This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft File: FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft (raw, json) Hash identifier: YbzqKpzUvpjd019BBxP/qMZf8Lin2KNWgkxhHIdOtsY= Subject key identifier: B4:E4:55:DC:67:2F:A6:80:E9:48:3D:7D:7B:3C:F1:4B:E2:0D:F1:28 Authority key identifier: 14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79 Certificate issuer: /CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79 Certificate serial: 019C42EAE73B1525339D3DE0D7BC27AFF9F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft Manifest number: 01C3 Signing time: Mon 09 Feb 2026 15:00:16 +0000 Manifest this update: Mon 09 Feb 2026 15:00:16 +0000 Manifest next update: Tue 10 Feb 2026 15:00:16 +0000 Files and hashes: 1: DKtfJq7x0DJhe_hFPZnHoc3QjyA.roa (hash: i9+gFVyb3SxyLJJwgR43XfwCTSTrRwfgOhIAHEXtM3I=) 2: FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl (hash: xukIJrjlUjpTJaT+5MKujNxZpSahV9NJ1jwMNUdbNcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:e7:3b:15:25:33:9d:3d:e0:d7:bc:27:af:f9:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14e16846d7c22d0fc3ad884c94c034dd7bb35f79 Validity Not Before: Feb 9 15:00:16 2026 GMT Not After : Feb 10 15:00:16 2026 GMT Subject: CN=b4e455dc672fa680e9483d7d7b3cf14be20df128 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:98:dc:51:82:bc:b6:d0:14:2b:05:9c:d9:92: 34:0d:46:ab:de:75:c7:28:f7:da:6c:0d:3f:08:3e: 22:39:9c:4c:2f:c7:c5:02:8c:0a:ed:04:d0:bd:2d: 6b:4c:41:9b:d4:e3:b3:b4:c2:97:5b:bf:89:42:79: 98:08:ee:41:7f:40:2b:7f:81:d3:30:72:ec:07:a9: 56:a2:b4:ae:ed:9e:cf:5b:64:8e:b9:94:5f:a4:7c: 7d:0c:55:38:0e:5e:fa:56:08:63:93:cf:3d:51:c2: 18:0b:13:0b:a4:0b:2c:06:82:0a:df:1d:f4:ee:77: 6a:01:23:6e:44:58:b5:6e:8b:82:b2:8c:5a:e2:0f: 7b:1d:21:fe:c7:79:a5:ea:dc:de:c8:f2:d1:bf:db: da:85:8f:38:ee:e3:bc:93:fb:02:7c:85:45:28:b6: 71:85:c9:a8:64:42:7f:a0:b9:3c:66:bf:a6:b6:2a: 77:30:81:90:1c:b8:d5:1a:87:eb:6f:5f:37:e4:7c: 64:7a:f9:40:e8:8a:51:6a:b2:27:ae:fe:d1:38:fe: 77:c4:83:88:fe:b2:66:e9:a5:57:7e:e8:4e:bb:0c: ba:b6:67:aa:30:02:b7:58:03:b3:a9:b3:d7:36:a8: 95:f9:59:74:81:8a:8f:5c:f5:c6:d2:db:39:be:39: 2f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E4:55:DC:67:2F:A6:80:E9:48:3D:7D:7B:3C:F1:4B:E2:0D:F1:28 X509v3 Authority Key Identifier: keyid:14:E1:68:46:D7:C2:2D:0F:C3:AD:88:4C:94:C0:34:DD:7B:B3:5F:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FOFoRtfCLQ_DrYhMlMA03XuzX3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/74553d-a088-4d37-b4a6-1d9d890be632/1/FOFoRtfCLQ_DrYhMlMA03XuzX3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:70:85:c2:39:1d:03:0f:40:13:32:d0:96:10:92:20:f8:4c: a1:5b:27:a3:ae:fd:ee:c5:d6:1a:aa:ef:49:87:a2:ba:6f:43: b6:82:95:bd:3b:fc:14:00:a0:1b:45:56:0f:a6:dd:df:32:fa: 78:77:23:d2:8e:63:44:b0:83:33:9d:4b:e4:1b:f5:a5:9f:9a: a3:84:de:6b:8c:d1:7f:d2:3a:d0:ac:b4:da:82:7a:19:bd:da: 31:63:62:d5:ae:f7:19:41:cd:7f:d2:5d:96:c5:78:06:2e:40: d6:e6:e7:14:44:67:43:95:c7:5f:9d:59:a2:92:6e:4d:68:dd: e8:2c:02:09:42:26:dd:8b:03:62:16:52:54:79:07:c9:f2:75: 1f:77:80:99:18:64:60:36:e9:27:8c:4c:1d:80:cb:a8:37:15: 99:ae:80:b9:e0:bd:31:2c:1b:a3:7e:28:0b:94:46:77:2e:21: 87:76:16:45:6c:f5:63:d6:05:c0:d4:34:e5:d4:43:b1:02:d4: aa:b3:64:f1:10:31:cc:d8:96:1a:14:26:4c:0b:2c:68:cd:9b: fa:0c:64:16:14:ce:1a:12:b9:70:6c:90:12:ba:a1:67:b7:de: 66:36:2c:0f:9b:32:8f:c6:bf:e1:cc:9b:fe:4a:cd:15:b1:e0: bb:9a:5e:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uc7FSUznT3g17wnr/n4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0ZTE2ODQ2ZDdjMjJkMGZjM2FkODg0Yzk0YzAzNGRkN2Ji MzVmNzkwHhcNMjYwMjA5MTUwMDE2WhcNMjYwMjEwMTUwMDE2WjAzMTEwLwYDVQQD EyhiNGU0NTVkYzY3MmZhNjgwZTk0ODNkN2Q3YjNjZjE0YmUyMGRmMTI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspjcUYK8ttAUKwWc2ZI0DUar3nXH KPfabA0/CD4iOZxML8fFAowK7QTQvS1rTEGb1OOztMKXW7+JQnmYCO5Bf0Arf4HT MHLsB6lWorSu7Z7PW2SOuZRfpHx9DFU4Dl76Vghjk889UcIYCxMLpAssBoIK3x30 7ndqASNuRFi1bouCsoxa4g97HSH+x3ml6tzeyPLRv9vahY847uO8k/sCfIVFKLZx hcmoZEJ/oLk8Zr+mtip3MIGQHLjVGofrb1835HxkevlA6IpRarInrv7ROP53xIOI /rJm6aVXfuhOuwy6tmeqMAK3WAOzqbPXNqiV+Vl0gYqPXPXG0ts5vjkvzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTkVdxnL6aA6Ug9fXs88UviDfEoMB8GA1UdIwQY MBaAFBThaEbXwi0Pw62ITJTANN17s195MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRk9Gb1J0ZkNMUV9EclloTWxNQTAzWHV6WDNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS83NDU1M2QtYTA4OC00ZDM3LWI0YTYt MWQ5ZDg5MGJlNjMyLzEvRk9Gb1J0ZkNMUV9EclloTWxNQTAzWHV6WDNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS83NDU1M2QtYTA4OC00ZDM3LWI0YTYtMWQ5ZDg5MGJlNjMy LzEvRk9Gb1J0ZkNMUV9EclloTWxNQTAzWHV6WDNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXCFwjkd Aw9AEzLQlhCSIPhMoVsno6797sXWGqrvSYeium9DtoKVvTv8FACgG0VWD6bd3zL6 eHcj0o5jRLCDM51L5Bv1pZ+ao4Tea4zRf9I60Ky02oJ6Gb3aMWNi1a73GUHNf9Jd lsV4Bi5A1ubnFERnQ5XHX51ZopJuTWjd6CwCCUIm3YsDYhZSVHkHyfJ1H3eAmRhk YDbpJ4xMHYDLqDcVma6AueC9MSwbo34oC5RGdy4hh3YWRWz1Y9YFwNQ05dRDsQLU qrNk8RAxzNiWGhQmTAssaM2b+gxkFhTOGhK5cGyQErqhZ7feZjYsD5syj8a/4cyb /krNFbHgu5peyQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:48 2026 by rpki-client