This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft File: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft (raw, json) Hash identifier: d3yM7gFe4n2/im5uuuGhWgURe1XkBH6JE1Gq197+Doo= Subject key identifier: 02:45:21:8C:86:0E:B3:0D:F6:0F:82:8C:E6:97:C7:47:46:8F:9D:17 Authority key identifier: 7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 Certificate issuer: /CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Certificate serial: 019C420F2244562AB578A13CA644646E7A98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 11:00:13 +0000 Manifest this update: Mon 09 Feb 2026 11:00:13 +0000 Manifest next update: Tue 10 Feb 2026 11:00:13 +0000 Files and hashes: 1: DYNx75j8JSgdvr4IB6THRRzY3xI.roa (hash: /G//i1C4nsVHJZpr6stdki+vQ0e+Fk9uaOZBReccIPM=) 2: fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl (hash: m4/V+9ibwlaLSxtM8Cy3S/KdrOznDZ3WEebnTSqApt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:22:44:56:2a:b5:78:a1:3c:a6:44:64:6e:7a:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7cb3a34e3dd0a71d4d9eaf358eb43d8b68e5e0e8 Validity Not Before: Feb 9 11:00:13 2026 GMT Not After : Feb 10 11:00:13 2026 GMT Subject: CN=0245218c860eb30df60f828ce697c747468f9d17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:5c:d4:e9:5c:4e:b4:1b:3c:b5:0d:89:41:ee: 43:86:62:43:77:f5:90:c0:03:c1:4e:52:92:32:cb: 40:fa:23:19:bf:b8:1d:dd:0a:5f:c9:b9:b0:0b:e9: cf:3d:3a:30:e8:df:2a:2f:51:2f:1d:ed:bf:22:c8: 14:78:f9:97:74:85:c9:27:27:fb:9c:a7:a2:11:6d: 85:87:22:de:f1:16:08:b7:97:ed:c4:7f:d7:e7:47: f6:15:89:dd:ce:5b:26:33:cd:a7:2e:f4:d1:81:43: f2:0d:8b:df:96:73:90:02:72:c3:6a:7a:5e:03:8d: 31:5f:2d:b2:d6:62:42:21:8d:1f:5c:c8:6b:42:e2: 81:fe:b5:13:34:b3:26:90:11:d0:18:70:6a:c5:d5: 9a:d4:a8:45:ad:a9:88:71:b7:cd:e9:ca:9d:55:6e: 60:86:b8:a5:2c:6b:40:24:b8:da:8e:7c:51:87:d5: 86:7e:42:6c:ba:e6:8e:85:e2:f7:e0:11:62:f3:fb: 53:ae:03:eb:c5:d9:2b:62:00:d9:56:52:ba:87:37: d3:89:79:3c:d7:b1:7d:14:c4:c6:6c:7c:e2:bb:c5: 7a:f3:fc:7c:ea:68:b8:63:25:79:53:32:6a:48:0d: c5:fc:7e:41:03:77:bc:12:d2:9a:25:9d:87:3c:d5: 0b:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:45:21:8C:86:0E:B3:0D:F6:0F:82:8C:E6:97:C7:47:46:8F:9D:17 X509v3 Authority Key Identifier: keyid:7C:B3:A3:4E:3D:D0:A7:1D:4D:9E:AF:35:8E:B4:3D:8B:68:E5:E0:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/2f5dc5-65eb-4c08-ac4d-f46b5d57a685/1/fLOjTj3Qpx1Nnq81jrQ9i2jl4Og.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:cd:a4:cc:bc:47:18:c2:e7:77:28:c2:fd:1b:ea:89:b4:1d: ff:f7:8c:d3:f9:aa:2b:69:6a:3f:17:b9:59:9e:f0:27:3e:88: f1:58:4e:6a:30:c1:49:87:b4:d3:86:1c:35:74:93:96:6b:80: 38:5d:89:cf:a3:dd:0a:4b:d0:cf:5b:42:bd:08:76:2c:1e:02: 64:3e:40:5f:98:f8:32:08:70:78:61:8e:c4:3c:55:3b:17:c6: 6c:bd:c0:47:c4:ba:62:1f:f1:21:ac:ec:b8:c2:f4:88:22:0f: 9e:1f:82:10:29:3f:21:c9:4c:5d:ce:d8:c6:7b:f3:bb:16:30: 5f:9d:c1:35:2c:3d:6b:94:15:07:ff:f9:20:2e:91:9e:cc:ee: a4:12:1f:83:e3:dc:3b:2e:ee:67:5b:80:01:5a:a4:15:99:5c: 56:0c:26:8b:f7:fa:05:32:12:eb:a6:ab:f6:a8:ae:e8:c4:af: 16:1c:08:d4:67:a1:97:c3:a8:e4:b7:73:3a:69:2d:64:ca:7b: 2b:cb:c3:85:fe:ff:13:fa:fe:ce:bd:a6:7b:36:1d:ad:0b:49: 79:97:58:47:a5:9a:eb:28:f0:6c:74:01:ee:04:8e:5e:df:87: b2:95:41:cd:42:9d:fe:d4:82:83:e2:f2:08:99:48:c0:34:88: 99:e2:77:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyJEViq1eKE8pkRkbnqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYjNhMzRlM2RkMGE3MWQ0ZDllYWYzNThlYjQzZDhiNjhl NWUwZTgwHhcNMjYwMjA5MTEwMDEzWhcNMjYwMjEwMTEwMDEzWjAzMTEwLwYDVQQD EygwMjQ1MjE4Yzg2MGViMzBkZjYwZjgyOGNlNjk3Yzc0NzQ2OGY5ZDE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm1zU6VxOtBs8tQ2JQe5DhmJDd/WQ wAPBTlKSMstA+iMZv7gd3QpfybmwC+nPPTow6N8qL1EvHe2/IsgUePmXdIXJJyf7 nKeiEW2FhyLe8RYIt5ftxH/X50f2FYndzlsmM82nLvTRgUPyDYvflnOQAnLDanpe A40xXy2y1mJCIY0fXMhrQuKB/rUTNLMmkBHQGHBqxdWa1KhFramIcbfN6cqdVW5g hrilLGtAJLjajnxRh9WGfkJsuuaOheL34BFi8/tTrgPrxdkrYgDZVlK6hzfTiXk8 17F9FMTGbHziu8V68/x86mi4YyV5UzJqSA3F/H5BA3e8EtKaJZ2HPNULzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJFIYyGDrMN9g+CjOaXx0dGj50XMB8GA1UdIwQY MBaAFHyzo0490KcdTZ6vNY60PYto5eDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQt ZjQ2YjVkNTdhNjg1LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS8yZjVkYzUtNjVlYi00YzA4LWFjNGQtZjQ2YjVkNTdhNjg1 LzEvZkxPalRqM1FweDFObnE4MWpyUTlpMmpsNE9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ82kzLxH GMLndyjC/RvqibQd//eM0/mqK2lqPxe5WZ7wJz6I8VhOajDBSYe004YcNXSTlmuA OF2Jz6PdCkvQz1tCvQh2LB4CZD5AX5j4MghweGGOxDxVOxfGbL3AR8S6Yh/xIazs uML0iCIPnh+CECk/IclMXc7YxnvzuxYwX53BNSw9a5QVB//5IC6RnszupBIfg+Pc Oy7uZ1uAAVqkFZlcVgwmi/f6BTIS66ar9qiu6MSvFhwI1Gehl8Oo5LdzOmktZMp7 K8vDhf7/E/r+zr2mezYdrQtJeZdYR6Wa6yjwbHQB7gSOXt+HspVBzUKd/tSCg+Ly CJlIwDSImeJ3jQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:58 2026 by rpki-client