This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json) Hash identifier: 3A5ecdNZIK/jtrr6t5F/Mh1G3E9sPcKwi8KQ7d0SwK4= Subject key identifier: 61:EE:71:0E:37:6E:76:52:DE:8C:BE:10:A4:33:53:96:24:60:81:42 Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Certificate serial: 019C413439971AA4FCAF1C548C050033AB39 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 07:01:07 +0000 Manifest this update: Mon 09 Feb 2026 07:01:07 +0000 Manifest next update: Tue 10 Feb 2026 07:01:07 +0000 Files and hashes: 1: KUAPJbdgB7bFTMpgIeI0m91ZeU0.roa (hash: QW3H184Zc0T/jdKDA9ND/ZljCo0WBhJC9aqERQkXP2w=) 2: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: Or/1DPza60BITRzKO3i582IZ+smbKr7faAlPlZEm254=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:39:97:1a:a4:fc:af:1c:54:8c:05:00:33:ab:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba Validity Not Before: Feb 9 07:01:07 2026 GMT Not After : Feb 10 07:01:07 2026 GMT Subject: CN=61ee710e376e7652de8cbe10a433539624608142 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:94:d6:fe:e6:d3:f3:49:be:67:e6:ba:1b:06: a6:db:97:c3:a1:c9:03:51:bf:1a:64:0a:14:5d:aa: f1:ab:69:fb:ce:de:c8:0a:28:71:94:20:d7:5f:1c: 5e:d6:ab:55:06:d0:39:09:78:62:35:4a:bd:ee:89: 7c:fc:e8:81:46:d2:06:9f:70:03:74:84:4e:ea:b8: 8e:6b:0f:de:b6:68:b5:d4:e7:60:4d:7e:ef:08:c9: 2b:8b:70:04:3a:25:9b:8f:a4:a9:42:73:65:ff:ba: 04:13:1d:02:86:96:2f:46:a0:61:39:8e:73:ac:bb: d3:eb:49:76:26:28:35:9d:66:bd:48:80:fc:d0:c6: 19:4a:31:f1:8b:ae:a2:06:8b:a2:83:e7:80:e0:e7: b4:4c:cd:a8:2a:c1:ea:ac:c1:ba:36:98:e7:05:d6: 04:7d:a5:40:62:37:32:b8:e1:1d:6b:50:db:4c:70: 6a:d6:70:18:a7:69:b2:de:2d:10:67:f4:56:cc:ab: 3d:da:ff:4f:fb:06:0e:d8:31:50:0c:8a:2c:88:a5: 7d:ec:b3:cd:a2:8a:76:38:c7:03:8a:96:aa:86:9c: 8e:89:2c:f0:cb:43:44:4d:50:9f:7e:3d:39:55:d4: ab:ea:64:56:37:6d:d2:3a:c7:67:78:fb:63:3e:c9: b4:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:EE:71:0E:37:6E:76:52:DE:8C:BE:10:A4:33:53:96:24:60:81:42 X509v3 Authority Key Identifier: keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:fe:2e:d1:5d:9d:d8:2c:4c:57:0d:db:15:d6:a4:1e:8e:4b: 5c:60:76:29:5a:d3:ce:0f:24:7b:eb:d9:26:25:b3:39:ed:1b: 5e:33:ff:71:df:2a:8a:83:97:9f:11:f6:00:c1:3f:ab:21:ad: 3c:05:df:4a:1b:35:78:15:cf:7d:2a:e8:8b:5e:31:c8:84:6b: 39:6c:6a:b5:f6:68:d2:b9:44:1d:65:f2:95:0b:05:84:b5:5d: c3:3a:66:cb:2b:61:52:a0:b1:1b:17:a1:ab:51:07:87:da:8f: 30:e3:58:50:81:88:b9:60:b3:85:dc:4f:39:21:c8:fe:cc:a8: f4:29:f8:2d:19:ba:50:fb:b8:9a:27:f5:34:48:23:1e:2d:19: 0e:8c:a5:eb:ba:67:af:cd:cc:bc:bd:56:4d:16:ed:9b:cc:f9: 53:70:3d:bd:92:00:a2:28:ca:ac:95:b6:39:5f:38:82:bb:69: 8a:6b:01:ec:42:4a:35:96:c2:52:20:dc:00:ff:45:b6:81:11: eb:10:3a:6b:35:dd:0d:d5:8a:4d:80:73:e7:84:f6:5f:d8:5a: 58:e1:28:06:7c:59:4d:be:97:b6:17:7b:c8:3a:87:15:51:d4: 85:44:c1:34:db:62:84:06:fa:03:30:92:2a:bf:c6:09:ea:56: 3b:aa:42:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNDmXGqT8rxxUjAUAM6s5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjZDg0NzNlM2Q5ZWQ0MjNjNDFlN2E4NThmNGMwZjBmYjgw YzA3YmEwHhcNMjYwMjA5MDcwMTA3WhcNMjYwMjEwMDcwMTA3WjAzMTEwLwYDVQQD Eyg2MWVlNzEwZTM3NmU3NjUyZGU4Y2JlMTBhNDMzNTM5NjI0NjA4MTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65TW/ubT80m+Z+a6Gwam25fDockD Ub8aZAoUXarxq2n7zt7ICihxlCDXXxxe1qtVBtA5CXhiNUq97ol8/OiBRtIGn3AD dIRO6riOaw/etmi11OdgTX7vCMkri3AEOiWbj6SpQnNl/7oEEx0ChpYvRqBhOY5z rLvT60l2Jig1nWa9SID80MYZSjHxi66iBouig+eA4Oe0TM2oKsHqrMG6NpjnBdYE faVAYjcyuOEda1DbTHBq1nAYp2my3i0QZ/RWzKs92v9P+wYO2DFQDIosiKV97LPN oop2OMcDipaqhpyOiSzwy0NETVCffj05VdSr6mRWN23SOsdnePtjPsm0XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHucQ43bnZS3oy+EKQzU5YkYIFCMB8GA1UdIwQY MBaAFHzYRz49ntQjxB56hY9MDw+4DAe6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODct OTc1NzY5NGQyOTFkLzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84ZWZjMmUtOWQ5Ni00MWEwLWIyODctOTc1NzY5NGQyOTFk LzEvZk5oSFBqMmUxQ1BFSG5xRmowd1BEN2dNQjdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA/4u0V2d 2CxMVw3bFdakHo5LXGB2KVrTzg8ke+vZJiWzOe0bXjP/cd8qioOXnxH2AME/qyGt PAXfShs1eBXPfSroi14xyIRrOWxqtfZo0rlEHWXylQsFhLVdwzpmyythUqCxGxeh q1EHh9qPMONYUIGIuWCzhdxPOSHI/syo9Cn4LRm6UPu4mif1NEgjHi0ZDoyl67pn r83MvL1WTRbtm8z5U3A9vZIAoijKrJW2OV84grtpimsB7EJKNZbCUiDcAP9FtoER 6xA6azXdDdWKTYBz54T2X9haWOEoBnxZTb6Xthd7yDqHFVHUhUTBNNtihAb6AzCS Kr/GCepWO6pCqg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:53 2026 by rpki-client