This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft File: fQ9TBOHZKWjpheNo6E833TZw71w.mft (raw, json) Hash identifier: Vg7N7Q/bng42k0VHtE2slPdGbj1FHTOv2tdJXUG6NCo= Subject key identifier: 7E:4C:5C:05:D7:15:AD:5A:A4:2F:F2:8E:15:E5:FC:73:DF:93:3F:74 Authority key identifier: 7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C Certificate issuer: /CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c Certificate serial: 019C4322968B70069E0441C4658179943F88 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft Manifest number: 0F54 Signing time: Mon 09 Feb 2026 16:01:05 +0000 Manifest this update: Mon 09 Feb 2026 16:01:05 +0000 Manifest next update: Tue 10 Feb 2026 16:01:05 +0000 Files and hashes: 1: fQ9TBOHZKWjpheNo6E833TZw71w.crl (hash: 2DJNWGHzG8HTDvxAx3/Z02gAFDG51Z8Q1D2Ml19HIfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:96:8b:70:06:9e:04:41:c4:65:81:79:94:3f:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d0f5304e1d92968e985e368e84f37dd3670ef5c Validity Not Before: Feb 9 16:01:05 2026 GMT Not After : Feb 10 16:01:05 2026 GMT Subject: CN=7e4c5c05d715ad5aa42ff28e15e5fc73df933f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:fa:df:f9:3f:db:0a:f7:d5:1f:74:0f:92:a1: 15:9b:25:26:b5:32:99:7f:7a:a8:88:05:a6:b1:97: a7:d0:7e:a0:27:1e:f0:95:5f:90:58:37:8e:3c:e3: 0e:8d:33:bc:80:de:55:5b:9f:74:5f:97:34:52:a2: 4e:b1:c4:9c:4e:c3:af:31:4e:19:13:5d:f7:6d:43: 0b:af:a7:9b:24:ea:8f:de:f1:36:67:41:d6:b0:7c: 9a:e9:7a:19:c3:46:38:d2:c8:9a:88:56:a7:fb:02: ec:da:3e:23:ff:93:31:d9:d7:13:61:4d:6b:95:2f: 81:4f:67:be:23:a0:1f:e0:fe:a1:c8:90:7b:d1:3f: 94:d6:ea:d2:a5:ea:07:65:4e:53:df:bb:cc:3b:10: 9f:f7:e8:c1:65:6e:2b:11:a9:92:5c:c9:b0:b0:3b: a3:24:9b:20:1a:5a:e0:31:c7:ca:0e:ed:5f:11:ee: 3e:4e:17:8d:6e:6d:d8:d3:67:e8:b4:81:9f:39:9c: fb:cb:d3:e5:de:16:85:e7:6a:fd:13:db:93:87:86: 3a:df:ef:f9:97:31:96:86:48:b6:a0:f2:d7:a2:9c: 84:ba:07:f4:33:e6:6d:82:fa:bb:64:50:13:94:2f: f6:4b:06:5b:7f:1e:5c:bb:9c:fb:dd:1b:fd:1a:17: 0a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:4C:5C:05:D7:15:AD:5A:A4:2F:F2:8E:15:E5:FC:73:DF:93:3F:74 X509v3 Authority Key Identifier: keyid:7D:0F:53:04:E1:D9:29:68:E9:85:E3:68:E8:4F:37:DD:36:70:EF:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQ9TBOHZKWjpheNo6E833TZw71w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e462e7-2004-4428-bb35-0e810b7ddebc/1/fQ9TBOHZKWjpheNo6E833TZw71w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:d6:f9:bb:4b:ba:45:d8:19:9d:8c:68:14:58:86:4d:3e:ed: b2:e4:b1:56:66:d8:f1:ac:bd:a0:89:7a:53:a3:c0:2e:57:34: c8:73:ea:a7:9d:b4:bb:7e:4e:d1:47:68:91:de:94:1c:cd:38: 62:da:5a:86:35:23:65:69:66:31:54:b1:b0:cc:f9:20:dd:f1: f4:8a:8a:97:4e:3f:6b:b3:89:3a:5c:04:b6:75:fb:4e:b0:89: 4a:e0:8b:93:2d:5f:6b:15:49:c2:a8:75:32:10:63:c4:20:c6: 1b:c7:b1:f6:52:ce:7a:5b:cf:8f:cb:58:a4:05:ef:5f:fb:79: 62:f6:43:2a:71:95:a7:f2:4d:6c:2a:85:c3:e3:5e:e6:67:69: 26:c2:aa:7c:28:9a:a2:7f:87:7f:61:7e:85:21:88:6b:45:16: a0:ef:25:66:ed:cd:d7:0e:aa:82:03:c3:ce:53:58:c9:ba:bf: 6a:86:12:7f:f2:7c:1a:41:bc:2e:67:e1:84:8c:f1:c1:f8:e0: a1:2b:9a:a4:33:2e:7b:a3:70:a4:23:a3:34:11:38:34:b6:c4: 53:82:31:93:f0:fe:2a:a3:bc:d2:73:aa:ab:89:c1:7d:c0:34: 4b:89:86:41:b9:08:c4:03:fa:3a:0b:f3:5b:09:78:9c:e7:4a: b1:8e:1a:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpaLcAaeBEHEZYF5lD+IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMGY1MzA0ZTFkOTI5NjhlOTg1ZTM2OGU4NGYzN2RkMzY3 MGVmNWMwHhcNMjYwMjA5MTYwMTA1WhcNMjYwMjEwMTYwMTA1WjAzMTEwLwYDVQQD Eyg3ZTRjNWMwNWQ3MTVhZDVhYTQyZmYyOGUxNWU1ZmM3M2RmOTMzZjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+frf+T/bCvfVH3QPkqEVmyUmtTKZ f3qoiAWmsZen0H6gJx7wlV+QWDeOPOMOjTO8gN5VW590X5c0UqJOscScTsOvMU4Z E133bUMLr6ebJOqP3vE2Z0HWsHya6XoZw0Y40siaiFan+wLs2j4j/5Mx2dcTYU1r lS+BT2e+I6Af4P6hyJB70T+U1urSpeoHZU5T37vMOxCf9+jBZW4rEamSXMmwsDuj JJsgGlrgMcfKDu1fEe4+TheNbm3Y02fotIGfOZz7y9Pl3haF52r9E9uTh4Y63+/5 lzGWhki2oPLXopyEugf0M+Ztgvq7ZFATlC/2SwZbfx5cu5z73Rv9GhcK9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH5MXAXXFa1apC/yjhXl/HPfkz90MB8GA1UdIwQY MBaAFH0PUwTh2Slo6YXjaOhPN902cO9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lNDYyZTctMjAwNC00NDI4LWJiMzUt MGU4MTBiN2RkZWJjLzEvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9lNDYyZTctMjAwNC00NDI4LWJiMzUtMGU4MTBiN2RkZWJj LzEvZlE5VEJPSFpLV2pwaGVObzZFODMzVFp3NzF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi9b5u0u6 RdgZnYxoFFiGTT7tsuSxVmbY8ay9oIl6U6PALlc0yHPqp520u35O0Udokd6UHM04 YtpahjUjZWlmMVSxsMz5IN3x9IqKl04/a7OJOlwEtnX7TrCJSuCLky1faxVJwqh1 MhBjxCDGG8ex9lLOelvPj8tYpAXvX/t5YvZDKnGVp/JNbCqFw+Ne5mdpJsKqfCia on+Hf2F+hSGIa0UWoO8lZu3N1w6qggPDzlNYybq/aoYSf/J8GkG8LmfhhIzxwfjg oSuapDMue6NwpCOjNBE4NLbEU4Ixk/D+KqO80nOqq4nBfcA0S4mGQbkIxAP6Ogvz Wwl4nOdKsY4alQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:53 2026 by rpki-client