This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft File: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft (raw, json) Hash identifier: DolByG6ZtrH4v2IGeP5c+SyMU26CyTxNpvmECb2ee50= Subject key identifier: CD:5C:1C:1F:4A:38:13:B9:49:DC:AF:F0:19:1A:0A:21:C7:A4:2B:9A Authority key identifier: FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA Certificate issuer: /CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Certificate serial: 019C4322CAC716AE654C2F003023B0EDACD1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft Manifest number: 1296 Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: 1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl (hash: QWeGW6S/WkMCiHnKLNlXxicKP21GpOMsVrKDuujG6uY=) 2: nEwlFQn77GRj0a5PcdvpntXjCkk.roa (hash: 7O4FI78VSfvllLog9ZUlgueDZ+Vv0bklrjItMQ0ox9s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ca:c7:16:ae:65:4c:2f:00:30:23:b0:ed:ac:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbf2a5a5df4d95ac0115caedad194b62688f2bba Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=cd5c1c1f4a3813b949dcaff0191a0a21c7a42b9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:13:8d:a8:9b:96:00:94:2b:a6:54:63:e3: 2b:fb:7a:d4:07:25:14:49:29:5d:c6:04:19:9f:9e: 59:84:cd:6c:44:b6:25:a6:38:8c:e6:19:9e:8f:ca: 34:4f:fb:66:f5:df:4a:86:9c:87:35:f8:d2:4f:dc: 85:af:66:48:74:79:59:0c:11:ec:d1:07:dc:5c:e9: 02:62:4d:70:07:0a:86:1e:29:e8:2f:fa:45:db:31: 42:b4:92:d0:3e:06:c0:54:6d:d6:fc:27:55:68:bf: 25:7b:2e:df:71:31:3f:99:db:06:bc:0c:3f:af:19: de:63:b4:c3:7e:f1:4d:a0:95:91:40:54:64:f9:cb: cb:34:01:68:e6:4b:e0:33:86:8a:8c:cb:3b:01:6d: 96:1e:fc:25:a4:1f:23:d7:e8:23:82:72:52:57:9f: f6:50:75:2a:8c:c6:f8:c4:65:04:9f:26:d3:34:aa: 85:7a:6c:34:04:28:b8:f6:46:0f:6e:95:6c:b8:e8: ff:8b:cf:5a:2a:39:02:db:86:63:3a:dd:b2:28:2b: 42:40:0b:28:7c:5c:54:b5:0b:03:1a:e3:d5:e5:b5: 9e:a3:25:af:d0:cd:e0:f3:f0:96:a5:85:34:c2:78: 25:42:ef:9a:de:22:12:2d:82:38:22:8f:03:f9:68: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:5C:1C:1F:4A:38:13:B9:49:DC:AF:F0:19:1A:0A:21:C7:A4:2B:9A X509v3 Authority Key Identifier: keyid:FB:F2:A5:A5:DF:4D:95:AC:01:15:CA:ED:AD:19:4B:62:68:8F:2B:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_Klpd9NlawBFcrtrRlLYmiPK7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a50d0-564f-40e0-8589-c9f7d02f90c0/1/1-_Klpd9NlawBFcrtrRlLYmiPK7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:bd:26:df:33:5c:70:9e:fb:72:60:95:5c:39:9e:44:7c:89: 10:dd:d2:de:38:b8:12:8a:7e:38:42:d8:ab:24:19:69:12:dd: bb:fb:9f:66:a1:b3:63:e9:5b:f7:a8:8b:ea:50:e4:74:03:23: bf:9c:96:a2:4b:f7:4a:7b:78:34:a5:78:40:e2:6d:4c:97:19: b4:e5:08:66:45:aa:c5:41:0b:b3:52:85:e3:f3:1c:89:7f:9b: 54:a5:cf:dc:24:b0:a6:33:b3:75:80:ac:eb:01:64:68:b4:06: a6:23:4d:0c:07:5f:d2:7c:3c:74:72:9b:0b:32:50:d3:5b:92: b3:4c:b7:11:ac:1e:6b:f2:0a:38:a9:ff:7c:7e:43:3e:f1:fd: 35:93:01:87:df:5e:fe:d2:da:3c:0b:58:0f:5c:f4:29:dc:35: 2b:6d:8c:8e:57:fc:ac:38:e7:dc:64:66:73:92:74:3b:03:b1: ba:21:8e:51:60:27:ce:1f:8e:6c:b3:ed:76:46:09:78:bd:ea: 5d:0d:ba:36:c6:a8:d3:00:a5:b4:15:55:c3:5a:80:e7:95:27: 2a:8e:a5:2a:94:b3:11:b9:78:71:4e:76:fe:f7:26:0e:fd:25: b7:90:7b:6f:99:3b:59:15:cd:7d:c9:6a:ef:b5:80:24:ff:c7: 9e:59:1e:80 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZxDIsrHFq5lTC8AMCOw7azRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiZjJhNWE1ZGY0ZDk1YWMwMTE1Y2FlZGFkMTk0YjYyNjg4 ZjJiYmEwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD EyhjZDVjMWMxZjRhMzgxM2I5NDlkY2FmZjAxOTFhMGEyMWM3YTQyYjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQITjaiblgCUK6ZUY+Mr+3rUByUU SSldxgQZn55ZhM1sRLYlpjiM5hmej8o0T/tm9d9KhpyHNfjST9yFr2ZIdHlZDBHs 0QfcXOkCYk1wBwqGHinoL/pF2zFCtJLQPgbAVG3W/CdVaL8ley7fcTE/mdsGvAw/ rxneY7TDfvFNoJWRQFRk+cvLNAFo5kvgM4aKjMs7AW2WHvwlpB8j1+gjgnJSV5/2 UHUqjMb4xGUEnybTNKqFemw0BCi49kYPbpVsuOj/i89aKjkC24ZjOt2yKCtCQAso fFxUtQsDGuPV5bWeoyWv0M3g8/CWpYU0wnglQu+a3iISLYI4Io8D+WgTfwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFM1cHB9KOBO5Sdyv8BkaCiHHpCuaMB8GA1UdIwQY MBaAFPvypaXfTZWsARXK7a0ZS2Jojyu6MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1fS2xwZDlObGF3QkZjcnRyUmxMWW1pUEs3by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2EvMGE1MGQwLTU2NGYtNDBlMC04NTg5 LWM5ZjdkMDJmOTBjMC8xLzEtX0tscGQ5Tmxhd0JGY3J0clJsTFltaVBLN28ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxUL2NhLzBhNTBkMC01NjRmLTQwZTAtODU4OS1jOWY3ZDAyZjkw YzAvMS8xLV9LbHBkOU5sYXdCRmNydHJSbExZbWlQSzdvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATr0m 3zNccJ77cmCVXDmeRHyJEN3S3ji4Eop+OELYqyQZaRLdu/ufZqGzY+lb96iL6lDk dAMjv5yWokv3Snt4NKV4QOJtTJcZtOUIZkWqxUELs1KF4/MciX+bVKXP3CSwpjOz dYCs6wFkaLQGpiNNDAdf0nw8dHKbCzJQ01uSs0y3Eawea/IKOKn/fH5DPvH9NZMB h99e/tLaPAtYD1z0Kdw1K22Mjlf8rDjn3GRmc5J0OwOxuiGOUWAnzh+ObLPtdkYJ eL3qXQ26Nsao0wCltBVVw1qA55UnKo6lKpSzEbl4cU52/vcmDv0lt5B7b5k7WRXN fclq77WAJP/HnlkegA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:04 2026 by rpki-client