This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft File: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft (raw, json) Hash identifier: +fJ6Iagn6Wb7bbwrAFHI0a+AQlk11fKtPyBcyXcWar8= Subject key identifier: AF:06:17:54:5E:A8:CE:8B:5B:27:20:CC:B6:31:FA:61:CF:89:E6:7A Authority key identifier: 0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 Certificate issuer: /CN=0a35575b9947ace25ce87774c82775f18977fd19 Certificate serial: 019C42EB69453935708B4175CB74B24557B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft Manifest number: 159D Signing time: Mon 09 Feb 2026 15:00:49 +0000 Manifest this update: Mon 09 Feb 2026 15:00:49 +0000 Manifest next update: Tue 10 Feb 2026 15:00:49 +0000 Files and hashes: 1: CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl (hash: keBtp4RCgzD7xVu/eEgf0o9oPvUy4ByYpYaeFBnbMIs=) 2: Fr5UXfjdMrhEHYQ6Xdia0OdmNWk.roa (hash: 30Ofi4XCsm5vnfPYfxuSwPdN95VWJBJfoWiBcDk1LZU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:69:45:39:35:70:8b:41:75:cb:74:b2:45:57:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a35575b9947ace25ce87774c82775f18977fd19 Validity Not Before: Feb 9 15:00:49 2026 GMT Not After : Feb 10 15:00:49 2026 GMT Subject: CN=af0617545ea8ce8b5b2720ccb631fa61cf89e67a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:16:62:55:14:0c:34:ec:04:1b:3f:03:d1: 92:5a:2f:67:be:ca:1e:b6:a4:25:bd:73:0c:39:2c: 8d:65:2c:87:ca:e0:07:f6:f9:fb:39:25:f6:f7:11: ad:13:f6:4a:73:d7:91:d2:6e:6e:8e:24:9e:00:1f: 91:0e:1c:2c:b2:7d:54:0f:3a:be:cc:67:ee:0a:dc: 3c:fb:2a:ec:b6:a2:87:fd:d1:3a:2f:5f:6b:79:d0: 92:a1:73:07:27:a0:93:53:c9:7e:e8:b5:b8:36:d6: bd:75:6b:59:7a:72:d7:c0:28:12:9a:d7:eb:24:eb: 38:4c:1e:04:18:ca:a7:2b:da:01:f0:23:cc:c7:ee: bf:98:99:52:1d:6d:97:c1:ed:69:b4:dc:64:98:5d: 59:b5:a4:bc:af:7c:7e:74:2a:a9:2a:e4:7f:75:60: 88:00:bb:2b:62:b6:9b:78:e8:74:3e:04:37:7e:94: c3:59:93:11:2f:ac:46:5f:87:c3:a9:06:60:14:65: 6f:ef:31:47:ca:24:f3:ea:1b:36:4f:b1:c9:44:68: 52:57:76:38:92:ff:d9:a0:fd:db:73:9c:98:6e:26: ae:95:2c:3a:44:d2:a6:a7:65:bd:87:06:a9:bc:c7: d0:45:e9:ac:7d:73:3f:7e:f9:4e:b3:6e:c3:9b:31: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:06:17:54:5E:A8:CE:8B:5B:27:20:CC:B6:31:FA:61:CF:89:E6:7A X509v3 Authority Key Identifier: keyid:0A:35:57:5B:99:47:AC:E2:5C:E8:77:74:C8:27:75:F1:89:77:FD:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0f2da9-f3d5-4ab4-babe-79d91ef827ce/1/CjVXW5lHrOJc6Hd0yCd18Yl3_Rk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1c:65:b7:b5:67:a5:37:e2:76:31:c3:a4:e9:a3:5f:ff:18: e1:e9:13:32:21:46:8e:26:54:56:c3:73:f9:2c:b9:bf:47:08: dd:41:49:89:f6:b6:59:d4:8d:4d:d2:3b:43:19:2e:21:1e:f7: 38:84:29:9a:c1:b6:bb:b9:5b:b5:5a:6c:07:0f:cd:7c:d9:6e: 4b:73:9d:12:59:d8:53:61:f8:b9:e9:4c:42:36:54:51:8a:8c: 72:ab:10:62:30:e5:62:06:4a:57:03:cc:5c:f4:73:bb:4f:ff: fc:61:70:93:34:a7:39:6c:2a:9c:a8:66:4b:19:a3:3a:29:df: 1c:e3:ac:b4:02:58:1a:a9:2d:a8:3a:57:5a:55:60:96:15:a2: 14:27:81:c3:0a:23:a5:96:bd:63:03:2e:45:aa:1a:8c:e3:34: 68:f8:b9:fc:eb:1d:6f:6a:13:e2:d9:a8:1b:47:56:f2:29:58: f0:8e:e2:b0:21:b5:be:c1:cb:5f:6b:24:28:f4:eb:97:e8:29: 9e:89:af:a4:31:dd:03:43:fd:55:9d:2a:47:33:49:25:07:87: 4e:25:ae:d7:a4:51:e0:f6:0b:3c:18:fe:41:0c:e4:c5:bd:0a: 4d:0a:24:e4:db:56:76:7e:f1:4b:39:f6:60:09:c1:82:c5:ec: b9:fc:ba:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62lFOTVwi0F1y3SyRVexMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzU1NzViOTk0N2FjZTI1Y2U4Nzc3NGM4Mjc3NWYxODk3 N2ZkMTkwHhcNMjYwMjA5MTUwMDQ5WhcNMjYwMjEwMTUwMDQ5WjAzMTEwLwYDVQQD EyhhZjA2MTc1NDVlYThjZThiNWIyNzIwY2NiNjMxZmE2MWNmODllNjdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVAWYlUUDDTsBBs/A9GSWi9nvsoe tqQlvXMMOSyNZSyHyuAH9vn7OSX29xGtE/ZKc9eR0m5ujiSeAB+RDhwssn1UDzq+ zGfuCtw8+yrstqKH/dE6L19redCSoXMHJ6CTU8l+6LW4Nta9dWtZenLXwCgSmtfr JOs4TB4EGMqnK9oB8CPMx+6/mJlSHW2Xwe1ptNxkmF1ZtaS8r3x+dCqpKuR/dWCI ALsrYrabeOh0PgQ3fpTDWZMRL6xGX4fDqQZgFGVv7zFHyiTz6hs2T7HJRGhSV3Y4 kv/ZoP3bc5yYbiaulSw6RNKmp2W9hwapvMfQRemsfXM/fvlOs27DmzE7qwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK8GF1ReqM6LWycgzLYx+mHPieZ6MB8GA1UdIwQY MBaAFAo1V1uZR6ziXOh3dMgndfGJd/0ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUt NzlkOTFlZjgyN2NlLzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8wZjJkYTktZjNkNS00YWI0LWJhYmUtNzlkOTFlZjgyN2Nl LzEvQ2pWWFc1bEhyT0pjNkhkMHlDZDE4WWwzX1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXRxlt7Vn pTfidjHDpOmjX/8Y4ekTMiFGjiZUVsNz+Sy5v0cI3UFJifa2WdSNTdI7QxkuIR73 OIQpmsG2u7lbtVpsBw/NfNluS3OdElnYU2H4uelMQjZUUYqMcqsQYjDlYgZKVwPM XPRzu0///GFwkzSnOWwqnKhmSxmjOinfHOOstAJYGqktqDpXWlVglhWiFCeBwwoj pZa9YwMuRaoajOM0aPi5/Osdb2oT4tmoG0dW8ilY8I7isCG1vsHLX2skKPTrl+gp nomvpDHdA0P9VZ0qRzNJJQeHTiWu16RR4PYLPBj+QQzkxb0KTQok5NtWdn7xSzn2 YAnBgsXsufy6rw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:40 2026 by rpki-client