This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft File: 0CfGCfr0psIq3x-MSnCgeufPLoE.mft (raw, json) Hash identifier: rvQ2p5L3ATkYEP/om7/Jqwg722zocpDEF93z948fDCU= Subject key identifier: 69:FF:98:5F:FA:60:8B:D8:CF:C7:C0:12:8E:70:C5:66:65:0F:C3:C3 Authority key identifier: D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 Certificate issuer: /CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Certificate serial: 019C4358C33902992E81BBAFD6561CF88160 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft Manifest number: 07D4 Signing time: Mon 09 Feb 2026 17:00:16 +0000 Manifest this update: Mon 09 Feb 2026 17:00:16 +0000 Manifest next update: Tue 10 Feb 2026 17:00:16 +0000 Files and hashes: 1: 0CfGCfr0psIq3x-MSnCgeufPLoE.crl (hash: aHMR6hFTazr7GPq8LTCZRpSFuvdaJP1bYrcGWi1DlQI=) 2: u6VMLfo2hFwMf4kQ5ZftZmatqDk.roa (hash: DdPY8vR2Q6a4hS5C9hkvVESee8uGHUFzRXgB12kaTWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c3:39:02:99:2e:81:bb:af:d6:56:1c:f8:81:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d027c609faf4a6c22adf1f8c4a70a07ae7cf2e81 Validity Not Before: Feb 9 17:00:16 2026 GMT Not After : Feb 10 17:00:16 2026 GMT Subject: CN=69ff985ffa608bd8cfc7c0128e70c566650fc3c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:72:24:07:83:c2:70:06:b9:0b:df:f7:6a:b4: c9:06:91:93:c0:3c:12:cb:4a:5c:ff:f7:1a:cd:33: b8:6a:38:21:68:82:7a:a5:e6:f0:41:97:41:5b:a7: 54:ff:cc:82:ac:2e:6f:8d:91:10:0f:d3:f6:4d:2e: 86:10:18:0e:4d:6f:aa:af:b0:9b:fa:48:67:7b:91: b1:84:b7:42:1f:c6:7d:8e:66:23:a7:6e:dd:5f:7f: 2d:56:55:90:23:32:bd:19:e1:2c:ca:14:a8:58:cf: 3c:14:d7:3f:b5:24:8c:12:4b:eb:b7:82:48:f1:b7: ea:0c:5f:c6:3d:f6:cb:c5:dc:cc:12:d2:f1:ad:09: 1f:0b:d0:1b:91:e5:1a:70:b7:5f:d8:c1:b0:d5:e6: b3:ed:53:3a:3b:35:ad:eb:5d:9f:ec:0b:5d:fe:20: 2e:0b:80:b8:88:43:f3:cc:59:fa:30:63:1c:af:bd: 6d:34:bb:90:43:da:af:90:22:f9:0f:85:c0:78:4a: b1:7e:94:71:76:83:1c:2c:96:8b:4f:04:90:e0:22: be:cc:0a:41:88:9b:69:9a:1e:a6:aa:8b:07:d0:1e: 77:29:c0:26:22:59:c0:ed:e5:57:e5:cd:4a:5b:74: 82:58:04:e0:1d:17:62:53:45:8e:1f:66:32:30:17: 09:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:FF:98:5F:FA:60:8B:D8:CF:C7:C0:12:8E:70:C5:66:65:0F:C3:C3 X509v3 Authority Key Identifier: keyid:D0:27:C6:09:FA:F4:A6:C2:2A:DF:1F:8C:4A:70:A0:7A:E7:CF:2E:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CfGCfr0psIq3x-MSnCgeufPLoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f71d6f-7ea7-45fc-b1b5-3acb814904a0/1/0CfGCfr0psIq3x-MSnCgeufPLoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:4b:c8:86:7d:73:5f:38:0a:8a:00:14:58:17:f1:73:37:c2: 3f:cf:fc:49:95:9e:85:5b:ba:b4:c2:ce:5c:d7:be:fd:14:6c: 03:a2:24:1d:1f:9d:d9:68:b4:b3:50:96:f5:5b:ec:f2:ec:06: d4:3d:03:00:07:56:bc:21:ae:d9:e6:cc:3e:70:b5:d2:3f:ce: 3d:94:52:8f:f8:47:8f:12:fa:c7:1e:e6:d2:12:cb:36:b5:b3: bd:cd:1f:03:a1:2f:a0:25:0e:b0:5b:6d:05:51:3d:ff:dc:cb: 88:b5:b0:16:9f:ff:37:81:d1:39:ce:20:dc:3c:3d:76:ae:0d: ff:80:20:16:29:a5:61:13:54:74:42:d9:ac:05:5f:68:c2:a2: 97:04:75:8e:88:1b:a2:36:6b:8e:54:66:ac:97:ab:82:2c:a7: c6:43:6a:c5:15:97:6e:10:1b:69:05:12:a0:ea:71:05:f9:e9: 0f:23:20:10:50:12:a7:01:f8:62:dc:df:b5:7c:9d:2e:8f:e6: f9:d2:5f:81:e8:fe:86:3d:0d:54:5c:85:f3:f1:9a:47:d7:1b: 77:f1:80:6a:26:2d:42:46:a1:6a:12:c4:66:c1:1d:ff:9f:67: d3:4c:a1:c5:ad:90:37:fa:c0:90:36:8f:f7:63:fb:76:4f:e9: 89:75:58:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMM5Apkugbuv1lYc+IFgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMjdjNjA5ZmFmNGE2YzIyYWRmMWY4YzRhNzBhMDdhZTdj ZjJlODEwHhcNMjYwMjA5MTcwMDE2WhcNMjYwMjEwMTcwMDE2WjAzMTEwLwYDVQQD Eyg2OWZmOTg1ZmZhNjA4YmQ4Y2ZjN2MwMTI4ZTcwYzU2NjY1MGZjM2MzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HIkB4PCcAa5C9/3arTJBpGTwDwS y0pc//cazTO4ajghaIJ6pebwQZdBW6dU/8yCrC5vjZEQD9P2TS6GEBgOTW+qr7Cb +khne5GxhLdCH8Z9jmYjp27dX38tVlWQIzK9GeEsyhSoWM88FNc/tSSMEkvrt4JI 8bfqDF/GPfbLxdzMEtLxrQkfC9AbkeUacLdf2MGw1eaz7VM6OzWt612f7Atd/iAu C4C4iEPzzFn6MGMcr71tNLuQQ9qvkCL5D4XAeEqxfpRxdoMcLJaLTwSQ4CK+zApB iJtpmh6mqosH0B53KcAmIlnA7eVX5c1KW3SCWATgHRdiU0WOH2YyMBcJIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGn/mF/6YIvYz8fAEo5wxWZlD8PDMB8GA1UdIwQY MBaAFNAnxgn69KbCKt8fjEpwoHrnzy6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUt M2FjYjgxNDkwNGEwLzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80ZC9mNzFkNmYtN2VhNy00NWZjLWIxYjUtM2FjYjgxNDkwNGEw LzEvMENmR0NmcjBwc0lxM3gtTVNuQ2dldWZQTG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkvIhn1z XzgKigAUWBfxczfCP8/8SZWehVu6tMLOXNe+/RRsA6IkHR+d2Wi0s1CW9Vvs8uwG 1D0DAAdWvCGu2ebMPnC10j/OPZRSj/hHjxL6xx7m0hLLNrWzvc0fA6EvoCUOsFtt BVE9/9zLiLWwFp//N4HROc4g3Dw9dq4N/4AgFimlYRNUdELZrAVfaMKilwR1jogb ojZrjlRmrJergiynxkNqxRWXbhAbaQUSoOpxBfnpDyMgEFASpwH4YtzftXydLo/m +dJfgej+hj0NVFyF8/GaR9cbd/GAaiYtQkahahLEZsEd/59n00yhxa2QN/rAkDaP 92P7dk/piXVYZw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:45 2026 by rpki-client