This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft File: F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft (raw, json) Hash identifier: mqpN0NCs9gxi1P69UMybiYedHY6fprLbW4nfsXpbZoE= Subject key identifier: 16:BA:31:48:95:77:FD:CC:37:BA:DA:1C:37:F3:58:3B:2B:98:31:9A Authority key identifier: 17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9 Certificate issuer: /CN=174d545b293c16dcefdc41d156f4919bb154c0d9 Certificate serial: 019C41A17CF3DA777CD86AF6ED4D5581B93A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft Manifest number: 0C9D Signing time: Mon 09 Feb 2026 09:00:28 +0000 Manifest this update: Mon 09 Feb 2026 09:00:28 +0000 Manifest next update: Tue 10 Feb 2026 09:00:28 +0000 Files and hashes: 1: F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl (hash: KUbeYaVPljeYVBDpqBBhDeIT/gSXHgjDz3BTSW7LFEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:7c:f3:da:77:7c:d8:6a:f6:ed:4d:55:81:b9:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=174d545b293c16dcefdc41d156f4919bb154c0d9 Validity Not Before: Feb 9 09:00:28 2026 GMT Not After : Feb 10 09:00:28 2026 GMT Subject: CN=16ba31489577fdcc37bada1c37f3583b2b98319a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:4c:8b:e7:39:c9:e1:93:ec:9d:6c:49:ef:c8: 99:4d:43:4b:82:06:8f:ee:60:e0:b4:9c:45:5d:45: 5d:49:79:77:b6:f3:a4:ff:b5:86:ca:9e:be:b4:07: 70:f7:49:e4:68:53:e6:50:f9:31:1e:88:4b:68:b7: 94:a9:1e:df:91:f4:ba:b5:de:67:dc:0e:79:00:ac: 2e:93:36:d7:49:e3:60:0b:a3:bf:d0:8c:99:0b:59: 05:de:53:81:00:c9:67:70:b5:33:7d:27:7d:41:d9: 07:d0:bf:9d:69:95:af:3e:97:fc:41:78:14:c3:44: 4c:4b:1c:eb:a9:f2:d5:26:96:01:62:6b:bc:48:fe: de:e1:a4:e1:86:d9:65:1a:b0:cd:9a:91:b8:28:c7: f7:e7:a1:65:eb:b6:82:4c:5e:a9:4e:a0:c9:d8:bf: 88:70:fb:9a:51:ff:da:f0:7d:5a:6d:32:cc:f4:d9: 34:03:f4:87:84:48:f5:fa:a8:8c:99:df:47:82:11: 9b:74:1b:6b:24:d1:3b:75:83:82:48:51:f0:95:a5: 9c:28:19:a8:97:e7:11:a6:3e:e7:91:f1:e1:be:c9: c3:c6:92:f9:8f:d3:d4:d6:9a:9f:b5:79:1d:57:2f: 82:28:2e:94:fa:ec:05:5f:25:64:00:97:c0:b2:20: 4f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:31:48:95:77:FD:CC:37:BA:DA:1C:37:F3:58:3B:2B:98:31:9A X509v3 Authority Key Identifier: keyid:17:4D:54:5B:29:3C:16:DC:EF:DC:41:D1:56:F4:91:9B:B1:54:C0:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F01UWyk8Ftzv3EHRVvSRm7FUwNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/4ab688-8a51-4322-a286-847e116bc6eb/1/F01UWyk8Ftzv3EHRVvSRm7FUwNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:4d:40:3d:b8:65:cb:59:3d:dd:92:17:48:51:bd:bc:c0:5a: 3f:d5:da:a7:8d:fa:2f:cf:3c:1a:0d:65:c2:09:3f:84:e2:d1: eb:aa:46:b6:5b:80:1c:7a:bc:a5:64:51:30:fc:0b:f3:47:e4: b3:27:49:e7:01:df:ed:b5:e8:73:46:9d:fc:7f:25:dc:8f:a2: 05:ed:e2:b1:11:bd:9c:67:aa:79:cd:7c:67:db:03:f4:44:fa: 76:45:c1:7b:ce:0c:c7:ff:39:6d:94:52:70:67:64:e6:a4:1c: 33:2c:28:0c:ab:01:3e:39:12:d5:a6:04:0e:5a:5c:22:6c:c0: c6:f8:ac:1a:59:38:af:9e:61:8b:03:17:1b:57:1e:b3:dc:fb: c9:ca:f8:16:5f:9c:0b:d1:dc:3d:f2:3e:c7:37:29:57:84:34: f6:9b:61:dc:96:e1:0e:c3:f9:5c:c2:14:b4:e2:64:d0:f8:58: ca:3d:9f:96:55:60:05:99:a4:50:50:74:4c:7c:58:a9:b6:70: b1:7d:25:5f:10:33:05:f6:36:26:37:8c:31:c3:7c:46:6d:cc: 88:ce:59:95:2b:c6:34:64:91:1d:8e:22:a8:1b:ca:b6:b5:88: cd:c0:d0:49:10:76:86:ff:e1:80:b5:50:2e:45:e4:52:d5:40: c4:6e:d1:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoXzz2nd82Gr27U1Vgbk6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3NGQ1NDViMjkzYzE2ZGNlZmRjNDFkMTU2ZjQ5MTliYjE1 NGMwZDkwHhcNMjYwMjA5MDkwMDI4WhcNMjYwMjEwMDkwMDI4WjAzMTEwLwYDVQQD EygxNmJhMzE0ODk1NzdmZGNjMzdiYWRhMWMzN2YzNTgzYjJiOTgzMTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40yL5znJ4ZPsnWxJ78iZTUNLggaP 7mDgtJxFXUVdSXl3tvOk/7WGyp6+tAdw90nkaFPmUPkxHohLaLeUqR7fkfS6td5n 3A55AKwukzbXSeNgC6O/0IyZC1kF3lOBAMlncLUzfSd9QdkH0L+daZWvPpf8QXgU w0RMSxzrqfLVJpYBYmu8SP7e4aThhtllGrDNmpG4KMf356Fl67aCTF6pTqDJ2L+I cPuaUf/a8H1abTLM9Nk0A/SHhEj1+qiMmd9HghGbdBtrJNE7dYOCSFHwlaWcKBmo l+cRpj7nkfHhvsnDxpL5j9PU1pqftXkdVy+CKC6U+uwFXyVkAJfAsiBPKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBa6MUiVd/3MN7raHDfzWDsrmDGaMB8GA1UdIwQY MBaAFBdNVFspPBbc79xB0Vb0kZuxVMDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy80YWI2ODgtOGE1MS00MzIyLWEyODYt ODQ3ZTExNmJjNmViLzEvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy80YWI2ODgtOGE1MS00MzIyLWEyODYtODQ3ZTExNmJjNmVi LzEvRjAxVVd5azhGdHp2M0VIUlZ2U1JtN0ZVd05rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvk1APbhl y1k93ZIXSFG9vMBaP9Xap436L888Gg1lwgk/hOLR66pGtluAHHq8pWRRMPwL80fk sydJ5wHf7bXoc0ad/H8l3I+iBe3isRG9nGeqec18Z9sD9ET6dkXBe84Mx/85bZRS cGdk5qQcMywoDKsBPjkS1aYEDlpcImzAxvisGlk4r55hiwMXG1ces9z7ycr4Fl+c C9HcPfI+xzcpV4Q09pth3JbhDsP5XMIUtOJk0PhYyj2fllVgBZmkUFB0THxYqbZw sX0lXxAzBfY2JjeMMcN8Rm3MiM5ZlSvGNGSRHY4iqBvKtrWIzcDQSRB2hv/hgLVQ LkXkUtVAxG7RxA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:34:01 2026 by rpki-client