This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft File: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft (raw, json) Hash identifier: MgbMZ+sElB3rDFTZ9ezou6VOJIcgxdLfxhZhKFfsQ4M= Subject key identifier: 0D:45:44:3E:03:97:06:4C:3F:80:52:31:D6:01:60:46:E4:EE:50:0A Authority key identifier: 08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 Certificate issuer: /CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Certificate serial: 019C42B3F32B72AFE82E7138B2467F14A681 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft Manifest number: 14AA Signing time: Mon 09 Feb 2026 14:00:15 +0000 Manifest this update: Mon 09 Feb 2026 14:00:15 +0000 Manifest next update: Tue 10 Feb 2026 14:00:15 +0000 Files and hashes: 1: CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl (hash: Bdosl1p/fumaGObYYa08ekMhjYo0N09Q+V5BA2lvh1E=) 2: plItPB8o1hNBs5V2UiiNbaUAUrA.roa (hash: xXIgUcms6entSFE/XBQ7IsjRqcQ1JB92BORcc15C1mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f3:2b:72:af:e8:2e:71:38:b2:46:7f:14:a6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08b0f12f115ad40f2c2b4aad454d2e43611c9a06 Validity Not Before: Feb 9 14:00:15 2026 GMT Not After : Feb 10 14:00:15 2026 GMT Subject: CN=0d45443e0397064c3f805231d6016046e4ee500a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:54:6b:46:8e:d8:48:e7:6a:b1:e4:39:92:8a: 2d:41:5a:0c:77:69:3f:7e:96:cc:6e:95:e0:6a:78: 7b:c6:9b:07:65:ab:43:ff:36:6f:e9:f1:6b:86:dd: 23:b5:55:19:fd:af:01:88:a3:b2:44:a3:69:cb:1d: 3b:e7:ad:e0:98:74:ae:db:b6:fc:a6:da:5e:8f:a4: 3c:f2:de:e3:e2:5e:c1:3b:b7:f0:9e:47:95:e2:e7: 34:a5:b0:04:bd:8b:ab:29:d1:81:06:ea:38:f1:ab: 5f:2d:88:eb:3a:1b:20:c6:c1:8c:63:bd:63:a3:05: 5e:bc:7e:62:7a:b7:76:91:19:40:29:6e:db:03:63: cb:4a:02:5e:cb:15:50:86:8d:99:da:37:70:ba:0b: be:25:66:17:df:36:28:5b:ac:2b:46:02:59:f2:20: 08:04:05:71:58:2d:1b:81:ff:5c:61:3f:88:d5:37: d1:d5:70:e6:9b:6b:41:25:54:78:db:da:69:cd:bc: 00:5f:d1:3f:81:d7:52:fc:a3:8b:56:68:60:ad:e4: 60:3f:fc:98:b8:70:cc:54:ae:79:9b:cc:f9:36:0d: 2d:1e:54:6f:51:26:e0:d7:92:2c:42:7e:20:e7:55: 7d:a7:e8:1a:fd:07:33:6d:4e:1a:66:6d:5b:d0:b3: 98:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:45:44:3E:03:97:06:4C:3F:80:52:31:D6:01:60:46:E4:EE:50:0A X509v3 Authority Key Identifier: keyid:08:B0:F1:2F:11:5A:D4:0F:2C:2B:4A:AD:45:4D:2E:43:61:1C:9A:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/503603-1a5d-4900-9829-48dea1021a69/1/CLDxLxFa1A8sK0qtRU0uQ2EcmgY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e3:62:06:96:8d:9d:4e:8f:ea:c2:c5:90:13:ad:b2:b5:a9: ae:f5:76:7a:79:65:90:4a:d6:a8:b6:5c:05:9c:51:ba:1c:f5: 97:f8:72:48:06:fe:07:2e:7c:a3:64:eb:62:a8:7b:5b:a4:79: b7:c1:79:8d:79:f3:88:98:d8:49:df:60:5d:dd:f1:18:32:ae: 2d:eb:a4:17:f5:29:14:04:3d:74:95:fd:e5:fb:0f:93:d8:d3: d4:eb:68:8d:9b:8d:2b:a6:78:66:7a:24:5b:a6:fc:13:4f:e0: b3:9d:7f:1e:3a:4d:19:9a:c0:99:1b:a1:c1:95:95:dc:63:60: e1:1f:5f:48:bd:ac:d6:40:14:5a:d8:6c:02:93:a3:be:90:27: 7f:ba:be:ce:03:68:2b:b7:21:d6:de:0c:7b:84:10:57:9d:f8: 76:11:03:2b:71:40:8d:9d:af:f8:04:ed:47:9f:89:9b:41:c6: 93:f4:74:f0:29:67:2a:8a:e2:b5:78:e6:84:c2:59:d1:5a:81: 13:76:88:2f:89:fb:24:c2:e5:f9:b8:bc:1d:ab:4b:d8:af:64: f6:b6:86:f0:d4:17:a0:d7:ab:d2:c1:5e:f9:e0:f0:fc:b1:e6: 7b:b6:fd:c7:44:f5:9d:7d:93:87:e5:6d:c7:c8:08:b3:38:a3: 8d:5b:a2:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/Mrcq/oLnE4skZ/FKaBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YjBmMTJmMTE1YWQ0MGYyYzJiNGFhZDQ1NGQyZTQzNjEx YzlhMDYwHhcNMjYwMjA5MTQwMDE1WhcNMjYwMjEwMTQwMDE1WjAzMTEwLwYDVQQD EygwZDQ1NDQzZTAzOTcwNjRjM2Y4MDUyMzFkNjAxNjA0NmU0ZWU1MDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4VRrRo7YSOdqseQ5kootQVoMd2k/ fpbMbpXganh7xpsHZatD/zZv6fFrht0jtVUZ/a8BiKOyRKNpyx07563gmHSu27b8 ptpej6Q88t7j4l7BO7fwnkeV4uc0pbAEvYurKdGBBuo48atfLYjrOhsgxsGMY71j owVevH5ierd2kRlAKW7bA2PLSgJeyxVQho2Z2jdwugu+JWYX3zYoW6wrRgJZ8iAI BAVxWC0bgf9cYT+I1TfR1XDmm2tBJVR429ppzbwAX9E/gddS/KOLVmhgreRgP/yY uHDMVK55m8z5Ng0tHlRvUSbg15IsQn4g51V9p+ga/QczbU4aZm1b0LOY8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1FRD4DlwZMP4BSMdYBYEbk7lAKMB8GA1UdIwQY MBaAFAiw8S8RWtQPLCtKrUVNLkNhHJoGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4Mjkt NDhkZWExMDIxYTY5LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy81MDM2MDMtMWE1ZC00OTAwLTk4MjktNDhkZWExMDIxYTY5 LzEvQ0xEeEx4RmExQThzSzBxdFJVMHVRMkVjbWdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiONiBpaN nU6P6sLFkBOtsrWprvV2enllkErWqLZcBZxRuhz1l/hySAb+By58o2TrYqh7W6R5 t8F5jXnziJjYSd9gXd3xGDKuLeukF/UpFAQ9dJX95fsPk9jT1OtojZuNK6Z4Znok W6b8E0/gs51/HjpNGZrAmRuhwZWV3GNg4R9fSL2s1kAUWthsApOjvpAnf7q+zgNo K7ch1t4Me4QQV534dhEDK3FAjZ2v+ATtR5+Jm0HGk/R08ClnKoritXjmhMJZ0VqB E3aIL4n7JMLl+bi8HatL2K9k9raG8NQXoNer0sFe+eDw/LHme7b9x0T1nX2Th+Vt x8gIszijjVuiEw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:44 2026 by rpki-client