8:f6:d1:5e:7f:30:0d:c7:8c:4b:2f:e7:9c:71:8e:3d:88: 02:62:d9:d4:f1:a5:f6:db:01:39:99:90:90:47:9f:53:90:6e: 13:92:49:6a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBao/hx5XdNATnVdU9obPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiM2Q5MGE0ODllMmQ0OWM1NjRlMDhhM2EyZjM0NDVmYjJj OGQ0MDQwHhcNMjYwMjA5MDgwMDI4WhcNMjYwMjEwMDgwMDI4WjAzMTEwLwYDVQQD EygzNWUxNDQ2NTFkNzNjZWU3YjQ4MTY0NTI4M2Y3ZmFkYWY2ODg1ZTU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt+O3BnBGJ/e77MtbLSyJEARQ5na CzIx8qna/pU5j8vHChD3I2L6J27kyLsJG/ZPyoZky+BsD7alKIbJn671RgYgjVjj 3Rquq0HIR1Ke5jQMZ/Li7vLfyXyHYwwm6Hi2yEd0kZTlkiuh6DztQ8cx10WIXuEZ P3hrLJ0ubKdK9ScL0cy2d1na2ODF4gLs92jZvwWoAvzpTRzEoe+zz+Z//n8b7t7k m2C/iuYfJpLJExQQC08sGJ8yu33+f9mOxagtV3eaFlPMQ1Hr2JWq4yMhAOw8DEIs pjk/z9U19LZW53sZlT8/rHxn3uxYu0//73SONfNXdKAst+MC2s/ppK3ACwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDXhRGUdc87ntIFkUoP3+tr2iF5ZMB8GA1UdIwQY MBaAFPs9kKSJ4tScVk4Io6LzRF+yyNQEMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS16MlFwSW5pMUp4V1RnaWpvdk5FWDdMSTFBUS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvMzBhNTVkLTk5NTktNDhlOC05YTgx LTlhYjBmZjg3MGQyMy8xLzEtejJRcEluaTFKeFdUZ2lqb3ZORVg3TEkxQVEubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlLzMwYTU1ZC05OTU5LTQ4ZTgtOWE4MS05YWIwZmY4NzBk MjMvMS8xLXoyUXBJbmkxSnhXVGdpam92TkVYN0xJMUFRLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdqjd OmQX9eNiYr5dxnbvArwuvZzbaGZWTMeS8hMRJo9/FfN+DSHMEesg4fguhMw70RcM gu3ileg5gsaScVb330H1NjBBA+vTtS80l5/fsaFqoismPAvrvSsfpBWfYMNmBdOJ mkgdHMQgLkJtO3ZKNhZ8Txxo8HHW4UxmSN33Gl4/g36AtAN1mA+MC1iIeiQNFgVE GQoxETydlxewoDNL+8Qh0QGCPUnMfHEHcNLmDIJvNN+XLIzphvx9O85+CLESVt0w cUWwm6C8o8OBQLAiGOw0E7hW4NEUqqj20V5/MA3HjEsv55xxjj2IAmLZ1PGl9tsB OZmQkEefU5BuE5JJag== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:34 2026 by rpki-client