This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft File: CBG8UM_tnQLlgZaiyByYjjC6EmA.mft (raw, json) Hash identifier: gc6RLprw6zY2wCW/44wIxJYE/pTd6HHuYvmkxio46KI= Subject key identifier: FF:A2:BE:A5:57:D7:96:01:04:44:65:8B:EE:74:C6:0D:10:86:FB:04 Authority key identifier: 08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 Certificate issuer: /CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Certificate serial: 019C42B47DCF8711C1AD97FF1813ECD81F48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 14:00:50 +0000 Manifest this update: Mon 09 Feb 2026 14:00:50 +0000 Manifest next update: Tue 10 Feb 2026 14:00:50 +0000 Files and hashes: 1: CBG8UM_tnQLlgZaiyByYjjC6EmA.crl (hash: O+og6ySzpgSIGMWlbQvqUceZi/zRMGrpOcYM+D1JQzk=) 2: WRBFVNx32sOpjsof22cBqYU1U-g.roa (hash: QZBfNPHudXCYECubPVOe4dY+6NgVx9kT9RkWowLyHkE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:7d:cf:87:11:c1:ad:97:ff:18:13:ec:d8:1f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0811bc50cfed9d02e58196a2c81c988e30ba1260 Validity Not Before: Feb 9 14:00:50 2026 GMT Not After : Feb 10 14:00:50 2026 GMT Subject: CN=ffa2bea557d796010444658bee74c60d1086fb04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:3a:a9:5c:cc:89:6f:2e:28:de:cf:6d:46:74: c1:a1:e6:f6:de:1b:3e:5d:9a:04:34:7f:a0:5d:ba: 77:03:94:2b:89:27:87:0f:c9:bd:af:56:4f:cf:1f: 0d:75:99:7a:c2:68:f4:5c:54:da:2f:8f:83:c9:2f: 07:62:ec:7a:b5:b4:0c:2e:e5:24:66:1b:2d:cb:0e: 01:0d:bd:ac:73:1e:9b:90:cc:9a:10:4f:51:63:41: 13:b2:4f:2e:fa:75:e6:f8:bf:ae:ec:63:8e:43:3f: 86:07:ef:54:7a:34:1c:75:68:37:ef:ce:4f:7d:3d: 25:e9:94:43:93:29:54:7f:c6:02:79:32:22:59:37: ff:20:41:d8:df:62:2c:d7:a7:f0:e8:6c:0c:06:06: 4a:d2:ac:3e:c5:fa:01:59:37:7d:a6:fe:5c:fb:62: 0a:0d:89:d1:24:d6:de:87:91:d7:de:4b:ab:eb:0c: ff:60:27:86:1f:e9:a8:40:fa:9a:6f:6a:6a:0e:8a: e1:4a:24:c5:33:18:63:8d:18:fd:ef:2f:ba:75:d5: ad:4e:c7:20:9f:f0:47:8a:36:30:3f:d1:ad:1d:eb: 74:20:cb:73:b8:65:62:9b:a9:ac:12:22:e2:fe:8b: b0:be:db:fa:b0:cb:49:de:24:11:dd:d6:9f:5d:c7: c0:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A2:BE:A5:57:D7:96:01:04:44:65:8B:EE:74:C6:0D:10:86:FB:04 X509v3 Authority Key Identifier: keyid:08:11:BC:50:CF:ED:9D:02:E5:81:96:A2:C8:1C:98:8E:30:BA:12:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBG8UM_tnQLlgZaiyByYjjC6EmA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0c8194-76d1-465e-a746-ee5a6743be56/1/CBG8UM_tnQLlgZaiyByYjjC6EmA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:21:0b:b7:39:7c:16:6b:a4:a6:15:39:a9:32:7e:67:db:94: e5:52:93:fe:69:bc:09:a4:1a:65:0a:ac:40:e5:30:da:82:f2: 2d:a3:ad:ef:8f:90:d7:c0:7c:9f:fe:f9:bf:f0:e1:82:01:fd: 28:84:32:fa:62:08:21:d1:03:34:fd:80:ea:4b:20:be:9e:d5: 0c:e5:5b:50:e4:3e:90:ab:c6:96:e9:8e:0a:48:56:dc:4d:26: 90:13:08:f5:79:75:c3:db:ce:1f:a3:25:4d:94:8a:f4:c9:3b: dc:37:3b:57:a9:cd:d4:d4:dc:46:28:ec:91:45:7f:2f:e2:ed: 40:cb:2a:9c:9e:4e:86:b3:42:cf:90:9e:5a:45:0f:0e:ee:90: da:5c:e6:dd:61:18:79:20:ca:80:e9:cf:ad:da:8a:58:e2:79: 39:ec:9b:e1:75:b0:78:9e:3a:d3:bc:47:dd:23:ac:3f:d3:74: 82:f6:19:e1:30:a7:a5:8c:f4:9f:2d:eb:9e:38:46:33:2f:e1: a0:4c:b3:46:f0:36:d8:28:4a:f8:3e:4d:30:ae:35:b1:2d:ac: 23:df:75:d5:b7:32:c0:ad:4f:12:fb:24:c7:ae:7c:88:2b:f0: bb:a8:1a:0b:45:a7:56:28:ad:cb:df:bd:70:0a:87:43:d8:66: 70:a8:02:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtH3PhxHBrZf/GBPs2B9IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTFiYzUwY2ZlZDlkMDJlNTgxOTZhMmM4MWM5ODhlMzBi YTEyNjAwHhcNMjYwMjA5MTQwMDUwWhcNMjYwMjEwMTQwMDUwWjAzMTEwLwYDVQQD EyhmZmEyYmVhNTU3ZDc5NjAxMDQ0NDY1OGJlZTc0YzYwZDEwODZmYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTqpXMyJby4o3s9tRnTBoeb23hs+ XZoENH+gXbp3A5QriSeHD8m9r1ZPzx8NdZl6wmj0XFTaL4+DyS8HYux6tbQMLuUk Zhstyw4BDb2scx6bkMyaEE9RY0ETsk8u+nXm+L+u7GOOQz+GB+9UejQcdWg3785P fT0l6ZRDkylUf8YCeTIiWTf/IEHY32Is16fw6GwMBgZK0qw+xfoBWTd9pv5c+2IK DYnRJNbeh5HX3kur6wz/YCeGH+moQPqab2pqDorhSiTFMxhjjRj97y+6ddWtTscg n/BHijYwP9GtHet0IMtzuGVim6msEiLi/ouwvtv6sMtJ3iQR3dafXcfAmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+ivqVX15YBBERli+50xg0QhvsEMB8GA1UdIwQY MBaAFAgRvFDP7Z0C5YGWosgcmI4wuhJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYt ZWU1YTY3NDNiZTU2LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wYzgxOTQtNzZkMS00NjVlLWE3NDYtZWU1YTY3NDNiZTU2 LzEvQ0JHOFVNX3RuUUxsZ1phaXlCeVlqakM2RW1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeyELtzl8 FmukphU5qTJ+Z9uU5VKT/mm8CaQaZQqsQOUw2oLyLaOt74+Q18B8n/75v/DhggH9 KIQy+mIIIdEDNP2A6ksgvp7VDOVbUOQ+kKvGlumOCkhW3E0mkBMI9Xl1w9vOH6Ml TZSK9Mk73Dc7V6nN1NTcRijskUV/L+LtQMsqnJ5OhrNCz5CeWkUPDu6Q2lzm3WEY eSDKgOnPrdqKWOJ5Oeyb4XWweJ4607xH3SOsP9N0gvYZ4TCnpYz0ny3rnjhGMy/h oEyzRvA22ChK+D5NMK41sS2sI9911bcywK1PEvskx658iCvwu6gaC0WnViity9+9 cAqHQ9hmcKgCbw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:53 2026 by rpki-client