This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft File: cW9tEfDOYyMBgac_haZmFw9zib0.mft (raw, json) Hash identifier: f+1pSdBbZ3l56mI2UadwlqHKqf5cj8oTLEn/m5AvXcY= Subject key identifier: CE:F6:D0:87:8E:1F:0F:E4:A7:8E:7A:AA:47:95:29:4A:B3:64:C4:85 Authority key identifier: 71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD Certificate issuer: /CN=716f6d11f0ce63230181a73f85a666170f7389bd Certificate serial: 019C427DF1BD0E2A428123926B29ECF91831 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft Manifest number: 0D32 Signing time: Mon 09 Feb 2026 13:01:15 +0000 Manifest this update: Mon 09 Feb 2026 13:01:15 +0000 Manifest next update: Tue 10 Feb 2026 13:01:15 +0000 Files and hashes: 1: 6f1i3xvOw5Akrk8EPZTaku38e58.roa (hash: yAZKqI7wHi0H5V8PrGtfeSpp18rf8v5uoZXgPYXu5QA=) 2: cW9tEfDOYyMBgac_haZmFw9zib0.crl (hash: LafiCFb3uIm2eangwMVoFpFRS7Yk9uETISDT3PgZD6Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f1:bd:0e:2a:42:81:23:92:6b:29:ec:f9:18:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=716f6d11f0ce63230181a73f85a666170f7389bd Validity Not Before: Feb 9 13:01:15 2026 GMT Not After : Feb 10 13:01:15 2026 GMT Subject: CN=cef6d0878e1f0fe4a78e7aaa4795294ab364c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b3:27:9a:a3:e0:38:2b:dc:4a:23:79:70:e7: 4d:57:22:ff:0f:95:8e:4b:73:f8:13:89:b7:5b:c6: ae:2f:a1:34:6f:71:a6:bd:52:d1:6e:94:56:b3:8e: 9a:b2:9e:4a:9e:f6:1b:31:2d:17:e2:71:0e:2c:b1: 63:c6:c0:33:26:f0:2e:9f:10:80:d2:58:1f:18:42: 82:f9:80:cc:7f:c1:19:1a:9f:4c:24:10:18:9e:8a: 6f:0d:c9:69:10:ee:62:8b:e2:2f:e1:fd:b8:64:89: 4c:a7:32:13:93:b6:57:69:2f:5c:6e:96:63:b6:c7: d5:af:63:ff:fa:36:46:be:90:39:37:18:ba:c1:e4: 87:f1:cd:b6:69:1a:0f:a2:50:72:0e:29:65:db:d1: 37:b8:d0:e8:08:72:2f:33:89:4f:74:e2:e9:e3:9a: af:f5:49:6d:5f:53:08:22:79:36:f9:8a:cf:b4:2b: 1b:a4:b5:d0:04:43:00:0f:9a:bf:6b:66:d4:38:d2: 5a:0f:97:d8:8d:77:4a:b1:ae:06:46:0b:ff:63:bb: 8b:05:fe:f8:9b:5f:52:49:8d:63:4e:12:a0:96:20: d1:5c:da:97:58:64:37:8a:21:16:21:6f:33:71:44: ff:a2:e0:49:c1:54:d5:b2:af:c6:d5:f0:a0:1d:4e: 75:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:F6:D0:87:8E:1F:0F:E4:A7:8E:7A:AA:47:95:29:4A:B3:64:C4:85 X509v3 Authority Key Identifier: keyid:71:6F:6D:11:F0:CE:63:23:01:81:A7:3F:85:A6:66:17:0F:73:89:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cW9tEfDOYyMBgac_haZmFw9zib0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/b6a233-6f80-4f4e-9312-e3f49ac49560/1/cW9tEfDOYyMBgac_haZmFw9zib0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:60:84:81:90:b8:7d:da:62:8f:0a:df:f9:50:70:68:d2:2c: 75:56:25:66:c4:e1:62:a2:2b:1a:67:ec:55:4b:f3:26:1c:0f: 67:0d:44:88:50:8d:d5:a9:44:bc:d8:9e:71:5c:72:d2:ab:cc: 2a:53:e3:1c:e0:4a:7d:31:3d:91:6d:61:c9:3a:51:db:7f:bc: a7:01:88:38:88:8d:84:a9:8e:68:cf:3b:b1:dd:73:f8:76:7a: d7:13:75:02:71:4b:57:07:a9:bb:dd:f7:59:b3:ea:4e:0b:e6: 0c:68:bb:43:23:ad:4e:8f:20:d0:a8:12:b5:30:5f:0a:0b:9c: b7:2f:7e:b0:86:b2:79:70:d0:d9:a5:86:69:2e:c0:d2:3e:c1: 38:38:98:63:1a:06:f2:4d:90:d1:30:51:d8:8d:27:ba:ae:5f: fc:10:6e:4f:cb:e1:f4:ca:96:80:1c:fb:fb:25:16:cc:e0:cb: 23:f8:b4:71:fe:24:aa:78:82:97:6e:5f:01:d9:f1:0d:9e:d6: 93:5b:74:3e:58:21:99:33:e3:e8:2e:c7:78:04:01:57:b6:ef: 3b:c8:5f:28:ff:38:28:77:b9:b4:42:c0:2e:3d:54:d7:8a:2f: 9d:c9:69:e0:01:62:81:21:20:bd:b3:a9:b4:a2:aa:7d:4d:74: b0:af:25:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffG9DipCgSOSayns+RgxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNmY2ZDExZjBjZTYzMjMwMTgxYTczZjg1YTY2NjE3MGY3 Mzg5YmQwHhcNMjYwMjA5MTMwMTE1WhcNMjYwMjEwMTMwMTE1WjAzMTEwLwYDVQQD EyhjZWY2ZDA4NzhlMWYwZmU0YTc4ZTdhYWE0Nzk1Mjk0YWIzNjRjNDg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rMnmqPgOCvcSiN5cOdNVyL/D5WO S3P4E4m3W8auL6E0b3GmvVLRbpRWs46asp5KnvYbMS0X4nEOLLFjxsAzJvAunxCA 0lgfGEKC+YDMf8EZGp9MJBAYnopvDclpEO5ii+Iv4f24ZIlMpzITk7ZXaS9cbpZj tsfVr2P/+jZGvpA5Nxi6weSH8c22aRoPolByDill29E3uNDoCHIvM4lPdOLp45qv 9UltX1MIInk2+YrPtCsbpLXQBEMAD5q/a2bUONJaD5fYjXdKsa4GRgv/Y7uLBf74 m19SSY1jThKgliDRXNqXWGQ3iiEWIW8zcUT/ouBJwVTVsq/G1fCgHU51ewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM720IeOHw/kp456qkeVKUqzZMSFMB8GA1UdIwQY MBaAFHFvbRHwzmMjAYGnP4WmZhcPc4m9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTIt ZTNmNDlhYzQ5NTYwLzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9iNmEyMzMtNmY4MC00ZjRlLTkzMTItZTNmNDlhYzQ5NTYw LzEvY1c5dEVmRE9ZeU1CZ2FjX2hhWm1Gdzl6aWIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGCEgZC4 fdpijwrf+VBwaNIsdVYlZsThYqIrGmfsVUvzJhwPZw1EiFCN1alEvNiecVxy0qvM KlPjHOBKfTE9kW1hyTpR23+8pwGIOIiNhKmOaM87sd1z+HZ61xN1AnFLVwepu933 WbPqTgvmDGi7QyOtTo8g0KgStTBfCgucty9+sIayeXDQ2aWGaS7A0j7BODiYYxoG 8k2Q0TBR2I0nuq5f/BBuT8vh9MqWgBz7+yUWzODLI/i0cf4kqniCl25fAdnxDZ7W k1t0PlghmTPj6C7HeAQBV7bvO8hfKP84KHe5tELALj1U14ovnclp4AFigSEgvbOp tKKqfU10sK8lsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:31 2026 by rpki-client