This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft File: CzVgh8IMejJUFv2oA8t289p5R6k.mft (raw, json) Hash identifier: TFVhR9JQoa05/IZaDq9wmgbEzUyfmNbKtC/VJfrrLQE= Subject key identifier: F9:3E:77:9D:91:48:2C:16:37:89:4A:D0:77:6B:6D:B8:C7:A1:54:DF Authority key identifier: 0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9 Certificate issuer: /CN=0b356087c20c7a325416fda803cb76f3da7947a9 Certificate serial: 019C41D8FE08E41585C3AB21C3D207A8CF83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft Manifest number: 0599 Signing time: Mon 09 Feb 2026 10:01:05 +0000 Manifest this update: Mon 09 Feb 2026 10:01:05 +0000 Manifest next update: Tue 10 Feb 2026 10:01:05 +0000 Files and hashes: 1: CzVgh8IMejJUFv2oA8t289p5R6k.crl (hash: 5nc3M5NIrxdUc19uqMdyXqoSYS/IMg4pXlQHVKQLn18=) 2: dh9HELJ4HeZmOUN7AF9in9ZZ-Wk.roa (hash: QD9afYe9Euena6uMhuaF6GPrPcYje7bkgfG0gL/2Snw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:fe:08:e4:15:85:c3:ab:21:c3:d2:07:a8:cf:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b356087c20c7a325416fda803cb76f3da7947a9 Validity Not Before: Feb 9 10:01:05 2026 GMT Not After : Feb 10 10:01:05 2026 GMT Subject: CN=f93e779d91482c1637894ad0776b6db8c7a154df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:8e:e3:cd:40:63:9d:4c:0f:74:eb:18:76: fa:96:83:41:8a:a8:ff:c6:cf:88:45:25:23:61:ef: a8:12:27:7d:50:cf:53:f6:03:68:30:a0:f6:84:b5: 4f:31:34:39:0a:27:b9:78:28:0a:22:0e:01:ac:54: ab:f5:76:19:64:97:2c:96:24:d6:04:15:d5:60:42: 00:fb:0d:41:36:c2:19:71:01:a5:39:ae:1f:dc:f3: c1:b0:bb:9a:ad:e3:be:f3:9a:fb:e5:8d:b5:9a:88: a6:21:16:cf:ec:70:e7:3a:1f:9f:d6:c7:43:06:37: 16:dc:3e:83:08:77:e0:43:51:1a:f1:45:e5:87:57: b1:6d:23:9b:b1:aa:5f:9f:1d:a1:fa:38:60:0c:73: f2:1c:be:5d:7c:58:f8:ec:58:aa:5c:b4:e6:e2:ae: db:f1:7a:27:c6:0d:23:18:35:36:8f:1d:67:d0:df: df:70:b0:03:4a:68:e0:5a:b0:5b:a0:22:b0:70:d6: 8c:1d:c3:16:03:e8:23:28:f9:e4:da:20:dd:50:6d: c9:13:0c:39:9d:05:94:6d:b1:b9:0f:c0:91:31:1a: 07:f0:84:54:0f:4a:4f:bf:0a:6a:66:32:94:db:61: 84:13:98:07:60:04:57:72:32:52:3a:ba:0f:d8:31: f6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3E:77:9D:91:48:2C:16:37:89:4A:D0:77:6B:6D:B8:C7:A1:54:DF X509v3 Authority Key Identifier: keyid:0B:35:60:87:C2:0C:7A:32:54:16:FD:A8:03:CB:76:F3:DA:79:47:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzVgh8IMejJUFv2oA8t289p5R6k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/d7cf94-ac61-4fbf-adf0-57eaf833ab0b/1/CzVgh8IMejJUFv2oA8t289p5R6k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c4:1c:a0:f0:13:1c:61:10:f8:d4:13:48:7e:ae:d8:cc:f5: 3d:66:24:66:aa:24:be:92:1b:a9:ae:49:27:2a:66:13:c6:34: d7:4f:37:db:b2:70:3f:79:8a:89:82:f1:c9:b7:3e:9d:e4:40: b3:7f:68:ef:2d:ea:7c:e2:42:f9:21:70:11:56:55:00:e4:60: a4:28:11:26:92:5e:7f:ee:ae:11:fd:c7:c4:37:30:ba:2f:f3: 1f:2c:8e:69:16:ea:0f:f1:5a:2b:d7:bc:e9:ed:6f:7b:90:6a: 0e:0a:ba:22:ff:3f:29:38:af:ea:0f:47:f9:14:e2:40:f2:94: d4:65:7b:0d:d4:fb:86:8c:cf:f2:12:ef:a1:c0:69:27:2d:a9: e4:56:cd:06:2d:9e:ce:cf:a1:68:a9:18:2a:73:bd:c7:ef:85: 5b:e4:ce:e7:91:1d:9f:29:dd:cb:83:07:72:38:3b:26:79:14: ee:8c:dc:f5:50:f9:cb:65:bb:21:54:c6:93:7d:1f:6a:e5:21: d4:b7:20:87:7f:0e:63:f8:3a:80:1b:a2:0b:31:a8:44:76:11: 3b:17:96:78:db:45:2b:fd:87:38:22:b3:fd:43:6e:7b:a3:ee: b5:3f:0d:fa:01:6f:f7:01:71:7b:2e:7c:66:4b:f4:42:c8:c4: a5:f5:0e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2P4I5BWFw6shw9IHqM+DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzU2MDg3YzIwYzdhMzI1NDE2ZmRhODAzY2I3NmYzZGE3 OTQ3YTkwHhcNMjYwMjA5MTAwMTA1WhcNMjYwMjEwMTAwMTA1WjAzMTEwLwYDVQQD EyhmOTNlNzc5ZDkxNDgyYzE2Mzc4OTRhZDA3NzZiNmRiOGM3YTE1NGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6+O481AY51MD3TrGHb6loNBiqj/ xs+IRSUjYe+oEid9UM9T9gNoMKD2hLVPMTQ5Cie5eCgKIg4BrFSr9XYZZJcsliTW BBXVYEIA+w1BNsIZcQGlOa4f3PPBsLuareO+85r75Y21moimIRbP7HDnOh+f1sdD BjcW3D6DCHfgQ1Ea8UXlh1exbSObsapfnx2h+jhgDHPyHL5dfFj47FiqXLTm4q7b 8Xonxg0jGDU2jx1n0N/fcLADSmjgWrBboCKwcNaMHcMWA+gjKPnk2iDdUG3JEww5 nQWUbbG5D8CRMRoH8IRUD0pPvwpqZjKU22GEE5gHYARXcjJSOroP2DH29QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPk+d52RSCwWN4lK0HdrbbjHoVTfMB8GA1UdIwQY MBaAFAs1YIfCDHoyVBb9qAPLdvPaeUepMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAt NTdlYWY4MzNhYjBiLzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC9kN2NmOTQtYWM2MS00ZmJmLWFkZjAtNTdlYWY4MzNhYjBi LzEvQ3pWZ2g4SU1lakpVRnYyb0E4dDI4OXA1UjZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8QcoPAT HGEQ+NQTSH6u2Mz1PWYkZqokvpIbqa5JJypmE8Y0108327JwP3mKiYLxybc+neRA s39o7y3qfOJC+SFwEVZVAORgpCgRJpJef+6uEf3HxDcwui/zHyyOaRbqD/FaK9e8 6e1ve5BqDgq6Iv8/KTiv6g9H+RTiQPKU1GV7DdT7hozP8hLvocBpJy2p5FbNBi2e zs+haKkYKnO9x++FW+TO55Ednyndy4MHcjg7JnkU7ozc9VD5y2W7IVTGk30fauUh 1Lcgh38OY/g6gBuiCzGoRHYROxeWeNtFK/2HOCKz/UNue6PutT8N+gFv9wFxey58 Zkv0QsjEpfUO+A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:33 2026 by rpki-client