This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft File: CDFarVm0oWGmP5Jb1xT1bH3sao4.mft (raw, json) Hash identifier: GQlGWU107m+ygRAYmeh20oLZuaVzFTYa9M6fA2KrOTI= Subject key identifier: 8E:02:02:FC:3A:BF:6D:A0:12:90:ED:A0:F7:7D:80:CC:83:22:C9:A0 Authority key identifier: 08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E Certificate issuer: /CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Certificate serial: 019C4390ADA350A5A6199B72770FB8FFBE8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft Manifest number: 0B65 Signing time: Mon 09 Feb 2026 18:01:20 +0000 Manifest this update: Mon 09 Feb 2026 18:01:20 +0000 Manifest next update: Tue 10 Feb 2026 18:01:20 +0000 Files and hashes: 1: 9r8hihkCY6P-WgE0G7g7sQCAq1c.roa (hash: u7x99CP8SiAZnm1Q+EhDsJ8Hk+kyHLRusYFaCGr6e8k=) 2: CDFarVm0oWGmP5Jb1xT1bH3sao4.crl (hash: 8ilMq6/+H2QQwA+Dz75fY52zcOxRBxI25TP7O1xLAuc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:ad:a3:50:a5:a6:19:9b:72:77:0f:b8:ff:be:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08315aad59b4a161a63f925bd714f56c7dec6a8e Validity Not Before: Feb 9 18:01:20 2026 GMT Not After : Feb 10 18:01:20 2026 GMT Subject: CN=8e0202fc3abf6da01290eda0f77d80cc8322c9a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:6e:86:5b:98:fa:57:c6:69:d1:b1:d5:a9:f9: 71:e2:19:cd:34:b0:29:23:e0:ec:b2:a7:b9:62:79: 6a:bf:f2:23:d2:3d:29:33:e6:ca:08:a8:39:b2:c9: 1f:0b:a9:7f:ae:d3:b9:cd:91:8b:77:ae:80:fd:91: 96:d1:63:ac:a7:4e:9b:1b:a9:96:51:a8:0a:8a:e3: c4:13:89:7c:d2:05:f3:65:5b:25:1d:13:9b:1d:05: 71:47:cb:ca:42:ac:d6:ee:1a:2a:c7:c7:50:b0:a2: a3:36:21:8f:c7:aa:91:fe:e7:51:99:e3:97:ea:a0: 4c:ca:b2:2d:49:70:4b:41:bb:cf:db:54:ef:f7:98: 12:4b:12:a1:40:4b:3e:5f:dc:31:78:ac:31:e9:63: c5:5e:cc:7d:b4:f0:43:58:83:96:00:6d:a3:88:5e: 80:d8:31:af:5a:f9:1e:59:bc:c0:f6:5b:1c:73:5a: 26:93:6b:5f:7b:c0:7b:d4:1d:06:45:bb:9a:0d:4c: 7f:f2:a1:88:88:70:68:98:96:64:c7:11:9c:9b:e5: ef:95:01:af:09:86:6e:94:63:66:80:c1:26:e8:f1: 54:3f:65:3d:0a:87:aa:78:00:db:b5:16:2c:06:26: 68:67:3a:7f:96:2f:c4:bc:9d:7c:95:3c:6d:f6:52: c4:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:02:02:FC:3A:BF:6D:A0:12:90:ED:A0:F7:7D:80:CC:83:22:C9:A0 X509v3 Authority Key Identifier: keyid:08:31:5A:AD:59:B4:A1:61:A6:3F:92:5B:D7:14:F5:6C:7D:EC:6A:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDFarVm0oWGmP5Jb1xT1bH3sao4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5f113c-ffcb-498c-b04e-91de9f1dec2d/1/CDFarVm0oWGmP5Jb1xT1bH3sao4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:a7:e8:26:57:b2:34:c0:7f:73:2f:be:57:b1:b6:9a:e6:d9: 2b:4f:de:55:20:5f:f5:e2:bf:a6:18:99:c0:0f:ae:0f:05:39: 3b:1b:7e:1a:cf:e7:bb:19:e2:7a:62:3b:43:83:67:6e:ee:dc: bd:84:d0:3a:5c:8c:af:09:e8:2b:ef:34:ca:85:bc:2e:60:e3: 0e:3c:53:fc:0c:f7:e2:ec:7d:0e:27:08:d1:b1:8f:6c:29:94: 18:24:87:70:c5:df:eb:0a:cf:4d:1a:9e:7f:ec:dd:f9:81:e6: be:27:d8:27:0f:2f:29:7c:39:b7:23:74:30:f9:59:58:db:c9: 0e:8e:1b:ee:3f:8c:1d:98:fb:f4:98:e2:5e:60:18:a4:20:e8: 90:d4:99:0e:e0:dc:75:d6:02:0e:f5:4e:f5:14:67:97:fd:d1: ad:d1:c4:82:80:e9:a7:19:8a:49:6f:14:5e:5d:f5:ce:ca:52: e0:dc:38:7d:fb:57:33:ad:53:cc:8e:a3:54:b3:77:60:95:2c: 83:53:17:36:86:84:4d:79:08:ca:9c:d0:5a:09:00:62:64:84: 23:7d:d0:32:5d:34:fd:4c:5c:64:98:89:5e:a2:56:f1:27:0b: 24:e6:d3:7f:12:5d:f2:b5:f5:47:59:c4:c0:88:73:5b:b4:e8: 17:f0:2c:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkK2jUKWmGZtydw+4/76PMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzE1YWFkNTliNGExNjFhNjNmOTI1YmQ3MTRmNTZjN2Rl YzZhOGUwHhcNMjYwMjA5MTgwMTIwWhcNMjYwMjEwMTgwMTIwWjAzMTEwLwYDVQQD Eyg4ZTAyMDJmYzNhYmY2ZGEwMTI5MGVkYTBmNzdkODBjYzgzMjJjOWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr26GW5j6V8Zp0bHVqflx4hnNNLAp I+Dssqe5Ynlqv/Ij0j0pM+bKCKg5sskfC6l/rtO5zZGLd66A/ZGW0WOsp06bG6mW UagKiuPEE4l80gXzZVslHRObHQVxR8vKQqzW7hoqx8dQsKKjNiGPx6qR/udRmeOX 6qBMyrItSXBLQbvP21Tv95gSSxKhQEs+X9wxeKwx6WPFXsx9tPBDWIOWAG2jiF6A 2DGvWvkeWbzA9lscc1omk2tfe8B71B0GRbuaDUx/8qGIiHBomJZkxxGcm+XvlQGv CYZulGNmgMEm6PFUP2U9CoeqeADbtRYsBiZoZzp/li/EvJ18lTxt9lLEqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI4CAvw6v22gEpDtoPd9gMyDIsmgMB8GA1UdIwQY MBaAFAgxWq1ZtKFhpj+SW9cU9Wx97GqOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUt OTFkZTlmMWRlYzJkLzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYS81ZjExM2MtZmZjYi00OThjLWIwNGUtOTFkZTlmMWRlYzJk LzEvQ0RGYXJWbTBvV0dtUDVKYjF4VDFiSDNzYW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASKfoJley NMB/cy++V7G2mubZK0/eVSBf9eK/phiZwA+uDwU5Oxt+Gs/nuxniemI7Q4Nnbu7c vYTQOlyMrwnoK+80yoW8LmDjDjxT/Az34ux9DicI0bGPbCmUGCSHcMXf6wrPTRqe f+zd+YHmvifYJw8vKXw5tyN0MPlZWNvJDo4b7j+MHZj79JjiXmAYpCDokNSZDuDc ddYCDvVO9RRnl/3RrdHEgoDppxmKSW8UXl31zspS4Nw4fftXM61TzI6jVLN3YJUs g1MXNoaETXkIypzQWgkAYmSEI33QMl00/UxcZJiJXqJW8ScLJObTfxJd8rX1R1nE wIhzW7ToF/AswA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:14 2026 by rpki-client