This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft File: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft (raw, json) Hash identifier: 78UuG03fCvQ5URWOFrEolA4oWCQWiRJ2Wzk/2qSbUsU= Subject key identifier: 09:81:21:21:65:1C:7B:FD:3E:AE:3F:A9:1E:25:07:E8:53:B1:3F:36 Authority key identifier: 7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99 Certificate issuer: /CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799 Certificate serial: 019C41D8C273D38BAE5A5B1FF42CB5B1FE3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft Manifest number: 0A1A Signing time: Mon 09 Feb 2026 10:00:50 +0000 Manifest this update: Mon 09 Feb 2026 10:00:50 +0000 Manifest next update: Tue 10 Feb 2026 10:00:50 +0000 Files and hashes: 1: fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl (hash: dFnBvyohIGddFYPGao+k4/L159mQNvtth60U6MyKk3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c2:73:d3:8b:ae:5a:5b:1f:f4:2c:b5:b1:fe:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e4e4877b464e489e8e1e61be57b8bbe8e50e799 Validity Not Before: Feb 9 10:00:50 2026 GMT Not After : Feb 10 10:00:50 2026 GMT Subject: CN=09812121651c7bfd3eae3fa91e2507e853b13f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2b:65:d5:2c:6e:d2:00:7a:2b:16:86:69:f1: 19:bb:27:98:e2:c0:83:97:80:6d:f0:f3:c4:4e:e6: 5a:73:16:c4:60:06:0f:b6:34:ed:99:94:5a:7c:5f: 1f:b5:cf:2d:d0:b5:07:60:5e:8d:7b:11:be:52:0a: 1a:bd:6b:6a:f6:6a:ad:3e:83:1a:cf:62:34:1b:90: 3e:1a:22:bd:73:10:17:18:54:95:3a:6a:f1:0e:10: ca:20:56:75:43:13:2b:20:58:51:c5:b7:9d:38:98: 12:e8:3e:cb:2c:b8:36:5a:0c:5c:5a:9a:fa:b2:34: 06:cc:14:1e:93:e3:d1:01:54:f7:9e:cd:78:f1:a1: 92:db:c1:d4:c1:15:49:62:ab:24:dd:4f:b7:bf:d1: f2:f2:32:4c:81:93:00:40:22:32:5d:9c:ed:ac:6b: a3:72:c9:a0:98:00:64:a0:10:b6:ce:6f:ba:89:09: 24:7c:2c:fa:34:61:3e:32:b1:80:8f:ae:7b:ec:4e: 42:7f:ac:6a:08:17:82:64:f4:f3:76:57:cc:a1:82: c4:bd:b9:14:cb:7b:da:48:51:2b:38:f1:1e:c5:90: ac:6a:f7:0e:6d:58:d0:38:dd:e9:9c:eb:7d:59:29: 67:2a:c2:cc:eb:2b:d4:38:c0:55:85:a5:8e:8b:b6: e7:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:81:21:21:65:1C:7B:FD:3E:AE:3F:A9:1E:25:07:E8:53:B1:3F:36 X509v3 Authority Key Identifier: keyid:7E:4E:48:77:B4:64:E4:89:E8:E1:E6:1B:E5:7B:8B:BE:8E:50:E7:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/237dff-652d-4911-a9d6-0af26bc76421/1/fk5Id7Rk5Ino4eYb5XuLvo5Q55k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:bc:91:e0:b4:a9:90:5d:57:4b:5d:ac:9d:d3:04:2f:40:1d: d4:ea:be:e8:45:92:98:1d:58:16:c9:d9:72:29:82:dd:93:2a: 5f:73:9b:15:0e:c5:4d:f1:5a:fd:cf:b1:c7:36:0d:a3:73:04: a3:4d:45:4d:2e:02:14:55:82:58:dd:8c:03:69:31:23:33:d3: 0f:ee:56:8d:b2:d5:43:21:3b:d8:69:3d:dc:1a:a0:16:07:1b: 56:10:19:48:11:0f:79:01:5e:08:33:24:61:08:62:37:6b:79: e0:d2:e4:9c:e4:f2:c2:73:5e:b2:2a:9d:16:71:51:6c:36:d9: f6:dc:1c:3f:2f:fd:7e:1d:b0:82:a7:f0:0a:2d:9c:6e:75:95: 2f:87:e7:34:6b:09:8a:16:9a:9e:95:ac:21:90:97:e0:1b:07: 2a:b1:ab:de:1f:50:e1:62:4d:9f:66:49:47:08:de:38:1b:cf: 03:43:fe:56:a7:b5:4c:fe:0b:f5:39:f4:9c:df:3a:79:9e:9c: ef:21:b4:4c:6c:9b:5b:a9:73:7c:e3:d4:22:14:f5:c6:e2:19: e9:40:5f:a1:1d:51:69:47:64:66:a2:c9:50:aa:77:8a:c4:9e: bb:c2:43:4b:04:da:63:20:5d:12:dc:c2:a1:0c:3c:9d:64:d8: fd:69:58:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MJz04uuWlsf9Cy1sf49MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlNGU0ODc3YjQ2NGU0ODllOGUxZTYxYmU1N2I4YmJlOGU1 MGU3OTkwHhcNMjYwMjA5MTAwMDUwWhcNMjYwMjEwMTAwMDUwWjAzMTEwLwYDVQQD EygwOTgxMjEyMTY1MWM3YmZkM2VhZTNmYTkxZTI1MDdlODUzYjEzZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnitl1Sxu0gB6KxaGafEZuyeY4sCD l4Bt8PPETuZacxbEYAYPtjTtmZRafF8ftc8t0LUHYF6NexG+UgoavWtq9mqtPoMa z2I0G5A+GiK9cxAXGFSVOmrxDhDKIFZ1QxMrIFhRxbedOJgS6D7LLLg2WgxcWpr6 sjQGzBQek+PRAVT3ns148aGS28HUwRVJYqsk3U+3v9Hy8jJMgZMAQCIyXZztrGuj csmgmABkoBC2zm+6iQkkfCz6NGE+MrGAj6577E5Cf6xqCBeCZPTzdlfMoYLEvbkU y3vaSFErOPEexZCsavcObVjQON3pnOt9WSlnKsLM6yvUOMBVhaWOi7bnAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAmBISFlHHv9Pq4/qR4lB+hTsT82MB8GA1UdIwQY MBaAFH5OSHe0ZOSJ6OHmG+V7i76OUOeZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYt MGFmMjZiYzc2NDIxLzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8yMzdkZmYtNjUyZC00OTExLWE5ZDYtMGFmMjZiYzc2NDIx LzEvZms1SWQ3Ums1SW5vNGVZYjVYdUx2bzVRNTVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7yR4LSp kF1XS12sndMEL0Ad1Oq+6EWSmB1YFsnZcimC3ZMqX3ObFQ7FTfFa/c+xxzYNo3ME o01FTS4CFFWCWN2MA2kxIzPTD+5WjbLVQyE72Gk93BqgFgcbVhAZSBEPeQFeCDMk YQhiN2t54NLknOTywnNesiqdFnFRbDbZ9twcPy/9fh2wgqfwCi2cbnWVL4fnNGsJ ihaanpWsIZCX4BsHKrGr3h9Q4WJNn2ZJRwjeOBvPA0P+Vqe1TP4L9Tn0nN86eZ6c 7yG0TGybW6lzfOPUIhT1xuIZ6UBfoR1RaUdkZqLJUKp3isSeu8JDSwTaYyBdEtzC oQw8nWTY/WlYsw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:49 2026 by rpki-client