This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft File: CJu7CaX772E1wtkgvye7YfXC4J0.mft (raw, json) Hash identifier: LR5IVzL8rJ4p5sjtqtbEvLrOtdWv8kcC5RDtb47vqwM= Subject key identifier: 85:64:F4:FD:3B:1B:F9:A6:2A:3E:B2:20:1E:CB:0C:51:FF:9A:17:D8 Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d Certificate serial: 019C41A241A021A5145FBE8F7ACB55B21066 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 09:01:18 +0000 Manifest this update: Mon 09 Feb 2026 09:01:18 +0000 Manifest next update: Tue 10 Feb 2026 09:01:18 +0000 Files and hashes: 1: CJu7CaX772E1wtkgvye7YfXC4J0.crl (hash: JRasY+UHv1IxttcWTBjJlk5aYg7jsf5LOJ5frKraHiM=) 2: OHiJ9XzBUi42gNdFbFSonns_rq0.roa (hash: 5izRR616Szlh4ynpWzSXWkX0E9KgDJBqg2wIQA5yWeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:41:a0:21:a5:14:5f:be:8f:7a:cb:55:b2:10:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d Validity Not Before: Feb 9 09:01:18 2026 GMT Not After : Feb 10 09:01:18 2026 GMT Subject: CN=8564f4fd3b1bf9a62a3eb2201ecb0c51ff9a17d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e5:ad:ac:c0:0c:b2:f3:03:c5:32:02:ac:26: c9:33:79:f0:0c:0a:8b:eb:eb:64:2d:f5:de:0f:dc: 15:ae:81:ca:74:28:01:97:d4:89:11:ef:32:95:16: 69:06:3b:84:fc:b1:fd:17:98:23:37:67:a7:40:f0: b5:6d:b6:62:25:33:8c:11:c4:c7:a5:ec:79:41:e9: 6e:01:a6:a4:be:33:ce:4a:2a:f3:fc:ec:d5:db:2c: 89:04:bc:f3:6f:11:bd:94:c8:b4:fa:0a:b1:7b:8d: e5:af:78:6c:f3:e7:90:61:22:e6:d6:c5:dc:b6:ab: 7d:23:d0:88:0e:a4:74:51:cf:fe:b4:0b:76:c5:12: 97:06:21:d0:5a:a1:8f:b6:d6:54:06:6a:26:55:9c: c5:84:cb:c6:16:d7:81:24:0a:ad:36:c5:a7:6a:d3: cf:0e:0c:1c:5e:55:c2:ed:4f:d9:f8:1e:83:5e:0c: 25:cf:9b:fb:93:30:74:bf:0b:7c:c9:7d:73:0a:ad: 36:b8:75:a3:a0:21:af:ff:91:41:9c:9f:ae:f3:44: 7f:c4:14:57:88:e5:40:6e:4f:77:5d:58:f6:46:d9: d1:b4:66:aa:e9:5e:7f:07:51:f4:f6:f3:6d:d4:e7: 5f:c5:3a:26:f8:a7:47:63:a4:5f:71:28:94:b3:c9: 30:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:64:F4:FD:3B:1B:F9:A6:2A:3E:B2:20:1E:CB:0C:51:FF:9A:17:D8 X509v3 Authority Key Identifier: keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:81:41:d2:64:8c:97:82:93:54:d9:ff:ff:90:17:08:dc:9a: 06:72:50:87:3e:ed:24:07:73:93:43:cf:9b:a0:6f:31:de:ae: b2:cb:d1:f6:4b:b4:70:5d:7a:8e:08:fe:e9:25:08:2e:6b:09: 8d:e7:3d:c3:23:de:b2:4a:ef:01:f8:74:93:f9:f8:63:7f:72: c9:36:2a:e0:1d:22:db:8c:f7:b6:d5:59:b7:93:0e:50:2c:74: 72:59:5f:97:74:f2:11:51:cf:7b:76:b2:c5:5c:ca:ee:47:15: 8c:42:d1:5f:59:e9:e6:88:9e:cd:02:d0:05:72:5c:93:f7:14: 39:3b:75:d4:c6:88:77:16:12:2d:29:42:9f:d2:42:8b:fa:42: ee:2c:36:64:20:f1:e8:66:9d:9b:eb:36:29:e9:54:cc:46:9d: 27:7e:c4:51:64:c5:7a:1f:dd:de:9e:b5:d6:51:7e:e1:da:5d: 78:3a:86:c1:2d:ed:b4:0d:e5:a1:08:48:65:d3:11:66:e1:f4: 39:3a:4a:8b:e0:49:44:11:09:4b:e3:ed:72:7a:0b:98:d1:2b: b5:01:aa:fd:09:66:b3:91:11:39:37:4c:6b:d6:7f:54:e6:80: a3:96:22:f4:d6:07:f1:f2:e8:56:c1:12:26:d1:1c:03:7e:0b: 10:97:0f:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBokGgIaUUX76PestVshBmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj MmUwOWQwHhcNMjYwMjA5MDkwMTE4WhcNMjYwMjEwMDkwMTE4WjAzMTEwLwYDVQQD Eyg4NTY0ZjRmZDNiMWJmOWE2MmEzZWIyMjAxZWNiMGM1MWZmOWExN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuWtrMAMsvMDxTICrCbJM3nwDAqL 6+tkLfXeD9wVroHKdCgBl9SJEe8ylRZpBjuE/LH9F5gjN2enQPC1bbZiJTOMEcTH pex5QeluAaakvjPOSirz/OzV2yyJBLzzbxG9lMi0+gqxe43lr3hs8+eQYSLm1sXc tqt9I9CIDqR0Uc/+tAt2xRKXBiHQWqGPttZUBmomVZzFhMvGFteBJAqtNsWnatPP DgwcXlXC7U/Z+B6DXgwlz5v7kzB0vwt8yX1zCq02uHWjoCGv/5FBnJ+u80R/xBRX iOVAbk93XVj2RtnRtGaq6V5/B1H09vNt1OdfxTom+KdHY6RfcSiUs8kwBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIVk9P07G/mmKj6yIB7LDFH/mhfYMB8GA1UdIwQY MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt MmY5YjAwZmRjNWQzLzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoFB0mSM l4KTVNn//5AXCNyaBnJQhz7tJAdzk0PPm6BvMd6ussvR9ku0cF16jgj+6SUILmsJ jec9wyPeskrvAfh0k/n4Y39yyTYq4B0i24z3ttVZt5MOUCx0cllfl3TyEVHPe3ay xVzK7kcVjELRX1np5oiezQLQBXJck/cUOTt11MaIdxYSLSlCn9JCi/pC7iw2ZCDx 6Gadm+s2KelUzEadJ37EUWTFeh/d3p611lF+4dpdeDqGwS3ttA3loQhIZdMRZuH0 OTpKi+BJRBEJS+PtcnoLmNErtQGq/Qlms5EROTdMa9Z/VOaAo5Yi9NYH8fLoVsES JtEcA34LEJcPWg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:25 2026 by rpki-client