This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft File: ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft (raw, json) Hash identifier: 9zvGczpIioscjb59h//FncWGgnhirj+kqhlo3eNgwEg= Subject key identifier: 3C:65:55:4D:E7:DE:EE:24:4D:DD:73:4D:90:1F:7A:35:07:5C:A1:4B Authority key identifier: 7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA Certificate issuer: /CN=7dff71655fde58db046b835f39ec10e2d4f7abfa Certificate serial: 019C4321CB9CD28D6C56F707B14057ADB1CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl (hash: e+rFfTiAAr+MIgmn43Eiu95Rp+0l0TdtH6/ha7lzBKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:cb:9c:d2:8d:6c:56:f7:07:b1:40:57:ad:b1:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dff71655fde58db046b835f39ec10e2d4f7abfa Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=3c65554de7deee244ddd734d901f7a35075ca14b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:5b:5a:4a:23:d6:64:cf:a8:9b:94:73:36:69: 76:94:ff:38:95:c7:ae:b7:bd:e2:98:b5:dd:13:cb: db:4b:b8:4e:7d:87:7d:b1:63:8a:58:29:58:36:0b: c2:8e:d6:a2:cf:31:85:56:40:00:b3:4d:5f:a1:4e: bc:d5:46:b7:9e:bf:4d:52:14:37:87:bc:3f:76:9f: b9:f3:67:ac:ed:f4:44:d4:c2:8f:e2:17:23:f0:0f: 5e:18:37:8a:d8:e8:4f:cf:9c:64:66:a6:4c:29:3a: 2e:b7:d1:13:6b:8c:87:8a:e5:cc:1f:bb:8a:b9:ff: 4f:bb:51:a2:0a:c2:81:2b:a2:ae:3a:de:d7:35:64: 4f:e1:e1:d8:dc:5a:35:2a:6a:f2:99:b5:ec:34:02: f2:dd:43:16:69:57:72:c9:67:be:9b:b1:12:7a:85: 50:04:41:ef:d1:41:8d:d9:04:c7:2a:b5:ed:90:38: c0:0d:f4:dc:a1:4e:02:b9:f8:1b:5c:4b:c8:c1:c5: 2c:a4:99:52:c8:26:d6:f8:a1:73:f3:2d:cf:e5:a5: 66:68:a5:b8:f2:3f:11:17:ca:0a:34:83:36:26:a9: 6a:4a:79:e7:91:20:21:64:ff:dc:2a:fd:cd:13:12: a7:23:24:02:0a:d8:bd:c8:a6:77:7c:02:5b:77:57: eb:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:65:55:4D:E7:DE:EE:24:4D:DD:73:4D:90:1F:7A:35:07:5C:A1:4B X509v3 Authority Key Identifier: keyid:7D:FF:71:65:5F:DE:58:DB:04:6B:83:5F:39:EC:10:E2:D4:F7:AB:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff9xZV_eWNsEa4NfOewQ4tT3q_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/cd84a4-0738-4ac0-a327-b6fd84cabcdf/1/ff9xZV_eWNsEa4NfOewQ4tT3q_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:60:77:e1:58:82:48:e5:2c:fa:37:7b:b9:55:57:c0:ac:f4: 45:68:7d:62:a3:0c:c1:f5:46:e4:45:8d:ab:0c:55:a1:5a:ad: d0:b1:cd:65:aa:36:f3:2e:f0:26:8b:71:91:c2:ea:d7:94:f0: 76:0a:89:3f:77:92:55:5e:7f:b3:4b:ab:8c:d5:5a:fb:72:f9: 28:1d:e8:de:28:03:9c:16:9d:22:de:1c:32:4f:a8:a0:75:dc: e4:51:89:0e:83:be:6a:57:fa:96:77:31:a5:69:f7:77:ac:51: 71:ab:5d:2e:5c:4f:55:bb:5a:53:b6:5d:52:b3:53:ff:da:71: 0e:d7:b5:f5:c8:3d:26:23:66:c1:2d:7c:ff:f4:0f:58:4b:fd: 11:ed:7a:d7:4e:c6:6d:7c:89:6a:54:5a:9f:0f:6f:63:f8:31: 63:e5:b1:3f:eb:2a:59:80:53:2e:56:b5:a0:ef:5e:ad:2f:1f: 71:88:7d:bb:1a:39:35:1e:97:ef:87:2e:41:e0:f1:11:61:52: 54:41:20:b9:7f:26:97:50:ad:05:b9:e4:a7:86:c9:8e:16:c7: 37:81:79:1f:cd:03:c9:32:09:4c:5d:a8:42:21:7a:a7:19:87: a2:7a:fd:77:36:38:0f:1e:78:e2:53:cf:89:18:1d:04:6b:38: 99:d5:5a:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcuc0o1sVvcHsUBXrbHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZmY3MTY1NWZkZTU4ZGIwNDZiODM1ZjM5ZWMxMGUyZDRm N2FiZmEwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD EygzYzY1NTU0ZGU3ZGVlZTI0NGRkZDczNGQ5MDFmN2EzNTA3NWNhMTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVtaSiPWZM+om5RzNml2lP84lceu t73imLXdE8vbS7hOfYd9sWOKWClYNgvCjtaizzGFVkAAs01foU681Ua3nr9NUhQ3 h7w/dp+582es7fRE1MKP4hcj8A9eGDeK2OhPz5xkZqZMKTout9ETa4yHiuXMH7uK uf9Pu1GiCsKBK6KuOt7XNWRP4eHY3Fo1KmrymbXsNALy3UMWaVdyyWe+m7ESeoVQ BEHv0UGN2QTHKrXtkDjADfTcoU4CufgbXEvIwcUspJlSyCbW+KFz8y3P5aVmaKW4 8j8RF8oKNIM2JqlqSnnnkSAhZP/cKv3NExKnIyQCCti9yKZ3fAJbd1fraQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDxlVU3n3u4kTd1zTZAfejUHXKFLMB8GA1UdIwQY MBaAFH3/cWVf3ljbBGuDXznsEOLU96v6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9jZDg0YTQtMDczOC00YWMwLWEzMjct YjZmZDg0Y2FiY2RmLzEvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9jZDg0YTQtMDczOC00YWMwLWEzMjctYjZmZDg0Y2FiY2Rm LzEvZmY5eFpWX2VXTnNFYTROZk9ld1E0dFQzcV9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemB34ViC SOUs+jd7uVVXwKz0RWh9YqMMwfVG5EWNqwxVoVqt0LHNZao28y7wJotxkcLq15Tw dgqJP3eSVV5/s0urjNVa+3L5KB3o3igDnBadIt4cMk+ooHXc5FGJDoO+alf6lncx pWn3d6xRcatdLlxPVbtaU7ZdUrNT/9pxDte19cg9JiNmwS18//QPWEv9Ee16107G bXyJalRanw9vY/gxY+WxP+sqWYBTLla1oO9erS8fcYh9uxo5NR6X74cuQeDxEWFS VEEguX8ml1CtBbnkp4bJjhbHN4F5H80DyTIJTF2oQiF6pxmHonr9dzY4Dx544lPP iRgdBGs4mdVaBg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:48 2026 by rpki-client