This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json) Hash identifier: dLJUvcFaFZy387w1rc2ntfh53f3euve/vZ74a9mZNNc= Subject key identifier: 9F:8B:AA:07:08:85:BC:65:AE:BB:C3:A6:F5:23:4D:02:C8:F1:8C:50 Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5 Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5 Certificate serial: 019C427E05D9B709164B8FD61634B1A04890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft Manifest number: 0BF8 Signing time: Mon 09 Feb 2026 13:01:20 +0000 Manifest this update: Mon 09 Feb 2026 13:01:20 +0000 Manifest next update: Tue 10 Feb 2026 13:01:20 +0000 Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: F8JfSdOeSxvkKwWuhJ+1GhVGLm5MblQTsNuMik4pU+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:05:d9:b7:09:16:4b:8f:d6:16:34:b1:a0:48:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5 Validity Not Before: Feb 9 13:01:20 2026 GMT Not After : Feb 10 13:01:20 2026 GMT Subject: CN=9f8baa070885bc65aebbc3a6f5234d02c8f18c50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:40:a3:18:fe:da:1e:ef:8b:24:66:e7:a2:67: 30:cc:4e:4b:32:ef:1d:5e:b2:b8:86:49:cd:c8:9c: bb:1c:18:c8:47:2e:c2:b8:bd:27:3a:b9:e7:21:6d: 89:9f:4a:06:e2:b6:79:7d:8a:63:73:13:71:8b:87: 8b:04:c6:2a:51:f3:6a:b9:b9:36:06:1a:0c:fe:a7: f9:c4:df:ba:00:1e:aa:88:c5:25:7d:a6:03:4c:71: 43:ac:d7:b7:a0:f1:1f:8c:cc:07:93:6e:f1:92:fb: 41:a6:82:cf:74:77:47:1a:00:3a:f6:de:8d:c9:76: f4:9a:cf:b9:6f:da:63:d6:8e:0b:c1:0b:5b:11:60: c8:f6:1d:69:f1:64:60:8f:93:78:d9:3f:c8:97:5c: a4:46:da:7c:2b:eb:75:18:cf:82:b3:97:22:7e:55: 27:9c:e8:41:97:75:53:a2:2e:df:df:c1:18:d3:6c: cd:72:e9:14:ae:14:fb:7d:ec:8a:68:ad:ce:97:6d: c4:09:5d:cd:fc:f8:5f:99:d2:66:b9:eb:97:bf:7d: b1:bf:88:66:a8:32:85:cc:1f:cf:f4:75:d5:4e:31: aa:da:4b:aa:f2:52:f4:8b:65:62:cd:5f:c7:00:7e: ce:0b:05:b7:38:63:0a:26:09:ea:8a:a6:e8:4b:6a: 33:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8B:AA:07:08:85:BC:65:AE:BB:C3:A6:F5:23:4D:02:C8:F1:8C:50 X509v3 Authority Key Identifier: keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:5d:60:ad:f4:80:6c:12:0e:b3:37:2d:36:2d:30:2a:e4:90: e7:b9:b9:09:74:f1:c7:57:1b:27:d2:36:ca:b2:37:9d:af:56: 48:ca:64:65:95:06:09:da:f9:3b:fe:ad:59:97:24:8d:5c:56: c9:12:2e:e5:68:72:20:00:0b:88:9d:c2:9d:6b:8a:fb:3e:ae: f1:db:47:ec:e5:e4:64:ae:2f:c6:f4:dd:46:d2:c3:77:c4:8c: e9:d7:a8:8c:a9:6b:96:f7:54:04:97:9c:30:fe:2d:db:23:e8: 66:b3:91:bb:25:86:22:59:98:b0:10:2a:ea:88:3c:d3:ad:c7: 17:57:62:0a:5b:9e:55:77:fb:5e:2d:01:91:9a:04:97:2a:73: e0:da:15:15:38:a5:43:bd:08:95:17:8d:0e:0f:f3:36:cb:45: f5:c3:3c:c9:8c:e7:e2:d9:87:a9:72:48:8f:2f:76:44:dd:87: d4:4c:05:a8:58:e1:f2:10:53:28:40:bd:4f:cf:48:2a:b7:a7: c8:48:4f:af:36:24:8e:03:3a:41:4a:cc:5b:2c:a9:ce:29:6f: 3e:f2:35:1d:82:4c:47:00:e9:72:d5:fb:39:a3:0e:4a:d2:2c: fa:5e:58:d0:cc:8a:f5:f9:4b:e0:04:3a:49:c7:0d:d3:bb:38: 31:ee:5f:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfgXZtwkWS4/WFjSxoEiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MzcwODExNmIwNGJjMmI3Njc1M2UxYTQzMGI3Y2JlZTA5 Y2RiYTUwHhcNMjYwMjA5MTMwMTIwWhcNMjYwMjEwMTMwMTIwWjAzMTEwLwYDVQQD Eyg5ZjhiYWEwNzA4ODViYzY1YWViYmMzYTZmNTIzNGQwMmM4ZjE4YzUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvECjGP7aHu+LJGbnomcwzE5LMu8d XrK4hknNyJy7HBjIRy7CuL0nOrnnIW2Jn0oG4rZ5fYpjcxNxi4eLBMYqUfNqubk2 BhoM/qf5xN+6AB6qiMUlfaYDTHFDrNe3oPEfjMwHk27xkvtBpoLPdHdHGgA69t6N yXb0ms+5b9pj1o4LwQtbEWDI9h1p8WRgj5N42T/Il1ykRtp8K+t1GM+Cs5ciflUn nOhBl3VToi7f38EY02zNcukUrhT7feyKaK3Ol23ECV3N/PhfmdJmueuXv32xv4hm qDKFzB/P9HXVTjGq2kuq8lL0i2VizV/HAH7OCwW3OGMKJgnqiqboS2ozIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+LqgcIhbxlrrvDpvUjTQLI8YxQMB8GA1UdIwQY MBaAFAg3CBFrBLwrdnU+GkMLfL7gnNulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUt MGYyOTI5OTZmODZjLzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUtMGYyOTI5OTZmODZj LzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD11grfSA bBIOszctNi0wKuSQ57m5CXTxx1cbJ9I2yrI3na9WSMpkZZUGCdr5O/6tWZckjVxW yRIu5WhyIAALiJ3CnWuK+z6u8dtH7OXkZK4vxvTdRtLDd8SM6deojKlrlvdUBJec MP4t2yPoZrORuyWGIlmYsBAq6og8063HF1diClueVXf7Xi0BkZoElypz4NoVFTil Q70IlReNDg/zNstF9cM8yYzn4tmHqXJIjy92RN2H1EwFqFjh8hBTKEC9T89IKren yEhPrzYkjgM6QUrMWyypzilvPvI1HYJMRwDpctX7OaMOStIs+l5Y0MyK9flL4AQ6 SccN07s4Me5fwA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:07 2026 by rpki-client