This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft File: CvEjgQA3CiwF-waACv3mkG2q8tg.mft (raw, json) Hash identifier: 1pv5dsKathDa9qzsNytxEQVZmNJaW/OhUSleUHUmfAM= Subject key identifier: 3A:77:FB:78:2A:2E:C7:84:89:E7:88:6B:6B:75:F6:46:49:7D:33:0B Authority key identifier: 0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 Certificate issuer: /CN=0af1238100370a2c05fb06800afde6906daaf2d8 Certificate serial: 019C427D2ED0874DEA1D07F15FC303655D9F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 13:00:26 +0000 Manifest this update: Mon 09 Feb 2026 13:00:26 +0000 Manifest next update: Tue 10 Feb 2026 13:00:26 +0000 Files and hashes: 1: 7AAV3mKGg9Way3lu5gGhcc5W9hw.roa (hash: j9RrNmTKqQe3dwEgBwPH35f7bGq6O6nZwvPLbSykKgw=) 2: CvEjgQA3CiwF-waACv3mkG2q8tg.crl (hash: 5RamU3iLar8upQKB/WcatiH2yAhigAV+c47WV8GuJus=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2e:d0:87:4d:ea:1d:07:f1:5f:c3:03:65:5d:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af1238100370a2c05fb06800afde6906daaf2d8 Validity Not Before: Feb 9 13:00:26 2026 GMT Not After : Feb 10 13:00:26 2026 GMT Subject: CN=3a77fb782a2ec78489e7886b6b75f646497d330b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6a:59:0d:be:e1:2e:94:47:42:34:1a:8d:6c: 8b:8e:e8:7e:bd:98:eb:f7:31:cb:96:60:e2:e9:4f: 32:c9:b8:ef:0c:d5:aa:1f:46:65:cd:e8:3e:2f:69: 9d:e4:54:1c:8b:ae:3c:8f:fa:d8:f9:51:2f:de:71: 3e:4d:06:7b:08:cd:4d:5f:28:93:9e:44:73:e7:39: a7:fc:23:b5:1a:ac:ae:c0:b1:e9:48:8f:77:0f:33: d6:1d:de:01:2b:e9:16:d1:24:67:78:f0:7e:be:8f: d9:7e:14:0a:5c:9d:30:1d:d8:dc:79:37:d2:b9:3f: bd:dd:dc:46:b3:d1:b4:48:9d:42:c0:f1:2f:e5:0d: b8:45:f0:0e:f8:4d:c0:b4:17:c6:74:b2:b4:05:08: 34:bc:ec:39:93:21:f0:be:6c:e2:8a:87:b7:e5:8b: 4e:13:71:45:82:e2:7e:40:ee:e2:ac:e3:2a:76:5c: 48:3e:95:07:55:4a:27:00:03:1d:14:69:c1:0a:ee: 8f:72:b8:2e:45:87:90:fc:4c:88:98:3b:fb:ef:99: 22:83:f8:79:48:0e:1d:51:dd:a2:a6:c9:95:26:7d: 78:bb:93:82:81:57:96:87:65:c0:ec:59:3b:b0:7f: a0:f6:df:c5:20:f5:b0:17:dd:5b:a9:39:31:00:87: 23:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:77:FB:78:2A:2E:C7:84:89:E7:88:6B:6B:75:F6:46:49:7D:33:0B X509v3 Authority Key Identifier: keyid:0A:F1:23:81:00:37:0A:2C:05:FB:06:80:0A:FD:E6:90:6D:AA:F2:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvEjgQA3CiwF-waACv3mkG2q8tg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/9c1b08-b5ac-4bbd-b8c3-0e0fd03b1104/1/CvEjgQA3CiwF-waACv3mkG2q8tg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ef:04:43:86:f2:5a:09:c9:3e:3a:e1:ea:78:98:40:46:8f: 3c:dc:cd:d0:4a:10:75:1e:dd:a4:c8:d2:d2:a6:41:ca:8b:14: e5:3a:1e:94:25:e5:a3:f2:61:7e:08:80:39:03:b5:71:fb:0e: 9c:82:c9:2c:18:af:ab:71:6d:f4:c6:5a:74:95:9f:5f:ad:00: 55:48:62:be:23:70:46:62:62:56:b0:73:42:55:8f:58:ed:da: c6:b8:ff:36:8c:84:86:3e:33:a0:29:b0:d3:17:a4:e1:d7:ef: 11:32:d2:95:d1:fd:41:e1:08:be:02:21:f2:88:a2:72:0f:1e: c2:fa:9a:9f:7f:ad:ae:28:2c:2e:3f:e1:47:f2:6d:2c:d4:54: 73:d7:d4:a5:a0:51:b0:3d:f5:38:29:88:90:9c:78:8e:19:85: b6:41:2c:dc:0b:df:6f:9f:41:4f:79:ed:2b:56:fb:45:2d:41: 1c:0e:16:8d:6f:a7:15:a0:9f:34:aa:6f:4c:b9:74:ac:f3:eb: 7e:1c:6b:4f:76:b3:e2:fb:86:a7:4b:0e:43:7e:00:da:b4:35: 76:f3:18:64:6a:3b:0b:81:e5:8f:76:e0:1c:b8:ca:0f:fc:1d: a0:e9:62:c7:94:44:c3:4b:b3:4a:ae:2d:76:d4:d1:88:36:57: cc:cc:6a:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfS7Qh03qHQfxX8MDZV2fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjEyMzgxMDAzNzBhMmMwNWZiMDY4MDBhZmRlNjkwNmRh YWYyZDgwHhcNMjYwMjA5MTMwMDI2WhcNMjYwMjEwMTMwMDI2WjAzMTEwLwYDVQQD EygzYTc3ZmI3ODJhMmVjNzg0ODllNzg4NmI2Yjc1ZjY0NjQ5N2QzMzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GpZDb7hLpRHQjQajWyLjuh+vZjr 9zHLlmDi6U8yybjvDNWqH0Zlzeg+L2md5FQci648j/rY+VEv3nE+TQZ7CM1NXyiT nkRz5zmn/CO1GqyuwLHpSI93DzPWHd4BK+kW0SRnePB+vo/ZfhQKXJ0wHdjceTfS uT+93dxGs9G0SJ1CwPEv5Q24RfAO+E3AtBfGdLK0BQg0vOw5kyHwvmziioe35YtO E3FFguJ+QO7irOMqdlxIPpUHVUonAAMdFGnBCu6PcrguRYeQ/EyImDv775kig/h5 SA4dUd2ipsmVJn14u5OCgVeWh2XA7Fk7sH+g9t/FIPWwF91bqTkxAIcjqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDp3+3gqLseEieeIa2t19kZJfTMLMB8GA1UdIwQY MBaAFArxI4EANwosBfsGgAr95pBtqvLYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMt MGUwZmQwM2IxMTA0LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy85YzFiMDgtYjVhYy00YmJkLWI4YzMtMGUwZmQwM2IxMTA0 LzEvQ3ZFamdRQTNDaXdGLXdhQUN2M21rRzJxOHRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAie8EQ4by WgnJPjrh6niYQEaPPNzN0EoQdR7dpMjS0qZByosU5ToelCXlo/JhfgiAOQO1cfsO nILJLBivq3Ft9MZadJWfX60AVUhiviNwRmJiVrBzQlWPWO3axrj/NoyEhj4zoCmw 0xek4dfvETLSldH9QeEIvgIh8oiicg8ewvqan3+trigsLj/hR/JtLNRUc9fUpaBR sD31OCmIkJx4jhmFtkEs3Avfb59BT3ntK1b7RS1BHA4WjW+nFaCfNKpvTLl0rPPr fhxrT3az4vuGp0sOQ34A2rQ1dvMYZGo7C4Hlj3bgHLjKD/wdoOlix5REw0uzSq4t dtTRiDZXzMxq9A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:22 2026 by rpki-client