This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft File: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft (raw, json) Hash identifier: hZttE9FH4zEMA6dAymrC35mIDETmfKcK5kuDYA9KjE4= Subject key identifier: 1E:60:9D:9B:B1:D0:00:45:B5:AE:01:04:2D:B8:51:6F:71:89:40:FB Authority key identifier: 7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 Certificate issuer: /CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Certificate serial: 019C43FE670B91C9849DE85948103467EEC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft Manifest number: 0177 Signing time: Mon 09 Feb 2026 20:01:11 +0000 Manifest this update: Mon 09 Feb 2026 20:01:11 +0000 Manifest next update: Tue 10 Feb 2026 20:01:11 +0000 Files and hashes: 1: 5pQj7qkmBcSMfaLVfZDv-7kT9DI.roa (hash: Rd6vx0quono9MPD1F0vpd55eYapHMtF51xcO/Hw6eew=) 2: fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl (hash: hW2/AXbxltRBQ1ffbXAIOmhDb8Io0hy34Vz4shycxAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:67:0b:91:c9:84:9d:e8:59:48:10:34:67:ee:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d346ace4e652870f1687450d5c34e14cb0094b5 Validity Not Before: Feb 9 20:01:11 2026 GMT Not After : Feb 10 20:01:11 2026 GMT Subject: CN=1e609d9bb1d00045b5ae01042db8516f718940fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:52:dc:f2:70:f3:73:fa:d4:d2:94:e7:f8: 0e:9a:47:cc:a0:36:e3:2a:8b:ae:fa:e3:20:63:44: 4b:59:ce:d1:e4:20:71:3a:aa:5c:5c:37:ae:76:7f: 30:4d:df:98:9f:eb:a6:a2:1b:6a:45:29:2b:25:30: 73:60:5e:4d:c4:fd:e0:f3:20:55:c2:f4:09:1f:5f: a2:0c:8f:f5:f5:79:b8:14:e7:35:74:fa:5d:71:d6: a9:1f:ea:c2:63:67:0d:76:10:c0:a9:68:20:10:9d: b8:33:2c:d2:0e:b9:45:43:4b:68:74:17:a2:8b:57: 4f:32:4f:f4:51:01:81:65:af:0a:98:8c:b6:79:c7: 6d:39:1b:80:b3:0d:9b:1b:6a:d4:69:4e:13:5f:2f: dc:01:af:be:7a:28:39:a6:b0:40:8d:25:83:c1:f5: d4:c0:77:67:21:77:c7:ef:2a:5c:aa:26:e8:82:93: 3f:09:ba:07:6e:aa:ee:b9:5b:c6:7b:9f:7a:6c:cf: 53:a3:40:c8:10:b4:88:d3:fd:de:a9:01:b0:4c:3a: 80:37:64:64:4f:28:b5:7f:de:5a:f0:db:a3:69:5b: a0:8e:5e:c3:bc:e7:bf:1e:87:18:fa:bb:58:fe:72: b3:93:32:2a:c2:04:b5:ff:b9:42:e3:b9:5f:8f:7d: ed:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:60:9D:9B:B1:D0:00:45:B5:AE:01:04:2D:B8:51:6F:71:89:40:FB X509v3 Authority Key Identifier: keyid:7D:34:6A:CE:4E:65:28:70:F1:68:74:50:D5:C3:4E:14:CB:00:94:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c676d7-fbfe-4ae6-be51-327acc1b1e59/1/fTRqzk5lKHDxaHRQ1cNOFMsAlLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:7c:0e:80:8d:0c:4c:b9:46:8b:9d:20:15:75:02:ed:d2:75: a7:89:ff:c0:98:e1:3a:8e:42:01:07:4e:82:f9:14:ef:9b:52: 31:51:a5:60:fa:6a:47:62:b7:6b:0d:05:33:5f:1e:56:b9:0e: 71:d4:d8:72:09:0c:d7:a0:4b:77:db:a1:22:d8:f6:31:3c:3c: 33:71:52:f6:44:48:ba:ac:03:76:1a:ea:2c:71:00:ce:78:9c: fb:2c:07:bf:0e:a8:cb:81:48:81:9b:af:6c:3b:51:ff:bd:96: ad:36:fa:d0:cb:82:3e:52:5b:c9:4f:0e:47:5f:c8:69:1b:0f: 31:56:dd:36:b8:a9:ff:0c:9e:41:78:f9:d4:4f:ab:9c:63:f5: c6:49:7c:5f:23:37:76:c9:a3:cb:6e:fb:59:64:27:2d:f2:af: b6:77:2d:d3:40:8e:2c:34:14:ec:39:75:ae:46:e7:19:bf:ee: c0:9b:5b:49:76:fa:d0:81:15:f4:b0:25:ef:ff:f3:a9:df:74: c7:10:e0:d5:55:4c:b3:fb:c0:a3:44:e5:e9:52:11:57:22:ad: 65:92:e0:ee:af:f8:3a:4f:2f:63:12:8b:b9:68:2b:c2:cc:2d: 4c:c6:85:04:8a:41:3f:ef:c6:83:26:21:96:ac:89:e9:4b:7f: 41:19:35:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mcLkcmEnehZSBA0Z+7EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMzQ2YWNlNGU2NTI4NzBmMTY4NzQ1MGQ1YzM0ZTE0Y2Iw MDk0YjUwHhcNMjYwMjA5MjAwMTExWhcNMjYwMjEwMjAwMTExWjAzMTEwLwYDVQQD EygxZTYwOWQ5YmIxZDAwMDQ1YjVhZTAxMDQyZGI4NTE2ZjcxODk0MGZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngNS3PJw83P61NKU5/gOmkfMoDbj Kouu+uMgY0RLWc7R5CBxOqpcXDeudn8wTd+Yn+umohtqRSkrJTBzYF5NxP3g8yBV wvQJH1+iDI/19Xm4FOc1dPpdcdapH+rCY2cNdhDAqWggEJ24MyzSDrlFQ0todBei i1dPMk/0UQGBZa8KmIy2ecdtORuAsw2bG2rUaU4TXy/cAa++eig5prBAjSWDwfXU wHdnIXfH7ypcqibogpM/CboHbqruuVvGe596bM9To0DIELSI0/3eqQGwTDqAN2Rk Tyi1f95a8NujaVugjl7DvOe/HocY+rtY/nKzkzIqwgS1/7lC47lfj33taQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5gnZux0ABFta4BBC24UW9xiUD7MB8GA1UdIwQY MBaAFH00as5OZShw8Wh0UNXDThTLAJS1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEt MzI3YWNjMWIxZTU5LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jNjc2ZDctZmJmZS00YWU2LWJlNTEtMzI3YWNjMWIxZTU5 LzEvZlRScXprNWxLSER4YUhSUTFjTk9GTXNBbExVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU3wOgI0M TLlGi50gFXUC7dJ1p4n/wJjhOo5CAQdOgvkU75tSMVGlYPpqR2K3aw0FM18eVrkO cdTYcgkM16BLd9uhItj2MTw8M3FS9kRIuqwDdhrqLHEAznic+ywHvw6oy4FIgZuv bDtR/72WrTb60MuCPlJbyU8OR1/IaRsPMVbdNrip/wyeQXj51E+rnGP1xkl8XyM3 dsmjy277WWQnLfKvtnct00COLDQU7Dl1rkbnGb/uwJtbSXb60IEV9LAl7//zqd90 xxDg1VVMs/vAo0Tl6VIRVyKtZZLg7q/4Ok8vYxKLuWgrwswtTMaFBIpBP+/GgyYh lqyJ6Ut/QRk15w== -----END CERTIFICATE-----Generated at Mon Feb 9 23:00:27 2026 by rpki-client