This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json) Hash identifier: kiYiLTeNzNFtAXK029zoEkFWclR+wLzqPqfrvWPBe10= Subject key identifier: 22:40:66:0D:D3:50:EB:A9:72:96:9A:C5:0A:7E:6A:8F:0E:3E:C9:D9 Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Certificate serial: 019C432251DB19E33E9BBFE519385C49F658 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft Manifest number: 078F Signing time: Mon 09 Feb 2026 16:00:48 +0000 Manifest this update: Mon 09 Feb 2026 16:00:48 +0000 Manifest next update: Tue 10 Feb 2026 16:00:48 +0000 Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: Sjn/HsoKtKZC/9oWNyGrDUin/D2G5ZeCZ4mHUADbWrE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:51:db:19:e3:3e:9b:bf:e5:19:38:5c:49:f6:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9 Validity Not Before: Feb 9 16:00:48 2026 GMT Not After : Feb 10 16:00:48 2026 GMT Subject: CN=2240660dd350eba972969ac50a7e6a8f0e3ec9d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:78:c9:f7:a7:26:e0:57:b9:c3:60:6f:6e:12: 00:5d:75:ab:18:19:56:68:ed:1c:5f:22:9b:6b:27: 5f:b2:02:51:91:88:5a:47:4b:75:74:88:c8:64:be: 20:11:5d:d3:2f:1d:03:30:b9:a3:b1:70:0f:83:c0: 35:49:e4:de:76:22:30:33:3d:5d:b1:16:db:ce:91: 20:34:db:e7:1e:d6:3a:11:ff:16:3c:fb:07:1c:6e: 52:30:3e:c2:31:28:bf:57:b7:5f:34:80:fa:70:ec: ee:e3:86:77:6b:0c:4c:e3:89:1d:41:f2:5b:18:b3: 27:3f:c9:53:6f:f8:b7:92:47:f5:57:cd:b2:7f:dd: 58:fc:f1:02:53:b0:b6:af:af:86:3a:c5:bf:d7:f6: 14:a4:07:c8:bf:9a:56:fc:58:7b:6d:24:f2:98:10: 09:93:93:34:c2:3d:e4:8f:36:62:79:68:9e:ff:af: e5:cf:8d:93:95:33:a9:3e:85:49:d4:3e:7c:a7:06: b4:10:ac:29:5f:3f:43:74:cd:cb:49:fd:9e:d0:1a: 9f:b4:9a:00:0b:f0:ee:dc:fa:dd:d7:ea:31:bf:25: e0:c2:a6:93:6b:6e:f4:3d:7e:d1:9d:53:3b:38:6e: be:d4:9b:34:41:c0:95:8b:68:c7:0b:b5:84:8d:4a: 2c:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:40:66:0D:D3:50:EB:A9:72:96:9A:C5:0A:7E:6A:8F:0E:3E:C9:D9 X509v3 Authority Key Identifier: keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:f3:b5:c7:15:14:40:a7:4b:ea:9a:44:a6:92:e6:3c:e8:c6: 04:54:bc:56:f3:d1:af:c7:16:fa:bd:35:3e:81:2b:a3:e8:b0: 7d:0a:10:c9:fb:e6:28:bc:87:30:cd:5b:f8:8d:bf:1a:12:07: 2f:43:3d:5d:df:8e:ab:5d:9c:ab:90:a9:53:76:55:a3:a7:e3: 63:84:b7:0c:81:de:e2:ea:2e:f9:fb:0b:90:2e:4c:bf:5f:59: 8a:48:63:93:17:06:7a:38:45:94:a0:3e:28:73:18:90:45:75: 58:59:9f:3e:26:d5:e9:d5:ba:af:0e:a4:0c:6c:1b:81:c1:bd: 30:74:a6:d9:04:95:c3:c8:3b:3a:a9:a9:ca:70:6d:9a:f3:69: 76:ac:bc:99:99:3b:85:b0:b8:ff:52:73:15:2e:10:82:1a:11: a0:8a:2f:88:57:8b:e8:0a:6e:16:82:aa:8a:9c:a8:1a:c2:f2: a1:d0:ab:00:43:56:89:dd:24:e0:d9:af:5b:e3:51:59:35:e7: 0d:94:49:60:e4:14:3f:66:7e:b5:34:f6:a2:c3:e3:ef:2c:60: 11:8c:15:a0:6b:be:4d:09:60:55:cc:ac:26:a9:96:2d:ef:57: 46:c6:a9:df:1b:d5:8f:fe:6c:b6:2b:72:07:9b:e2:51:e5:fe: e5:5e:c3:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlHbGeM+m7/lGThcSfZYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmZTE2MTAxZTQyMWQyMWNkYjVlNWIwNWEyZTI4OWRmYjc3 M2Y0YzkwHhcNMjYwMjA5MTYwMDQ4WhcNMjYwMjEwMTYwMDQ4WjAzMTEwLwYDVQQD EygyMjQwNjYwZGQzNTBlYmE5NzI5NjlhYzUwYTdlNmE4ZjBlM2VjOWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3jJ96cm4Fe5w2BvbhIAXXWrGBlW aO0cXyKbaydfsgJRkYhaR0t1dIjIZL4gEV3TLx0DMLmjsXAPg8A1SeTediIwMz1d sRbbzpEgNNvnHtY6Ef8WPPsHHG5SMD7CMSi/V7dfNID6cOzu44Z3awxM44kdQfJb GLMnP8lTb/i3kkf1V82yf91Y/PECU7C2r6+GOsW/1/YUpAfIv5pW/Fh7bSTymBAJ k5M0wj3kjzZieWie/6/lz42TlTOpPoVJ1D58pwa0EKwpXz9DdM3LSf2e0BqftJoA C/Du3Prd1+oxvyXgwqaTa270PX7RnVM7OG6+1Js0QcCVi2jHC7WEjUoszwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCJAZg3TUOupcpaaxQp+ao8OPsnZMB8GA1UdIwQY MBaAFJ/hYQHkIdIc215bBaLiid+3c/TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQt ZTk3MTFmNTc2YjRlLzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy8xNTZlZWItODAxOS00ZDYwLThlYWQtZTk3MTFmNTc2YjRl LzEvbi1GaEFlUWgwaHpiWGxzRm91S0ozN2R6OU1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKvO1xxUU QKdL6ppEppLmPOjGBFS8VvPRr8cW+r01PoEro+iwfQoQyfvmKLyHMM1b+I2/GhIH L0M9Xd+Oq12cq5CpU3ZVo6fjY4S3DIHe4uou+fsLkC5Mv19ZikhjkxcGejhFlKA+ KHMYkEV1WFmfPibV6dW6rw6kDGwbgcG9MHSm2QSVw8g7OqmpynBtmvNpdqy8mZk7 hbC4/1JzFS4QghoRoIoviFeL6ApuFoKqipyoGsLyodCrAENWid0k4NmvW+NRWTXn DZRJYOQUP2Z+tTT2osPj7yxgEYwVoGu+TQlgVcysJqmWLe9XRsap3xvVj/5stity B5viUeX+5V7DjQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:02 2026 by rpki-client