This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft File: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft (raw, json) Hash identifier: LnMd7F/tqgYhc1e2z7kBof4PjLnSWHZz32yGaDTjMdw= Subject key identifier: F6:A3:FB:2E:98:AE:25:4F:01:59:CD:09:3D:60:DB:85:C9:5A:63:08 Authority key identifier: 09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 Certificate issuer: /CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Certificate serial: 019C427E09A2F570B239E637E79DA996AD16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:22 +0000 Manifest this update: Mon 09 Feb 2026 13:01:22 +0000 Manifest next update: Tue 10 Feb 2026 13:01:22 +0000 Files and hashes: 1: Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl (hash: mT3JslfoPWXq06FGIScKmIQl8adR/ZFZW3wRjepEo3o=) 2: xv5c1mFhSjq1vRC5B4Wfa0iwwGU.roa (hash: kFtVIQJpe7RDteAXMJvX2bgQnLead8SNj73JLAlGIMw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:09:a2:f5:70:b2:39:e6:37:e7:9d:a9:96:ad:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09bc3647e1b2124e96b88f736edd5ef8cad88fe3 Validity Not Before: Feb 9 13:01:22 2026 GMT Not After : Feb 10 13:01:22 2026 GMT Subject: CN=f6a3fb2e98ae254f0159cd093d60db85c95a6308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:68:90:f3:55:ea:ea:2e:be:da:34:3c:89:3a: ae:38:85:3e:db:ed:3e:b1:af:fe:d1:b7:81:f3:85: 60:60:2a:da:c4:e1:4e:f9:82:c7:72:b5:60:3f:0d: 6c:eb:1b:d0:8b:05:4d:95:f1:3b:88:55:09:28:e3: 80:b6:50:b3:6b:f7:6d:74:a9:1f:50:5d:21:67:a3: 79:fe:b9:8c:0e:a6:9c:5e:99:dd:ed:ab:ab:fd:2d: a9:e7:26:8d:5b:22:2e:22:be:5e:24:54:98:57:7e: be:7a:37:54:ad:0e:e4:a0:d4:d7:e4:ea:d8:55:b8: 8f:b2:97:d1:ed:27:26:91:d0:2a:6a:4b:00:a3:2d: 8b:e6:2a:d8:c5:81:b6:49:2f:50:85:4f:a2:b5:92: 24:0f:2a:8a:59:ae:a1:cf:b2:81:00:dc:57:2d:68: 82:83:a0:26:81:a3:8f:15:7e:7a:1b:c1:12:72:82: a3:48:93:c2:f1:90:cb:b7:7f:69:2f:c0:13:05:42: 56:43:a2:f4:dd:7d:5a:46:1f:ab:aa:d5:e9:f9:a5: 4b:b2:3f:52:1e:6d:eb:05:28:79:81:fd:e2:25:f8: 77:4c:03:1f:2c:f3:53:21:5b:3e:8b:bb:d6:81:6a: 75:5b:b8:5f:20:ed:2c:2b:ba:5a:cf:2d:e1:f9:c1: ca:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:A3:FB:2E:98:AE:25:4F:01:59:CD:09:3D:60:DB:85:C9:5A:63:08 X509v3 Authority Key Identifier: keyid:09:BC:36:47:E1:B2:12:4E:96:B8:8F:73:6E:DD:5E:F8:CA:D8:8F:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/b9db98-c027-4e75-bbf9-5359509047bc/1/Cbw2R-GyEk6WuI9zbt1e-MrYj-M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:5b:9e:8a:94:9a:2e:2c:69:5f:34:dc:d9:b3:39:59:1c:cc: 4e:fd:04:72:09:ee:f9:52:0a:64:44:7e:ae:ac:6e:1a:f1:84: 98:3a:8a:14:48:8f:aa:77:b2:e6:a2:d5:6f:53:c5:5c:ad:4b: be:15:bf:26:71:0d:c5:be:a8:cf:d0:01:56:71:04:63:e7:2b: 74:8e:a6:cf:ca:f5:91:fa:55:be:7c:f8:44:91:36:31:04:6e: 72:c3:e3:8e:f7:f0:8f:4f:07:fc:fb:fa:dd:f0:58:40:a4:4a: 11:f2:2e:49:c2:51:12:98:c1:fd:ba:0c:3d:27:f1:b6:67:dd: e2:e4:c1:a4:5f:6b:f0:f6:4a:ab:32:bc:8a:01:69:bf:7d:63: 2d:26:c1:8e:5f:0d:6b:44:ca:b6:fb:40:ea:a3:84:59:87:87: 03:8f:a5:74:c6:3c:79:b1:c4:5c:e0:71:b6:60:2e:c7:59:36: c1:81:18:ef:f0:68:ae:08:5f:b5:18:9c:f9:3a:db:72:af:96: 92:9d:f6:34:f5:6b:7b:1c:46:d5:5d:5f:0a:cc:3d:b1:ae:17: 19:c8:2e:4d:f7:3c:1b:57:b2:c0:7b:55:79:9a:62:52:22:e6: 7e:dd:c0:e3:e5:9c:73:95:72:c0:b4:0a:52:96:98:11:5e:ee: 1b:bd:76:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgmi9XCyOeY3552plq0WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YmMzNjQ3ZTFiMjEyNGU5NmI4OGY3MzZlZGQ1ZWY4Y2Fk ODhmZTMwHhcNMjYwMjA5MTMwMTIyWhcNMjYwMjEwMTMwMTIyWjAzMTEwLwYDVQQD EyhmNmEzZmIyZTk4YWUyNTRmMDE1OWNkMDkzZDYwZGI4NWM5NWE2MzA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGiQ81Xq6i6+2jQ8iTquOIU+2+0+ sa/+0beB84VgYCraxOFO+YLHcrVgPw1s6xvQiwVNlfE7iFUJKOOAtlCza/dtdKkf UF0hZ6N5/rmMDqacXpnd7aur/S2p5yaNWyIuIr5eJFSYV36+ejdUrQ7koNTX5OrY VbiPspfR7ScmkdAqaksAoy2L5irYxYG2SS9QhU+itZIkDyqKWa6hz7KBANxXLWiC g6AmgaOPFX56G8EScoKjSJPC8ZDLt39pL8ATBUJWQ6L03X1aRh+rqtXp+aVLsj9S Hm3rBSh5gf3iJfh3TAMfLPNTIVs+i7vWgWp1W7hfIO0sK7pazy3h+cHK3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPaj+y6YriVPAVnNCT1g24XJWmMIMB8GA1UdIwQY MBaAFAm8NkfhshJOlriPc27dXvjK2I/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjkt NTM1OTUwOTA0N2JjLzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9iOWRiOTgtYzAyNy00ZTc1LWJiZjktNTM1OTUwOTA0N2Jj LzEvQ2J3MlItR3lFazZXdUk5emJ0MWUtTXJZai1NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAblueipSa LixpXzTc2bM5WRzMTv0Ecgnu+VIKZER+rqxuGvGEmDqKFEiPqney5qLVb1PFXK1L vhW/JnENxb6oz9ABVnEEY+crdI6mz8r1kfpVvnz4RJE2MQRucsPjjvfwj08H/Pv6 3fBYQKRKEfIuScJREpjB/boMPSfxtmfd4uTBpF9r8PZKqzK8igFpv31jLSbBjl8N a0TKtvtA6qOEWYeHA4+ldMY8ebHEXOBxtmAux1k2wYEY7/BorghftRic+Trbcq+W kp32NPVrexxG1V1fCsw9sa4XGcguTfc8G1eywHtVeZpiUiLmft3A4+Wcc5VywLQK UpaYEV7uG712cA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:57 2026 by rpki-client