This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json) Hash identifier: i82hDtuNnowDumLiQ6Tpj2qm5+mAsRGn2i6AQVJ+ZmU= Subject key identifier: 0F:25:FF:02:40:E2:C9:23:64:FE:B7:A5:09:2E:A3:12:4A:F0:7E:BF Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb Certificate serial: 019C41A1B75D605896D395D03A9B85314BF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft Manifest number: 16E1 Signing time: Mon 09 Feb 2026 09:00:43 +0000 Manifest this update: Mon 09 Feb 2026 09:00:43 +0000 Manifest next update: Tue 10 Feb 2026 09:00:43 +0000 Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: xYzl+Lvf4gLTTRdvQVuOwOiz5Ar4NWcFmeRhzphK6oA=) 2: g3yb9GvnR-4yvkFxTiRQRjASrNM.roa (hash: IRUvAUHV7ruHaa7xmQq2ksFvesViZHulW4HJ9YDCukA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:b7:5d:60:58:96:d3:95:d0:3a:9b:85:31:4b:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1171641f157cb57b532626359e71582742c2dccb Validity Not Before: Feb 9 09:00:43 2026 GMT Not After : Feb 10 09:00:43 2026 GMT Subject: CN=0f25ff0240e2c92364feb7a5092ea3124af07ebf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:af:b2:41:12:ab:16:bc:d5:96:85:6d:64:47: 54:9e:1d:41:8e:bd:63:2e:49:6c:e6:4f:72:73:ef: 22:7c:c0:76:18:45:16:37:ca:c3:bc:1b:66:8b:16: 8b:ed:10:e8:1a:14:5d:03:8f:12:44:28:b4:1f:b4: eb:f7:d2:3e:5e:e0:90:66:23:80:a8:c3:2b:d6:3d: 64:79:db:0f:f4:7c:f0:24:28:9b:91:12:09:1c:e5: 2b:f9:17:53:ab:3a:5f:4f:7b:31:da:a6:78:8c:11: 79:29:47:61:ac:65:a4:a9:d6:78:60:fa:84:7f:4f: 20:09:65:c6:33:7c:6a:8c:d1:d7:5b:87:cc:d8:f9: ab:c7:67:a3:af:3c:f2:85:69:96:72:be:b0:fd:9f: 22:cb:fe:d3:e4:16:ac:b7:b9:e6:5b:ce:ea:97:0b: 14:3d:bf:0d:31:09:3b:35:72:e7:8a:0c:93:c3:d9: 8e:b4:7f:99:36:76:aa:00:11:1a:c5:83:c4:94:5e: ed:7f:8b:93:64:fb:84:4d:1f:77:9b:0a:62:1b:d7: 71:4d:6b:c8:83:94:89:83:7b:46:b2:33:cd:0f:c8: dd:a1:87:ab:47:cd:f3:34:ea:aa:e6:b8:47:62:ad: 59:3f:93:a0:ae:a7:17:66:e6:81:e3:a4:ec:4c:ad: 90:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:25:FF:02:40:E2:C9:23:64:FE:B7:A5:09:2E:A3:12:4A:F0:7E:BF X509v3 Authority Key Identifier: keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:2e:c6:ef:2e:d2:23:a4:b6:12:1d:74:f5:5a:d3:8a:e9:70: e0:f9:17:56:6d:9a:5e:48:9f:77:da:ff:4e:e8:2c:0f:df:c4: 29:f7:51:d8:13:a4:b8:a3:07:c8:75:37:09:0e:09:e3:55:5a: e2:15:04:c7:fc:97:c8:50:74:fb:e4:a8:fa:ec:1c:8f:79:71: 18:6d:ae:1f:ce:ae:d5:97:27:f7:27:dd:44:11:f1:96:b4:90: 3e:5b:b7:c6:3e:2c:41:5b:ff:9c:20:5a:37:89:a6:4a:c8:49: e1:72:cf:f6:1b:90:b8:32:5b:ca:d0:2e:2b:7c:f2:7a:e4:c9: 19:6b:c7:69:fa:25:34:8b:d0:f1:76:d6:fb:e5:aa:12:f1:fc: 01:b4:62:5c:5e:91:24:d6:9f:10:9b:66:2a:c6:31:e0:13:f1: 05:ad:3b:2c:b5:c3:a7:62:b9:52:2e:80:7c:5d:c5:ac:d2:df: 1a:fe:8d:6e:e0:43:10:9e:ff:1b:64:38:f8:22:e2:bc:07:7b: 90:78:4d:7d:ec:44:ae:88:59:e1:e0:6e:85:8f:89:04:76:fc: 25:c6:cf:da:c4:1f:ca:99:d7:49:82:02:a6:e1:0b:8b:99:6b: fe:f0:00:40:97:85:6b:61:2a:ef:e7:f4:9b:bc:82:8b:46:eb: e4:7e:aa:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBobddYFiW05XQOpuFMUv2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj MmRjY2IwHhcNMjYwMjA5MDkwMDQzWhcNMjYwMjEwMDkwMDQzWjAzMTEwLwYDVQQD EygwZjI1ZmYwMjQwZTJjOTIzNjRmZWI3YTUwOTJlYTMxMjRhZjA3ZWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma+yQRKrFrzVloVtZEdUnh1Bjr1j Lkls5k9yc+8ifMB2GEUWN8rDvBtmixaL7RDoGhRdA48SRCi0H7Tr99I+XuCQZiOA qMMr1j1kedsP9HzwJCibkRIJHOUr+RdTqzpfT3sx2qZ4jBF5KUdhrGWkqdZ4YPqE f08gCWXGM3xqjNHXW4fM2Pmrx2ejrzzyhWmWcr6w/Z8iy/7T5Bast7nmW87qlwsU Pb8NMQk7NXLnigyTw9mOtH+ZNnaqABEaxYPElF7tf4uTZPuETR93mwpiG9dxTWvI g5SJg3tGsjPND8jdoYerR83zNOqq5rhHYq1ZP5OgrqcXZuaB46TsTK2Q1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA8l/wJA4skjZP63pQkuoxJK8H6/MB8GA1UdIwQY MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi7G7y7S I6S2Eh109VrTiulw4PkXVm2aXkifd9r/TugsD9/EKfdR2BOkuKMHyHU3CQ4J41Va 4hUEx/yXyFB0++So+uwcj3lxGG2uH86u1Zcn9yfdRBHxlrSQPlu3xj4sQVv/nCBa N4mmSshJ4XLP9huQuDJbytAuK3zyeuTJGWvHafolNIvQ8XbW++WqEvH8AbRiXF6R JNafEJtmKsYx4BPxBa07LLXDp2K5Ui6AfF3FrNLfGv6NbuBDEJ7/G2Q4+CLivAd7 kHhNfexErohZ4eBuhY+JBHb8JcbP2sQfypnXSYICpuELi5lr/vAAQJeFa2Eq7+f0 m7yCi0br5H6q3Q== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:43 2026 by rpki-client