This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json) Hash identifier: XKvyqzCDiG4F/snuVkw/a71CWnct7GUGQOaSOutrkQc= Subject key identifier: AA:79:35:84:45:ED:AA:E3:32:25:9A:63:DC:6D:97:1D:41:74:82:DB Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e Certificate serial: 019C43902BB957BD074AECE00854787405E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: vPIr/5ToRZM4yKvn+6C6/5Dg0mMYV9opkwUbcA7QvnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2b:b9:57:bd:07:4a:ec:e0:08:54:78:74:05:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=aa79358445edaae332259a63dc6d971d417482db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1a:4c:56:b7:5b:24:3a:db:2e:71:a3:ab:b6: bb:50:b8:c1:2b:b9:c5:be:aa:91:40:79:83:53:1e: 30:67:22:18:3c:b6:95:bc:b2:fe:e5:2a:79:7b:0a: df:78:f9:f8:ac:3d:b6:da:55:c7:c9:2d:4e:80:09: 91:b6:1b:7e:d5:87:0d:1d:7f:54:3a:c9:0f:53:e8: 5c:43:80:62:45:d0:64:46:63:d4:ae:27:a7:36:6d: fe:e0:c6:65:3d:44:f8:ba:c8:8e:cb:b8:86:7b:3f: c6:1d:3e:2b:46:94:89:0c:27:71:90:5a:2d:0f:2b: 22:5b:df:31:f2:f4:b2:84:45:12:24:a2:5a:30:df: c0:10:2e:da:17:41:fc:b7:18:a1:0f:a5:c3:1a:b1: 3a:f1:18:00:f4:1e:a6:30:99:b9:5b:fa:32:1c:7d: 76:82:9e:69:87:2b:e5:7d:b8:02:6d:0d:17:30:b8: 97:07:70:a3:6b:fb:5c:ab:c2:bd:40:72:aa:17:76: 6a:69:a4:7a:c0:92:f0:a0:2b:70:17:11:77:39:73: a1:26:c7:fa:84:64:f6:1e:ec:bb:7c:c9:4a:e2:c2: 0b:66:fb:e0:d3:2b:77:e3:78:ef:08:85:8a:33:0f: ce:1e:22:68:c0:62:8a:04:bf:c7:fc:e5:63:97:9d: 91:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:79:35:84:45:ED:AA:E3:32:25:9A:63:DC:6D:97:1D:41:74:82:DB X509v3 Authority Key Identifier: keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:28:52:0f:f4:94:34:be:6f:ca:b8:97:6e:8f:1a:26:e8:df: 83:61:05:08:cd:8d:a7:36:2a:1e:46:a6:5e:16:5d:e4:bb:2b: 44:31:7b:b5:68:e3:1e:b9:ef:17:09:69:06:88:e3:aa:6c:1c: a1:39:02:b6:06:e9:39:04:57:95:75:20:4c:aa:89:c4:0a:dc: c4:a4:fe:f5:52:b2:72:a9:58:f5:d2:52:cb:d9:af:5c:52:27: b0:c3:0d:05:32:19:46:ab:d0:27:cc:0f:47:7d:25:9e:be:8e: 13:ce:9c:f7:ff:51:67:93:d5:f7:47:70:8d:8a:24:61:4e:be: 9c:a9:2b:f2:79:1e:cd:65:67:44:ea:54:a7:4f:b2:38:1a:ba: 1d:d4:84:a2:ac:86:c9:4a:32:a7:99:99:41:3a:d3:08:dc:2c: b7:72:b5:17:29:02:b7:e3:e3:47:7e:4c:98:d9:c3:99:17:14: 85:78:4a:92:7b:32:e9:60:11:99:fe:60:6a:13:fd:7d:e3:f6: 7c:25:9d:17:94:fc:86:6b:f4:3f:76:ba:d2:9c:cf:b3:07:05: a9:27:e3:dd:64:be:10:e8:8e:d7:05:5d:d2:5e:3a:68:ea:f1: cd:53:f9:15:14:44:21:6f:10:19:ea:80:e4:f9:6f:dd:39:34: 81:99:9b:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCu5V70HSuzgCFR4dAXkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZjk3NzgyZDZmMjAyYTcwMTgzNjcxYWE2MzBjNzNhYmEz MzMwN2UwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD EyhhYTc5MzU4NDQ1ZWRhYWUzMzIyNTlhNjNkYzZkOTcxZDQxNzQ4MmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRpMVrdbJDrbLnGjq7a7ULjBK7nF vqqRQHmDUx4wZyIYPLaVvLL+5Sp5ewrfePn4rD222lXHyS1OgAmRtht+1YcNHX9U OskPU+hcQ4BiRdBkRmPUrienNm3+4MZlPUT4usiOy7iGez/GHT4rRpSJDCdxkFot DysiW98x8vSyhEUSJKJaMN/AEC7aF0H8txihD6XDGrE68RgA9B6mMJm5W/oyHH12 gp5phyvlfbgCbQ0XMLiXB3Cja/tcq8K9QHKqF3ZqaaR6wJLwoCtwFxF3OXOhJsf6 hGT2Huy7fMlK4sILZvvg0yt343jvCIWKMw/OHiJowGKKBL/H/OVjl52RFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKp5NYRF7arjMiWaY9xtlx1BdILbMB8GA1UdIwQY MBaAFHz5d4LW8gKnAYNnGqYwxzq6MzB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmIt MzFhMTdiM2Q5NjRiLzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8xNWVkN2EtZDMwNy00YTIxLWI4NmItMzFhMTdiM2Q5NjRi LzEvZlBsM2d0YnlBcWNCZzJjYXBqREhPcm96TUg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATihSD/SU NL5vyriXbo8aJujfg2EFCM2NpzYqHkamXhZd5LsrRDF7tWjjHrnvFwlpBojjqmwc oTkCtgbpOQRXlXUgTKqJxArcxKT+9VKycqlY9dJSy9mvXFInsMMNBTIZRqvQJ8wP R30lnr6OE86c9/9RZ5PV90dwjYokYU6+nKkr8nkezWVnROpUp0+yOBq6HdSEoqyG yUoyp5mZQTrTCNwst3K1FykCt+PjR35MmNnDmRcUhXhKknsy6WARmf5gahP9feP2 fCWdF5T8hmv0P3a60pzPswcFqSfj3WS+EOiO1wVd0l46aOrxzVP5FRREIW8QGeqA 5Plv3Tk0gZmbbw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:22 2026 by rpki-client