This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json) Hash identifier: /5NjwCn94Hva4KEShA2naiFujdN8DDI6HxpfqrROYHk= Subject key identifier: CD:96:1B:00:EC:38:04:1B:29:09:32:FC:63:66:B0:B7:34:16:4B:79 Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Certificate serial: 019C420FE7774CF285D19EFD0E2E43A6132C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft Manifest number: 1664 Signing time: Mon 09 Feb 2026 11:01:04 +0000 Manifest this update: Mon 09 Feb 2026 11:01:04 +0000 Manifest next update: Tue 10 Feb 2026 11:01:04 +0000 Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: OMxD0M95SgtggUAM6TgDLq4sR5Y8rKfAcn4FBAxetl4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:e7:77:4c:f2:85:d1:9e:fd:0e:2e:43:a6:13:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661 Validity Not Before: Feb 9 11:01:04 2026 GMT Not After : Feb 10 11:01:04 2026 GMT Subject: CN=cd961b00ec38041b290932fc6366b0b734164b79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:95:d9:ab:4b:ee:e1:5c:62:cd:df:03:6d:d1: 04:5c:04:2f:ac:e3:c4:93:9c:b3:ce:50:93:99:37: 39:29:e7:3a:5e:24:fb:5b:f3:4f:a7:49:61:97:c0: bd:1f:f8:e9:90:79:8c:41:25:e8:5b:e4:d0:77:61: e3:1e:73:f9:7c:38:c3:aa:ab:78:7b:52:13:46:79: 12:2a:91:5e:53:a7:fe:04:61:99:74:55:e8:b8:9a: bb:ed:a7:cd:86:bb:ac:42:2f:3f:e7:c1:3a:01:b6: 8f:3b:dd:c3:f7:d1:07:b0:06:35:fa:33:91:e7:c1: 44:75:e2:6b:ec:83:91:34:c7:f5:d5:ef:cf:8f:a0: 8e:b0:ce:37:98:f4:92:3d:5f:71:d0:59:61:dd:0f: 40:40:30:68:c7:ab:3e:41:c7:35:e6:ff:95:79:6d: d4:bf:4c:4e:36:e6:b3:16:0f:ad:13:24:be:5a:ed: 7d:6d:81:df:2a:32:72:49:92:e5:42:01:2e:96:5e: 03:4e:7f:39:45:fd:8e:26:5b:2d:3a:e7:06:ee:25: 80:2d:95:19:dc:44:79:2e:8e:ed:31:f9:c1:25:d5: 7a:e0:19:ce:9f:a4:0d:fe:2d:de:b9:58:76:e8:08: 65:2f:85:f5:47:97:2c:c4:a2:c4:a2:46:64:21:01: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:96:1B:00:EC:38:04:1B:29:09:32:FC:63:66:B0:B7:34:16:4B:79 X509v3 Authority Key Identifier: keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:d5:39:7e:5c:e0:f8:1e:34:8b:6e:60:81:17:46:ac:82:39: 09:02:c1:89:19:bc:cc:a8:60:5f:66:2a:19:69:5d:47:10:2b: 8c:d7:7f:1e:b9:fc:e7:0d:3f:7d:09:2c:af:87:69:08:21:07: a1:50:91:1c:f3:82:db:35:10:74:e8:62:46:11:4c:17:75:62: 6e:5d:76:48:f7:50:9e:0a:66:d6:7d:df:2c:b2:5d:c3:bb:61: 1a:73:1b:4d:08:9c:c9:ef:e2:bc:85:81:6d:f7:db:bf:8e:55: dc:b4:5f:be:cb:ed:0b:bd:f0:20:f9:cf:fc:ca:28:76:e8:f4: c3:d9:63:99:3e:47:d6:90:5a:02:f7:fa:cc:d3:4b:3d:4c:d0: 70:71:a1:a6:91:15:e9:4b:6f:f0:da:95:3c:84:20:82:c3:94: 9f:6b:55:16:4b:4b:28:f2:cc:3b:b6:57:a5:1a:41:68:ae:56: 5b:14:17:fe:a7:c8:dc:12:5d:6b:cf:fd:b4:6b:a2:3f:60:73: 00:ab:32:f0:d4:1f:e4:5d:35:ea:9a:fa:dd:7f:3e:e3:bc:dc: 3a:df:b3:ff:5f:8d:89:b3:d4:a4:e2:0f:ee:d9:5c:e6:78:02: ff:2c:f3:81:cf:f8:db:e4:29:e5:ee:93:ef:bf:da:81:39:d7: fb:1e:89:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD+d3TPKF0Z79Di5DphMsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj YmI2NjEwHhcNMjYwMjA5MTEwMTA0WhcNMjYwMjEwMTEwMTA0WjAzMTEwLwYDVQQD EyhjZDk2MWIwMGVjMzgwNDFiMjkwOTMyZmM2MzY2YjBiNzM0MTY0Yjc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZXZq0vu4Vxizd8DbdEEXAQvrOPE k5yzzlCTmTc5Kec6XiT7W/NPp0lhl8C9H/jpkHmMQSXoW+TQd2HjHnP5fDjDqqt4 e1ITRnkSKpFeU6f+BGGZdFXouJq77afNhrusQi8/58E6AbaPO93D99EHsAY1+jOR 58FEdeJr7IORNMf11e/Pj6COsM43mPSSPV9x0Flh3Q9AQDBox6s+Qcc15v+VeW3U v0xONuazFg+tEyS+Wu19bYHfKjJySZLlQgEull4DTn85Rf2OJlstOucG7iWALZUZ 3ER5Lo7tMfnBJdV64BnOn6QN/i3euVh26AhlL4X1R5csxKLEokZkIQFmZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2WGwDsOAQbKQky/GNmsLc0Fkt5MB8GA1UdIwQY MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdU5flzg +B40i25ggRdGrII5CQLBiRm8zKhgX2YqGWldRxArjNd/Hrn85w0/fQksr4dpCCEH oVCRHPOC2zUQdOhiRhFMF3Vibl12SPdQngpm1n3fLLJdw7thGnMbTQicye/ivIWB bffbv45V3LRfvsvtC73wIPnP/Mooduj0w9ljmT5H1pBaAvf6zNNLPUzQcHGhppEV 6Utv8NqVPIQggsOUn2tVFktLKPLMO7ZXpRpBaK5WWxQX/qfI3BJda8/9tGuiP2Bz AKsy8NQf5F016pr63X8+47zcOt+z/1+NibPUpOIP7tlc5ngC/yzzgc/42+Qp5e6T 77/agTnX+x6JxA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:50 2026 by rpki-client