This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft File: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft (raw, json) Hash identifier: 9lGaa6XBpZh6SIssWuw9obqZzCR6+UxJMQpCI29b5UI= Subject key identifier: 1D:0B:81:5D:03:69:9E:2B:86:5B:78:33:60:7E:82:B1:65:FE:E8:88 Authority key identifier: FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 Certificate issuer: /CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Certificate serial: 019C416B072AB4268BEF58C663A77EDE6135 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 08:00:59 +0000 Manifest this update: Mon 09 Feb 2026 08:00:59 +0000 Manifest next update: Tue 10 Feb 2026 08:00:59 +0000 Files and hashes: 1: 1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl (hash: dToifQ1KlwsbhiTIoo7OpvuH2cZUoVl/QvUiTNLRJ7s=) 2: PnyApWhBqSkH1XcSr9pQIjfA9bU.roa (hash: u2tVorDg0eTkm07sz5ei+r+s3xcbReWf672n/fbZuG8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6b:07:2a:b4:26:8b:ef:58:c6:63:a7:7e:de:61:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa95ecdaa359a6f8355573d39001baa35874bed2 Validity Not Before: Feb 9 08:00:59 2026 GMT Not After : Feb 10 08:00:59 2026 GMT Subject: CN=1d0b815d03699e2b865b7833607e82b165fee888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1f:62:ac:b6:a3:2c:14:7b:0c:fd:19:bf:34: 67:81:ff:47:19:7b:12:a0:b6:d6:a9:98:5d:d1:52: 7f:8a:4e:fb:eb:8a:03:94:e5:c5:52:b7:ec:06:5b: 34:a5:d2:ea:25:31:45:07:9b:c7:f8:58:79:fe:02: a7:75:a6:0a:a9:3c:90:b7:59:00:05:00:06:f0:29: b6:a6:4b:9d:01:7f:93:b0:74:cf:95:59:93:b6:11: 3c:03:f9:8e:ab:9b:97:4b:1d:cf:0b:8e:21:4b:b6: 94:59:95:86:de:a3:27:15:6b:33:53:77:7a:ec:cd: b6:b2:ab:20:a1:9a:61:10:f2:b5:e9:1e:71:c6:df: 56:02:db:f8:f3:08:17:57:21:6f:9c:e1:92:88:7e: a4:41:96:10:96:ba:c3:82:30:ab:8a:87:3f:9a:96: e4:f9:d8:59:35:39:5e:8e:01:57:16:32:27:88:a9: b6:ff:95:3b:15:58:dd:1b:c6:94:aa:0b:fc:e1:85: 16:62:01:62:c0:36:35:5f:70:f2:68:fc:f7:fc:5c: bb:d7:52:23:ee:fe:49:69:2f:b0:76:7a:84:9c:c8: 17:67:bd:e6:0b:13:e4:8c:c5:a1:e3:86:a6:45:9b: 3d:f9:15:73:63:2a:66:20:0c:67:23:7d:3c:ff:55: 65:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:0B:81:5D:03:69:9E:2B:86:5B:78:33:60:7E:82:B1:65:FE:E8:88 X509v3 Authority Key Identifier: keyid:FA:95:EC:DA:A3:59:A6:F8:35:55:73:D3:90:01:BA:A3:58:74:BE:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/dbb5c7-9460-4009-8e7d-1c17d502d4df/1/1-pXs2qNZpvg1VXPTkAG6o1h0vtI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:42:54:e0:c2:aa:a6:d6:6e:00:1d:a4:27:ad:84:a3:0d:a1: 89:f7:2a:54:57:67:e8:0d:6f:29:07:47:2a:88:84:e2:06:38: 94:6a:1e:f5:50:69:09:0a:b4:7f:93:eb:d8:c9:f5:65:26:e9: 3d:21:4b:69:f2:46:79:97:13:0d:c0:d2:23:c4:dd:0c:17:c3: e2:fc:32:ad:a8:92:75:4b:41:fc:c6:18:88:ad:f7:f1:84:45: f9:22:6f:0c:58:ee:7d:db:85:dd:c4:82:f1:02:0c:9f:e1:59: 6e:db:bb:6c:c0:f5:25:7a:68:b5:06:74:d7:1f:e7:f2:bc:4c: cf:6f:68:d8:39:2a:24:90:a8:3b:8a:fd:98:36:87:50:a5:f5: 13:f7:53:ce:7c:bb:68:2f:58:9a:96:b7:cd:66:8c:4f:91:64: 0d:65:68:eb:9a:37:01:53:7f:77:02:af:45:61:6c:f7:d7:44: 5e:bb:77:c6:7c:14:30:0a:fc:de:a1:4c:c0:79:32:98:b5:1d: 03:47:46:6f:a7:cd:7d:e0:2d:56:4d:28:29:7f:21:73:42:2b: 48:44:93:3f:18:eb:0c:25:dc:16:28:1c:dc:a7:21:fa:25:c3: fc:97:ba:8c:98:89:e8:fc:49:7b:01:c2:8f:81:76:23:3d:af: e0:43:e1:54 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxBawcqtCaL71jGY6d+3mE1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZhOTVlY2RhYTM1OWE2ZjgzNTU1NzNkMzkwMDFiYWEzNTg3 NGJlZDIwHhcNMjYwMjA5MDgwMDU5WhcNMjYwMjEwMDgwMDU5WjAzMTEwLwYDVQQD EygxZDBiODE1ZDAzNjk5ZTJiODY1Yjc4MzM2MDdlODJiMTY1ZmVlODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR9irLajLBR7DP0ZvzRngf9HGXsS oLbWqZhd0VJ/ik7764oDlOXFUrfsBls0pdLqJTFFB5vH+Fh5/gKndaYKqTyQt1kA BQAG8Cm2pkudAX+TsHTPlVmTthE8A/mOq5uXSx3PC44hS7aUWZWG3qMnFWszU3d6 7M22sqsgoZphEPK16R5xxt9WAtv48wgXVyFvnOGSiH6kQZYQlrrDgjCrioc/mpbk +dhZNTlejgFXFjIniKm2/5U7FVjdG8aUqgv84YUWYgFiwDY1X3DyaPz3/Fy711Ij 7v5JaS+wdnqEnMgXZ73mCxPkjMWh44amRZs9+RVzYypmIAxnI308/1VlmQIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFB0LgV0DaZ4rhlt4M2B+grFl/uiIMB8GA1UdIwQY MBaAFPqV7NqjWab4NVVz05ABuqNYdL7SMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1wWHMycU5acHZnMVZYUFRrQUc2bzFoMHZ0SS5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmUvZGJiNWM3LTk0NjAtNDAwOS04ZTdk LTFjMTdkNTAyZDRkZi8xLzEtcFhzMnFOWnB2ZzFWWFBUa0FHNm8xaDB2dEkubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2JlL2RiYjVjNy05NDYwLTQwMDktOGU3ZC0xYzE3ZDUwMmQ0 ZGYvMS8xLXBYczJxTlpwdmcxVlhQVGtBRzZvMWgwdnRJLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUJU 4MKqptZuAB2kJ62Eow2hifcqVFdn6A1vKQdHKoiE4gY4lGoe9VBpCQq0f5Pr2Mn1 ZSbpPSFLafJGeZcTDcDSI8TdDBfD4vwyraiSdUtB/MYYiK338YRF+SJvDFjufduF 3cSC8QIMn+FZbtu7bMD1JXpotQZ01x/n8rxMz29o2DkqJJCoO4r9mDaHUKX1E/dT zny7aC9Ympa3zWaMT5FkDWVo65o3AVN/dwKvRWFs99dEXrt3xnwUMAr83qFMwHky mLUdA0dGb6fNfeAtVk0oKX8hc0IrSESTPxjrDCXcFigc3Kch+iXD/Je6jJiJ6PxJ ewHCj4F2Iz2v4EPhVA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:25 2026 by rpki-client