This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft File: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft (raw, json) Hash identifier: wbW+3qGgZRsitJ4CVi8tsCVQp/UMepiWRTbodvU4byA= Subject key identifier: 3D:02:1B:4E:84:0A:DA:04:78:00:8D:46:29:F7:38:58:93:67:48:5C Authority key identifier: 7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66 Certificate issuer: /CN=7deec7ebb5cc873cc7179660acfca804d911ab66 Certificate serial: 019C43229FAAB11ED970F75108D73ACCCA69 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft Manifest number: 0645 Signing time: Mon 09 Feb 2026 16:01:08 +0000 Manifest this update: Mon 09 Feb 2026 16:01:08 +0000 Manifest next update: Tue 10 Feb 2026 16:01:08 +0000 Files and hashes: 1: fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl (hash: VCabL2THnTj3SbyCxHUBLHslFCRbx3k0i1YXJ2gcNzo=) 2: qcYGo8GsD5Qo0ZDwLGyMrbx6gHY.roa (hash: nLCn8Ec+7rBnERt4mPRmTwnAU10kkGrGOavv+Diw2Zk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9f:aa:b1:1e:d9:70:f7:51:08:d7:3a:cc:ca:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7deec7ebb5cc873cc7179660acfca804d911ab66 Validity Not Before: Feb 9 16:01:08 2026 GMT Not After : Feb 10 16:01:08 2026 GMT Subject: CN=3d021b4e840ada0478008d4629f738589367485c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f7:bc:b4:f1:d6:a1:f8:5c:1f:a8:85:aa:fa: 44:c6:fc:9f:d1:f2:cb:ac:92:29:fb:e9:64:7e:8e: fd:8f:56:45:00:97:88:a6:06:f3:99:54:e6:03:b4: 00:e9:bc:a6:d2:c0:47:c7:1d:2f:4a:7b:68:ac:a4: 97:eb:39:31:90:9b:41:b6:7d:bf:2d:17:0a:37:46: 4f:ef:ec:c7:70:93:66:34:9c:cd:f0:c9:57:0a:5b: 1b:29:7a:01:38:4c:d5:5d:c7:fd:f2:83:96:54:9a: f4:cd:3c:72:88:d3:6f:21:d3:c7:c5:30:f0:a5:74: 89:62:16:6f:45:cc:64:58:bd:90:13:e0:cc:4f:f5: 09:ef:b2:df:df:18:66:80:93:37:f3:d6:db:57:da: 5f:06:d9:25:bf:0d:07:f0:08:31:63:d7:d6:aa:be: 22:dc:4c:3d:76:8f:d6:51:6b:dc:6b:df:ec:7c:86: 20:68:52:62:68:a2:2c:b4:0f:4a:84:cd:f6:c7:7c: 50:76:fd:56:78:17:8d:c9:5b:6c:cc:fe:50:4a:97: 8a:67:b2:40:40:09:b2:dd:03:16:38:7c:d9:ed:1b: 3f:97:22:97:8a:21:97:9e:ab:a2:d4:68:ce:f9:de: 44:48:af:ff:0a:d6:0a:be:4d:b6:2d:7b:b8:c4:62: 91:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:02:1B:4E:84:0A:DA:04:78:00:8D:46:29:F7:38:58:93:67:48:5C X509v3 Authority Key Identifier: keyid:7D:EE:C7:EB:B5:CC:87:3C:C7:17:96:60:AC:FC:A8:04:D9:11:AB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f3ffd3-31b8-472c-abfb-7a2a2172ec4f/1/fe7H67XMhzzHF5ZgrPyoBNkRq2Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:75:9f:ff:ce:f6:db:0c:61:ff:81:4e:21:61:e6:43:fc:64: 40:ea:44:ff:ba:95:9f:ad:b9:62:2b:70:6c:78:b5:90:88:ee: 84:73:63:ab:7e:4c:6f:a1:a6:cb:45:3a:66:83:80:79:a6:65: 93:2e:07:88:52:8e:0e:a0:9d:34:fa:9d:27:7b:f7:2f:ca:04: 55:ea:8a:b9:18:eb:33:9a:fd:18:1f:55:73:be:c2:20:03:15: 9a:11:1a:a9:ed:be:78:71:d3:ff:cc:37:10:5d:d4:88:b8:dc: 2c:a1:e2:06:37:97:73:f8:e2:da:d4:bf:47:a7:ec:fb:87:7e: 80:f2:19:45:71:0e:30:67:cc:9e:3a:46:53:93:14:07:51:eb: 5d:b3:52:de:4c:26:36:e7:bb:00:1c:eb:2c:b1:31:e3:66:76: a2:37:66:69:f0:c9:5e:6a:c6:f9:1b:3a:8b:c5:4d:83:66:d6: 75:3a:d5:77:14:cc:93:32:01:84:33:7c:0e:fc:c0:30:3c:f7: f7:97:58:8c:fe:45:34:82:61:93:e8:76:c7:fa:bf:2e:31:1f: 38:e1:0e:e8:6b:b2:14:fa:6a:38:68:7b:db:17:19:88:48:aa: a4:70:8a:eb:11:d2:35:05:f6:6d:03:d9:63:80:b7:ed:60:c8: 0b:da:e8:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIp+qsR7ZcPdRCNc6zMppMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkZWVjN2ViYjVjYzg3M2NjNzE3OTY2MGFjZmNhODA0ZDkx MWFiNjYwHhcNMjYwMjA5MTYwMTA4WhcNMjYwMjEwMTYwMTA4WjAzMTEwLwYDVQQD EygzZDAyMWI0ZTg0MGFkYTA0NzgwMDhkNDYyOWY3Mzg1ODkzNjc0ODVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPe8tPHWofhcH6iFqvpExvyf0fLL rJIp++lkfo79j1ZFAJeIpgbzmVTmA7QA6bym0sBHxx0vSntorKSX6zkxkJtBtn2/ LRcKN0ZP7+zHcJNmNJzN8MlXClsbKXoBOEzVXcf98oOWVJr0zTxyiNNvIdPHxTDw pXSJYhZvRcxkWL2QE+DMT/UJ77Lf3xhmgJM389bbV9pfBtklvw0H8AgxY9fWqr4i 3Ew9do/WUWvca9/sfIYgaFJiaKIstA9KhM32x3xQdv1WeBeNyVtszP5QSpeKZ7JA QAmy3QMWOHzZ7Rs/lyKXiiGXnqui1GjO+d5ESK//CtYKvk22LXu4xGKRcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0CG06ECtoEeACNRin3OFiTZ0hcMB8GA1UdIwQY MBaAFH3ux+u1zIc8xxeWYKz8qATZEatmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmIt N2EyYTIxNzJlYzRmLzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9mM2ZmZDMtMzFiOC00NzJjLWFiZmItN2EyYTIxNzJlYzRm LzEvZmU3SDY3WE1oenpIRjVaZ3JQeW9CTmtScTJZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3Wf/872 2wxh/4FOIWHmQ/xkQOpE/7qVn625YitwbHi1kIjuhHNjq35Mb6Gmy0U6ZoOAeaZl ky4HiFKODqCdNPqdJ3v3L8oEVeqKuRjrM5r9GB9Vc77CIAMVmhEaqe2+eHHT/8w3 EF3UiLjcLKHiBjeXc/ji2tS/R6fs+4d+gPIZRXEOMGfMnjpGU5MUB1HrXbNS3kwm Nue7ABzrLLEx42Z2ojdmafDJXmrG+Rs6i8VNg2bWdTrVdxTMkzIBhDN8DvzAMDz3 95dYjP5FNIJhk+h2x/q/LjEfOOEO6GuyFPpqOGh72xcZiEiqpHCK6xHSNQX2bQPZ Y4C37WDIC9ro6w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:03 2026 by rpki-client