This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json) Hash identifier: lMZ+HcK9yPzNIrL1PU9x+YTZIsRF1ST3i+P/PqxFk5g= Subject key identifier: 59:0D:05:59:98:E4:33:83:89:A9:EF:FC:02:AD:98:E5:8C:1E:69:9D Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Certificate serial: 019C43FDE0CC073FC2678161B54DC15C4DB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft Manifest number: 0518 Signing time: Mon 09 Feb 2026 20:00:37 +0000 Manifest this update: Mon 09 Feb 2026 20:00:37 +0000 Manifest next update: Tue 10 Feb 2026 20:00:37 +0000 Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: wMyjg3zLnw9IIQlpK4QIRa1T3S9/Jv1S3D3X6sX6t48=) 2: Zrn84WYyrZEtX6PAfEnPVWtayZU.roa (hash: jSh/SHE78mPArHOipqPD4fmSLw8Ki+Bi/6/NXvqBAjM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:e0:cc:07:3f:c2:67:81:61:b5:4d:c1:5c:4d:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1 Validity Not Before: Feb 9 20:00:37 2026 GMT Not After : Feb 10 20:00:37 2026 GMT Subject: CN=590d055998e4338389a9effc02ad98e58c1e699d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:95:04:c2:62:c0:cb:48:42:df:ae:1c:f3:b6: 4e:92:5f:77:07:70:d7:81:d9:84:8f:a7:cf:4c:82: c4:f6:c5:4b:5d:50:47:07:f9:96:cf:15:11:f1:b9: 36:0d:83:06:24:de:d5:f6:89:1d:2b:b7:98:6f:84: 18:d7:d2:06:b0:48:0b:7f:38:5e:9b:d8:9d:ae:43: 4a:c0:6e:f7:bb:d1:db:42:80:32:dd:c7:ae:cb:08: 29:ce:9c:0d:57:e1:69:51:d5:2e:6d:6d:a1:d1:62: d4:8f:90:2e:8a:2c:8b:da:55:e6:5f:24:cb:c9:f8: 7a:14:86:f4:36:59:ed:82:63:d9:e9:82:4e:bd:2d: f4:08:79:9b:1f:41:00:e8:00:6b:24:67:dd:e1:64: 6f:7c:4f:c0:7d:7f:e3:05:8b:41:52:22:cc:93:a5: 07:76:63:4b:76:df:8f:7f:ff:80:b7:79:28:77:4a: 4d:d8:36:a3:cd:c3:3c:87:f7:b1:c2:e2:d1:21:de: 37:d0:cd:6f:fa:37:53:97:e9:0b:6e:17:cf:e8:79: fa:12:23:a7:18:ee:c9:75:40:0f:a3:45:78:ca:b9: 1d:d5:0b:6c:25:5d:0b:0b:12:86:4a:33:bc:d4:28: 37:20:48:9e:2c:7d:21:ad:54:c4:20:f4:a6:65:ee: 1d:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:0D:05:59:98:E4:33:83:89:A9:EF:FC:02:AD:98:E5:8C:1E:69:9D X509v3 Authority Key Identifier: keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c3:6e:b9:fa:5f:ed:97:24:81:fb:e7:82:7f:3f:27:72:10: 82:98:4f:6f:5e:3e:27:fe:ac:c5:df:70:da:0e:00:ff:9c:94: ae:9d:9b:7f:7a:28:b4:ba:fc:db:94:be:75:35:2e:41:9d:eb: 6e:4a:d0:d6:6a:4d:46:87:bf:52:e0:e6:f0:7f:84:98:20:38: bd:1c:a0:8c:c4:03:51:27:de:25:c7:7b:cd:90:d6:f5:fd:e0: da:46:03:e7:8e:b7:aa:ef:f5:ce:38:22:db:9d:b0:d6:fc:62: 4a:49:40:39:57:8e:25:32:9b:c4:c4:3d:45:4d:ca:81:08:b7: 80:8c:bd:07:ab:2f:88:14:65:92:05:91:fa:aa:28:e9:05:d1: d9:be:35:c6:a0:80:88:2e:d7:02:c8:7e:70:91:98:c9:05:59: 20:5a:31:b8:12:39:67:0c:4f:1c:dc:9b:6e:51:32:7e:76:67: 64:ad:f8:b2:fa:f0:d9:ed:97:69:ae:1c:14:1d:1a:f6:88:d6: 57:4e:c6:b5:ad:97:33:e9:00:27:2a:dc:43:3b:f2:f7:a9:0c: b0:03:fc:0e:58:b6:af:4d:9c:bf:ad:a6:f9:0e:1b:2c:a7:58: 17:aa:43:b3:c6:ce:b8:b5:6a:6c:8e:80:32:11:2e:d3:a8:ce: ef:ad:c8:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/eDMBz/CZ4FhtU3BXE25MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE3MTVjN2NjN2I1NDI0ZGE1YTIxMTE2ZmVmNzJjZTVjZDU2 NGMwZjEwHhcNMjYwMjA5MjAwMDM3WhcNMjYwMjEwMjAwMDM3WjAzMTEwLwYDVQQD Eyg1OTBkMDU1OTk4ZTQzMzgzODlhOWVmZmMwMmFkOThlNThjMWU2OTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5UEwmLAy0hC364c87ZOkl93B3DX gdmEj6fPTILE9sVLXVBHB/mWzxUR8bk2DYMGJN7V9okdK7eYb4QY19IGsEgLfzhe m9idrkNKwG73u9HbQoAy3ceuywgpzpwNV+FpUdUubW2h0WLUj5AuiiyL2lXmXyTL yfh6FIb0NlntgmPZ6YJOvS30CHmbH0EA6ABrJGfd4WRvfE/AfX/jBYtBUiLMk6UH dmNLdt+Pf/+At3kod0pN2DajzcM8h/exwuLRId430M1v+jdTl+kLbhfP6Hn6EiOn GO7JdUAPo0V4yrkd1QtsJV0LCxKGSjO81Cg3IEieLH0hrVTEIPSmZe4dNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkNBVmY5DODianv/AKtmOWMHmmdMB8GA1UdIwQY MBaAFBcVx8x7VCTaWiERb+9yzlzVZMDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYt YzUzNmJmNzM5ODY5LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC83NjAxY2EtZGUwMC00ZWUzLTk5ZmYtYzUzNmJmNzM5ODY5 LzEvRnhYSHpIdFVKTnBhSVJGdjczTE9YTlZrd1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcNuufpf 7Zckgfvngn8/J3IQgphPb14+J/6sxd9w2g4A/5yUrp2bf3ootLr825S+dTUuQZ3r bkrQ1mpNRoe/UuDm8H+EmCA4vRygjMQDUSfeJcd7zZDW9f3g2kYD5463qu/1zjgi 252w1vxiSklAOVeOJTKbxMQ9RU3KgQi3gIy9B6sviBRlkgWR+qoo6QXR2b41xqCA iC7XAsh+cJGYyQVZIFoxuBI5ZwxPHNybblEyfnZnZK34svrw2e2Xaa4cFB0a9ojW V07Gta2XM+kAJyrcQzvy96kMsAP8Dli2r02cv62m+Q4bLKdYF6pDs8bOuLVqbI6A MhEu06jO763IQA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:21 2026 by rpki-client