This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft File: ccWe2rmO-wzTdnYPQGnkxouL2iA.mft (raw, json) Hash identifier: lA5wAcPSixxnwekqvlsWlXOcajhh+6e301N6JEyprOo= Subject key identifier: 7E:3E:3B:54:D7:01:C1:48:F5:31:D3:B0:91:87:BC:5B:08:8F:05:3F Authority key identifier: 71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 Certificate issuer: /CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Certificate serial: 019C4321D576BDA110B08EB71919AD7F3DF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft Manifest number: 0960 Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: ccWe2rmO-wzTdnYPQGnkxouL2iA.crl (hash: zzbh9WoEM1RkewkBrupmMsxRy6GYbWrWn4apu+tGz5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d5:76:bd:a1:10:b0:8e:b7:19:19:ad:7f:3d:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71c59edab98efb0cd376760f4069e4c68b8bda20 Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=7e3e3b54d701c148f531d3b09187bc5b088f053f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:2a:e8:c6:0a:d5:17:0e:d6:59:68:32:ed:72: 93:9a:aa:8c:a9:c4:97:bc:24:4d:4d:44:a3:8a:56: 97:38:c3:bf:cf:1e:7f:30:2c:03:6f:5e:84:ae:78: b2:f6:5d:4d:b2:01:ba:b0:69:3d:b5:c4:87:29:c8: 44:20:a3:c1:18:07:73:22:a4:5e:15:23:4e:df:c0: 31:2a:c5:12:19:fe:54:2c:02:18:8e:21:bc:90:f5: bf:15:00:27:dc:66:d9:1f:59:d8:8c:1f:37:4d:18: 10:ac:1f:ba:2f:f7:cb:cd:e7:54:b3:5d:58:a8:7d: 26:b6:95:c4:0c:16:e9:c1:90:69:d0:73:83:bd:5c: 60:d8:fb:6a:ab:30:77:5f:51:37:57:92:c7:16:60: 10:4a:54:d7:da:fd:08:c3:1c:46:87:31:4b:98:d0: 96:9d:47:88:0f:a7:03:1d:cf:a0:ac:14:b6:ea:95: 95:01:7b:5e:ec:c1:e5:cb:b2:07:77:44:37:5b:1e: 62:bc:7c:2f:c7:b0:3a:89:78:c0:30:39:4b:be:b5: 78:5e:be:ea:ea:8a:4b:5c:a5:f1:87:95:8f:14:04: 1c:cd:92:78:23:c6:01:63:d8:90:8b:fa:35:4d:ce: 3b:8e:97:73:c2:8f:c4:61:a0:44:c7:c4:cf:78:12: 92:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3E:3B:54:D7:01:C1:48:F5:31:D3:B0:91:87:BC:5B:08:8F:05:3F X509v3 Authority Key Identifier: keyid:71:C5:9E:DA:B9:8E:FB:0C:D3:76:76:0F:40:69:E4:C6:8B:8B:DA:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ccWe2rmO-wzTdnYPQGnkxouL2iA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/ff58dc-4971-4132-ba17-77ecbbb4f7d8/1/ccWe2rmO-wzTdnYPQGnkxouL2iA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:8c:fa:03:42:89:d8:74:0e:dd:ae:df:c8:8b:d7:92:41:f7: 77:ef:7b:05:dc:36:47:40:d3:df:5b:2a:4c:b4:2b:a7:88:96: a0:67:00:dd:70:59:49:ab:00:5d:75:d9:dc:04:a6:62:93:48: a5:cf:cc:b4:51:48:ea:1b:bb:15:a3:9a:73:0e:34:6e:f8:c3: fc:10:06:9f:58:5f:03:83:ea:2b:42:ed:6c:79:f6:1a:d6:3d: c8:19:d1:e5:5c:31:0b:76:ac:19:00:f7:91:c9:61:b8:be:3e: 5e:0c:9b:44:e8:e2:1e:6b:75:46:4e:9e:f9:f3:6c:c0:3d:43: 0e:27:bc:f4:20:57:2e:87:9e:bb:da:15:72:b0:00:96:53:54: 01:7b:e8:a7:0c:c8:42:c0:0d:c4:66:29:ec:7e:a4:e4:df:b3: 62:06:eb:30:db:7a:d8:8d:5d:33:11:de:a5:a0:fd:cf:27:c8: 68:bf:88:fa:f8:40:ab:14:df:c5:4f:ea:e4:3b:12:aa:f3:52: 8e:3d:76:6b:bd:b0:2d:45:2b:ce:59:d7:0e:4c:ed:e6:b4:e6: f1:b3:82:f5:1f:78:68:f8:f4:ad:71:a2:69:63:7a:8a:c9:d2: 16:22:60:57:b4:de:2a:0c:7d:4e:cc:50:c3:60:78:11:68:25: 7b:ed:a2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdV2vaEQsI63GRmtfz33MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYzU5ZWRhYjk4ZWZiMGNkMzc2NzYwZjQwNjllNGM2OGI4 YmRhMjAwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD Eyg3ZTNlM2I1NGQ3MDFjMTQ4ZjUzMWQzYjA5MTg3YmM1YjA4OGYwNTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3SroxgrVFw7WWWgy7XKTmqqMqcSX vCRNTUSjilaXOMO/zx5/MCwDb16Erniy9l1NsgG6sGk9tcSHKchEIKPBGAdzIqRe FSNO38AxKsUSGf5ULAIYjiG8kPW/FQAn3GbZH1nYjB83TRgQrB+6L/fLzedUs11Y qH0mtpXEDBbpwZBp0HODvVxg2PtqqzB3X1E3V5LHFmAQSlTX2v0IwxxGhzFLmNCW nUeID6cDHc+grBS26pWVAXte7MHly7IHd0Q3Wx5ivHwvx7A6iXjAMDlLvrV4Xr7q 6opLXKXxh5WPFAQczZJ4I8YBY9iQi/o1Tc47jpdzwo/EYaBEx8TPeBKShwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4+O1TXAcFI9THTsJGHvFsIjwU/MB8GA1UdIwQY MBaAFHHFntq5jvsM03Z2D0Bp5MaLi9ogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTct NzdlY2JiYjRmN2Q4LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9mZjU4ZGMtNDk3MS00MTMyLWJhMTctNzdlY2JiYjRmN2Q4 LzEvY2NXZTJybU8td3pUZG5ZUFFHbmt4b3VMMmlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4z6A0KJ 2HQO3a7fyIvXkkH3d+97Bdw2R0DT31sqTLQrp4iWoGcA3XBZSasAXXXZ3ASmYpNI pc/MtFFI6hu7FaOacw40bvjD/BAGn1hfA4PqK0LtbHn2GtY9yBnR5VwxC3asGQD3 kclhuL4+XgybROjiHmt1Rk6e+fNswD1DDie89CBXLoeeu9oVcrAAllNUAXvopwzI QsANxGYp7H6k5N+zYgbrMNt62I1dMxHepaD9zyfIaL+I+vhAqxTfxU/q5DsSqvNS jj12a72wLUUrzlnXDkzt5rTm8bOC9R94aPj0rXGiaWN6isnSFiJgV7TeKgx9TsxQ w2B4EWgle+2iow== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:09 2026 by rpki-client