This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft File: CfJr1vRoN-Cv2Vidh478PsiWfwI.mft (raw, json) Hash identifier: CHrcapL4FuvcXdY2ZuXIbKpbaA/BVHbp1EtlgbFwynI= Subject key identifier: 4A:1F:AF:76:B2:28:45:E8:EB:71:8A:C7:A0:F1:F3:FF:3A:DF:A9:B0 Authority key identifier: 09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 Certificate issuer: /CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Certificate serial: 019C42EB8A3E61A72E6924F75C8A73C60954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft Manifest number: 1558 Signing time: Mon 09 Feb 2026 15:00:58 +0000 Manifest this update: Mon 09 Feb 2026 15:00:58 +0000 Manifest next update: Tue 10 Feb 2026 15:00:58 +0000 Files and hashes: 1: CfJr1vRoN-Cv2Vidh478PsiWfwI.crl (hash: PsgTdWGISUOlBRnD4g9iH0066ZAEtscD+58FvqrBoVA=) 2: VFkF_gxwqOLJ92XDVRj4P0SgEao.roa (hash: Wjt9QdwBOWPZNtbiGNmLCWVPtfz89jktbtlEjzpW8gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8a:3e:61:a7:2e:69:24:f7:5c:8a:73:c6:09:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09f26bd6f46837e0afd9589d878efc3ec8967f02 Validity Not Before: Feb 9 15:00:58 2026 GMT Not After : Feb 10 15:00:58 2026 GMT Subject: CN=4a1faf76b22845e8eb718ac7a0f1f3ff3adfa9b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:d5:ca:12:38:4d:00:f3:85:74:7e:47:08:bd: fb:16:79:4a:ee:cb:0d:a9:1e:8d:7c:05:ed:3a:7e: 7a:02:c3:6e:13:c4:3e:88:dd:b1:70:53:06:6b:28: 3f:61:4a:fb:15:2b:59:48:af:3b:23:01:a2:26:1c: 48:4b:cd:e1:53:77:b5:9d:cc:5e:1b:02:e8:a9:a0: 1f:bd:ca:2a:da:78:11:60:51:26:3c:c1:45:8f:dc: 1a:5d:20:da:3c:1b:b8:18:f6:72:c5:8b:a9:c4:ef: 55:ac:f0:f4:22:fa:7b:37:d5:5d:80:54:10:ef:af: f6:7e:46:5b:47:57:0e:88:1e:dc:31:d0:e3:8a:f9: 3c:9d:ad:f6:ab:79:58:97:cf:e6:1f:21:3f:61:40: e0:44:39:bb:21:20:8d:12:1b:01:83:3f:71:4d:63: eb:55:cf:cb:31:91:98:c7:5e:22:91:27:15:39:47: 30:7b:57:4e:85:cb:19:5a:37:49:7b:1e:73:0f:bc: 9f:75:06:6a:35:0d:a5:be:d1:0a:14:2b:ba:af:11: a4:ec:cc:48:0c:94:5a:62:fc:ee:05:2c:88:1d:c0: 3e:53:ca:0d:a3:19:78:78:35:2d:c8:98:6a:4b:c6: cc:88:62:83:10:68:d9:32:f5:7a:dd:75:cd:35:4d: 66:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:1F:AF:76:B2:28:45:E8:EB:71:8A:C7:A0:F1:F3:FF:3A:DF:A9:B0 X509v3 Authority Key Identifier: keyid:09:F2:6B:D6:F4:68:37:E0:AF:D9:58:9D:87:8E:FC:3E:C8:96:7F:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfJr1vRoN-Cv2Vidh478PsiWfwI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0b447c-6d73-4a79-8e51-e409a8efadac/1/CfJr1vRoN-Cv2Vidh478PsiWfwI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:65:9d:96:d0:de:ff:93:b8:f5:8b:2d:54:79:53:25:d2:3f: aa:af:c6:3f:21:fb:ab:69:ac:ac:1b:5b:2c:51:03:30:17:7f: 9a:08:6c:8a:cf:29:ab:b3:7e:e6:a5:29:94:11:7d:3b:4c:57: 11:30:e0:0b:cd:8a:ff:09:eb:b1:db:fc:f3:79:1f:86:0b:07: 07:bf:13:ac:a9:07:59:b5:42:ae:9f:99:07:39:63:51:8f:94: 38:17:f7:45:15:36:d1:ec:2e:df:30:63:37:cc:2a:67:66:27: 0e:40:b0:75:8a:49:26:85:95:14:2d:0e:9f:4e:a6:43:4d:08: f5:09:b6:bd:62:00:c6:a0:e8:f9:f0:f7:6b:4f:b7:9e:68:20: 2d:94:1a:79:b9:00:55:23:69:2f:81:de:5c:0e:fd:3f:80:c5: 6d:88:98:af:21:06:42:55:f9:d7:1a:f7:6f:27:2e:62:23:de: 2a:36:83:e5:f6:41:e6:0f:d2:8a:3d:51:cd:12:fe:83:c5:4a: 0a:3e:36:4c:31:54:e4:48:91:a9:ca:e7:40:34:85:37:48:76: 13:60:3a:ca:73:27:71:c9:e1:5d:8d:19:f3:4a:a8:74:bb:2e: 2e:b6:a7:9e:5e:b0:f9:c4:6f:91:22:ef:dd:26:07:19:a0:e1: 0f:72:f8:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64o+YacuaST3XIpzxglUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZjI2YmQ2ZjQ2ODM3ZTBhZmQ5NTg5ZDg3OGVmYzNlYzg5 NjdmMDIwHhcNMjYwMjA5MTUwMDU4WhcNMjYwMjEwMTUwMDU4WjAzMTEwLwYDVQQD Eyg0YTFmYWY3NmIyMjg0NWU4ZWI3MThhYzdhMGYxZjNmZjNhZGZhOWIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtXKEjhNAPOFdH5HCL37FnlK7ssN qR6NfAXtOn56AsNuE8Q+iN2xcFMGayg/YUr7FStZSK87IwGiJhxIS83hU3e1ncxe GwLoqaAfvcoq2ngRYFEmPMFFj9waXSDaPBu4GPZyxYupxO9VrPD0Ivp7N9VdgFQQ 76/2fkZbR1cOiB7cMdDjivk8na32q3lYl8/mHyE/YUDgRDm7ISCNEhsBgz9xTWPr Vc/LMZGYx14ikScVOUcwe1dOhcsZWjdJex5zD7yfdQZqNQ2lvtEKFCu6rxGk7MxI DJRaYvzuBSyIHcA+U8oNoxl4eDUtyJhqS8bMiGKDEGjZMvV63XXNNU1mrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEofr3ayKEXo63GKx6Dx8/8636mwMB8GA1UdIwQY MBaAFAnya9b0aDfgr9lYnYeO/D7Iln8CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEt ZTQwOWE4ZWZhZGFjLzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wYjQ0N2MtNmQ3My00YTc5LThlNTEtZTQwOWE4ZWZhZGFj LzEvQ2ZKcjF2Um9OLUN2MlZpZGg0NzhQc2lXZndJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr2WdltDe /5O49YstVHlTJdI/qq/GPyH7q2msrBtbLFEDMBd/mghsis8pq7N+5qUplBF9O0xX ETDgC82K/wnrsdv883kfhgsHB78TrKkHWbVCrp+ZBzljUY+UOBf3RRU20ewu3zBj N8wqZ2YnDkCwdYpJJoWVFC0On06mQ00I9Qm2vWIAxqDo+fD3a0+3nmggLZQaebkA VSNpL4HeXA79P4DFbYiYryEGQlX51xr3bycuYiPeKjaD5fZB5g/Sij1RzRL+g8VK Cj42TDFU5EiRqcrnQDSFN0h2E2A6ynMnccnhXY0Z80qodLsuLrannl6w+cRvkSLv 3SYHGaDhD3L4bA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:12 2026 by rpki-client