This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json) Hash identifier: xCqMzVZddVPCSI4aoLd9M7nSlh4WqEfccULGd/cW1XU= Subject key identifier: 4C:43:7D:0F:95:8D:34:0F:03:75:3E:8B:B6:6E:AC:FB:7E:80:13:66 Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6 Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6 Certificate serial: 019C420FE1C72FFA3649C842BCF01F2486F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft Manifest number: 0ECB Signing time: Mon 09 Feb 2026 11:01:02 +0000 Manifest this update: Mon 09 Feb 2026 11:01:02 +0000 Manifest next update: Tue 10 Feb 2026 11:01:02 +0000 Files and hashes: 1: LVBBw3kbDfM8QLo8U8FpkgZWBKY.roa (hash: 3JSgEpOjV3VwZSuSqrVrhNnp29HLqalajVpqLvd8t0Q=) 2: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: pPlFK64jXpaSF5Hta0NsNX5cOkzpWVRUuT5qGnI5ba0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e1:c7:2f:fa:36:49:c8:42:bc:f0:1f:24:86:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6 Validity Not Before: Feb 9 11:01:02 2026 GMT Not After : Feb 10 11:01:02 2026 GMT Subject: CN=4c437d0f958d340f03753e8bb66eacfb7e801366 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:64:fc:05:e4:71:9a:89:b9:2d:81:1e:0c:d7: a1:ba:82:45:0d:0b:eb:e6:81:c9:51:51:60:c9:b3: 2c:a4:95:e8:79:14:bd:b5:5c:f6:1f:60:13:10:b6: 60:2e:5d:ee:8f:54:cd:15:e9:fc:44:46:98:64:a5: ef:2b:4e:52:fa:45:22:4d:dc:ce:07:3f:1a:28:e1: 8a:dc:10:47:e0:a7:7c:4b:4c:8f:14:45:29:f5:bf: 60:d9:7f:93:ed:07:b4:d4:86:f4:ff:7c:75:3e:70: 63:b0:e2:ea:4f:41:c9:bf:13:33:38:ad:99:7c:fa: 21:3d:47:5b:4c:12:11:1f:72:41:2a:d6:e9:17:63: 92:5a:72:84:1f:4f:6c:77:44:06:17:0c:1b:fb:89: 78:ff:d0:ad:75:53:01:b6:c2:60:af:b9:0c:1e:72: b3:8e:9e:16:dd:b0:d9:29:62:b0:9f:7e:a6:ad:a0: 94:27:c0:5d:fc:34:09:e3:3b:04:3a:68:67:31:0a: cb:cc:f8:60:80:a2:3b:97:d0:bc:9d:5f:de:44:f7: 25:e3:66:70:66:60:e8:09:f0:b1:50:9a:42:0d:6e: 60:ac:a0:37:39:3b:cc:6b:2d:12:ba:2b:b7:d8:c1: 28:49:b4:3a:7c:c2:d7:4e:71:b6:6f:17:fe:39:06: 9e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:43:7D:0F:95:8D:34:0F:03:75:3E:8B:B6:6E:AC:FB:7E:80:13:66 X509v3 Authority Key Identifier: keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a3:86:f6:30:70:39:fc:95:8d:17:42:32:78:f2:91:28:0d: 1e:9d:16:29:8c:a4:2d:7e:6f:7e:b6:b0:fa:fc:fa:df:e2:5d: 9a:ee:40:de:d1:4b:dc:80:ef:62:19:87:c4:a5:26:76:c4:44: 4f:4b:23:59:c2:e6:e1:06:4a:47:89:da:26:41:ab:c7:d8:67: e2:2e:1f:43:f8:1f:38:92:48:de:f2:57:d5:3d:2e:1b:15:d4: ef:ad:41:1f:a3:22:06:69:3b:d4:cb:9e:7d:5f:7b:99:88:3b: ba:92:dd:99:10:0f:85:07:ae:88:73:66:68:e3:28:f8:05:4a: ac:a6:ae:2a:9e:a9:ff:d5:9e:8a:d7:ca:29:8e:67:6b:2b:b7: 96:4a:92:4d:25:46:79:55:40:ce:51:95:76:d6:0e:7a:fc:0a: b6:cf:68:1f:e8:9f:1b:4d:0a:bc:0c:f8:5b:dd:08:62:be:6d: c4:0e:24:4e:fb:0c:b9:5b:99:d9:76:5c:86:9d:f3:53:71:a1: 9b:26:9c:24:e1:7a:6a:2f:bb:92:00:01:48:c2:7a:30:12:0d: c5:b9:f7:9b:38:3d:90:3b:3f:0b:40:a8:f4:fe:ec:8f:a4:16: 30:8e:40:e3:10:14:7a:a4:c5:ba:26:10:a3:de:81:46:52:0d: 57:83:b3:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+HHL/o2SchCvPAfJIb5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjOGU3MDk3OTkwZTVhNjcxNzhlMjk3ODc1YTBkOWY0NjA1 ODkyYTYwHhcNMjYwMjA5MTEwMTAyWhcNMjYwMjEwMTEwMTAyWjAzMTEwLwYDVQQD Eyg0YzQzN2QwZjk1OGQzNDBmMDM3NTNlOGJiNjZlYWNmYjdlODAxMzY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2T8BeRxmom5LYEeDNehuoJFDQvr 5oHJUVFgybMspJXoeRS9tVz2H2ATELZgLl3uj1TNFen8REaYZKXvK05S+kUiTdzO Bz8aKOGK3BBH4Kd8S0yPFEUp9b9g2X+T7Qe01Ib0/3x1PnBjsOLqT0HJvxMzOK2Z fPohPUdbTBIRH3JBKtbpF2OSWnKEH09sd0QGFwwb+4l4/9CtdVMBtsJgr7kMHnKz jp4W3bDZKWKwn36mraCUJ8Bd/DQJ4zsEOmhnMQrLzPhggKI7l9C8nV/eRPcl42Zw ZmDoCfCxUJpCDW5grKA3OTvMay0Suiu32MEoSbQ6fMLXTnG2bxf+OQae9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFExDfQ+VjTQPA3U+i7ZurPt+gBNmMB8GA1UdIwQY MBaAFHyOcJeZDlpnF44peHWg2fRgWJKmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQt YThhYzQxODA5ZjVmLzEvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS84YWNhZjctZTBjYS00MzQ0LTlkZmQtYThhYzQxODA5ZjVm LzEvZkk1d2w1a09XbWNYamlsNGRhRFo5R0JZa3FZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqOG9jBw OfyVjRdCMnjykSgNHp0WKYykLX5vfraw+vz63+Jdmu5A3tFL3IDvYhmHxKUmdsRE T0sjWcLm4QZKR4naJkGrx9hn4i4fQ/gfOJJI3vJX1T0uGxXU761BH6MiBmk71Mue fV97mYg7upLdmRAPhQeuiHNmaOMo+AVKrKauKp6p/9WeitfKKY5nayu3lkqSTSVG eVVAzlGVdtYOevwKts9oH+ifG00KvAz4W90IYr5txA4kTvsMuVuZ2XZchp3zU3Gh myacJOF6ai+7kgABSMJ6MBINxbn3mzg9kDs/C0Co9P7sj6QWMI5A4xAUeqTFuiYQ o96BRlINV4OzVw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:00 2026 by rpki-client