This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft File: f1HfHfTohn5B5ef5Lef50foMFU0.mft (raw, json) Hash identifier: Vf8TQH1Phe5EJqYhx7uANEc+9oYcWlSEpZ3cCoeM8dQ= Subject key identifier: 04:9F:45:B4:50:E7:7B:22:5A:7B:3C:C0:31:19:94:4E:89:73:53:F8 Authority key identifier: 7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D Certificate issuer: /CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d Certificate serial: 019C439004E1BCA76AA9D2C945FBB19F2D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft Manifest number: 0CF5 Signing time: Mon 09 Feb 2026 18:00:37 +0000 Manifest this update: Mon 09 Feb 2026 18:00:37 +0000 Manifest next update: Tue 10 Feb 2026 18:00:37 +0000 Files and hashes: 1: f1HfHfTohn5B5ef5Lef50foMFU0.crl (hash: bs3+EhHTp8lhp+p4HiYPEL8OLKdnUd/+NNGCNW+RVRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:04:e1:bc:a7:6a:a9:d2:c9:45:fb:b1:9f:2d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f51df1df4e8867e41e5e7f92de7f9d1fa0c154d Validity Not Before: Feb 9 18:00:37 2026 GMT Not After : Feb 10 18:00:37 2026 GMT Subject: CN=049f45b450e77b225a7b3cc03119944e897353f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:13:00:0d:1c:ad:5a:50:12:15:c1:23:27:d0: 0c:2f:13:7a:b6:fe:89:a7:c6:0d:41:79:a6:1d:48: 08:3a:e9:23:57:0d:b8:f2:34:71:7b:98:86:bc:ec: b2:7e:23:67:ed:64:4f:71:ed:e6:20:cd:04:a6:a3: 2a:aa:3e:a4:80:ec:58:9e:15:53:a4:1f:d6:67:5b: 83:c2:e3:bf:85:3f:94:37:7c:bc:eb:15:0e:4c:d5: 7d:ff:40:a5:80:9c:2c:c5:c2:21:17:dc:87:2d:fb: 67:7d:17:56:a5:d6:cb:bc:4e:91:d7:d8:be:4c:70: 77:e2:ae:79:c6:f2:f1:1f:15:f7:f7:13:0c:fd:ff: bf:06:47:35:34:d5:ae:61:91:c3:91:b1:95:b5:44: d3:1d:18:71:1c:bc:b5:19:90:f7:ea:63:8d:2c:94: bd:ed:40:32:8b:cd:4e:cf:39:29:3b:9c:ad:fb:a3: e7:dc:36:25:76:39:fd:7e:00:f7:8b:ba:a3:3a:d8: f0:cc:2a:a0:bb:2f:4d:c7:ef:69:a1:87:57:f5:3a: 06:d9:45:e9:77:a7:9a:b0:59:8a:95:90:4a:77:3b: 69:41:7f:07:c5:2c:b9:a4:2a:af:89:dd:0a:30:60: 12:62:46:fa:f8:b7:fd:69:a9:c6:37:91:ce:94:69: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:9F:45:B4:50:E7:7B:22:5A:7B:3C:C0:31:19:94:4E:89:73:53:F8 X509v3 Authority Key Identifier: keyid:7F:51:DF:1D:F4:E8:86:7E:41:E5:E7:F9:2D:E7:F9:D1:FA:0C:15:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1HfHfTohn5B5ef5Lef50foMFU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5e731f-528b-4e02-ad68-6d9035af1535/1/f1HfHfTohn5B5ef5Lef50foMFU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a4:bf:b4:44:f2:89:eb:73:b1:6c:ae:64:88:eb:f4:7e:cb: c2:f5:aa:f0:30:8e:ad:23:5c:16:15:04:d1:15:f4:9f:04:94: ef:d0:d6:92:1a:9f:e9:e1:f2:ac:7c:78:eb:42:f9:48:84:d7: f7:d4:c2:1a:52:88:11:2b:36:1a:3b:74:1c:76:91:86:3b:ff: 3a:86:a4:54:92:de:71:bc:e1:69:4b:15:6c:62:68:83:2b:3a: c3:e2:f1:58:c3:51:40:70:c8:5c:fe:ef:0b:ae:28:04:78:48: 13:d2:df:62:7c:d9:60:5c:e4:7c:be:e3:dd:56:55:d9:f2:6a: e1:8c:dc:24:b1:88:d6:d1:67:2c:4d:af:e2:1b:97:00:9d:20: c1:00:b9:8c:d9:74:aa:cb:9a:78:99:bb:66:72:31:e5:04:f8: 83:95:2d:03:69:f4:e4:03:4f:c4:57:2d:37:af:cd:f3:64:17: 9e:18:ec:7d:a9:a6:0a:25:fc:82:bf:1f:57:a2:2b:84:bc:af: df:83:3d:ea:46:88:e7:8e:b0:4f:ff:e6:e2:17:d7:ac:f1:05: ba:69:c4:5e:8d:7a:2b:cf:91:2b:64:7b:ba:78:2e:8e:ee:75: 4e:ff:6d:25:b3:56:4c:63:fa:14:17:71:2b:36:fe:75:0a:b3: a1:a8:85:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkAThvKdqqdLJRfuxny1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNTFkZjFkZjRlODg2N2U0MWU1ZTdmOTJkZTdmOWQxZmEw YzE1NGQwHhcNMjYwMjA5MTgwMDM3WhcNMjYwMjEwMTgwMDM3WjAzMTEwLwYDVQQD EygwNDlmNDViNDUwZTc3YjIyNWE3YjNjYzAzMTE5OTQ0ZTg5NzM1M2Y4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyBMADRytWlASFcEjJ9AMLxN6tv6J p8YNQXmmHUgIOukjVw248jRxe5iGvOyyfiNn7WRPce3mIM0EpqMqqj6kgOxYnhVT pB/WZ1uDwuO/hT+UN3y86xUOTNV9/0ClgJwsxcIhF9yHLftnfRdWpdbLvE6R19i+ THB34q55xvLxHxX39xMM/f+/Bkc1NNWuYZHDkbGVtUTTHRhxHLy1GZD36mONLJS9 7UAyi81OzzkpO5yt+6Pn3DYldjn9fgD3i7qjOtjwzCqguy9Nx+9poYdX9ToG2UXp d6easFmKlZBKdztpQX8HxSy5pCqvid0KMGASYkb6+Lf9aanGN5HOlGnJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFASfRbRQ53siWns8wDEZlE6Jc1P4MB8GA1UdIwQY MBaAFH9R3x306IZ+QeXn+S3n+dH6DBVNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjFIZkhmVG9objVCNWVmNUxlZjUwZm9NRlUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81ZTczMWYtNTI4Yi00ZTAyLWFkNjgt NmQ5MDM1YWYxNTM1LzEvZjFIZkhmVG9objVCNWVmNUxlZjUwZm9NRlUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS81ZTczMWYtNTI4Yi00ZTAyLWFkNjgtNmQ5MDM1YWYxNTM1 LzEvZjFIZkhmVG9objVCNWVmNUxlZjUwZm9NRlUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6S/tETy ietzsWyuZIjr9H7LwvWq8DCOrSNcFhUE0RX0nwSU79DWkhqf6eHyrHx460L5SITX 99TCGlKIESs2Gjt0HHaRhjv/OoakVJLecbzhaUsVbGJogys6w+LxWMNRQHDIXP7v C64oBHhIE9LfYnzZYFzkfL7j3VZV2fJq4YzcJLGI1tFnLE2v4huXAJ0gwQC5jNl0 qsuaeJm7ZnIx5QT4g5UtA2n05ANPxFctN6/N82QXnhjsfammCiX8gr8fV6IrhLyv 34M96kaI546wT//m4hfXrPEFumnEXo16K8+RK2R7unguju51Tv9tJbNWTGP6FBdx Kzb+dQqzoaiF9Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:13 2026 by rpki-client