This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft File: Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft (raw, json) Hash identifier: EASNa1143YEAc5AaySW/7IfkobRCF86TDhzQVWWlWI8= Subject key identifier: A2:F4:CF:7E:DC:44:EA:60:EB:29:59:A0:73:C5:9B:7B:AE:7D:64:04 Authority key identifier: 16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7 Certificate issuer: /CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7 Certificate serial: 019C41A1B782722EAC56F58C045B97C821B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft Manifest number: 150E Signing time: Mon 09 Feb 2026 09:00:43 +0000 Manifest this update: Mon 09 Feb 2026 09:00:43 +0000 Manifest next update: Tue 10 Feb 2026 09:00:43 +0000 Files and hashes: 1: 7fDVFx_W8cXxkevRfIg2i3GdYio.roa (hash: Fsf0L/tikLEgDCmVChLeIt5Pn4gsSm28h3gpWcwkAMM=) 2: Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl (hash: AFIrxsvRZEi865aMopIwi1RmYim55V54thM+qp19/yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:b7:82:72:2e:ac:56:f5:8c:04:5b:97:c8:21:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=163d2572180f4b784fb4f2a5ed50e9fe5e6be6a7 Validity Not Before: Feb 9 09:00:43 2026 GMT Not After : Feb 10 09:00:43 2026 GMT Subject: CN=a2f4cf7edc44ea60eb2959a073c59b7bae7d6404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:08:c1:f2:1a:af:c3:14:56:eb:03:39:37:88: 35:72:a6:8e:03:0e:ed:7a:42:1e:54:f5:4c:8c:e1: 10:c8:7a:06:a7:61:18:90:36:87:70:03:26:d0:cb: cc:1b:d1:96:48:a6:1a:1e:84:9a:b5:8d:58:d1:17: ca:cd:e7:64:9a:bb:87:49:27:9f:01:df:26:8c:8b: f6:46:41:54:ca:c1:15:4c:a4:75:f6:ad:a2:37:2c: 03:a0:5d:1f:88:05:ed:71:e0:59:7f:8f:ed:65:0c: 49:4d:0a:5a:65:b7:71:37:66:5a:36:d6:e2:36:0a: f0:c8:be:3e:c7:9e:05:3a:89:2b:67:17:aa:4d:a8: 78:9d:d4:79:ce:6a:a7:87:56:54:bf:1b:10:37:81: c5:6f:d9:41:30:d3:c5:3c:c2:dc:40:65:9e:58:59: a3:3b:f0:ee:4b:5b:c3:3d:f4:3d:74:1d:35:f2:bf: 55:7d:01:09:f1:4a:f1:75:b2:c8:75:b5:68:a3:c9: c8:23:e6:27:8b:df:1e:a5:73:b0:c4:70:af:25:14: 9a:18:c1:79:ef:fd:b3:e6:12:8c:c2:21:c9:c9:e7: 10:7b:79:4e:e4:85:25:be:03:a7:e0:4a:77:3b:25: 8f:c2:45:28:32:52:f6:c8:3a:10:9c:3b:68:cc:be: 39:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F4:CF:7E:DC:44:EA:60:EB:29:59:A0:73:C5:9B:7B:AE:7D:64:04 X509v3 Authority Key Identifier: keyid:16:3D:25:72:18:0F:4B:78:4F:B4:F2:A5:ED:50:E9:FE:5E:6B:E6:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fj0lchgPS3hPtPKl7VDp_l5r5qc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/e9a0a1-1135-495c-869a-70bbc7c0a9a5/1/Fj0lchgPS3hPtPKl7VDp_l5r5qc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:d5:02:7c:2f:a2:0f:74:b5:a4:42:04:a4:58:7b:ec:65:e4: 9c:44:40:30:8e:fe:f9:d4:16:a4:9f:c8:7a:92:7c:5d:36:3c: b2:75:87:8a:c1:48:3b:b2:da:dd:fb:5c:e0:c5:66:4f:45:fb: ac:d2:cf:a5:b9:18:65:02:ce:e4:26:69:53:74:2e:c6:6e:c0: 3f:d2:19:00:48:7f:ec:59:90:01:13:5e:17:3f:a7:0f:8a:7f: 70:ca:c8:79:ea:77:c2:b9:34:4d:b9:77:74:28:d7:7e:71:b1: ab:ec:1c:68:78:c0:e3:61:6e:40:0f:1d:fa:37:a6:f9:3c:d8: c4:5f:bf:99:af:8c:c6:4a:78:c9:29:72:a6:8d:07:50:93:9e: 21:2f:97:7a:6d:42:97:4e:45:d7:a9:08:45:8c:be:09:12:e9: 00:f3:df:67:3e:cd:cf:da:cb:c6:00:05:28:7e:24:80:dc:00: 01:bb:5d:4c:48:a8:29:6e:c5:16:be:b1:77:58:cf:b0:7f:4a: 27:9b:40:86:52:cd:22:1b:8f:e7:5d:ac:29:6e:29:9e:a9:00: 97:02:d3:a0:1a:25:58:f9:43:9f:4f:48:da:b9:24:e4:5f:45: af:a3:aa:9e:8b:4e:ec:88:78:19:9d:d7:52:79:32:70:e1:11: 86:89:e0:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobeCci6sVvWMBFuXyCG2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2M2QyNTcyMTgwZjRiNzg0ZmI0ZjJhNWVkNTBlOWZlNWU2 YmU2YTcwHhcNMjYwMjA5MDkwMDQzWhcNMjYwMjEwMDkwMDQzWjAzMTEwLwYDVQQD EyhhMmY0Y2Y3ZWRjNDRlYTYwZWIyOTU5YTA3M2M1OWI3YmFlN2Q2NDA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQjB8hqvwxRW6wM5N4g1cqaOAw7t ekIeVPVMjOEQyHoGp2EYkDaHcAMm0MvMG9GWSKYaHoSatY1Y0RfKzedkmruHSSef Ad8mjIv2RkFUysEVTKR19q2iNywDoF0fiAXtceBZf4/tZQxJTQpaZbdxN2ZaNtbi NgrwyL4+x54FOokrZxeqTah4ndR5zmqnh1ZUvxsQN4HFb9lBMNPFPMLcQGWeWFmj O/DuS1vDPfQ9dB018r9VfQEJ8UrxdbLIdbVoo8nII+Yni98epXOwxHCvJRSaGMF5 7/2z5hKMwiHJyecQe3lO5IUlvgOn4Ep3OyWPwkUoMlL2yDoQnDtozL454wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKL0z37cROpg6ylZoHPFm3uufWQEMB8GA1UdIwQY MBaAFBY9JXIYD0t4T7Type1Q6f5ea+anMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEt NzBiYmM3YzBhOWE1LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS9lOWEwYTEtMTEzNS00OTVjLTg2OWEtNzBiYmM3YzBhOWE1 LzEvRmowbGNoZ1BTM2hQdFBLbDdWRHBfbDVyNXFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNUCfC+i D3S1pEIEpFh77GXknERAMI7++dQWpJ/IepJ8XTY8snWHisFIO7La3ftc4MVmT0X7 rNLPpbkYZQLO5CZpU3Quxm7AP9IZAEh/7FmQARNeFz+nD4p/cMrIeep3wrk0Tbl3 dCjXfnGxq+wcaHjA42FuQA8d+jem+TzYxF+/ma+Mxkp4ySlypo0HUJOeIS+Xem1C l05F16kIRYy+CRLpAPPfZz7Nz9rLxgAFKH4kgNwAAbtdTEioKW7FFr6xd1jPsH9K J5tAhlLNIhuP512sKW4pnqkAlwLToBolWPlDn09I2rkk5F9Fr6OqnotO7Ih4GZ3X UnkycOERhong3w== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:38 2026 by rpki-client