This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft File: CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft (raw, json) Hash identifier: qaQB4pr1sVpt2EzdrEIgBCxwz/SdXzszsqFCrOKKcKc= Subject key identifier: 89:A4:20:C7:B1:61:EA:FF:1E:BE:A3:7D:C5:51:C1:E1:B4:D6:F4:0D Authority key identifier: 09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D Certificate issuer: /CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Certificate serial: 019C43222A3A234F144488DD0CADF95822EB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft Manifest number: 05AF Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl (hash: qKvfxRWcSbtqbr7uk2p6k6wdMOTlIDYFNOhpPsxjxd0=) 2: eraAzr1vH5BHOwJlejSOLyg-c-E.asa (hash: 7D3E2z+0C8CMB9yIrMCzDvKLKq3x7w4pWDJCCkzPsBw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:2a:3a:23:4f:14:44:88:dd:0c:ad:f9:58:22:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09c62b5bd87182e8073cb6cc0d79feee7bdb990d Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=89a420c7b161eaff1ebea37dc551c1e1b4d6f40d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3e:6b:f1:e7:ff:8f:b7:57:93:b9:6e:9e:9b: 56:6f:10:d5:cc:86:6c:62:72:b6:78:be:f0:94:d9: a1:2a:1c:a6:8e:2b:44:a7:e2:4a:80:cf:b8:2d:32: c0:b1:24:ed:04:17:1f:04:0e:c8:db:3a:34:04:7d: 57:f4:54:f4:70:4b:b9:63:e2:fd:39:72:69:6d:73: 09:87:cd:49:94:ba:ec:26:cc:31:62:a1:ca:2b:c2: ff:cb:ab:d7:3f:79:df:4b:a8:63:e3:81:6c:eb:19: 39:41:b2:2f:b3:eb:13:e5:57:b9:80:50:f8:b5:36: 28:d4:11:b5:ea:ff:de:2b:c8:ed:3d:9f:bc:b4:a8: a1:f1:e1:9f:f5:29:22:ca:be:6b:ec:82:bc:87:a3: aa:b4:f4:ac:3d:21:be:7f:63:77:0a:ed:64:90:4f: b8:45:aa:5f:f2:f5:0e:4e:66:42:23:05:08:b0:c1: e3:29:14:7c:58:a1:f0:e9:21:c3:51:54:46:e8:d2: 78:08:b5:f1:45:15:18:8b:f2:41:f3:2e:a2:1e:dc: 0d:f1:d1:64:c3:8d:2d:75:1b:4b:9a:71:bf:1e:cc: 01:c3:be:13:e2:1d:b8:a7:bf:ba:b4:ba:20:13:66: d4:b3:e3:a8:82:a8:9a:30:86:5a:09:b6:1c:ae:58: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A4:20:C7:B1:61:EA:FF:1E:BE:A3:7D:C5:51:C1:E1:B4:D6:F4:0D X509v3 Authority Key Identifier: keyid:09:C6:2B:5B:D8:71:82:E8:07:3C:B6:CC:0D:79:FE:EE:7B:DB:99:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CcYrW9hxgugHPLbMDXn-7nvbmQ0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/276b36-ef4c-4182-a4ba-adae551e5a3b/1/CcYrW9hxgugHPLbMDXn-7nvbmQ0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:32:69:35:1e:df:e4:33:c5:4a:4a:34:9f:19:82:40:e6:43: 44:1f:17:86:be:7d:29:41:ed:14:9e:9b:1f:ac:36:26:97:9a: 42:43:db:d9:0b:1d:4d:08:5c:e1:0e:7d:79:e7:e7:24:f4:e6: de:2a:70:ff:6d:35:36:fc:2a:9e:ab:63:94:d4:d4:e1:fd:62: cb:dc:55:a6:b1:06:de:b8:db:cb:61:7d:08:36:1b:39:46:dd: 6a:f2:4b:2f:e4:df:82:aa:bf:b7:cb:f6:75:ad:d5:58:78:89: 9d:84:ed:58:6f:5a:e9:29:a9:08:ce:90:e0:07:62:29:96:06: db:f5:ab:1a:44:12:32:c2:fa:af:63:da:6b:f2:37:37:b7:51: f6:c1:7f:20:00:f2:67:11:4c:b7:a7:83:05:eb:66:2b:e3:28: 38:58:28:da:9c:b8:95:c4:40:76:cc:c5:ac:3d:95:ed:fc:4c: 32:c6:8d:da:6f:7f:a1:68:d8:89:a4:d0:4c:90:b5:12:81:d5: 9d:e5:c1:02:5f:62:14:59:2a:45:20:96:f1:5e:20:94:d4:2f: b6:aa:5b:77:df:48:01:71:2e:30:5c:74:1f:6a:66:b1:ec:f6: b1:bb:28:67:c8:62:6d:1e:b2:3d:dc:9b:10:de:0f:00:18:5d: 7c:3a:2e:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIio6I08URIjdDK35WCLrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YzYyYjViZDg3MTgyZTgwNzNjYjZjYzBkNzlmZWVlN2Jk Yjk5MGQwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD Eyg4OWE0MjBjN2IxNjFlYWZmMWViZWEzN2RjNTUxYzFlMWI0ZDZmNDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0z5r8ef/j7dXk7lunptWbxDVzIZs YnK2eL7wlNmhKhymjitEp+JKgM+4LTLAsSTtBBcfBA7I2zo0BH1X9FT0cEu5Y+L9 OXJpbXMJh81JlLrsJswxYqHKK8L/y6vXP3nfS6hj44Fs6xk5QbIvs+sT5Ve5gFD4 tTYo1BG16v/eK8jtPZ+8tKih8eGf9Skiyr5r7IK8h6OqtPSsPSG+f2N3Cu1kkE+4 Rapf8vUOTmZCIwUIsMHjKRR8WKHw6SHDUVRG6NJ4CLXxRRUYi/JB8y6iHtwN8dFk w40tdRtLmnG/HswBw74T4h24p7+6tLogE2bUs+OogqiaMIZaCbYcrlh70QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImkIMexYer/Hr6jfcVRweG01vQNMB8GA1UdIwQY MBaAFAnGK1vYcYLoBzy2zA15/u5725kNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEt YWRhZTU1MWU1YTNiLzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS8yNzZiMzYtZWY0Yy00MTgyLWE0YmEtYWRhZTU1MWU1YTNi LzEvQ2NZclc5aHhndWdIUExiTURYbi03bnZibVEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXTJpNR7f 5DPFSko0nxmCQOZDRB8Xhr59KUHtFJ6bH6w2JpeaQkPb2QsdTQhc4Q59eefnJPTm 3ipw/201NvwqnqtjlNTU4f1iy9xVprEG3rjby2F9CDYbOUbdavJLL+Tfgqq/t8v2 da3VWHiJnYTtWG9a6SmpCM6Q4AdiKZYG2/WrGkQSMsL6r2Paa/I3N7dR9sF/IADy ZxFMt6eDBetmK+MoOFgo2py4lcRAdszFrD2V7fxMMsaN2m9/oWjYiaTQTJC1EoHV neXBAl9iFFkqRSCW8V4glNQvtqpbd99IAXEuMFx0H2pmsez2sbsoZ8hibR6yPdyb EN4PABhdfDoupQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:51 2026 by rpki-client