This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft File: ci8LM2ULfWSYufWKrFopfpJhSCI.mft (raw, json) Hash identifier: 4vo/VNes9JPxMewWLBPor/i2/7nq3+iPM/toneiKoF8= Subject key identifier: 2C:BC:1B:98:A2:4F:2B:D7:DE:87:EE:82:6D:68:B4:64:45:3D:CB:4F Authority key identifier: 72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 Certificate issuer: /CN=722f0b33650b7d6498b9f58aac5a297e92614822 Certificate serial: 019C43FE7FC38F721A0A4D2EF564BEE539E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft Manifest number: 0BA4 Signing time: Mon 09 Feb 2026 20:01:18 +0000 Manifest this update: Mon 09 Feb 2026 20:01:18 +0000 Manifest next update: Tue 10 Feb 2026 20:01:18 +0000 Files and hashes: 1: KdbDrACu7SHeiWA-TJ0Gd5nmSmM.roa (hash: kgfS9/IVC7NXMOo6Zbhxeb9stsHC0de13w/KTw9Txuc=) 2: ci8LM2ULfWSYufWKrFopfpJhSCI.crl (hash: teafALrCernVDBcMdJ80tR0Dfx5BR7qJHQ+ujki86G8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:7f:c3:8f:72:1a:0a:4d:2e:f5:64:be:e5:39:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722f0b33650b7d6498b9f58aac5a297e92614822 Validity Not Before: Feb 9 20:01:18 2026 GMT Not After : Feb 10 20:01:18 2026 GMT Subject: CN=2cbc1b98a24f2bd7de87ee826d68b464453dcb4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c8:f6:05:7a:a4:12:1c:ac:46:6d:65:a0:92: c7:a7:e8:0b:bb:39:b9:7a:e7:5c:c1:3f:8c:b1:a2: 1a:2d:67:de:09:36:d0:cd:44:6e:b3:c6:6e:27:bf: a9:9d:73:66:b1:17:e7:01:94:52:ad:86:d8:3b:6a: de:07:3c:ff:1d:11:e6:97:15:83:3a:30:b6:5d:32: a7:b7:aa:d4:ca:7f:59:95:c7:1d:e0:9a:a3:f6:62: f7:1e:c4:85:9e:16:99:fc:b0:f9:49:d2:d8:70:ba: 3f:27:7c:2b:07:43:0f:b4:8a:a8:55:c6:1b:e2:bf: dc:18:a4:95:01:5f:60:e4:2c:95:31:4f:d2:9b:00: 9a:3c:80:72:5e:a5:8c:cf:50:80:75:01:ef:f2:97: e9:31:ff:bd:73:ea:c6:02:9d:bd:68:d3:bd:9f:41: 1a:1c:87:9d:e6:c2:57:b1:cd:3a:8c:9e:57:59:a1: dd:53:96:98:5d:a5:f0:23:64:a9:0d:90:cd:1b:a0: 03:78:47:89:27:e8:00:45:34:a8:d8:12:fa:ff:49: 32:2b:45:1a:00:76:0b:ed:df:a1:5b:f3:d8:6d:81: 9e:8f:93:7f:44:b9:ff:4d:99:0f:50:79:3a:a3:60: 9e:dc:b2:32:4e:a1:90:09:20:1b:17:dd:57:f3:bc: ca:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BC:1B:98:A2:4F:2B:D7:DE:87:EE:82:6D:68:B4:64:45:3D:CB:4F X509v3 Authority Key Identifier: keyid:72:2F:0B:33:65:0B:7D:64:98:B9:F5:8A:AC:5A:29:7E:92:61:48:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci8LM2ULfWSYufWKrFopfpJhSCI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/26/96d14f-18c2-43a8-bc58-647289ad5a22/1/ci8LM2ULfWSYufWKrFopfpJhSCI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:26:8a:1e:51:87:14:ed:dc:f9:b5:07:cd:23:0b:99:59:10: 9b:05:2f:90:65:68:9d:9d:e8:51:9e:de:bd:a8:b7:67:a6:74: b9:6e:9b:57:52:5e:d4:4b:c4:85:05:01:6b:72:29:ed:ef:93: 01:7b:88:e0:02:80:59:04:dd:50:17:0f:e9:43:00:36:c2:bc: f4:ad:25:a5:5e:0f:c9:61:df:04:cb:a8:d3:91:73:7f:7e:74: 54:f0:87:1b:d4:25:93:fb:be:b4:32:52:08:d6:c0:91:04:a3: f5:23:c4:33:a9:0f:b2:cb:34:db:61:fc:42:78:20:09:17:aa: 81:68:47:ff:55:19:d8:75:7d:a1:89:11:bf:ab:b2:50:e7:34: 9c:12:05:12:d0:bc:6f:92:78:92:d3:12:8a:7a:46:de:cd:e2: 3f:8a:b0:70:43:04:20:a5:e9:1b:b8:c8:5e:13:cc:6e:cc:26: d1:0e:2e:62:2b:50:e9:5e:57:88:ac:1d:91:a3:2c:18:ea:2e: 47:73:47:73:7c:e8:fb:a3:be:19:cd:9c:40:b7:19:20:0e:50: 39:75:dc:34:34:d3:a1:97:79:11:78:4a:2f:66:e1:bb:12:2b: a6:3b:75:d6:65:5b:8a:e4:24:dd:28:39:2a:d6:11:73:b8:4d: 0a:12:93:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/n/Dj3IaCk0u9WS+5TnnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmYwYjMzNjUwYjdkNjQ5OGI5ZjU4YWFjNWEyOTdlOTI2 MTQ4MjIwHhcNMjYwMjA5MjAwMTE4WhcNMjYwMjEwMjAwMTE4WjAzMTEwLwYDVQQD EygyY2JjMWI5OGEyNGYyYmQ3ZGU4N2VlODI2ZDY4YjQ2NDQ1M2RjYjRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sj2BXqkEhysRm1loJLHp+gLuzm5 eudcwT+MsaIaLWfeCTbQzURus8ZuJ7+pnXNmsRfnAZRSrYbYO2reBzz/HRHmlxWD OjC2XTKnt6rUyn9Zlccd4Jqj9mL3HsSFnhaZ/LD5SdLYcLo/J3wrB0MPtIqoVcYb 4r/cGKSVAV9g5CyVMU/SmwCaPIByXqWMz1CAdQHv8pfpMf+9c+rGAp29aNO9n0Ea HIed5sJXsc06jJ5XWaHdU5aYXaXwI2SpDZDNG6ADeEeJJ+gARTSo2BL6/0kyK0Ua AHYL7d+hW/PYbYGej5N/RLn/TZkPUHk6o2Ce3LIyTqGQCSAbF91X87zKCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCy8G5iiTyvX3ofugm1otGRFPctPMB8GA1UdIwQY MBaAFHIvCzNlC31kmLn1iqxaKX6SYUgiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgt NjQ3Mjg5YWQ1YTIyLzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNi85NmQxNGYtMThjMi00M2E4LWJjNTgtNjQ3Mjg5YWQ1YTIy LzEvY2k4TE0yVUxmV1NZdWZXS3JGb3BmcEpoU0NJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGCaKHlGH FO3c+bUHzSMLmVkQmwUvkGVonZ3oUZ7evai3Z6Z0uW6bV1Je1EvEhQUBa3Ip7e+T AXuI4AKAWQTdUBcP6UMANsK89K0lpV4PyWHfBMuo05Fzf350VPCHG9Qlk/u+tDJS CNbAkQSj9SPEM6kPsss022H8QnggCReqgWhH/1UZ2HV9oYkRv6uyUOc0nBIFEtC8 b5J4ktMSinpG3s3iP4qwcEMEIKXpG7jIXhPMbswm0Q4uYitQ6V5XiKwdkaMsGOou R3NHc3zo+6O+Gc2cQLcZIA5QOXXcNDTToZd5EXhKL2bhuxIrpjt11mVbiuQk3Sg5 KtYRc7hNChKT0g== -----END CERTIFICATE-----Generated at Tue Feb 10 06:09:58 2026 by rpki-client