This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft File: CyclPIFckcFKYL-iRVHPSdNeR1Q.mft (raw, json) Hash identifier: 8pJRHfffHR8x72Qt7NVXAOSstlY4DIVwfSQsHcJyGo0= Subject key identifier: 33:B7:D7:B9:F4:62:B1:66:50:C2:0E:69:BC:BB:DA:92:11:B1:F4:F3 Authority key identifier: 0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54 Certificate issuer: /CN=0b27253c815c91c14a60bfa24551cf49d35e4754 Certificate serial: 019C432224CE80367CD783D4CD0B2B07B499 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: CyclPIFckcFKYL-iRVHPSdNeR1Q.crl (hash: kRaBPyhFLfLByA4wM4r3ugYgpv4Yqujxf5qgzhOvMI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:24:ce:80:36:7c:d7:83:d4:cd:0b:2b:07:b4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b27253c815c91c14a60bfa24551cf49d35e4754 Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=33b7d7b9f462b16650c20e69bcbbda9211b1f4f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:c7:59:32:56:67:a8:35:cc:46:25:56:7e: 59:4d:30:47:62:59:0c:7a:f8:76:92:5c:89:61:05: c4:a4:41:f3:c2:c5:53:67:56:10:4b:c3:ee:bf:e1: 30:65:85:4f:9c:8d:25:4e:c3:14:12:62:7a:ec:78: 1a:e8:e7:b0:4b:8f:84:a7:12:7b:ee:c4:f4:ff:c8: 9c:66:9c:34:77:9a:57:77:ea:85:9a:a0:c9:70:0a: 30:a2:80:5b:4f:d5:9f:33:dd:81:8d:80:e5:aa:20: 6d:47:54:9b:d5:f2:67:8e:97:13:d7:c8:38:00:ce: 91:0f:d4:0e:b1:02:d7:36:58:7f:94:b0:5f:d4:cf: be:35:da:b1:39:e9:95:c6:4d:41:26:79:46:e2:8a: 7d:01:e9:2c:b1:d3:0e:8e:22:74:4f:b9:39:2a:ca: 13:cb:91:2f:50:15:81:ba:f0:23:37:9b:32:04:99: 6d:6c:07:bc:de:84:5d:a5:b1:60:98:4a:4d:fe:bd: d9:61:2d:b2:15:d8:ce:e4:e8:8f:a7:14:22:1d:c9: bd:e4:c7:45:52:71:82:e7:24:1f:11:e9:5b:20:eb: 67:a0:48:31:41:fe:44:f2:e1:5b:e0:fe:c7:c9:a0: 3c:d4:c3:1e:cf:51:d5:3e:46:dc:18:26:5a:70:00: b4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B7:D7:B9:F4:62:B1:66:50:C2:0E:69:BC:BB:DA:92:11:B1:F4:F3 X509v3 Authority Key Identifier: keyid:0B:27:25:3C:81:5C:91:C1:4A:60:BF:A2:45:51:CF:49:D3:5E:47:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CyclPIFckcFKYL-iRVHPSdNeR1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c6d1de-a23f-4b12-8e06-efc7bd2f5ffc/1/CyclPIFckcFKYL-iRVHPSdNeR1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d8:16:6f:1d:45:4c:69:77:a4:50:c3:3b:f1:81:cb:e3:04: 6f:62:37:67:71:aa:70:9a:23:b3:fb:21:8f:55:c2:72:14:8e: 22:4f:ff:2c:69:e6:da:9b:61:d2:b9:22:65:45:06:55:cd:ce: 21:c7:c5:15:4f:94:89:53:ec:74:f2:64:c4:8a:f3:a8:4e:57: 15:84:16:e3:d6:de:e0:ff:14:55:88:74:ad:bc:cb:41:6a:ff: aa:65:7f:3c:4f:56:0e:0f:ac:1c:cb:99:59:77:52:13:30:26: dd:61:4c:71:45:94:f9:cf:88:47:9c:13:35:f9:03:59:22:15: 32:cb:55:59:5a:17:f3:c0:19:4e:e4:5f:5a:25:1e:c4:07:6f: ba:39:8d:63:2e:db:f3:5a:da:85:c3:3e:50:98:51:f5:ee:2b: b9:57:cb:40:30:a8:4f:f0:53:b8:38:8c:3e:95:2f:13:7a:c6: 34:4d:b1:db:0b:80:ba:ba:09:98:3e:31:50:25:82:4d:41:50: ff:79:39:a0:ec:4b:40:77:03:ed:4e:4d:56:bf:6e:47:ee:a4: dc:e5:28:cb:f6:d6:37:d8:74:92:41:17:5a:11:79:97:f9:f8: 6c:04:44:0a:69:cd:ad:1d:e5:1c:81:90:4c:9d:b7:c7:92:ce: 5b:f3:ae:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiTOgDZ814PUzQsrB7SZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMjcyNTNjODE1YzkxYzE0YTYwYmZhMjQ1NTFjZjQ5ZDM1 ZTQ3NTQwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD EygzM2I3ZDdiOWY0NjJiMTY2NTBjMjBlNjliY2JiZGE5MjExYjFmNGYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ePHWTJWZ6g1zEYlVn5ZTTBHYlkM evh2klyJYQXEpEHzwsVTZ1YQS8Puv+EwZYVPnI0lTsMUEmJ67Hga6OewS4+EpxJ7 7sT0/8icZpw0d5pXd+qFmqDJcAowooBbT9WfM92BjYDlqiBtR1Sb1fJnjpcT18g4 AM6RD9QOsQLXNlh/lLBf1M++NdqxOemVxk1BJnlG4op9AekssdMOjiJ0T7k5KsoT y5EvUBWBuvAjN5syBJltbAe83oRdpbFgmEpN/r3ZYS2yFdjO5OiPpxQiHcm95MdF UnGC5yQfEelbIOtnoEgxQf5E8uFb4P7HyaA81MMez1HVPkbcGCZacAC0BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO317n0YrFmUMIOaby72pIRsfTzMB8GA1UdIwQY MBaAFAsnJTyBXJHBSmC/okVRz0nTXkdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYt ZWZjN2JkMmY1ZmZjLzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9jNmQxZGUtYTIzZi00YjEyLThlMDYtZWZjN2JkMmY1ZmZj LzEvQ3ljbFBJRmNrY0ZLWUwtaVJWSFBTZE5lUjFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWtgWbx1F TGl3pFDDO/GBy+MEb2I3Z3GqcJojs/shj1XCchSOIk//LGnm2pth0rkiZUUGVc3O IcfFFU+UiVPsdPJkxIrzqE5XFYQW49be4P8UVYh0rbzLQWr/qmV/PE9WDg+sHMuZ WXdSEzAm3WFMcUWU+c+IR5wTNfkDWSIVMstVWVoX88AZTuRfWiUexAdvujmNYy7b 81rahcM+UJhR9e4ruVfLQDCoT/BTuDiMPpUvE3rGNE2x2wuAuroJmD4xUCWCTUFQ /3k5oOxLQHcD7U5NVr9uR+6k3OUoy/bWN9h0kkEXWhF5l/n4bARECmnNrR3lHIGQ TJ23x5LOW/OuUA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:49 2026 by rpki-client