This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft File: CBdeCjbHidMUILMzA_vHMkx8V0s.mft (raw, json) Hash identifier: YIsBvTINpLEGsPMeXHJbB3BCnGdrSEo7DAQKOkL80go= Subject key identifier: 87:88:58:08:F8:D9:7E:82:82:83:34:9E:2B:D0:B2:B6:C6:4D:B5:D4 Authority key identifier: 08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B Certificate issuer: /CN=08175e0a36c789d31420b33303fbc7324c7c574b Certificate serial: 019C438FCB1F221AB888186FC402BC6FFB65 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 18:00:22 +0000 Manifest this update: Mon 09 Feb 2026 18:00:22 +0000 Manifest next update: Tue 10 Feb 2026 18:00:22 +0000 Files and hashes: 1: CBdeCjbHidMUILMzA_vHMkx8V0s.crl (hash: Eq1QntqJyQAXOyfk/N4z/6hOG5POGhceP0UzM6NoF4U=) 2: bdduhsz8vwLBqSyTE27HjB5Ob78.roa (hash: aokpOL01pXRHSdD/dTgVwAX6LVkz2WKtZLNrBNvxDiw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:cb:1f:22:1a:b8:88:18:6f:c4:02:bc:6f:fb:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08175e0a36c789d31420b33303fbc7324c7c574b Validity Not Before: Feb 9 18:00:22 2026 GMT Not After : Feb 10 18:00:22 2026 GMT Subject: CN=87885808f8d97e828283349e2bd0b2b6c64db5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e8:a4:93:bb:67:c0:1f:8e:ea:26:2f:0f:4d: 25:ae:d8:9f:0a:c5:09:a7:b1:87:e5:91:57:d4:c0: 06:43:09:10:c0:33:12:04:6f:c4:85:c8:47:c5:f6: 82:2d:6c:53:8c:22:62:6f:aa:6d:22:f8:cf:82:c2: d2:70:4f:5c:ed:89:07:7e:58:8f:c7:76:f6:2a:c2: f7:d8:48:00:c5:64:fd:ba:d7:68:d6:c6:6e:2e:de: 37:76:cb:03:2a:40:a3:9e:9c:b2:84:92:1f:d2:c0: c9:6a:ef:f6:0e:4d:3a:ac:24:57:1b:db:04:a5:a4: ab:35:60:20:8e:31:ec:0a:2c:a6:6f:a2:76:29:84: 38:e6:68:cf:f2:e9:2f:19:f6:4e:4e:f3:5b:ef:fc: 65:a1:8c:80:7f:e7:ae:58:c3:ec:22:dd:0b:84:68: 89:95:99:e9:6a:33:df:37:1e:16:4f:3a:37:3b:8c: 1e:3a:f0:b2:35:fd:db:53:29:2c:08:69:0c:a0:81: 9a:a5:e0:b0:d7:5e:ff:3e:6c:95:4d:74:40:ed:8b: 70:cd:64:b1:e9:c8:b7:d8:2a:47:ef:a1:61:73:9e: 2c:14:23:07:47:b5:6d:60:d9:54:7b:0f:b9:61:03: 63:8d:fc:c2:dd:81:9c:13:ef:34:36:99:dd:5e:25: be:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:88:58:08:F8:D9:7E:82:82:83:34:9E:2B:D0:B2:B6:C6:4D:B5:D4 X509v3 Authority Key Identifier: keyid:08:17:5E:0A:36:C7:89:D3:14:20:B3:33:03:FB:C7:32:4C:7C:57:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBdeCjbHidMUILMzA_vHMkx8V0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/28e9cb-8ef3-482a-8ed1-2f50708ac57f/1/CBdeCjbHidMUILMzA_vHMkx8V0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:09:c3:33:03:20:8c:43:d4:2c:63:66:87:a8:2d:ea:12:e6: 42:f2:c8:03:5b:6e:a1:88:91:c8:5c:0a:0e:fe:dc:4f:e0:72: 60:d9:31:2e:27:4e:e6:24:ec:27:32:32:f9:32:3f:de:fb:51: c9:d7:52:39:b6:03:18:b4:84:51:aa:27:06:15:11:85:82:dc: 2a:10:60:a1:2b:f0:e8:a2:b3:c4:7e:17:82:b9:41:57:06:cc: 20:50:22:10:f4:a1:df:77:76:01:f8:b8:f8:d3:c4:c8:fd:3e: ea:93:0b:3b:c5:90:04:50:0f:f4:85:11:47:29:56:af:31:9c: f4:35:fc:4e:30:22:37:a5:c8:af:01:6b:f8:2b:7f:68:63:c5: 2b:30:f5:d9:4e:9b:b4:ad:07:c4:aa:c7:20:10:cb:ac:a5:d9: f2:83:fb:4c:d7:6a:03:9f:e6:fd:eb:c7:ab:9e:8c:9a:46:93: c8:83:0f:bc:94:9e:b5:f3:1e:9b:07:6a:18:2b:f5:8c:2a:89: f5:10:fc:2b:54:28:70:17:73:2a:71:54:e0:0f:e7:ec:73:ca: 38:9a:6f:96:04:7c:c4:fb:11:12:f6:3a:19:80:ef:0f:e9:ff: 1f:d6:35:17:e0:b1:0f:e1:84:d7:a9:81:07:34:c3:f2:f5:e4: fe:ee:00:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8sfIhq4iBhvxAK8b/tlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTc1ZTBhMzZjNzg5ZDMxNDIwYjMzMzAzZmJjNzMyNGM3 YzU3NGIwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD Eyg4Nzg4NTgwOGY4ZDk3ZTgyODI4MzM0OWUyYmQwYjJiNmM2NGRiNWQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8eikk7tnwB+O6iYvD00lrtifCsUJ p7GH5ZFX1MAGQwkQwDMSBG/EhchHxfaCLWxTjCJib6ptIvjPgsLScE9c7YkHfliP x3b2KsL32EgAxWT9utdo1sZuLt43dssDKkCjnpyyhJIf0sDJau/2Dk06rCRXG9sE paSrNWAgjjHsCiymb6J2KYQ45mjP8ukvGfZOTvNb7/xloYyAf+euWMPsIt0LhGiJ lZnpajPfNx4WTzo3O4weOvCyNf3bUyksCGkMoIGapeCw117/PmyVTXRA7YtwzWSx 6ci32CpH76Fhc54sFCMHR7VtYNlUew+5YQNjjfzC3YGcE+80NpndXiW+fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIeIWAj42X6CgoM0nivQsrbGTbXUMB8GA1UdIwQY MBaAFAgXXgo2x4nTFCCzMwP7xzJMfFdLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEt MmY1MDcwOGFjNTdmLzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8yOGU5Y2ItOGVmMy00ODJhLThlZDEtMmY1MDcwOGFjNTdm LzEvQ0JkZUNqYkhpZE1VSUxNekFfdkhNa3g4VjBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGQnDMwMg jEPULGNmh6gt6hLmQvLIA1tuoYiRyFwKDv7cT+ByYNkxLidO5iTsJzIy+TI/3vtR yddSObYDGLSEUaonBhURhYLcKhBgoSvw6KKzxH4XgrlBVwbMIFAiEPSh33d2Afi4 +NPEyP0+6pMLO8WQBFAP9IURRylWrzGc9DX8TjAiN6XIrwFr+Ct/aGPFKzD12U6b tK0HxKrHIBDLrKXZ8oP7TNdqA5/m/evHq56MmkaTyIMPvJSetfMemwdqGCv1jCqJ 9RD8K1QocBdzKnFU4A/n7HPKOJpvlgR8xPsREvY6GYDvD+n/H9Y1F+CxD+GE16mB BzTD8vXk/u4AoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:02 2026 by rpki-client