This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft File: fsS92Wu94fVcNATX7Ga-BH6xfZw.mft (raw, json) Hash identifier: W3lYDL+PMC+QnkpKyfAz48IgUbHkNWRr1q2tcq6AmKg= Subject key identifier: 25:E0:E2:52:36:B8:74:CC:F9:EC:A0:F2:E6:F6:27:AF:B2:D8:C6:DC Authority key identifier: 7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C Certificate issuer: /CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c Certificate serial: 019C43FDA73C2A0014D6532590594C942DAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft Manifest number: 0C86 Signing time: Mon 09 Feb 2026 20:00:22 +0000 Manifest this update: Mon 09 Feb 2026 20:00:22 +0000 Manifest next update: Tue 10 Feb 2026 20:00:22 +0000 Files and hashes: 1: fsS92Wu94fVcNATX7Ga-BH6xfZw.crl (hash: pD5du9F4mt5F+4vFL5dL7L3vr8gNiSsBfXLi6lHoK50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:a7:3c:2a:00:14:d6:53:25:90:59:4c:94:2d:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ec4bdd96bbde1f55c3404d7ec66be047eb17d9c Validity Not Before: Feb 9 20:00:22 2026 GMT Not After : Feb 10 20:00:22 2026 GMT Subject: CN=25e0e25236b874ccf9eca0f2e6f627afb2d8c6dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ea:a8:9d:be:60:5b:1d:f0:a1:c6:a0:4d:64: 8a:2b:2b:c0:80:14:0c:3c:c1:3c:6d:67:db:e0:66: de:0a:5d:ad:25:6d:3f:94:05:3d:91:ca:1f:34:d9: d7:d3:b9:f6:7b:8c:dc:06:24:4e:7b:43:27:8e:83: a5:6e:c3:09:e9:69:90:4f:1d:0b:ba:cc:55:1d:06: 7c:62:63:71:4d:aa:bd:ea:00:8b:33:06:fc:75:d1: cb:bb:e3:9d:1c:0d:c0:ee:bc:3b:6c:84:8e:10:03: f1:31:df:eb:06:79:61:98:10:68:c1:ce:00:ff:35: c6:c6:5e:d3:cf:08:e5:90:77:15:5c:5a:c5:e6:0d: 46:3d:94:ff:5d:e9:54:0f:cb:e7:2e:f9:f8:9d:d2: 4b:10:26:be:cb:f8:f4:eb:71:b4:e4:9c:46:60:88: 94:7d:f8:fc:fe:12:ad:20:42:42:13:f9:f8:ab:d9: cb:82:2e:e6:fd:9c:cb:85:55:96:17:e7:32:68:9b: 2a:dc:02:42:3b:76:71:0e:2c:99:16:0d:4b:08:61: 87:10:50:4f:4e:a4:8d:9a:92:25:97:b0:80:32:f9: 6f:e4:c2:31:21:2d:9a:78:40:30:a6:7c:b2:4f:1d: f2:da:9f:fa:14:cd:bd:d5:fa:e1:01:31:3e:0c:ff: 19:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E0:E2:52:36:B8:74:CC:F9:EC:A0:F2:E6:F6:27:AF:B2:D8:C6:DC X509v3 Authority Key Identifier: keyid:7E:C4:BD:D9:6B:BD:E1:F5:5C:34:04:D7:EC:66:BE:04:7E:B1:7D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsS92Wu94fVcNATX7Ga-BH6xfZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b967a2-ce26-4787-8015-a33191d8a2e1/1/fsS92Wu94fVcNATX7Ga-BH6xfZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:7a:e4:4d:0b:bc:7b:df:46:d3:24:29:e7:49:51:83:13:b9: c0:7e:10:00:b9:cb:b2:8b:63:d4:1c:f8:ea:f8:6a:3b:e5:89: 02:9d:54:eb:e6:c1:63:e9:cc:1a:a7:62:a8:f8:34:ae:2a:a7: 6f:3a:19:85:7e:11:e9:77:33:71:3c:b0:1f:16:17:db:88:d5: 36:98:c6:bf:d6:fd:ab:4f:e7:c1:9a:4b:6e:ea:0e:86:fe:ba: 45:95:83:34:f1:14:ac:0d:c3:db:eb:48:d1:86:2c:2c:ef:08: 6d:ae:6b:93:33:ae:8e:bc:58:30:f9:c0:b2:53:68:ef:26:76: 29:c1:24:2c:1c:e5:92:7f:62:3e:1e:54:0f:53:82:e7:99:64: 75:20:49:48:0e:96:05:38:80:30:0e:56:40:8f:fc:f3:08:e7: 0f:eb:92:0e:b2:9a:7a:b2:a2:1d:b8:62:58:c9:71:30:0b:b4: b7:65:b4:94:da:ed:b4:58:dc:40:b7:69:ef:0e:61:e6:8d:15: 50:89:14:52:0f:20:a4:f9:a4:cc:22:6d:29:a2:06:1f:7b:5a: 35:9b:e2:c4:da:58:ca:bc:fd:e1:96:57:5d:7c:46:11:b3:62: 5d:c6:2e:ec:23:58:d7:73:7b:75:b9:73:73:36:8b:50:08:77: 7d:f0:d7:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ac8KgAU1lMlkFlMlC2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdlYzRiZGQ5NmJiZGUxZjU1YzM0MDRkN2VjNjZiZTA0N2Vi MTdkOWMwHhcNMjYwMjA5MjAwMDIyWhcNMjYwMjEwMjAwMDIyWjAzMTEwLwYDVQQD EygyNWUwZTI1MjM2Yjg3NGNjZjllY2EwZjJlNmY2MjdhZmIyZDhjNmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeqonb5gWx3wocagTWSKKyvAgBQM PME8bWfb4GbeCl2tJW0/lAU9kcofNNnX07n2e4zcBiROe0MnjoOlbsMJ6WmQTx0L usxVHQZ8YmNxTaq96gCLMwb8ddHLu+OdHA3A7rw7bISOEAPxMd/rBnlhmBBowc4A /zXGxl7TzwjlkHcVXFrF5g1GPZT/XelUD8vnLvn4ndJLECa+y/j063G05JxGYIiU ffj8/hKtIEJCE/n4q9nLgi7m/ZzLhVWWF+cyaJsq3AJCO3ZxDiyZFg1LCGGHEFBP TqSNmpIll7CAMvlv5MIxIS2aeEAwpnyyTx3y2p/6FM291frhATE+DP8Z6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXg4lI2uHTM+eyg8ub2J6+y2MbcMB8GA1UdIwQY MBaAFH7EvdlrveH1XDQE1+xmvgR+sX2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUt YTMzMTkxZDhhMmUxLzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9iOTY3YTItY2UyNi00Nzg3LTgwMTUtYTMzMTkxZDhhMmUx LzEvZnNTOTJXdTk0ZlZjTkFUWDdHYS1CSDZ4Zlp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHrkTQu8 e99G0yQp50lRgxO5wH4QALnLsotj1Bz46vhqO+WJAp1U6+bBY+nMGqdiqPg0riqn bzoZhX4R6XczcTywHxYX24jVNpjGv9b9q0/nwZpLbuoOhv66RZWDNPEUrA3D2+tI 0YYsLO8Iba5rkzOujrxYMPnAslNo7yZ2KcEkLBzlkn9iPh5UD1OC55lkdSBJSA6W BTiAMA5WQI/88wjnD+uSDrKaerKiHbhiWMlxMAu0t2W0lNrttFjcQLdp7w5h5o0V UIkUUg8gpPmkzCJtKaIGH3taNZvixNpYyrz94ZZXXXxGEbNiXcYu7CNY13N7dblz czaLUAh3ffDXOA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:44 2026 by rpki-client