This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json) Hash identifier: SY2pHhEoaWtPkinl1wvp0yUTzcOVvqf6MDhLm5rtW2Q= Subject key identifier: 5C:45:F8:9E:16:B4:CF:49:5F:2F:B3:D2:19:E4:76:49:97:FB:C3:C5 Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Certificate serial: 019C427D3227DDB6D9535A983E827B99FD77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: XAMe575cXIadWYY49nMhPYBEA2kmxBrL0/bc2NgKKd4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:32:27:dd:b6:d9:53:5a:98:3e:82:7b:99:fd:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=5c45f89e16b4cf495f2fb3d219e4764997fbc3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:1f:6a:f2:3a:11:36:76:82:b1:c1:36:fe: 77:f6:de:84:57:94:da:e7:d1:fe:c6:fe:c0:e2:09: eb:c3:03:29:d5:5e:e5:2a:6c:2c:ce:d9:48:04:c7: 1c:e4:de:2e:c9:4d:5c:2b:c0:ac:84:43:43:6e:3a: b4:7e:a2:7b:2c:8f:42:15:bb:68:33:0f:dd:0f:c7: 4e:27:e6:57:9f:90:b8:1e:ff:0d:76:92:7a:9f:e7: 01:f8:91:cd:f1:d9:86:ec:55:95:b4:dd:16:fd:5f: 2a:89:01:1c:6f:f8:15:ca:46:b3:fd:26:8d:20:fb: 0c:e9:82:bd:6b:f5:18:db:a6:61:3b:1e:92:04:88: 20:c3:33:8c:14:42:2d:f1:a6:dc:98:8f:0c:d5:64: bd:01:51:d3:76:5c:f1:2f:82:44:e0:64:9f:ab:cb: bc:94:16:d9:54:b9:f9:a9:ad:d6:28:1b:37:e7:a4: 4e:63:e8:f1:54:63:35:1c:51:65:39:ee:1b:de:79: ce:67:b8:03:fd:f5:f4:3e:8e:32:b8:68:16:bd:d9: 89:74:57:f2:ca:cf:c9:4d:48:2b:ca:77:06:d8:93: 96:9f:1f:3c:fc:69:bb:ce:75:2d:c8:96:50:d4:75: bc:7d:d4:03:5d:fe:b5:f8:29:20:a7:53:47:7d:23: 4d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:45:F8:9E:16:B4:CF:49:5F:2F:B3:D2:19:E4:76:49:97:FB:C3:C5 X509v3 Authority Key Identifier: keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:0c:74:a1:ea:05:5b:8d:0b:86:f7:59:07:73:fb:ce:1e:7c: f6:21:3a:e1:e0:6d:e5:a1:44:47:9e:35:ec:1f:2c:bd:61:1b: 02:96:d2:22:dd:88:d5:5c:5e:69:62:7c:e8:95:e5:48:37:82: d1:fa:3e:97:f8:d0:36:7e:0a:67:c2:db:09:e3:47:e2:1f:fc: 8d:0a:bf:3b:f7:37:6e:38:4c:2c:47:d9:be:eb:00:ae:d5:09: de:43:b7:fc:18:81:be:c3:9d:54:5d:26:63:79:d0:ea:34:d8: 04:aa:12:04:8c:e5:3c:4b:c5:cd:ee:72:ba:a2:03:45:5c:52: 43:df:29:93:3f:39:7b:63:16:1a:9c:f9:e7:d0:3d:85:5a:9b: 2d:38:9d:e7:3b:96:e1:65:cc:e3:d6:5c:67:84:a1:95:99:3d: 8a:60:4d:e3:17:3e:e8:8c:7a:bd:c4:11:d8:db:dc:de:81:5a: 65:8b:26:bc:d0:40:81:0f:6b:6a:75:b5:c8:0b:bc:28:b3:17: da:66:e8:f0:3c:49:0e:f2:1a:84:20:d7:d7:85:42:64:d2:c5: 55:4d:d4:f7:c1:fb:d1:44:de:b0:fa:14:07:e9:f3:a5:2e:fc: 7f:df:da:20:d5:1b:5e:50:24:3c:48:44:c5:98:e1:c4:52:86: f5:b6:24:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTIn3bbZU1qYPoJ7mf13MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYmFiYzliYzljM2FiOGE3MzlhMmJhY2UzYzU3YjAyZjQ0 NTkwZWIwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD Eyg1YzQ1Zjg5ZTE2YjRjZjQ5NWYyZmIzZDIxOWU0NzY0OTk3ZmJjM2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplgfavI6ETZ2grHBNv539t6EV5Ta 59H+xv7A4gnrwwMp1V7lKmwsztlIBMcc5N4uyU1cK8CshENDbjq0fqJ7LI9CFbto Mw/dD8dOJ+ZXn5C4Hv8NdpJ6n+cB+JHN8dmG7FWVtN0W/V8qiQEcb/gVykaz/SaN IPsM6YK9a/UY26ZhOx6SBIggwzOMFEIt8abcmI8M1WS9AVHTdlzxL4JE4GSfq8u8 lBbZVLn5qa3WKBs356ROY+jxVGM1HFFlOe4b3nnOZ7gD/fX0Po4yuGgWvdmJdFfy ys/JTUgryncG2JOWnx88/Gm7znUtyJZQ1HW8fdQDXf61+Ckgp1NHfSNNkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFxF+J4WtM9JXy+z0hnkdkmX+8PFMB8GA1UdIwQY MBaAFH26vJvJw6uKc5orrOPFewL0RZDrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYt NzBiZDc5MWJlNTYwLzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9kZDM2ZWQtNGJlYS00MDkyLWFlOGYtNzBiZDc5MWJlNTYw LzEvZmJxOG04bkRxNHB6bWl1czQ4VjdBdlJGa09zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQAx0oeoF W40LhvdZB3P7zh589iE64eBt5aFER5417B8svWEbApbSIt2I1VxeaWJ86JXlSDeC 0fo+l/jQNn4KZ8LbCeNH4h/8jQq/O/c3bjhMLEfZvusArtUJ3kO3/BiBvsOdVF0m Y3nQ6jTYBKoSBIzlPEvFze5yuqIDRVxSQ98pkz85e2MWGpz559A9hVqbLTid5zuW 4WXM49ZcZ4ShlZk9imBN4xc+6Ix6vcQR2Nvc3oFaZYsmvNBAgQ9ranW1yAu8KLMX 2mbo8DxJDvIahCDX14VCZNLFVU3U98H70UTesPoUB+nzpS78f9/aINUbXlAkPEhE xZjhxFKG9bYk+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:24 2026 by rpki-client