This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft File: Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft (raw, json) Hash identifier: T4kkK1vf7ZiJEoXA6RzqZoRelyVw+Ub8DdwM4Qgofz4= Subject key identifier: 71:71:54:85:E9:64:09:36:6F:22:20:90:C0:19:29:17:46:5B:09:DC Authority key identifier: 0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB Certificate issuer: /CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb Certificate serial: 019C43228D9750138D8EA8E6C5B323536E47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft Manifest number: 0C4D Signing time: Mon 09 Feb 2026 16:01:03 +0000 Manifest this update: Mon 09 Feb 2026 16:01:03 +0000 Manifest next update: Tue 10 Feb 2026 16:01:03 +0000 Files and hashes: 1: Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl (hash: v41m47f3+SpE2+4kv+aexkJkt8NHINsWYJez4u+Naww=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8d:97:50:13:8d:8e:a8:e6:c5:b3:23:53:6e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b37bd1432986d7b5b9c6e93865e543abaf4f0fb Validity Not Before: Feb 9 16:01:03 2026 GMT Not After : Feb 10 16:01:03 2026 GMT Subject: CN=71715485e96409366f222090c0192917465b09dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:2a:57:1e:ee:65:20:1b:bd:c3:98:93:ae:c4: 3a:96:78:40:be:e8:28:57:c4:2a:8a:65:dc:78:59: 5b:dc:a9:78:33:e1:ac:29:4a:ce:4d:d3:ff:8b:23: 38:f4:cc:92:58:d5:e3:44:bd:22:0e:2f:c4:0f:60: 00:e2:85:c5:a7:cc:28:74:96:f8:d4:d4:cc:99:4d: f7:be:e5:8b:d6:79:a3:3e:c2:11:86:a9:97:bc:8e: da:6d:70:49:9f:74:bd:1c:1a:ce:f3:66:5b:e9:07: e2:25:f5:b3:45:25:ab:3f:51:a3:3e:50:6e:11:75: 8e:dc:25:dd:34:bc:62:c2:74:7d:00:c4:ef:38:19: f2:1b:a1:7e:b8:d6:c1:aa:33:5d:5f:42:e6:cf:5e: a6:69:ae:52:b4:26:dd:57:f0:f3:91:d9:08:52:3a: 9f:01:13:3a:0a:c7:89:ea:e0:cb:8a:7f:d3:03:d2: 4b:28:d4:57:51:b3:3f:f3:4d:39:61:c5:00:be:64: 95:da:c7:62:22:03:cb:9b:5d:b5:ca:e3:ba:b5:14: db:3f:5c:e1:94:1f:54:cd:9e:a8:61:a6:b2:d6:f2: be:9a:ce:18:26:b1:d6:d7:71:47:07:8d:ab:53:2e: d4:cb:77:da:a2:c3:07:3b:8e:03:0e:de:66:fa:d8: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:71:54:85:E9:64:09:36:6F:22:20:90:C0:19:29:17:46:5B:09:DC X509v3 Authority Key Identifier: keyid:0B:37:BD:14:32:98:6D:7B:5B:9C:6E:93:86:5E:54:3A:BA:F4:F0:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cze9FDKYbXtbnG6Thl5UOrr08Ps.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/c4d084-1b68-4da2-98c6-455d52f900c0/1/Cze9FDKYbXtbnG6Thl5UOrr08Ps.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:e9:05:39:cd:ea:31:e6:36:d4:04:9d:c0:d7:14:1e:cf:8d: 55:55:56:f6:ce:a0:f1:fa:2c:14:ae:9a:eb:87:32:9f:43:c9: 55:52:31:fe:f3:5b:a4:00:14:3f:b7:84:2b:24:e4:27:14:ab: f8:67:12:9c:8b:fd:97:8e:bb:70:57:c0:d9:86:97:e8:b9:b5: 64:92:bc:3a:75:10:b3:80:17:46:61:81:77:3d:06:35:9b:77: c1:15:47:d7:39:34:a5:6b:e9:f0:77:33:d1:9d:77:11:36:84: 6c:0b:8b:96:d3:64:ad:4f:36:f2:3e:23:a1:eb:29:a8:d3:8a: 2e:58:fa:b5:bf:69:c8:d9:3c:8d:cc:13:1a:51:e6:3e:44:4d: f8:13:55:0f:8c:ad:08:75:5f:d7:dd:ad:2f:67:fc:95:1f:1b: d5:c3:40:c7:a2:57:b8:d2:09:82:51:2b:82:01:fb:c0:71:fc: 8c:4e:d0:5a:a2:47:ba:71:71:36:0d:08:b5:4d:19:8f:a7:38: d7:6f:df:dc:3e:7e:6a:f6:f4:fa:15:05:f6:35:32:00:2e:27: db:52:34:84:b9:65:88:0d:4c:f1:b9:f6:4b:4a:c7:40:ad:89: 7e:a9:9d:c5:d0:20:2b:b6:a3:9e:c8:77:3a:7d:36:3f:db:05: 44:fd:99:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIo2XUBONjqjmxbMjU25HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzdiZDE0MzI5ODZkN2I1YjljNmU5Mzg2NWU1NDNhYmFm NGYwZmIwHhcNMjYwMjA5MTYwMTAzWhcNMjYwMjEwMTYwMTAzWjAzMTEwLwYDVQQD Eyg3MTcxNTQ4NWU5NjQwOTM2NmYyMjIwOTBjMDE5MjkxNzQ2NWIwOWRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ypXHu5lIBu9w5iTrsQ6lnhAvugo V8QqimXceFlb3Kl4M+GsKUrOTdP/iyM49MySWNXjRL0iDi/ED2AA4oXFp8wodJb4 1NTMmU33vuWL1nmjPsIRhqmXvI7abXBJn3S9HBrO82Zb6QfiJfWzRSWrP1GjPlBu EXWO3CXdNLxiwnR9AMTvOBnyG6F+uNbBqjNdX0Lmz16maa5StCbdV/DzkdkIUjqf ARM6CseJ6uDLin/TA9JLKNRXUbM/8005YcUAvmSV2sdiIgPLm121yuO6tRTbP1zh lB9UzZ6oYaay1vK+ms4YJrHW13FHB42rUy7Uy3faosMHO44DDt5m+thlMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFxVIXpZAk2byIgkMAZKRdGWwncMB8GA1UdIwQY MBaAFAs3vRQymG17W5xuk4ZeVDq69PD7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYt NDU1ZDUyZjkwMGMwLzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9jNGQwODQtMWI2OC00ZGEyLTk4YzYtNDU1ZDUyZjkwMGMw LzEvQ3plOUZES1liWHRibkc2VGhsNVVPcnIwOFBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIukFOc3q MeY21ASdwNcUHs+NVVVW9s6g8fosFK6a64cyn0PJVVIx/vNbpAAUP7eEKyTkJxSr +GcSnIv9l467cFfA2YaX6Lm1ZJK8OnUQs4AXRmGBdz0GNZt3wRVH1zk0pWvp8Hcz 0Z13ETaEbAuLltNkrU828j4joespqNOKLlj6tb9pyNk8jcwTGlHmPkRN+BNVD4yt CHVf192tL2f8lR8b1cNAx6JXuNIJglErggH7wHH8jE7QWqJHunFxNg0ItU0Zj6c4 12/f3D5+avb0+hUF9jUyAC4n21I0hLlliA1M8bn2S0rHQK2JfqmdxdAgK7ajnsh3 On02P9sFRP2ZdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:39 2026 by rpki-client