This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft File: cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft (raw, json) Hash identifier: FYE6QvG9FCLf70NX/yJJb3oeadwLL2M0ydA9jhN/3vw= Subject key identifier: BA:25:54:33:DA:38:8B:0E:0C:A9:78:F6:96:A7:07:9F:57:43:20:9A Authority key identifier: 71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23 Certificate issuer: /CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23 Certificate serial: 019C41D8A95A45B3BEA77B6C62A6874B7961 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 10:00:43 +0000 Manifest this update: Mon 09 Feb 2026 10:00:43 +0000 Manifest next update: Tue 10 Feb 2026 10:00:43 +0000 Files and hashes: 1: Qy_arNs4QDgtO2oRm6RpY_yvLkM.roa (hash: sM686aC1vKRTxadqylfi5DLdDcH3yJBn9EUNjVW3g+A=) 2: cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl (hash: cp77UfnaKGYjvL7ctQ81gqVPmgNsSVVr3c6Js25GlVQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:a9:5a:45:b3:be:a7:7b:6c:62:a6:87:4b:79:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71d39d6c50dd309ee9286c302dfb15245bdbaf23 Validity Not Before: Feb 9 10:00:43 2026 GMT Not After : Feb 10 10:00:43 2026 GMT Subject: CN=ba255433da388b0e0ca978f696a7079f5743209a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:5d:df:28:2e:e2:d3:3b:99:f5:fa:ef:de: 7c:d7:99:68:8f:16:24:4c:1e:3a:75:41:24:fd:4a: f3:66:21:3f:3a:36:8c:76:15:86:e4:91:a9:00:d3: 4c:2d:b5:01:a8:24:ea:77:eb:be:55:b7:a6:50:90: 49:69:d1:ed:03:31:ec:b2:30:8f:fb:77:87:41:51: 24:18:22:03:b7:26:a9:5c:92:0a:3b:55:36:77:31: 22:76:de:25:13:fd:8e:72:75:68:94:72:3b:5d:fd: 0a:41:40:fc:27:00:14:a5:f4:21:af:8f:99:be:a2: c9:99:7d:03:b4:bb:5b:d7:b5:54:12:73:cb:a2:4b: d6:d4:ed:c2:5b:5f:45:76:69:50:6d:81:13:d0:e4: 5f:09:c0:43:31:fa:12:17:3e:cd:34:6d:7f:71:47: 37:e2:ae:c6:d0:fb:65:79:51:d0:ae:8a:f1:35:9b: da:76:08:62:45:da:41:67:d2:38:7a:d5:36:ed:f2: 36:3b:54:3b:45:42:88:b0:29:3d:df:df:10:c1:c2: 92:74:27:05:7b:f3:1a:b9:cb:43:76:32:d7:fb:88: 8d:3d:66:ae:24:b9:9f:12:d1:cc:5d:7f:f4:ed:e7: c3:04:20:97:88:71:f4:88:c1:e8:95:5d:c5:02:e8: 90:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:25:54:33:DA:38:8B:0E:0C:A9:78:F6:96:A7:07:9F:57:43:20:9A X509v3 Authority Key Identifier: keyid:71:D3:9D:6C:50:DD:30:9E:E9:28:6C:30:2D:FB:15:24:5B:DB:AF:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdOdbFDdMJ7pKGwwLfsVJFvbryM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/b1e63b-01ab-4c05-84a7-45e1c77a18c0/1/cdOdbFDdMJ7pKGwwLfsVJFvbryM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a5:02:ef:5e:54:09:a6:fb:7f:14:73:74:d6:1c:59:65:d1: 20:bf:4d:a4:bb:75:10:9f:cc:98:f2:71:b4:12:4b:2f:f7:df: ce:7a:53:60:97:77:57:91:ae:5a:d1:1e:2b:fd:6f:13:76:d1: 98:be:42:e5:43:ef:4b:83:3a:96:2d:d8:8c:84:00:77:28:a5: cb:01:d9:af:fb:18:f2:21:00:a4:05:34:44:c5:12:2c:1b:fa: 5c:a7:8f:45:c0:ee:d3:81:b4:e8:4d:5a:2e:5a:ec:72:63:e3: 64:c3:99:41:0b:6e:41:23:b6:fb:b1:c0:dc:fc:c5:c7:e9:70: 32:4d:3c:40:d9:fb:3d:eb:e5:e2:03:cd:99:17:0f:39:f7:e0: ea:d7:af:91:14:c8:52:b0:7b:ad:9f:34:d5:ab:27:79:e3:0a: 47:30:43:23:8c:3f:2d:7c:55:f8:8b:1a:1c:41:fb:d0:dc:ed: a9:76:c6:27:50:1c:c5:14:d5:b7:2e:f4:ec:c8:a1:3b:20:2d: 17:f9:99:59:a5:39:ea:4a:d5:79:7d:d0:d8:42:6c:fe:60:9f: 4c:e0:41:1d:24:63:e2:92:04:cc:cb:b2:0f:5d:cf:e2:24:59: d1:06:35:5e:c2:29:05:16:a7:20:23:6b:5b:77:cd:c4:ae:c0: 36:b0:3e:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2KlaRbO+p3tsYqaHS3lhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxZDM5ZDZjNTBkZDMwOWVlOTI4NmMzMDJkZmIxNTI0NWJk YmFmMjMwHhcNMjYwMjA5MTAwMDQzWhcNMjYwMjEwMTAwMDQzWjAzMTEwLwYDVQQD EyhiYTI1NTQzM2RhMzg4YjBlMGNhOTc4ZjY5NmE3MDc5ZjU3NDMyMDlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQxd3ygu4tM7mfX6795815lojxYk TB46dUEk/UrzZiE/OjaMdhWG5JGpANNMLbUBqCTqd+u+VbemUJBJadHtAzHssjCP +3eHQVEkGCIDtyapXJIKO1U2dzEidt4lE/2OcnVolHI7Xf0KQUD8JwAUpfQhr4+Z vqLJmX0DtLtb17VUEnPLokvW1O3CW19FdmlQbYET0ORfCcBDMfoSFz7NNG1/cUc3 4q7G0PtleVHQrorxNZvadghiRdpBZ9I4etU27fI2O1Q7RUKIsCk9398QwcKSdCcF e/MauctDdjLX+4iNPWauJLmfEtHMXX/07efDBCCXiHH0iMHolV3FAuiQWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLolVDPaOIsODKl49panB59XQyCaMB8GA1UdIwQY MBaAFHHTnWxQ3TCe6ShsMC37FSRb268jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2RPZGJGRGRNSjdwS0d3d0xmc1ZKRnZicnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9iMWU2M2ItMDFhYi00YzA1LTg0YTct NDVlMWM3N2ExOGMwLzEvY2RPZGJGRGRNSjdwS0d3d0xmc1ZKRnZicnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9iMWU2M2ItMDFhYi00YzA1LTg0YTctNDVlMWM3N2ExOGMw LzEvY2RPZGJGRGRNSjdwS0d3d0xmc1ZKRnZicnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKUC715U Cab7fxRzdNYcWWXRIL9NpLt1EJ/MmPJxtBJLL/ffznpTYJd3V5GuWtEeK/1vE3bR mL5C5UPvS4M6li3YjIQAdyilywHZr/sY8iEApAU0RMUSLBv6XKePRcDu04G06E1a LlrscmPjZMOZQQtuQSO2+7HA3PzFx+lwMk08QNn7Pevl4gPNmRcPOffg6tevkRTI UrB7rZ801asneeMKRzBDI4w/LXxV+IsaHEH70NztqXbGJ1AcxRTVty707MihOyAt F/mZWaU56krVeX3Q2EJs/mCfTOBBHSRj4pIEzMuyD13P4iRZ0QY1XsIpBRanICNr W3fNxK7ANrA+oA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:33 2026 by rpki-client