This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft File: cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft (raw, json) Hash identifier: pnCqZPmRvrwEPga7SjFcUy+0OvcOcNxj2TFaTb5jL18= Subject key identifier: 4B:5D:E1:22:CC:5D:B8:AF:7B:53:84:39:F4:9F:94:37:3A:18:E1:9B Authority key identifier: 71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 Certificate issuer: /CN=716752b91747957dccff0e71da674f329d832de3 Certificate serial: 019C43C6E958899D2CD6AEECF6871CE94F59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft Manifest number: 1418 Signing time: Mon 09 Feb 2026 19:00:35 +0000 Manifest this update: Mon 09 Feb 2026 19:00:35 +0000 Manifest next update: Tue 10 Feb 2026 19:00:35 +0000 Files and hashes: 1: cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl (hash: 5LtYQxliBkAKK94dx4Ps2Qeh/eaHz86r5dCLYtsQ2Lg=) 2: wL5sSwno8Mbpbe9_DoWbBZ-eQSE.roa (hash: sIqceuhoMcr1nLCZQCrjxxlbwlSCs6IOU3UVRrd7u3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:e9:58:89:9d:2c:d6:ae:ec:f6:87:1c:e9:4f:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716752b91747957dccff0e71da674f329d832de3 Validity Not Before: Feb 9 19:00:35 2026 GMT Not After : Feb 10 19:00:35 2026 GMT Subject: CN=4b5de122cc5db8af7b538439f49f94373a18e19b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:90:2e:d8:a0:9f:e5:4a:2b:ee:26:7b:6c:07: 2d:eb:64:28:37:f1:6a:cf:17:fe:85:c5:10:59:27: 58:62:60:db:b7:7c:5c:d3:d6:5f:6e:13:26:af:81: 4e:56:a7:83:39:44:16:92:c1:de:e8:8e:e2:91:ad: ba:a8:d4:5b:a9:c8:11:c2:c6:6d:92:f1:52:64:43: c6:f1:31:96:ad:44:74:1b:a4:9f:ae:e6:fc:51:4d: 98:42:bc:15:92:e3:1e:84:28:76:fb:8e:da:76:b5: b3:fb:86:8e:25:7c:d1:45:48:84:c6:61:a9:f4:11: 37:f2:07:60:14:8f:79:df:ae:cc:3b:16:a4:9d:f0: 12:11:0d:d3:15:ac:6e:f6:34:12:65:53:9c:be:d1: cc:ca:79:23:22:c8:9f:dd:39:f3:22:d5:56:a3:f2: 32:19:4d:20:f0:3a:61:e0:83:94:72:9c:d5:bb:74: 64:47:b4:8b:1e:21:f5:44:cb:87:f0:08:a0:9b:79: 76:0e:4f:b0:2e:0d:e8:04:fd:af:0b:55:23:1e:5f: 25:36:39:37:9f:0f:93:6c:47:d0:ed:ef:16:26:c7: b7:44:11:64:ae:da:0b:02:17:89:47:f7:35:76:29: 5a:d5:bb:b2:52:40:f1:4d:b4:8e:c4:43:a4:3e:01: ae:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:5D:E1:22:CC:5D:B8:AF:7B:53:84:39:F4:9F:94:37:3A:18:E1:9B X509v3 Authority Key Identifier: keyid:71:67:52:B9:17:47:95:7D:CC:FF:0E:71:DA:67:4F:32:9D:83:2D:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWdSuRdHlX3M_w5x2mdPMp2DLeM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/70d450-80e4-44f9-99f3-21bc63f165f8/1/cWdSuRdHlX3M_w5x2mdPMp2DLeM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:55:32:0b:2d:5a:07:01:0f:7b:c2:ae:6f:92:5e:d4:9c:92: 16:d8:bd:ba:f1:49:b7:d4:08:bf:14:ab:ad:30:02:70:8d:9b: 87:47:29:fe:33:6e:ad:3d:da:a1:bd:e1:c8:5a:62:aa:9a:bd: 92:2d:7d:81:cf:14:ab:54:0d:5e:86:a1:80:ec:bd:6c:12:97: 5f:63:c3:f7:be:28:ab:44:7a:9f:d4:58:62:81:aa:7b:46:93: b1:72:0b:80:e9:7c:65:68:22:ef:8c:1b:c1:b1:b3:67:f9:49: 60:58:6b:e0:45:a7:52:13:a5:9c:b6:b9:69:88:cf:37:1a:71: cf:59:04:29:47:e6:cf:3e:12:26:c3:f5:5e:79:3d:0b:00:15: 40:35:ed:81:cf:29:f5:19:b5:ac:b7:f3:f8:8f:ff:6f:00:17: 9b:95:d9:0a:d8:cd:f7:8f:30:33:7a:c9:73:9c:5a:d9:3f:7b: d3:b6:95:34:1c:6d:c0:69:ac:18:f3:20:88:cb:9e:df:7d:2e: 4e:70:f9:60:a0:a9:14:37:5a:9d:12:b3:f8:a9:cf:16:8d:45: ad:5e:70:63:66:76:71:70:71:47:14:39:00:4e:32:f4:39:e0: a6:68:7f:00:2d:73:58:54:3d:4b:dc:c2:6b:5b:a0:f4:2b:bf: df:7b:0e:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxulYiZ0s1q7s9occ6U9ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNjc1MmI5MTc0Nzk1N2RjY2ZmMGU3MWRhNjc0ZjMyOWQ4 MzJkZTMwHhcNMjYwMjA5MTkwMDM1WhcNMjYwMjEwMTkwMDM1WjAzMTEwLwYDVQQD Eyg0YjVkZTEyMmNjNWRiOGFmN2I1Mzg0MzlmNDlmOTQzNzNhMThlMTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5Au2KCf5Uor7iZ7bAct62QoN/Fq zxf+hcUQWSdYYmDbt3xc09ZfbhMmr4FOVqeDOUQWksHe6I7ika26qNRbqcgRwsZt kvFSZEPG8TGWrUR0G6Sfrub8UU2YQrwVkuMehCh2+47adrWz+4aOJXzRRUiExmGp 9BE38gdgFI95367MOxaknfASEQ3TFaxu9jQSZVOcvtHMynkjIsif3TnzItVWo/Iy GU0g8Dph4IOUcpzVu3RkR7SLHiH1RMuH8Aigm3l2Dk+wLg3oBP2vC1UjHl8lNjk3 nw+TbEfQ7e8WJse3RBFkrtoLAheJR/c1dila1buyUkDxTbSOxEOkPgGu2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEtd4SLMXbive1OEOfSflDc6GOGbMB8GA1UdIwQY MBaAFHFnUrkXR5V9zP8OcdpnTzKdgy3jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMt MjFiYzYzZjE2NWY4LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi83MGQ0NTAtODBlNC00NGY5LTk5ZjMtMjFiYzYzZjE2NWY4 LzEvY1dkU3VSZEhsWDNNX3c1eDJtZFBNcDJETGVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKFUyCy1a BwEPe8Kub5Je1JySFti9uvFJt9QIvxSrrTACcI2bh0cp/jNurT3aob3hyFpiqpq9 ki19gc8Uq1QNXoahgOy9bBKXX2PD974oq0R6n9RYYoGqe0aTsXILgOl8ZWgi74wb wbGzZ/lJYFhr4EWnUhOlnLa5aYjPNxpxz1kEKUfmzz4SJsP1Xnk9CwAVQDXtgc8p 9Rm1rLfz+I//bwAXm5XZCtjN948wM3rJc5xa2T9707aVNBxtwGmsGPMgiMue330u TnD5YKCpFDdanRKz+KnPFo1FrV5wY2Z2cXBxRxQ5AE4y9Dngpmh/AC1zWFQ9S9zC a1ug9Cu/33sOBA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:16 2026 by rpki-client