This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft File: cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft (raw, json) Hash identifier: nZj/ufYAiS63cLXuB3OODWItET5CfkqMMD58HO2h8WY= Subject key identifier: 01:64:A1:A2:72:B2:9F:50:FA:FE:93:6D:A4:33:F5:3B:8B:65:E6:D7 Authority key identifier: 70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D Certificate issuer: /CN=70379a6713e79e598d9feaa66dca169188e0218d Certificate serial: 019C446BA47714D9ADB6BB2B7FFAF2660370 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft Manifest number: 1015 Signing time: Mon 09 Feb 2026 22:00:30 +0000 Manifest this update: Mon 09 Feb 2026 22:00:30 +0000 Manifest next update: Tue 10 Feb 2026 22:00:30 +0000 Files and hashes: 1: cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl (hash: lRhHdzaVTh4OOxF6a8pyXlOeGAnYwauXKxic1VTKuWw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:a4:77:14:d9:ad:b6:bb:2b:7f:fa:f2:66:03:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379a6713e79e598d9feaa66dca169188e0218d Validity Not Before: Feb 9 22:00:30 2026 GMT Not After : Feb 10 22:00:30 2026 GMT Subject: CN=0164a1a272b29f50fafe936da433f53b8b65e6d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:d9:8e:03:dc:42:68:bf:5f:f7:75:a0:09:35: 08:37:bb:c5:c7:19:30:96:96:1a:0b:50:b7:46:57: d5:d5:b6:40:57:d3:05:de:9e:8b:0a:c8:46:7e:6e: 77:9a:13:72:02:be:dc:60:10:40:52:09:1f:b6:e8: 2a:67:18:26:05:aa:d0:e1:0d:96:1c:1e:dc:36:95: d8:a6:93:bc:93:b3:95:bf:6a:a1:d8:db:c2:40:2b: e6:b8:27:90:62:51:fe:9e:ea:12:53:b8:d1:1b:b8: 51:4d:c5:dd:82:ec:a0:76:57:19:b5:2c:25:7f:8c: 3c:41:16:5f:bf:ab:17:da:29:81:0c:41:eb:b8:06: 5d:7c:bc:e4:06:ac:c5:b2:ce:24:c9:20:c6:de:a1: 8e:5d:d3:7e:06:ad:37:d3:41:ff:bb:8c:d9:93:4f: e7:fd:b7:7b:20:60:80:b5:e7:12:aa:06:83:1e:5d: 53:6a:06:91:9c:51:16:f7:ff:8a:91:52:36:04:14: eb:b2:1e:43:2e:88:e4:a8:56:3b:6f:b5:c6:cb:ea: 36:77:30:be:6e:30:26:fc:eb:0e:20:7a:c9:86:9d: 61:d7:95:ee:8e:51:8f:d2:6e:ca:55:37:4f:52:ea: eb:6e:72:dc:50:ec:11:b3:eb:59:02:6c:59:58:96: 8a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:64:A1:A2:72:B2:9F:50:FA:FE:93:6D:A4:33:F5:3B:8B:65:E6:D7 X509v3 Authority Key Identifier: keyid:70:37:9A:67:13:E7:9E:59:8D:9F:EA:A6:6D:CA:16:91:88:E0:21:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDeaZxPnnlmNn-qmbcoWkYjgIY0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/033a06-4990-45ff-b38b-2944aead9cda/1/cDeaZxPnnlmNn-qmbcoWkYjgIY0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:9a:85:6a:cc:ec:7e:d0:35:9d:f7:e7:48:52:4d:51:a8:86: f6:15:78:21:45:37:7e:5d:56:87:14:f8:13:32:f1:34:3d:4c: f9:c1:7f:7e:fe:ba:e4:7b:e5:87:fc:d4:ae:98:39:a5:48:e4: 45:1b:17:6a:01:4b:07:b5:11:94:fe:45:fd:c5:3a:8f:2f:5e: 51:3b:78:9d:e5:96:ed:de:ed:b9:be:60:35:40:46:b3:7d:01: 68:ee:d3:26:5b:84:9d:14:91:66:5d:1b:d5:2c:75:b0:80:42: f1:ed:39:d0:cc:9d:8b:c2:1c:81:29:eb:34:a0:7a:93:6f:b9: eb:77:f6:b0:ae:33:48:b4:48:6e:ae:0e:bc:bb:fe:ec:cd:8f: 88:d3:b7:4d:45:75:bf:7c:93:28:c1:fe:c9:a1:48:4f:5a:c0: 47:60:64:a0:1a:37:a6:3a:aa:b5:22:3d:a1:16:01:5b:01:b9: 4a:ea:d6:45:69:33:8b:5e:eb:a0:d6:18:87:6a:49:42:18:d3: c6:a3:a8:ce:8e:fb:25:3a:a6:77:1f:69:73:12:05:6b:5b:ac: 89:03:d8:0a:bd:dc:27:2d:4b:49:ad:5b:97:03:5e:36:f4:67: 8d:64:f1:4d:3b:b3:59:bc:8c:60:24:76:b4:b0:10:f8:72:62: 87:b5:a6:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa6R3FNmttrsrf/ryZgNwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzc5YTY3MTNlNzllNTk4ZDlmZWFhNjZkY2ExNjkxODhl MDIxOGQwHhcNMjYwMjA5MjIwMDMwWhcNMjYwMjEwMjIwMDMwWjAzMTEwLwYDVQQD EygwMTY0YTFhMjcyYjI5ZjUwZmFmZTkzNmRhNDMzZjUzYjhiNjVlNmQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNmOA9xCaL9f93WgCTUIN7vFxxkw lpYaC1C3RlfV1bZAV9MF3p6LCshGfm53mhNyAr7cYBBAUgkftugqZxgmBarQ4Q2W HB7cNpXYppO8k7OVv2qh2NvCQCvmuCeQYlH+nuoSU7jRG7hRTcXdguygdlcZtSwl f4w8QRZfv6sX2imBDEHruAZdfLzkBqzFss4kySDG3qGOXdN+Bq0300H/u4zZk0/n /bd7IGCAtecSqgaDHl1TagaRnFEW9/+KkVI2BBTrsh5DLojkqFY7b7XGy+o2dzC+ bjAm/OsOIHrJhp1h15XujlGP0m7KVTdPUurrbnLcUOwRs+tZAmxZWJaKpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAFkoaJysp9Q+v6TbaQz9TuLZebXMB8GA1UdIwQY MBaAFHA3mmcT555ZjZ/qpm3KFpGI4CGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGIt Mjk0NGFlYWQ5Y2RhLzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi8wMzNhMDYtNDk5MC00NWZmLWIzOGItMjk0NGFlYWQ5Y2Rh LzEvY0RlYVp4UG5ubG1Obi1xbWJjb1drWWpnSVkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXZqFaszs ftA1nffnSFJNUaiG9hV4IUU3fl1WhxT4EzLxND1M+cF/fv665Hvlh/zUrpg5pUjk RRsXagFLB7URlP5F/cU6jy9eUTt4neWW7d7tub5gNUBGs30BaO7TJluEnRSRZl0b 1Sx1sIBC8e050Mydi8IcgSnrNKB6k2+563f2sK4zSLRIbq4OvLv+7M2PiNO3TUV1 v3yTKMH+yaFIT1rAR2BkoBo3pjqqtSI9oRYBWwG5SurWRWkzi17roNYYh2pJQhjT xqOozo77JTqmdx9pcxIFa1usiQPYCr3cJy1LSa1blwNeNvRnjWTxTTuzWbyMYCR2 tLAQ+HJih7WmpQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:31:15 2026 by rpki-client