This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json) Hash identifier: wOCeEIybcimSd11GYadAGbezWJqp4aIwjJdK5+f2k80= Subject key identifier: 38:8A:ED:2A:22:AC:22:73:EB:8E:90:FE:EC:35:80:83:13:FC:A6:82 Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533 Certificate serial: 019C1D5F225BB2C24DF722CA816A2C2BE659 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft Manifest number: 0440 Signing time: Mon 02 Feb 2026 08:01:39 +0000 Manifest this update: Mon 02 Feb 2026 08:01:39 +0000 Manifest next update: Tue 03 Feb 2026 08:01:39 +0000 Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: GPjP0QW/pFk9qUyuKLnchi4Jmyb64KrxlDM3coSRVZg=) 2: iup8bZJXQWzi6WIn8KegueZOLKE.roa (hash: zSYxeBh1XdgerWZy0gplpGx/R0toVcfaeIhO/MDyw5s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1d:5f:22:5b:b2:c2:4d:f7:22:ca:81:6a:2c:2b:e6:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=080702932802c2743d335f67d47a4238c3324533 Validity Not Before: Feb 2 08:01:39 2026 GMT Not After : Feb 3 08:01:39 2026 GMT Subject: CN=388aed2a22ac2273eb8e90feec35808313fca682 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8a:b3:62:28:d0:42:ea:78:44:c0:f3:b8:b7: b1:17:52:35:ac:1c:6f:98:af:54:51:86:b3:9d:1a: f1:14:3d:c5:8c:19:51:0e:01:11:a7:6b:21:44:94: 2e:5e:66:ec:70:ba:36:ce:47:12:a1:7f:1a:4f:b8: 82:29:d4:54:80:fd:71:1c:de:93:54:95:8b:20:e8: 71:c8:d9:37:8c:6d:5c:48:f7:98:eb:e9:32:51:40: 47:d4:df:37:3a:4a:98:38:dd:4e:a5:3e:f6:6f:a4: dd:3a:5c:c4:d5:2a:de:6c:c3:97:58:42:ec:eb:cc: b0:42:a1:93:73:fc:34:7e:39:de:72:5b:e9:98:df: 57:16:e0:fa:74:8c:ce:c6:49:d2:90:0e:90:fd:fe: 43:57:4c:bb:cd:f4:9b:19:fc:a6:7c:d8:91:ea:ec: 58:6a:19:8d:1a:aa:bf:3c:d4:fd:4a:ff:a4:6b:19: 5c:2e:b7:a4:0b:87:98:ab:79:cc:c5:c3:79:0f:ab: c0:9d:4e:f7:de:7c:cb:1a:c2:40:03:73:84:05:c7: 42:24:2d:12:3e:73:96:2c:cf:b3:0c:83:49:d9:5f: 79:d8:e1:82:f6:45:16:9b:2e:75:ab:ef:ff:98:8e: 95:a9:9d:d9:87:18:21:f2:d8:55:27:b1:77:5a:56: d7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:8A:ED:2A:22:AC:22:73:EB:8E:90:FE:EC:35:80:83:13:FC:A6:82 X509v3 Authority Key Identifier: keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:cc:4e:8b:51:b1:b4:81:e5:52:9c:7c:00:5c:b5:87:a8:30: 25:11:3d:95:f9:b9:91:14:56:37:86:be:ff:4f:be:88:15:4b: b7:b2:84:6e:08:2d:ab:93:3a:5b:08:10:41:91:c8:39:43:50: 3d:b3:60:66:0b:6d:36:8d:62:58:77:92:5c:63:c7:24:02:6c: e9:17:6b:ab:eb:60:d7:ee:34:ee:ec:3d:40:d7:08:a1:9c:8b: d6:39:10:13:d7:76:2c:af:40:b1:5d:30:66:f8:43:75:70:fe: 7d:38:82:90:48:71:cd:60:0e:8c:fb:f2:87:a1:d1:1a:c4:d0: e4:93:0e:9e:fc:7a:a3:ab:cb:53:b0:4b:a0:86:86:56:31:70: 53:71:03:7c:fa:e1:25:12:7f:50:12:a4:59:c1:d3:87:1f:98: f7:ea:05:b6:c3:cd:48:07:53:f4:ce:7c:73:9d:1d:1a:7b:ba: 80:49:0c:2b:9a:c1:bf:f4:10:02:46:66:9a:02:2b:4e:61:e1: 6c:af:42:f9:24:6f:38:c2:cd:71:e1:99:e5:c6:7b:30:9e:6e: a0:49:a4:7f:e0:0d:d4:48:de:6e:57:3d:51:4b:b5:c6:95:7c: 27:a8:7a:72:e1:9e:09:85:c9:5d:6a:6b:c3:cb:b7:f1:fb:5e: e7:11:4f:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwdXyJbssJN9yLKgWosK+ZZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MDcwMjkzMjgwMmMyNzQzZDMzNWY2N2Q0N2E0MjM4YzMz MjQ1MzMwHhcNMjYwMjAyMDgwMTM5WhcNMjYwMjAzMDgwMTM5WjAzMTEwLwYDVQQD EygzODhhZWQyYTIyYWMyMjczZWI4ZTkwZmVlYzM1ODA4MzEzZmNhNjgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4qzYijQQup4RMDzuLexF1I1rBxv mK9UUYaznRrxFD3FjBlRDgERp2shRJQuXmbscLo2zkcSoX8aT7iCKdRUgP1xHN6T VJWLIOhxyNk3jG1cSPeY6+kyUUBH1N83OkqYON1OpT72b6TdOlzE1SrebMOXWELs 68ywQqGTc/w0fjneclvpmN9XFuD6dIzOxknSkA6Q/f5DV0y7zfSbGfymfNiR6uxY ahmNGqq/PNT9Sv+kaxlcLrekC4eYq3nMxcN5D6vAnU733nzLGsJAA3OEBcdCJC0S PnOWLM+zDINJ2V952OGC9kUWmy51q+//mI6VqZ3Zhxgh8thVJ7F3WlbX6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDiK7SoirCJz646Q/uw1gIMT/KaCMB8GA1UdIwQY MBaAFAgHApMoAsJ0PTNfZ9R6QjjDMkUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODct NDgwZmViOTJkNzE4LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9mNTMyZmQtOTFlMi00ZmI2LWJlODctNDgwZmViOTJkNzE4 LzEvQ0FjQ2t5Z0N3blE5TTE5bjFIcENPTU15UlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcxOi1Gx tIHlUpx8AFy1h6gwJRE9lfm5kRRWN4a+/0++iBVLt7KEbggtq5M6WwgQQZHIOUNQ PbNgZgttNo1iWHeSXGPHJAJs6Rdrq+tg1+407uw9QNcIoZyL1jkQE9d2LK9AsV0w ZvhDdXD+fTiCkEhxzWAOjPvyh6HRGsTQ5JMOnvx6o6vLU7BLoIaGVjFwU3EDfPrh JRJ/UBKkWcHThx+Y9+oFtsPNSAdT9M58c50dGnu6gEkMK5rBv/QQAkZmmgIrTmHh bK9C+SRvOMLNceGZ5cZ7MJ5uoEmkf+AN1Ejeblc9UUu1xpV8J6h6cuGeCYXJXWpr w8u38fte5xFPOg== -----END CERTIFICATE-----Generated at Mon Feb 2 09:42:28 2026 by rpki-client