This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft File: f4shg1iYOn16JTip2puh80lNcas.mft (raw, json) Hash identifier: hlwDMGImba1+dVxHVkABT/ZPx9Kw0bx3DofP0pQDV80= Subject key identifier: 96:FE:39:97:5B:C4:09:76:D1:F7:A2:00:D8:EB:2B:C8:1F:EC:58:A5 Authority key identifier: 7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB Certificate issuer: /CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab Certificate serial: 019C446C41786D8214D48981E1C016ACDD50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft Manifest number: 0236 Signing time: Mon 09 Feb 2026 22:01:11 +0000 Manifest this update: Mon 09 Feb 2026 22:01:11 +0000 Manifest next update: Tue 10 Feb 2026 22:01:11 +0000 Files and hashes: 1: f4shg1iYOn16JTip2puh80lNcas.crl (hash: /7qegcLwj80/yFmHQLuT1vZob70UomtGellhPl5mzdo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:41:78:6d:82:14:d4:89:81:e1:c0:16:ac:dd:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f8b218358983a7d7a2538a9da9ba1f3494d71ab Validity Not Before: Feb 9 22:01:11 2026 GMT Not After : Feb 10 22:01:11 2026 GMT Subject: CN=96fe39975bc40976d1f7a200d8eb2bc81fec58a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:d0:19:d4:32:ab:04:18:28:b6:df:28:71: f9:50:08:0b:f9:14:0e:7d:91:3b:42:40:a8:61:2e: ed:da:37:12:54:13:08:93:77:53:b4:cd:47:58:87: 21:fa:14:9b:25:81:dc:1f:f5:4a:61:ea:c5:d5:d7: d3:f1:15:f1:01:5d:ed:7d:aa:7d:11:1c:f6:34:b9: e1:cb:87:5e:b4:51:0a:e2:ac:44:57:58:4b:11:ca: cd:02:1b:15:05:f8:08:ca:70:31:34:93:4c:cc:a9: ab:42:0a:47:b0:a0:58:99:53:1f:e1:d2:ae:17:71: bf:2b:b6:b0:56:09:43:58:c9:9c:1f:00:22:18:a6: 96:1b:e6:f6:2c:92:d1:51:93:a1:79:46:64:30:d5: 37:ca:ef:14:57:74:42:74:ef:18:6a:40:38:56:3c: e9:fb:9d:6d:66:0a:03:a9:31:a8:3e:69:60:99:ef: 50:2c:a9:d0:9e:50:d6:65:4a:27:b0:3f:f1:89:64: eb:3f:f9:9d:e3:32:5a:fe:50:27:0e:d0:df:5c:9b: 16:60:57:55:2d:5b:7a:e1:35:76:67:a1:78:23:07: b6:f0:66:e4:61:e4:15:73:62:a3:3b:22:3b:94:76: 31:9d:c2:6c:cd:08:6e:e0:ae:d9:bd:81:dc:8d:fd: f6:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:FE:39:97:5B:C4:09:76:D1:F7:A2:00:D8:EB:2B:C8:1F:EC:58:A5 X509v3 Authority Key Identifier: keyid:7F:8B:21:83:58:98:3A:7D:7A:25:38:A9:DA:9B:A1:F3:49:4D:71:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4shg1iYOn16JTip2puh80lNcas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/76cd03-eaa2-4965-94ef-98dbb6402cdd/1/f4shg1iYOn16JTip2puh80lNcas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:58:b2:69:ac:6a:bd:33:58:90:87:cf:c6:a2:f4:7a:83:f1: be:94:20:e7:70:4a:79:65:3c:1d:6d:57:f4:b9:14:aa:fc:29: b0:47:6f:be:02:d0:79:6a:12:93:ca:4b:68:06:cc:f6:6d:28: 1a:fe:bf:53:1e:13:87:a6:86:ee:63:72:1c:93:ac:56:64:44: 9f:a0:d4:09:4d:df:07:21:6d:b9:dc:5c:1b:54:e1:dc:cc:45: 71:46:b3:6d:7a:f1:64:b1:63:bd:0f:ee:96:50:df:91:4b:12: d1:65:c9:83:18:31:46:4e:7a:47:83:25:39:1d:ab:ea:08:b0: e8:4c:c6:91:cc:3b:a8:c1:91:b2:9c:a2:06:90:9f:9d:ea:cc: d3:5b:fd:02:2c:81:c7:89:77:ab:60:ff:40:47:5d:a9:e2:23: a7:5d:d2:10:49:11:42:b3:79:d7:e7:a7:54:da:4c:bb:1f:b7: 71:14:13:6f:77:e8:83:04:d4:bc:aa:fb:e7:98:1f:7f:46:a9: b1:7c:33:79:ff:f3:f6:92:ae:a2:05:44:b6:1f:a1:ac:0d:6c: 40:ea:d3:0e:83:f3:8f:9a:f9:4a:9e:25:e3:13:a9:7f:a9:99: 06:02:1b:06:39:20:40:aa:03:10:a2:04:a3:d0:01:09:02:6e: 65:da:c4:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbEF4bYIU1ImB4cAWrN1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmOGIyMTgzNTg5ODNhN2Q3YTI1MzhhOWRhOWJhMWYzNDk0 ZDcxYWIwHhcNMjYwMjA5MjIwMTExWhcNMjYwMjEwMjIwMTExWjAzMTEwLwYDVQQD Eyg5NmZlMzk5NzViYzQwOTc2ZDFmN2EyMDBkOGViMmJjODFmZWM1OGE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjnQGdQyqwQYKLbfKHH5UAgL+RQO fZE7QkCoYS7t2jcSVBMIk3dTtM1HWIch+hSbJYHcH/VKYerF1dfT8RXxAV3tfap9 ERz2NLnhy4detFEK4qxEV1hLEcrNAhsVBfgIynAxNJNMzKmrQgpHsKBYmVMf4dKu F3G/K7awVglDWMmcHwAiGKaWG+b2LJLRUZOheUZkMNU3yu8UV3RCdO8YakA4Vjzp +51tZgoDqTGoPmlgme9QLKnQnlDWZUonsD/xiWTrP/md4zJa/lAnDtDfXJsWYFdV LVt64TV2Z6F4Iwe28GbkYeQVc2KjOyI7lHYxncJszQhu4K7ZvYHcjf32kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJb+OZdbxAl20feiANjrK8gf7FilMB8GA1UdIwQY MBaAFH+LIYNYmDp9eiU4qdqbofNJTXGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS83NmNkMDMtZWFhMi00OTY1LTk0ZWYt OThkYmI2NDAyY2RkLzEvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOS83NmNkMDMtZWFhMi00OTY1LTk0ZWYtOThkYmI2NDAyY2Rk LzEvZjRzaGcxaVlPbjE2SlRpcDJwdWg4MGxOY2FzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhViyaaxq vTNYkIfPxqL0eoPxvpQg53BKeWU8HW1X9LkUqvwpsEdvvgLQeWoSk8pLaAbM9m0o Gv6/Ux4Th6aG7mNyHJOsVmREn6DUCU3fByFtudxcG1Th3MxFcUazbXrxZLFjvQ/u llDfkUsS0WXJgxgxRk56R4MlOR2r6giw6EzGkcw7qMGRspyiBpCfnerM01v9AiyB x4l3q2D/QEddqeIjp13SEEkRQrN51+enVNpMux+3cRQTb3fogwTUvKr755gff0ap sXwzef/z9pKuogVEth+hrA1sQOrTDoPzj5r5Sp4l4xOpf6mZBgIbBjkgQKoDEKIE o9ABCQJuZdrE3Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:22 2026 by rpki-client