This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft File: cT5FABqFXik4GRnXmdzLbBGQtaw.mft (raw, json) Hash identifier: JU1mpNNuvgfSfg7WS1MIg5FRDcZ933ffaiHDqpI0R+M= Subject key identifier: A5:F3:D1:B0:90:F3:A7:39:16:1B:E2:F0:59:DB:78:48:BD:8B:D5:F0 Authority key identifier: 71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC Certificate issuer: /CN=713e45001a855e29381919d799dccb6c1190b5ac Certificate serial: 019C4322E9C21CECBACC80F129F46B23918E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft Manifest number: 0B42 Signing time: Mon 09 Feb 2026 16:01:27 +0000 Manifest this update: Mon 09 Feb 2026 16:01:27 +0000 Manifest next update: Tue 10 Feb 2026 16:01:27 +0000 Files and hashes: 1: cT5FABqFXik4GRnXmdzLbBGQtaw.crl (hash: O9v3wrP13LHnjXrrQWNR9cSsY91fXobqo333k3vve40=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:e9:c2:1c:ec:ba:cc:80:f1:29:f4:6b:23:91:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=713e45001a855e29381919d799dccb6c1190b5ac Validity Not Before: Feb 9 16:01:27 2026 GMT Not After : Feb 10 16:01:27 2026 GMT Subject: CN=a5f3d1b090f3a739161be2f059db7848bd8bd5f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:46:a2:41:df:50:ac:3b:3b:6f:d7:1c:96: 5c:b8:78:78:24:54:af:8c:46:81:9b:cc:33:e1:d1: d2:4d:aa:2f:42:5b:ea:33:5f:dd:45:2b:a5:6d:67: 23:1d:83:b4:fe:ec:8a:69:8e:4b:23:ad:d6:29:52: 6a:53:ef:6c:2d:e0:91:40:ed:9d:c1:67:d6:4b:79: 18:6a:98:bb:6e:2c:ab:af:d3:ee:90:dc:50:85:79: 03:85:a1:94:84:16:8f:eb:f2:54:a6:17:e3:fe:5c: 8b:ab:a5:95:43:06:eb:e1:f8:9e:5e:cd:dd:3c:9f: 89:2d:be:76:c1:51:86:5e:49:83:d3:3f:23:e0:22: 00:8b:fe:13:79:30:48:1d:1e:12:04:76:5f:4d:f2: f7:ba:dc:3d:ed:ad:52:59:d8:e8:7c:52:0d:17:a1: 7f:6b:d1:6d:72:ed:f2:7e:b0:cb:07:d9:2d:bc:a1: 19:87:79:2e:3f:11:93:fe:2b:bb:8d:fc:c7:5d:e2: 11:dd:05:28:6e:0d:91:6d:ea:e8:b8:52:16:07:9a: 30:c3:74:2e:43:f2:ce:d8:23:76:51:eb:99:98:93: bc:34:c1:68:ba:81:49:4d:1c:23:65:5f:45:42:eb: 96:ae:f1:0f:d2:f5:61:c6:46:a8:6c:ab:10:71:f6: a6:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F3:D1:B0:90:F3:A7:39:16:1B:E2:F0:59:DB:78:48:BD:8B:D5:F0 X509v3 Authority Key Identifier: keyid:71:3E:45:00:1A:85:5E:29:38:19:19:D7:99:DC:CB:6C:11:90:B5:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cT5FABqFXik4GRnXmdzLbBGQtaw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ca46fb-3734-4a92-87cb-65f12b2e7970/1/cT5FABqFXik4GRnXmdzLbBGQtaw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:51:a4:d9:58:bb:1d:51:b0:53:99:5a:13:43:85:95:3b:35: 2c:38:df:67:71:88:eb:8d:34:3d:eb:94:ab:6d:86:2a:dd:7c: aa:6f:97:eb:59:3c:5a:d2:4d:82:b8:2c:17:41:b2:da:8c:07: 9c:9b:90:c3:3a:70:f0:72:7f:3c:16:a9:bd:b8:15:f7:bd:78: 3e:41:a2:cb:f1:34:07:59:2e:17:25:99:cd:01:ee:b9:c3:a1: 06:69:be:3c:5d:f5:e6:06:82:d1:0f:b2:ac:a7:92:ae:7c:6e: a7:0b:7e:c5:8f:01:55:76:c1:53:7e:76:6c:a2:5c:f1:78:ba: 01:f4:96:ac:02:35:b9:7b:e8:d2:14:82:e2:74:d9:0b:5e:eb: 14:61:a7:e9:33:33:86:dd:66:1c:a4:d6:71:ed:92:6b:f8:e5: 95:46:41:e3:9e:69:08:f1:e1:ca:df:8b:62:d4:96:61:8c:91: 72:fb:f9:5b:a4:4c:06:ab:aa:57:c5:b4:c7:90:f5:e4:0b:e6: 8e:cc:0a:8d:91:66:41:7c:bb:8a:fc:a8:65:76:66:6a:4f:0b: b6:28:7a:38:b8:65:96:00:dd:44:b4:dc:ef:6b:c9:ce:18:bd: db:06:74:1c:9e:f9:ac:b1:9e:a0:86:ad:39:72:f8:80:18:ae: 1f:2a:a4:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIunCHOy6zIDxKfRrI5GOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxM2U0NTAwMWE4NTVlMjkzODE5MTlkNzk5ZGNjYjZjMTE5 MGI1YWMwHhcNMjYwMjA5MTYwMTI3WhcNMjYwMjEwMTYwMTI3WjAzMTEwLwYDVQQD EyhhNWYzZDFiMDkwZjNhNzM5MTYxYmUyZjA1OWRiNzg0OGJkOGJkNWYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ENGokHfUKw7O2/XHJZcuHh4JFSv jEaBm8wz4dHSTaovQlvqM1/dRSulbWcjHYO0/uyKaY5LI63WKVJqU+9sLeCRQO2d wWfWS3kYapi7biyrr9PukNxQhXkDhaGUhBaP6/JUphfj/lyLq6WVQwbr4fieXs3d PJ+JLb52wVGGXkmD0z8j4CIAi/4TeTBIHR4SBHZfTfL3utw97a1SWdjofFINF6F/ a9Ftcu3yfrDLB9ktvKEZh3kuPxGT/iu7jfzHXeIR3QUobg2RberouFIWB5oww3Qu Q/LO2CN2UeuZmJO8NMFouoFJTRwjZV9FQuuWrvEP0vVhxkaobKsQcfamgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXz0bCQ86c5Fhvi8FnbeEi9i9XwMB8GA1UdIwQY MBaAFHE+RQAahV4pOBkZ15ncy2wRkLWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2It NjVmMTJiMmU3OTcwLzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy9jYTQ2ZmItMzczNC00YTkyLTg3Y2ItNjVmMTJiMmU3OTcw LzEvY1Q1RkFCcUZYaWs0R1JuWG1kekxiQkdRdGF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApFGk2Vi7 HVGwU5laE0OFlTs1LDjfZ3GI6400PeuUq22GKt18qm+X61k8WtJNgrgsF0Gy2owH nJuQwzpw8HJ/PBapvbgV9714PkGiy/E0B1kuFyWZzQHuucOhBmm+PF315gaC0Q+y rKeSrnxupwt+xY8BVXbBU352bKJc8Xi6AfSWrAI1uXvo0hSC4nTZC17rFGGn6TMz ht1mHKTWce2Sa/jllUZB455pCPHhyt+LYtSWYYyRcvv5W6RMBquqV8W0x5D15Avm jswKjZFmQXy7ivyoZXZmak8Ltih6OLhllgDdRLTc72vJzhi92wZ0HJ75rLGeoIat OXL4gBiuHyqkVw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:46 2026 by rpki-client