This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json) Hash identifier: NQ/jZEdPm/qatAjtETfaIRT92H4wjCsx4U02zi40OGc= Subject key identifier: B5:B7:8A:88:D5:5B:08:53:75:27:36:89:37:17:4C:6E:29:CC:23:24 Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a Certificate serial: 019C44351294FC0B56DE2951FFA2CC5A8AAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft Manifest number: 0A7A Signing time: Mon 09 Feb 2026 21:00:54 +0000 Manifest this update: Mon 09 Feb 2026 21:00:54 +0000 Manifest next update: Tue 10 Feb 2026 21:00:54 +0000 Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: JZfrl+sZxo8QLCP3K3zGJGQfzS9W+d/Kbm1jJK9VwM8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:12:94:fc:0b:56:de:29:51:ff:a2:cc:5a:8a:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a Validity Not Before: Feb 9 21:00:54 2026 GMT Not After : Feb 10 21:00:54 2026 GMT Subject: CN=b5b78a88d55b08537527368937174c6e29cc2324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2e:da:f2:86:73:ed:aa:44:aa:f9:56:15:43: 02:81:2d:d8:44:03:14:22:c6:75:f3:1f:cf:86:b0: 60:a5:a6:f3:ff:c4:f2:cb:14:8c:c4:a9:69:8d:06: 44:f4:c9:b7:53:1d:cf:ba:61:af:3c:13:2b:53:c4: b7:36:e7:ec:56:bf:13:4c:8b:a2:a1:fd:46:68:cf: 60:40:4c:92:85:27:2b:e3:62:11:62:3f:77:8b:de: 2a:ae:8c:83:f5:d8:00:3c:55:6a:24:39:5e:14:1f: 55:b5:7f:67:d3:af:95:a5:da:13:b6:30:1c:ff:0c: 8b:cb:e0:dc:f3:99:c7:3a:bd:e7:c9:48:29:a4:4b: 10:81:d6:43:d5:ad:c5:28:28:42:3a:75:89:67:d7: e0:98:80:30:be:8f:d7:1e:e1:cd:83:e2:80:1a:8f: 0e:79:43:89:fb:e3:87:b3:48:83:e9:40:07:5e:e0: 1e:46:25:4e:7f:e9:ef:f7:ff:e9:2c:54:ab:45:d8: 29:c1:f4:3f:ec:7e:d2:a7:22:52:b3:b8:7d:4d:b0: 2a:54:17:f1:b7:89:0d:bc:7e:18:f7:3d:88:4c:36: 31:83:e6:ef:22:7b:80:3f:96:af:e8:37:39:38:69: f8:d7:c3:76:f3:06:07:44:20:c3:1a:c9:78:6d:88: a5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B7:8A:88:D5:5B:08:53:75:27:36:89:37:17:4C:6E:29:CC:23:24 X509v3 Authority Key Identifier: keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:67:de:fe:f3:2e:0f:70:bc:bd:e0:10:05:eb:7d:29:b9:62: 6d:d8:0d:be:9c:16:e8:cb:71:a0:45:47:af:d4:c6:5c:35:7e: 01:76:50:7a:f3:ae:95:60:f9:4e:db:7e:e8:8e:d2:dd:00:64: 15:7d:6d:21:46:c8:67:46:cd:70:db:d5:01:f8:27:42:7e:f0: 9e:9a:05:5d:dd:bb:67:80:0e:f4:c7:53:27:08:28:34:09:10: 07:7d:27:de:30:17:9e:1a:c2:c4:be:ae:91:33:f2:c1:72:a0: 4b:84:16:1d:ee:ba:90:fd:d8:18:90:cf:ae:4a:c5:8c:59:c1: a5:cd:3e:63:ba:5f:14:3a:13:53:15:80:b7:a8:6a:ce:91:11: 89:79:b2:e2:3c:54:09:16:cd:15:fb:51:91:5b:1b:3b:87:9d: 31:ea:bb:4f:dd:77:59:50:7e:d9:70:0a:8f:64:c4:eb:05:11: ea:8d:f3:8a:d3:8a:c5:8d:fe:49:73:70:75:0f:a6:be:c8:6c: b6:04:ad:75:11:3c:48:33:6a:68:d8:c7:d9:6c:6b:f1:37:94: 45:e8:97:bc:0e:1c:17:b2:30:a5:26:b9:df:fb:5b:a7:ba:f3: 25:ea:22:5a:2f:d6:e3:e5:f9:ed:a0:a6:a1:2a:af:a2:81:0c: 19:6c:60:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENRKU/AtW3ilR/6LMWoqtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTllMTU4ZGNhNTU4NGYzN2ExZjgzNDliMjg5YTY4MTJk YjkyNGEwHhcNMjYwMjA5MjEwMDU0WhcNMjYwMjEwMjEwMDU0WjAzMTEwLwYDVQQD EyhiNWI3OGE4OGQ1NWIwODUzNzUyNzM2ODkzNzE3NGM2ZTI5Y2MyMzI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxi7a8oZz7apEqvlWFUMCgS3YRAMU IsZ18x/PhrBgpabz/8TyyxSMxKlpjQZE9Mm3Ux3PumGvPBMrU8S3NufsVr8TTIui of1GaM9gQEyShScr42IRYj93i94qroyD9dgAPFVqJDleFB9VtX9n06+VpdoTtjAc /wyLy+Dc85nHOr3nyUgppEsQgdZD1a3FKChCOnWJZ9fgmIAwvo/XHuHNg+KAGo8O eUOJ++OHs0iD6UAHXuAeRiVOf+nv9//pLFSrRdgpwfQ/7H7SpyJSs7h9TbAqVBfx t4kNvH4Y9z2ITDYxg+bvInuAP5av6Dc5OGn418N28wYHRCDDGsl4bYilzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLW3iojVWwhTdSc2iTcXTG4pzCMkMB8GA1UdIwQY MBaAFHyp4VjcpVhPN6H4NJsommgS25JKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9mYjM0ZTQtZWQ2MS00ZTFkLWE0NmQt NzhhNzdmN2ExMzQyLzEvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC9mYjM0ZTQtZWQ2MS00ZTFkLWE0NmQtNzhhNzdmN2ExMzQy LzEvZktuaFdOeWxXRTgzb2ZnMG15aWFhQkxia2tvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhWfe/vMu D3C8veAQBet9KblibdgNvpwW6MtxoEVHr9TGXDV+AXZQevOulWD5Ttt+6I7S3QBk FX1tIUbIZ0bNcNvVAfgnQn7wnpoFXd27Z4AO9MdTJwgoNAkQB30n3jAXnhrCxL6u kTPywXKgS4QWHe66kP3YGJDPrkrFjFnBpc0+Y7pfFDoTUxWAt6hqzpERiXmy4jxU CRbNFftRkVsbO4edMeq7T913WVB+2XAKj2TE6wUR6o3zitOKxY3+SXNwdQ+mvshs tgStdRE8SDNqaNjH2Wxr8TeUReiXvA4cF7IwpSa53/tbp7rzJeoiWi/W4+X57aCm oSqvooEMGWxgEA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:51 2026 by rpki-client