This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft File: ClCzt81M47FFt1O_cXmpVczSkl0.mft (raw, json) Hash identifier: Q0KB3Cv86Mo5aeLT0q6XeWS6fhMFGZrcQ5+ijX2NNe4= Subject key identifier: C0:E1:C8:C6:1A:74:D0:13:38:1E:BA:44:FA:4D:8F:57:0B:D9:12:EC Authority key identifier: 0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D Certificate issuer: /CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d Certificate serial: 019C4434950FECDFC4446665C601E807A52E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft Manifest number: 085F Signing time: Mon 09 Feb 2026 21:00:22 +0000 Manifest this update: Mon 09 Feb 2026 21:00:22 +0000 Manifest next update: Tue 10 Feb 2026 21:00:22 +0000 Files and hashes: 1: ClCzt81M47FFt1O_cXmpVczSkl0.crl (hash: cHsDEq8xzFmiyYnftXMwne9pPkesjDNuARUxunVnua4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:95:0f:ec:df:c4:44:66:65:c6:01:e8:07:a5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a50b3b7cd4ce3b145b753bf7179a955ccd2925d Validity Not Before: Feb 9 21:00:22 2026 GMT Not After : Feb 10 21:00:22 2026 GMT Subject: CN=c0e1c8c61a74d013381eba44fa4d8f570bd912ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:56:c2:cd:3d:c8:bd:df:c5:0b:19:e6:bb:97: 2e:e9:f4:8c:f3:b5:2c:54:97:cd:91:5b:8a:70:db: 4b:aa:3c:e3:24:12:3d:89:04:f1:ec:46:b6:bd:1d: c5:fa:28:c0:cc:db:51:41:ce:97:8d:6d:ec:da:79: 32:6f:60:17:27:08:99:e5:7e:fc:93:0b:8f:e5:35: 46:a1:05:78:60:dc:0d:2c:87:a6:b8:bc:3b:39:99: 76:8c:ed:74:d0:f7:f6:8b:bc:52:d0:91:9c:ad:fd: 7f:ba:02:b7:71:1a:1c:87:b8:b1:9a:d0:46:57:ed: 80:dd:ee:a2:78:14:75:fa:9e:72:53:c8:62:6f:ea: d3:67:e5:27:2b:dc:6d:e4:8f:8a:b3:5d:d0:18:1f: e8:9d:78:52:f4:cb:84:5c:27:43:41:8e:0a:c4:2d: 71:72:bf:43:6c:d0:46:ee:f2:5f:b8:fc:0c:f1:a9: e2:c7:2b:c5:eb:58:0b:be:cf:f8:39:91:19:fa:ae: bb:5b:d1:e1:9c:36:f9:a3:7e:13:0a:f1:d5:ed:b9: ae:c4:49:c7:ba:f4:fb:b4:0c:b3:cf:b2:21:16:86: f5:b2:d1:ec:f4:67:a0:41:4f:b2:5a:90:81:97:23: 75:c1:d7:06:32:36:a5:8b:fd:5d:b3:8f:16:f3:22: f1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:E1:C8:C6:1A:74:D0:13:38:1E:BA:44:FA:4D:8F:57:0B:D9:12:EC X509v3 Authority Key Identifier: keyid:0A:50:B3:B7:CD:4C:E3:B1:45:B7:53:BF:71:79:A9:55:CC:D2:92:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ClCzt81M47FFt1O_cXmpVczSkl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fec08f-92cb-4e4f-96cc-170ed230d5f8/1/ClCzt81M47FFt1O_cXmpVczSkl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:e0:95:45:67:d2:94:35:ec:38:d0:f4:33:d9:a2:c0:a0:33: 21:b9:7a:8c:1c:80:0a:c1:17:7f:2a:81:26:18:a2:2e:e4:47: 41:10:a6:7c:bd:d6:3d:16:66:c3:b4:74:78:27:96:8a:41:7f: 49:3f:53:ab:84:94:1b:46:92:3f:d0:ca:5a:aa:76:bf:cf:cf: 93:9d:b8:59:c1:41:6f:2a:bb:45:57:81:c4:8a:5e:e2:99:74: 27:c2:5b:5f:8c:d7:99:1a:ec:4b:be:07:7d:d6:6d:7d:59:5d: 61:59:f8:31:f2:d9:16:f1:fd:99:cc:17:a3:24:14:84:e8:eb: a7:0e:e2:49:70:45:88:16:c0:1d:43:41:0d:a8:98:a1:8f:8f: 3b:8a:a6:cf:10:81:d0:99:f3:6a:a9:09:9c:49:c7:d1:b4:cc: 3a:4b:90:77:1a:c1:74:35:f2:09:0a:6b:9c:05:a9:20:a9:26: e3:0f:17:db:1e:47:2b:18:c1:b9:8e:ef:2f:6a:54:42:a1:97: 9e:db:38:ab:b1:0b:ad:f4:ad:70:c6:6c:da:62:ee:66:d4:46: 7a:21:a1:32:50:aa:58:a6:dc:6b:8d:e5:9f:44:b6:c9:5c:85: 4b:97:93:8f:97:eb:7b:90:56:0b:33:ce:c2:aa:70:bd:85:eb: d9:af:39:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENJUP7N/ERGZlxgHoB6UuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNTBiM2I3Y2Q0Y2UzYjE0NWI3NTNiZjcxNzlhOTU1Y2Nk MjkyNWQwHhcNMjYwMjA5MjEwMDIyWhcNMjYwMjEwMjEwMDIyWjAzMTEwLwYDVQQD EyhjMGUxYzhjNjFhNzRkMDEzMzgxZWJhNDRmYTRkOGY1NzBiZDkxMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA61bCzT3Ivd/FCxnmu5cu6fSM87Us VJfNkVuKcNtLqjzjJBI9iQTx7Ea2vR3F+ijAzNtRQc6XjW3s2nkyb2AXJwiZ5X78 kwuP5TVGoQV4YNwNLIemuLw7OZl2jO100Pf2i7xS0JGcrf1/ugK3cRoch7ixmtBG V+2A3e6ieBR1+p5yU8hib+rTZ+UnK9xt5I+Ks13QGB/onXhS9MuEXCdDQY4KxC1x cr9DbNBG7vJfuPwM8anixyvF61gLvs/4OZEZ+q67W9HhnDb5o34TCvHV7bmuxEnH uvT7tAyzz7IhFob1stHs9GegQU+yWpCBlyN1wdcGMjali/1ds48W8yLx4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDhyMYadNATOB66RPpNj1cL2RLsMB8GA1UdIwQY MBaAFApQs7fNTOOxRbdTv3F5qVXM0pJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2Mt MTcwZWQyMzBkNWY4LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9mZWMwOGYtOTJjYi00ZTRmLTk2Y2MtMTcwZWQyMzBkNWY4 LzEvQ2xDenQ4MU00N0ZGdDFPX2NYbXBWY3pTa2wwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmOCVRWfS lDXsOND0M9miwKAzIbl6jByACsEXfyqBJhiiLuRHQRCmfL3WPRZmw7R0eCeWikF/ ST9Tq4SUG0aSP9DKWqp2v8/Pk524WcFBbyq7RVeBxIpe4pl0J8JbX4zXmRrsS74H fdZtfVldYVn4MfLZFvH9mcwXoyQUhOjrpw7iSXBFiBbAHUNBDaiYoY+PO4qmzxCB 0JnzaqkJnEnH0bTMOkuQdxrBdDXyCQprnAWpIKkm4w8X2x5HKxjBuY7vL2pUQqGX nts4q7ELrfStcMZs2mLuZtRGeiGhMlCqWKbca43ln0S2yVyFS5eTj5fre5BWCzPO wqpwvYXr2a856g== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:15 2026 by rpki-client