This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft File: Cga2XLuXZnq9_5uGGiL50B0dRss.mft (raw, json) Hash identifier: 1JrEQ6QqI0Iq6BKNq3dPUVz7Bpj4aVUjKLS5eW6hhoM= Subject key identifier: 5F:1E:90:A3:E6:1B:3D:31:DA:6F:26:60:90:6E:73:1D:59:3A:F9:B8 Authority key identifier: 0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB Certificate issuer: /CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb Certificate serial: 019C41A2170E4D0BFE0AF28560E8C9B72FF4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 09:01:07 +0000 Manifest this update: Mon 09 Feb 2026 09:01:07 +0000 Manifest next update: Tue 10 Feb 2026 09:01:07 +0000 Files and hashes: 1: Cga2XLuXZnq9_5uGGiL50B0dRss.crl (hash: 7Fw0f4l8xte8OrjuSCYaBbAJYDTZOtn0E0vZcf2AmsI=) 2: RpFgP93ClwNM-ocN6qvLfic7DMs.roa (hash: 5S/X3det1+F3wpDnXO5aEBYjQHz6Mc8fd6NBqHj9aKo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:17:0e:4d:0b:fe:0a:f2:85:60:e8:c9:b7:2f:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a06b65cbb97667abdff9b861a22f9d01d1d46cb Validity Not Before: Feb 9 09:01:07 2026 GMT Not After : Feb 10 09:01:07 2026 GMT Subject: CN=5f1e90a3e61b3d31da6f2660906e731d593af9b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f1:c9:fd:28:0e:a1:42:58:51:69:7f:d8:64: 16:5c:8d:99:a3:b1:94:c4:c7:31:cf:fd:71:5c:e0: ca:a8:0c:42:9c:6f:72:e8:49:e8:16:d8:09:bf:fa: 54:a8:a5:68:b0:29:cf:dc:fd:45:17:f3:58:f5:c6: 31:da:55:9d:5d:15:11:b0:18:46:d2:d8:8f:d4:1f: c7:b8:af:8c:52:99:9b:28:78:4b:dc:d7:0a:ee:69: 7a:ed:c7:7b:ea:18:fa:74:5e:99:5e:e9:73:65:c7: 21:7e:43:79:59:23:a6:b6:5d:9d:2f:9a:32:37:93: a8:a7:86:ba:2f:1d:e0:26:4f:37:eb:60:be:17:88: c7:6b:b1:a3:e6:26:8d:2e:a3:5f:96:6e:2b:2b:7f: b4:1f:a9:88:5d:27:87:cb:54:ac:62:fe:5f:42:ac: 8b:5b:5b:fc:41:ee:d4:e0:4a:99:ba:c9:51:d7:87: 26:5d:01:2e:cd:b4:e1:7a:62:e8:4e:17:d0:98:94: bf:e3:6a:b4:c5:69:d2:f7:67:c2:f7:37:62:3a:68: b9:7d:9a:f8:5c:67:04:7b:fd:71:34:6a:96:30:a5: 3e:ae:c8:5f:86:27:96:d6:01:94:51:73:fc:8d:30: 34:99:51:8a:40:9b:eb:00:33:60:e2:5b:4e:04:0b: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:1E:90:A3:E6:1B:3D:31:DA:6F:26:60:90:6E:73:1D:59:3A:F9:B8 X509v3 Authority Key Identifier: keyid:0A:06:B6:5C:BB:97:66:7A:BD:FF:9B:86:1A:22:F9:D0:1D:1D:46:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cga2XLuXZnq9_5uGGiL50B0dRss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2e18f7-09c7-45b1-bcb7-9f6686e42800/1/Cga2XLuXZnq9_5uGGiL50B0dRss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:c7:fc:db:76:7e:de:b1:04:9d:cf:a1:d3:c8:25:e5:fb:a0: b8:a9:5a:36:62:ee:c6:87:79:47:9a:3b:30:16:d8:3b:bb:ec: e8:3b:80:57:a8:39:cf:f1:6f:0c:d4:75:e1:29:e8:d6:b0:bc: 8b:28:70:9f:74:6e:58:ea:0b:b8:db:63:a0:0f:bd:45:f0:c9: 41:f6:85:4a:d6:b2:4b:6e:da:7c:bf:d9:0d:f5:17:36:03:3e: 3d:09:8c:5c:ff:b5:8a:c1:46:b7:43:43:56:ea:65:3d:6c:e2: 39:9a:44:cd:83:1f:bb:94:81:dd:98:b9:52:eb:24:af:ca:da: 0e:dd:61:a4:bb:43:61:95:b1:f8:3e:2b:33:76:d5:ad:90:64: ba:9f:8d:a2:8d:d9:7e:b5:f9:68:2f:a9:c5:79:94:65:bc:67: 55:4f:25:45:ee:4c:ad:ed:35:35:50:c4:4c:43:0d:c4:37:6c: 61:43:68:95:99:0e:f2:61:bb:29:01:83:b6:e0:bf:6c:18:aa: a7:af:e9:9a:08:78:31:50:5e:f9:03:93:3d:9d:48:07:d8:90: bd:4f:83:54:b6:05:b2:31:22:da:03:80:be:27:a2:59:dc:1c: 34:f9:74:69:33:14:8b:c3:72:32:03:9c:62:fe:fa:66:d1:44: d9:fa:b5:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohcOTQv+CvKFYOjJty/0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMDZiNjVjYmI5NzY2N2FiZGZmOWI4NjFhMjJmOWQwMWQx ZDQ2Y2IwHhcNMjYwMjA5MDkwMTA3WhcNMjYwMjEwMDkwMTA3WjAzMTEwLwYDVQQD Eyg1ZjFlOTBhM2U2MWIzZDMxZGE2ZjI2NjA5MDZlNzMxZDU5M2FmOWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vHJ/SgOoUJYUWl/2GQWXI2Zo7GU xMcxz/1xXODKqAxCnG9y6EnoFtgJv/pUqKVosCnP3P1FF/NY9cYx2lWdXRURsBhG 0tiP1B/HuK+MUpmbKHhL3NcK7ml67cd76hj6dF6ZXulzZcchfkN5WSOmtl2dL5oy N5Oop4a6Lx3gJk8362C+F4jHa7Gj5iaNLqNflm4rK3+0H6mIXSeHy1SsYv5fQqyL W1v8Qe7U4EqZuslR14cmXQEuzbThemLoThfQmJS/42q0xWnS92fC9zdiOmi5fZr4 XGcEe/1xNGqWMKU+rshfhieW1gGUUXP8jTA0mVGKQJvrADNg4ltOBAv6IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8ekKPmGz0x2m8mYJBucx1ZOvm4MB8GA1UdIwQY MBaAFAoGtly7l2Z6vf+bhhoi+dAdHUbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjct OWY2Njg2ZTQyODAwLzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC8yZTE4ZjctMDljNy00NWIxLWJjYjctOWY2Njg2ZTQyODAw LzEvQ2dhMlhMdVhabnE5XzV1R0dpTDUwQjBkUnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApcf823Z+ 3rEEnc+h08gl5fuguKlaNmLuxod5R5o7MBbYO7vs6DuAV6g5z/FvDNR14Sno1rC8 iyhwn3RuWOoLuNtjoA+9RfDJQfaFStayS27afL/ZDfUXNgM+PQmMXP+1isFGt0ND VuplPWziOZpEzYMfu5SB3Zi5Uuskr8raDt1hpLtDYZWx+D4rM3bVrZBkup+Noo3Z frX5aC+pxXmUZbxnVU8lRe5Mre01NVDETEMNxDdsYUNolZkO8mG7KQGDtuC/bBiq p6/pmgh4MVBe+QOTPZ1IB9iQvU+DVLYFsjEi2gOAvieiWdwcNPl0aTMUi8NyMgOc Yv76ZtFE2fq1ng== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:16 2026 by rpki-client