This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft File: CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft (raw, json) Hash identifier: UjcPMRylInr4+B+xp5ARPzIL5iayhEJSSTy0LqEshck= Subject key identifier: FB:DA:BC:32:71:E4:BB:D6:40:71:12:A6:4C:2B:50:6D:D2:B5:6A:E5 Authority key identifier: 08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6 Certificate issuer: /CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6 Certificate serial: 019C424640C97842DAE8F473DF4DA2522DD6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft Manifest number: 1477 Signing time: Mon 09 Feb 2026 12:00:26 +0000 Manifest this update: Mon 09 Feb 2026 12:00:26 +0000 Manifest next update: Tue 10 Feb 2026 12:00:26 +0000 Files and hashes: 1: CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl (hash: 3wEf8t5fXvH47Cb3E9OcpPt5hk4c2+V+WO4emPTY3TY=) 2: S6WAJx7TbU110k_g0oyFg1H_34U.roa (hash: toyst882a1xCVx/3FvwHIaERW16kFo9wkqRcGIDeq00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:40:c9:78:42:da:e8:f4:73:df:4d:a2:52:2d:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a34daaa887d98a5348c3a460a21fc84e11a4e6 Validity Not Before: Feb 9 12:00:26 2026 GMT Not After : Feb 10 12:00:26 2026 GMT Subject: CN=fbdabc3271e4bbd6407112a64c2b506dd2b56ae5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:60:7e:3f:d4:ad:e3:19:cb:40:45:ec:ba:1e: c1:bd:6b:e8:63:65:58:99:9e:18:02:5a:06:1c:16: 6b:cc:99:8c:12:7d:4f:22:2a:8c:5c:bd:7f:4b:41: 4a:0c:b9:22:8e:40:d4:17:76:fc:b9:c2:c8:12:15: 09:b5:0a:12:90:31:ec:d6:a2:d2:f6:5b:d6:3c:ae: 72:47:ea:93:64:2f:bf:7a:51:46:32:66:5f:07:c5: 0b:a6:0d:e3:23:dd:b1:23:9d:a3:ed:07:2b:94:18: 1a:5f:41:09:40:3e:71:90:f3:98:0a:96:29:74:83: 6d:f4:b7:1f:c0:cf:81:d0:0d:6c:bf:8d:cc:63:1c: 51:74:10:17:78:4c:34:4a:ae:95:aa:1d:03:88:9d: c6:10:0c:fd:ba:22:33:f9:eb:ed:ae:47:63:45:81: a0:b5:62:ac:ab:e8:bf:b8:fc:ff:52:06:52:a7:c8: fa:5a:d7:ea:52:0b:79:08:63:74:4a:d6:ff:46:91: 29:7f:4d:c2:cf:0d:60:c2:6f:11:91:9c:b0:4e:8c: 89:5c:d6:9e:02:a9:26:b2:6b:d8:4c:60:97:23:8f: 3b:4e:5e:80:f1:1e:2f:43:47:de:4a:10:56:79:5f: 18:09:b5:63:c2:96:c5:b6:67:4d:80:47:83:5f:ee: d7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DA:BC:32:71:E4:BB:D6:40:71:12:A6:4C:2B:50:6D:D2:B5:6A:E5 X509v3 Authority Key Identifier: keyid:08:A3:4D:AA:A8:87:D9:8A:53:48:C3:A4:60:A2:1F:C8:4E:11:A4:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKNNqqiH2YpTSMOkYKIfyE4RpOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f433c3-132f-4d66-bd30-c62cf20a5ec9/1/CKNNqqiH2YpTSMOkYKIfyE4RpOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:45:80:f8:e5:26:c6:95:ba:5b:d2:bf:24:92:ee:ef:b7:e2: fe:31:9e:de:07:15:31:a0:53:fd:ed:36:47:8f:1f:0b:44:8b: da:19:79:7c:8f:09:7d:9d:67:6a:6d:68:b6:96:ad:54:84:cc: 23:c0:33:f8:d4:5f:bb:43:f4:01:e0:eb:a7:a3:fa:ba:d3:b9: c5:dc:e7:7c:36:e6:f4:a3:1f:35:54:66:9d:0f:88:97:f0:c0: fe:0d:07:9f:c6:7d:f3:34:2f:5e:cf:49:c8:a6:26:19:da:8e: 9c:ae:ad:53:b4:7a:ef:16:17:27:f5:e4:8c:28:51:ad:81:45: 58:de:8f:9a:c1:dd:17:57:34:45:c3:26:98:6a:e9:aa:df:6e: 4b:26:4c:72:79:66:ff:a1:77:15:4b:f2:b8:65:4c:6e:af:8b: 66:3e:b4:a1:b1:de:2b:82:01:8a:ea:1a:86:10:d2:9b:f8:ab: 80:a5:36:ed:46:b0:01:be:f5:35:74:9c:33:da:2c:7e:ea:96: 62:21:0a:56:84:33:21:94:26:7c:b0:63:cf:39:50:96:c4:6b: b4:5f:55:7f:f3:f5:34:9d:fb:e8:62:b1:3d:ba:6e:61:1e:ba: 48:8e:c0:32:af:c4:13:be:fe:78:88:57:1c:74:ba:08:da:a6: bd:66:f8:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkDJeELa6PRz302iUi3WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YTM0ZGFhYTg4N2Q5OGE1MzQ4YzNhNDYwYTIxZmM4NGUx MWE0ZTYwHhcNMjYwMjA5MTIwMDI2WhcNMjYwMjEwMTIwMDI2WjAzMTEwLwYDVQQD EyhmYmRhYmMzMjcxZTRiYmQ2NDA3MTEyYTY0YzJiNTA2ZGQyYjU2YWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmB+P9St4xnLQEXsuh7BvWvoY2VY mZ4YAloGHBZrzJmMEn1PIiqMXL1/S0FKDLkijkDUF3b8ucLIEhUJtQoSkDHs1qLS 9lvWPK5yR+qTZC+/elFGMmZfB8ULpg3jI92xI52j7QcrlBgaX0EJQD5xkPOYCpYp dINt9LcfwM+B0A1sv43MYxxRdBAXeEw0Sq6Vqh0DiJ3GEAz9uiIz+evtrkdjRYGg tWKsq+i/uPz/UgZSp8j6WtfqUgt5CGN0Stb/RpEpf03Czw1gwm8RkZywToyJXNae AqkmsmvYTGCXI487Tl6A8R4vQ0feShBWeV8YCbVjwpbFtmdNgEeDX+7XkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPvavDJx5LvWQHESpkwrUG3StWrlMB8GA1UdIwQY MBaAFAijTaqoh9mKU0jDpGCiH8hOEaTmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAt YzYyY2YyMGE1ZWM5LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mNDMzYzMtMTMyZi00ZDY2LWJkMzAtYzYyY2YyMGE1ZWM5 LzEvQ0tOTnFxaUgyWXBUU01Pa1lLSWZ5RTRScE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAakWA+OUm xpW6W9K/JJLu77fi/jGe3gcVMaBT/e02R48fC0SL2hl5fI8JfZ1nam1otpatVITM I8Az+NRfu0P0AeDrp6P6utO5xdznfDbm9KMfNVRmnQ+Il/DA/g0Hn8Z98zQvXs9J yKYmGdqOnK6tU7R67xYXJ/XkjChRrYFFWN6PmsHdF1c0RcMmmGrpqt9uSyZMcnlm /6F3FUvyuGVMbq+LZj60obHeK4IBiuoahhDSm/irgKU27UawAb71NXScM9osfuqW YiEKVoQzIZQmfLBjzzlQlsRrtF9Vf/P1NJ376GKxPbpuYR66SI7AMq/EE77+eIhX HHS6CNqmvWb4/g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:27 2026 by rpki-client