This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json) Hash identifier: o/F2d1kvF0PWxxrIe0/EviSyOQS6n/APUcyK/VhNZZE= Subject key identifier: 7B:72:14:0A:43:BB:95:DF:91:BD:86:EB:2F:AB:B5:9C:86:2C:70:B0 Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Certificate serial: 019C446B83EFD8B15AA249D92194E62F553C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft Manifest number: 1483 Signing time: Mon 09 Feb 2026 22:00:22 +0000 Manifest this update: Mon 09 Feb 2026 22:00:22 +0000 Manifest next update: Tue 10 Feb 2026 22:00:22 +0000 Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: DsUWOubg0DO3CL4tj1/zgXnZNcvcalA+IWqq6Af3krs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:83:ef:d8:b1:5a:a2:49:d9:21:94:e6:2f:55:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3 Validity Not Before: Feb 9 22:00:22 2026 GMT Not After : Feb 10 22:00:22 2026 GMT Subject: CN=7b72140a43bb95df91bd86eb2fabb59c862c70b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:84:06:4a:5f:9d:11:48:17:ee:82:2a:d7:de: c6:26:9f:0c:b9:1d:9b:9b:02:72:80:03:e5:b4:4c: 2a:8a:60:96:86:1c:df:d5:6f:a2:39:73:46:50:99: 57:99:a1:dd:48:72:6b:95:24:16:c5:d3:95:f3:eb: 52:52:3a:35:b9:4f:f8:a6:57:bf:6d:e8:a4:d5:60: 91:12:7a:a3:56:dd:36:15:d0:04:70:ff:74:b0:ee: 29:b1:7d:b5:cb:c8:2a:8f:6b:05:9f:29:6a:ca:89: fe:11:19:58:c7:93:b0:d1:8e:17:45:8e:70:4d:3b: a7:a3:07:6a:7f:12:d5:d0:0d:f9:6d:19:10:e4:b7: a2:f4:33:e5:87:9d:e4:d8:eb:a2:5d:c0:2a:03:08: 46:f7:cc:bc:4e:85:01:27:aa:78:fe:ae:2d:ff:59: ea:1c:4f:76:1c:4a:5a:00:55:ce:57:14:0e:97:99: ef:c4:2f:1a:c1:24:5c:2b:24:7f:da:54:41:11:81: bd:f8:2a:f1:93:fa:9a:ea:7c:2d:62:cb:87:a1:35: d3:f8:ac:ea:27:c4:a1:30:27:9c:fd:31:4f:5f:e7: c3:cd:5b:31:d4:a0:cf:27:4b:4c:ce:64:b5:45:3e: 89:8d:b1:0e:e1:a8:68:2e:66:04:25:5a:b0:60:64: b3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:72:14:0A:43:BB:95:DF:91:BD:86:EB:2F:AB:B5:9C:86:2C:70:B0 X509v3 Authority Key Identifier: keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:20:3c:b8:22:f4:69:6e:4a:a4:30:0d:f3:28:0d:85:62:f7: d8:58:a8:12:11:e1:8c:b2:68:78:2e:6d:b8:0b:60:20:33:b7: 00:93:09:28:5c:06:11:47:56:7a:f9:9e:ec:78:33:c1:90:00: 25:9d:58:16:20:79:47:ed:2b:df:d6:a0:7f:93:75:2a:0e:4c: 50:4f:27:bb:d8:b6:41:a8:3f:f0:b7:d1:24:74:7d:c1:7b:c3: 7e:cf:34:0e:3d:6b:b0:a6:81:aa:10:a0:d4:65:f6:33:30:49: 78:2d:4e:a9:56:3f:49:c2:c5:59:de:e5:4c:1c:44:29:ce:92: 5d:41:cf:04:b9:a4:3d:ce:7c:40:60:cd:f9:49:53:0e:73:5a: b2:0c:59:4d:13:09:98:f1:9d:ba:15:d2:af:1c:bb:41:22:2a: f0:d2:e6:11:89:be:d3:bc:b4:a3:74:8a:8f:94:6f:50:74:db: 4c:6f:a7:70:7b:93:4f:75:c5:07:fb:f7:ca:81:ee:2b:59:aa: 8d:33:fd:ce:32:3c:5d:d8:8a:49:32:7d:0e:49:69:9e:34:cd: 28:3f:73:b1:19:75:01:d0:52:1f:76:fa:1e:5a:68:8d:97:5b: a3:30:8a:9d:ce:4e:13:18:e5:d2:83:0f:70:fe:79:82:38:75: a2:c6:4f:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa4Pv2LFaoknZIZTmL1U8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE1MzgzMWMxNjYzNTE2MWM0ZGJkMThlYzVhNzJiOTljNGVl NTE5ZTMwHhcNMjYwMjA5MjIwMDIyWhcNMjYwMjEwMjIwMDIyWjAzMTEwLwYDVQQD Eyg3YjcyMTQwYTQzYmI5NWRmOTFiZDg2ZWIyZmFiYjU5Yzg2MmM3MGIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oQGSl+dEUgX7oIq197GJp8MuR2b mwJygAPltEwqimCWhhzf1W+iOXNGUJlXmaHdSHJrlSQWxdOV8+tSUjo1uU/4ple/ beik1WCREnqjVt02FdAEcP90sO4psX21y8gqj2sFnylqyon+ERlYx5Ow0Y4XRY5w TTunowdqfxLV0A35bRkQ5Lei9DPlh53k2OuiXcAqAwhG98y8ToUBJ6p4/q4t/1nq HE92HEpaAFXOVxQOl5nvxC8awSRcKyR/2lRBEYG9+Crxk/qa6nwtYsuHoTXT+Kzq J8ShMCec/TFPX+fDzVsx1KDPJ0tMzmS1RT6JjbEO4ahoLmYEJVqwYGSzHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtyFApDu5Xfkb2G6y+rtZyGLHCwMB8GA1UdIwQY MBaAFBU4McFmNRYcTb0Y7FpyuZxO5RnjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYt Y2Q1MTdiMTY5Zjg5LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS85NTQ1NTctMmE1Zi00ODI2LWFiMTYtY2Q1MTdiMTY5Zjg5 LzEvRlRneHdXWTFGaHhOdlJqc1duSzVuRTdsR2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSA8uCL0 aW5KpDAN8ygNhWL32FioEhHhjLJoeC5tuAtgIDO3AJMJKFwGEUdWevme7HgzwZAA JZ1YFiB5R+0r39agf5N1Kg5MUE8nu9i2Qag/8LfRJHR9wXvDfs80Dj1rsKaBqhCg 1GX2MzBJeC1OqVY/ScLFWd7lTBxEKc6SXUHPBLmkPc58QGDN+UlTDnNasgxZTRMJ mPGduhXSrxy7QSIq8NLmEYm+07y0o3SKj5RvUHTbTG+ncHuTT3XFB/v3yoHuK1mq jTP9zjI8XdiKSTJ9DklpnjTNKD9zsRl1AdBSH3b6HlpojZdbozCKnc5OExjl0oMP cP55gjh1osZPzQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:41 2026 by rpki-client