This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft File: Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft (raw, json) Hash identifier: vOqZ84HJ5fP8osgWsoGSqhRRzBaEBCua/8gLNxZhEPc= Subject key identifier: ED:4B:70:3F:3C:6C:7C:92:51:01:E4:06:40:27:A0:24:BD:0C:D4:7C Authority key identifier: 09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D Certificate issuer: /CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d Certificate serial: 019C427DD600B6A6BDF82FFA65A326442237 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 13:01:08 +0000 Manifest this update: Mon 09 Feb 2026 13:01:08 +0000 Manifest next update: Tue 10 Feb 2026 13:01:08 +0000 Files and hashes: 1: Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl (hash: HPnskdxOLCoNKaXBUBEav5Wtc5/i/mr4XDwZUyX9EIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d6:00:b6:a6:bd:f8:2f:fa:65:a3:26:44:22:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09fd8a35b50b6b65a10c043973996e96b0f5ad5d Validity Not Before: Feb 9 13:01:08 2026 GMT Not After : Feb 10 13:01:08 2026 GMT Subject: CN=ed4b703f3c6c7c925101e4064027a024bd0cd47c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ea:d6:96:2d:19:40:d6:8e:b9:b0:2d:ae:e3: ef:c0:88:c5:cc:2b:9d:d8:f1:c8:28:18:4a:33:eb: e5:a9:94:24:d0:21:b1:91:39:98:49:e5:0d:ae:ea: bc:34:b6:71:a6:70:09:3b:10:4d:31:54:de:99:93: 37:9b:ba:b5:5e:a2:86:5c:47:58:2b:ca:c0:2b:20: 79:73:28:91:55:5d:4e:f3:d6:1c:dd:54:ab:fd:6b: 08:b9:d6:c8:cd:4a:b4:f5:63:ce:2e:23:da:d8:4e: 38:e6:6c:db:50:92:8b:c5:8a:ad:df:19:d8:6f:40: c7:fe:86:39:ae:ac:15:44:29:48:c6:58:2c:a7:62: 50:eb:ce:c9:b3:d1:1a:9d:e5:7d:7a:67:e0:fa:1d: 78:b5:de:b6:35:49:94:54:49:5d:a8:86:eb:ec:72: 81:5d:bb:a7:c3:01:f3:09:dc:6d:fb:01:a2:a5:51: 51:ba:5a:73:24:8e:25:b2:43:d9:5c:8f:11:e2:e9: cc:25:c3:61:16:cb:67:cc:b2:d9:db:84:32:f2:9e: b9:e1:ad:1f:cf:f8:6b:8e:61:d4:05:22:ce:02:72: 14:07:12:ce:98:e0:f7:b8:cb:e7:50:9d:06:b9:f5: 2d:66:bb:38:f0:da:c8:94:14:48:e1:fc:72:82:72: 01:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:4B:70:3F:3C:6C:7C:92:51:01:E4:06:40:27:A0:24:BD:0C:D4:7C X509v3 Authority Key Identifier: keyid:09:FD:8A:35:B5:0B:6B:65:A1:0C:04:39:73:99:6E:96:B0:F5:AD:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cf2KNbULa2WhDAQ5c5lulrD1rV0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e14d91-ef0f-4edc-afe5-6a9fbc5dc6c8/1/Cf2KNbULa2WhDAQ5c5lulrD1rV0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:be:c3:29:3e:de:2f:93:2f:fb:21:24:c2:ed:dd:f8:4c:12: c7:0e:e1:6e:ee:f3:9e:bf:37:3e:39:5c:cc:1e:13:31:b6:55: 05:e1:1d:f4:bd:20:d7:50:6f:5c:8e:4b:81:23:e0:af:8f:37: b6:e8:94:16:63:0f:d4:56:18:63:c5:20:d5:92:bf:e2:e9:02: 9b:cb:e7:88:ff:a2:3f:54:73:ff:2f:6f:a3:2a:55:6b:a6:30: 54:7b:2f:57:a6:5a:30:14:8d:54:94:79:1b:b6:6f:b5:a0:e3: 24:e2:15:03:51:f4:eb:5b:a3:76:45:d5:e5:6e:77:c6:0e:2e: ff:6e:51:31:8a:24:b2:70:6a:ef:6b:f3:be:42:95:50:d8:7c: 29:84:fc:ed:71:65:81:0b:ea:18:71:39:a1:00:7b:b9:bc:2b: 85:fb:bd:a2:ae:f8:88:ff:ac:10:97:e2:40:1d:ef:ba:df:6b: 8f:87:2a:c5:11:b8:7e:c1:a8:ec:18:fd:c4:64:df:ac:23:96: 86:b7:fc:69:b0:0e:76:f0:68:a4:90:81:1a:f4:d0:50:ec:0b: 36:82:62:d5:50:bc:7c:db:8c:a5:82:cc:43:66:f1:5a:15:18: 99:b3:fe:d7:a3:4c:6d:ad:36:0a:e3:08:16:c7:a0:61:8b:ba: a7:04:f0:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdYAtqa9+C/6ZaMmRCI3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZmQ4YTM1YjUwYjZiNjVhMTBjMDQzOTczOTk2ZTk2YjBm NWFkNWQwHhcNMjYwMjA5MTMwMTA4WhcNMjYwMjEwMTMwMTA4WjAzMTEwLwYDVQQD EyhlZDRiNzAzZjNjNmM3YzkyNTEwMWU0MDY0MDI3YTAyNGJkMGNkNDdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+rWli0ZQNaOubAtruPvwIjFzCud 2PHIKBhKM+vlqZQk0CGxkTmYSeUNruq8NLZxpnAJOxBNMVTemZM3m7q1XqKGXEdY K8rAKyB5cyiRVV1O89Yc3VSr/WsIudbIzUq09WPOLiPa2E445mzbUJKLxYqt3xnY b0DH/oY5rqwVRClIxlgsp2JQ687Js9EaneV9emfg+h14td62NUmUVEldqIbr7HKB XbunwwHzCdxt+wGipVFRulpzJI4lskPZXI8R4unMJcNhFstnzLLZ24Qy8p654a0f z/hrjmHUBSLOAnIUBxLOmOD3uMvnUJ0GufUtZrs48NrIlBRI4fxygnIBmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1LcD88bHySUQHkBkAnoCS9DNR8MB8GA1UdIwQY MBaAFAn9ijW1C2tloQwEOXOZbpaw9a1dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUt NmE5ZmJjNWRjNmM4LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9lMTRkOTEtZWYwZi00ZWRjLWFmZTUtNmE5ZmJjNWRjNmM4 LzEvQ2YyS05iVUxhMldoREFRNWM1bHVsckQxclYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL7DKT7e L5Mv+yEkwu3d+EwSxw7hbu7znr83PjlczB4TMbZVBeEd9L0g11BvXI5LgSPgr483 tuiUFmMP1FYYY8Ug1ZK/4ukCm8vniP+iP1Rz/y9voypVa6YwVHsvV6ZaMBSNVJR5 G7ZvtaDjJOIVA1H061ujdkXV5W53xg4u/25RMYoksnBq72vzvkKVUNh8KYT87XFl gQvqGHE5oQB7ubwrhfu9oq74iP+sEJfiQB3vut9rj4cqxRG4fsGo7Bj9xGTfrCOW hrf8abAOdvBopJCBGvTQUOwLNoJi1VC8fNuMpYLMQ2bxWhUYmbP+16NMba02CuMI FsegYYu6pwTwcw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:41 2026 by rpki-client