This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft File: FFAQ3dLG97ZEpQAsseTuFixj0dc.mft (raw, json) Hash identifier: XfnT8O4u7t3ZArFgwelmjnrcmymV8HV3TuLQvA83BnA= Subject key identifier: 1E:0C:A1:44:58:47:99:87:95:D7:60:F9:56:1D:47:AA:BC:80:B7:04 Authority key identifier: 14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7 Certificate issuer: /CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7 Certificate serial: 019C43906916945006B66ECE602A2CC5FE08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft Manifest number: 15 Signing time: Mon 09 Feb 2026 18:01:03 +0000 Manifest this update: Mon 09 Feb 2026 18:01:03 +0000 Manifest next update: Tue 10 Feb 2026 18:01:03 +0000 Files and hashes: 1: FFAQ3dLG97ZEpQAsseTuFixj0dc.crl (hash: unp13WBzfPexzxAQdBt3o1k/65hBPePujBsPDwWbPEs=) 2: vq82IEcQtF-WpfPnhIhgfebzHDk.roa (hash: 1OV+pDCPKjRkZqon595wjlus9Od7oqEkMW7DsdSGgek=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:69:16:94:50:06:b6:6e:ce:60:2a:2c:c5:fe:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=145010ddd2c6f7b644a5002cb1e4ee162c63d1d7 Validity Not Before: Feb 9 18:01:03 2026 GMT Not After : Feb 10 18:01:03 2026 GMT Subject: CN=1e0ca1445847998795d760f9561d47aabc80b704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:57:e6:82:44:1b:93:ce:9c:02:47:b3:44:c4: 9e:56:13:d2:d3:30:2e:c7:01:2a:21:65:76:65:ef: 3f:0f:22:0f:8e:a7:a0:87:f1:fa:4d:26:1c:16:22: ba:3b:d6:b7:10:70:94:51:b4:b3:32:b6:4f:63:1d: 20:02:69:2c:5c:ac:6f:23:ac:bf:df:97:6c:f0:b8: 43:e4:fa:62:84:97:c0:5c:ba:ca:d9:e0:0b:7f:6f: 7b:8a:9d:46:90:46:3f:c0:49:79:dc:4d:d4:c1:83: b7:df:6c:f2:17:71:d6:85:47:63:55:a3:fb:d9:2d: 2f:f7:5d:07:bc:3f:d0:45:06:f3:88:71:49:b7:af: 3d:de:4d:6f:4c:f0:4d:dc:e5:4b:8d:72:b7:6f:9f: 55:03:61:46:e6:f9:c4:0c:61:e6:2c:fa:5c:1a:fa: 1a:5c:3c:cd:ce:51:b8:ec:c9:3f:4d:f0:f9:9d:25: 41:61:85:d6:0d:0a:ec:0a:b4:5d:7c:64:49:25:3c: 6a:00:7f:40:9e:92:ce:4d:78:a2:87:82:ac:e7:54: 34:9e:70:b9:f4:e4:47:8f:b7:2a:18:60:40:5c:3c: af:b3:db:b2:99:24:11:39:4c:4b:48:7e:95:bd:bb: fa:1d:e1:bb:07:e1:2d:24:9d:a5:e9:eb:60:8c:40: 30:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0C:A1:44:58:47:99:87:95:D7:60:F9:56:1D:47:AA:BC:80:B7:04 X509v3 Authority Key Identifier: keyid:14:50:10:DD:D2:C6:F7:B6:44:A5:00:2C:B1:E4:EE:16:2C:63:D1:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFAQ3dLG97ZEpQAsseTuFixj0dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/b9db0e-f856-446a-84f8-66dff60950da/1/FFAQ3dLG97ZEpQAsseTuFixj0dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a4:78:c2:16:1c:98:bb:fd:f8:7f:86:88:35:db:67:0e:e4: 27:53:bf:7f:bb:85:47:7f:52:bd:33:38:eb:78:9c:f3:ac:ce: db:ee:83:99:9c:6a:e8:3c:02:2f:0b:12:bb:c4:55:ad:10:29: 2c:3d:0f:91:68:cc:96:58:7d:bc:72:0c:2c:93:39:d2:a7:e3: 4d:37:a2:d1:76:e4:06:f6:5c:f2:21:ac:5f:ed:48:42:d5:56: 7e:ca:b0:2e:37:89:0d:e7:66:5d:16:ad:b2:8f:fa:da:45:9d: 05:e2:7d:8a:77:87:02:fd:5a:6e:70:a8:b8:1d:dc:92:39:3f: 9c:d3:57:97:e7:7f:99:f1:14:60:f7:f0:e9:af:71:47:e8:59: 86:d0:32:6e:95:f4:ce:2c:04:e8:f4:91:27:21:1a:39:df:c4: 5b:12:f7:c1:cb:ba:da:0d:a9:9a:71:b8:f9:f1:20:14:79:bc: 38:db:1f:b6:14:5d:bd:f1:24:82:a5:de:bf:e1:88:c5:40:36: 7f:29:8d:e0:c0:cc:c7:15:d2:8d:a1:52:80:ee:1f:42:f2:c8: 79:c8:a5:6f:a3:85:7a:54:ae:78:79:ac:8e:14:bb:8b:25:31: af:20:f1:98:4d:92:09:b8:7f:bb:99:9a:d7:84:01:61:c1:01: 55:9d:12:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGkWlFAGtm7OYCosxf4IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0NTAxMGRkZDJjNmY3YjY0NGE1MDAyY2IxZTRlZTE2MmM2 M2QxZDcwHhcNMjYwMjA5MTgwMTAzWhcNMjYwMjEwMTgwMTAzWjAzMTEwLwYDVQQD EygxZTBjYTE0NDU4NDc5OTg3OTVkNzYwZjk1NjFkNDdhYWJjODBiNzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFfmgkQbk86cAkezRMSeVhPS0zAu xwEqIWV2Ze8/DyIPjqegh/H6TSYcFiK6O9a3EHCUUbSzMrZPYx0gAmksXKxvI6y/ 35ds8LhD5PpihJfAXLrK2eALf297ip1GkEY/wEl53E3UwYO332zyF3HWhUdjVaP7 2S0v910HvD/QRQbziHFJt6893k1vTPBN3OVLjXK3b59VA2FG5vnEDGHmLPpcGvoa XDzNzlG47Mk/TfD5nSVBYYXWDQrsCrRdfGRJJTxqAH9AnpLOTXiih4Ks51Q0nnC5 9ORHj7cqGGBAXDyvs9uymSQROUxLSH6Vvbv6HeG7B+EtJJ2l6etgjEAwhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB4MoURYR5mHlddg+VYdR6q8gLcEMB8GA1UdIwQY MBaAFBRQEN3Sxve2RKUALLHk7hYsY9HXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkZBUTNkTEc5N1pFcFFBc3NlVHVGaXhqMGRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9iOWRiMGUtZjg1Ni00NDZhLTg0Zjgt NjZkZmY2MDk1MGRhLzEvRkZBUTNkTEc5N1pFcFFBc3NlVHVGaXhqMGRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9iOWRiMGUtZjg1Ni00NDZhLTg0ZjgtNjZkZmY2MDk1MGRh LzEvRkZBUTNkTEc5N1pFcFFBc3NlVHVGaXhqMGRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqR4whYc mLv9+H+GiDXbZw7kJ1O/f7uFR39SvTM463ic86zO2+6DmZxq6DwCLwsSu8RVrRAp LD0PkWjMllh9vHIMLJM50qfjTTei0XbkBvZc8iGsX+1IQtVWfsqwLjeJDedmXRat so/62kWdBeJ9ineHAv1abnCouB3ckjk/nNNXl+d/mfEUYPfw6a9xR+hZhtAybpX0 ziwE6PSRJyEaOd/EWxL3wcu62g2pmnG4+fEgFHm8ONsfthRdvfEkgqXev+GIxUA2 fymN4MDMxxXSjaFSgO4fQvLIecilb6OFelSueHmsjhS7iyUxryDxmE2SCbh/u5ma 14QBYcEBVZ0S5A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:44:31 2026 by rpki-client