This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File: Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier: NH21WFIqkhHzY0hhf+pKebKGMxz28Z7rDjvVa/XI9BM=
Subject key identifier: 8E:04:6C:7C:F3:F5:B9:09:B7:22:C6:C2:57:C1:96:ED:75:78:94:4B
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer: /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial: 019C4133ABFF9B6E475FFED0150F89F3D4A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number: 180C
Signing time: Mon 09 Feb 2026 07:00:31 +0000
Manifest this update: Mon 09 Feb 2026 07:00:31 +0000
Manifest next update: Tue 10 Feb 2026 07:00:31 +0000
Files and hashes: 1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: Ycq2kQ33Jk5YQAvCXkRpwcjVqZQb0IK/lpSg8h6c27M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:41:33:ab:ff:9b:6e:47:5f:fe:d0:15:0f:89:f3:d4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Validity
Not Before: Feb 9 07:00:31 2026 GMT
Not After : Feb 10 07:00:31 2026 GMT
Subject: CN=8e046c7cf3f5b909b722c6c257c196ed7578944b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:09:2a:50:f0:22:6a:ca:36:30:d8:fd:c2:
18:4c:38:8b:78:d8:7b:50:d1:18:19:b8:9c:d5:43:
48:55:c9:97:1e:8e:af:92:19:ab:08:f3:b1:bc:d0:
ce:fa:fb:53:12:b9:16:a4:b2:0b:f1:bb:10:15:4a:
ac:c9:f2:6b:2a:1a:89:51:7b:93:75:3f:5a:b2:5b:
1d:3e:18:9a:16:bc:d1:c9:0d:05:b0:94:15:05:31:
53:ef:32:20:0a:b6:69:e5:3d:1f:ba:05:da:55:fe:
ef:df:db:86:90:2a:92:9e:d3:72:68:04:14:c3:47:
77:37:5d:4b:93:90:f7:19:c3:21:88:f0:cc:57:1e:
0c:a7:92:f2:ac:de:7a:1a:ef:d4:4a:97:04:8a:75:
1e:f8:f4:b3:43:94:53:95:62:d0:a1:64:5e:bb:81:
f9:39:da:3a:dd:41:07:52:49:3a:6f:68:26:a3:36:
ec:2f:8e:7e:9b:1c:12:aa:e6:b6:0b:46:b8:9b:ce:
b7:c4:b8:fe:42:67:f4:82:9b:a8:8e:66:15:89:b7:
90:55:30:d3:d9:e4:e7:d7:f4:29:1e:04:2a:fb:14:
63:b9:24:d5:95:84:b0:c0:2c:1f:ac:a1:f4:ea:18:
50:55:44:4a:39:1a:0e:86:3f:45:50:79:87:94:6d:
1a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:04:6C:7C:F3:F5:B9:09:B7:22:C6:C2:57:C1:96:ED:75:78:94:4B
X509v3 Authority Key Identifier:
keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:eb:db:93:c4:a9:0b:ca:6b:6d:e1:46:a6:7b:ad:fa:23:43:
a8:c2:bc:b6:57:78:3b:99:a7:da:f9:7e:6c:57:c1:33:c3:7e:
f6:7d:bc:e9:91:2d:60:ad:9a:0c:a6:3c:4d:6c:46:ea:da:65:
88:87:cc:e8:62:45:ed:c3:51:9a:20:3d:cc:5b:a7:7a:69:5f:
b8:91:cd:8a:70:cc:73:26:07:d4:76:39:7f:20:0c:04:e3:22:
d0:73:f6:a9:85:70:3b:36:00:f6:ac:c4:e3:30:a8:94:4a:63:
33:29:49:8d:42:70:0e:af:c7:78:27:f1:7b:ba:18:02:2e:9f:
26:54:04:5a:ff:b7:9c:45:34:cd:2d:46:05:bf:63:c1:1f:27:
36:70:6f:7b:63:6a:46:89:65:84:e8:f8:d1:4a:4c:50:17:91:
e3:30:66:4c:c7:0d:50:11:86:ae:af:79:d5:f4:81:55:26:dd:
67:c4:de:d1:68:67:4d:e1:2d:d0:a3:a4:be:3d:a5:0a:e0:14:
5e:b1:c1:5e:40:ee:47:f2:16:a3:7b:14:e2:1b:61:ba:fd:1d:
d3:ef:b5:a3:29:5b:d6:3e:95:99:8a:ce:8b:0a:5f:9a:58:c2:
3b:e1:20:90:41:1b:f1:41:29:99:60:9c:4d:cb:b1:d2:36:cd:
15:aa:89:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxBM6v/m25HX/7QFQ+J89SpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhOWZkMzA4ZmUzZWFkYmEzMzQ2OGNlNGJiOTk2YmJkZDhj
ZGU2MTUwHhcNMjYwMjA5MDcwMDMxWhcNMjYwMjEwMDcwMDMxWjAzMTEwLwYDVQQD
Eyg4ZTA0NmM3Y2YzZjViOTA5YjcyMmM2YzI1N2MxOTZlZDc1Nzg5NDRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcMJKlDwImrKNjDY/cIYTDiLeNh7
UNEYGbic1UNIVcmXHo6vkhmrCPOxvNDO+vtTErkWpLIL8bsQFUqsyfJrKhqJUXuT
dT9aslsdPhiaFrzRyQ0FsJQVBTFT7zIgCrZp5T0fugXaVf7v39uGkCqSntNyaAQU
w0d3N11Lk5D3GcMhiPDMVx4Mp5LyrN56Gu/USpcEinUe+PSzQ5RTlWLQoWReu4H5
Odo63UEHUkk6b2gmozbsL45+mxwSqua2C0a4m863xLj+Qmf0gpuojmYVibeQVTDT
2eTn1/QpHgQq+xRjuSTVlYSwwCwfrKH06hhQVURKORoOhj9FUHmHlG0aeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI4EbHzz9bkJtyLGwlfBlu11eJRLMB8GA1UdIwQY
MBaAFAqf0wj+Pq26M0aM5LuZa73YzeYVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDct
YTFhYmIyZWZjODFjLzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9jZjE3OGMtZGEzZS00ZGM1LWIyNDctYTFhYmIyZWZjODFj
LzEvQ3BfVENQNC1yYm96Um96a3U1bHJ2ZGpONWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAouvbk8Sp
C8prbeFGpnut+iNDqMK8tld4O5mn2vl+bFfBM8N+9n286ZEtYK2aDKY8TWxG6tpl
iIfM6GJF7cNRmiA9zFunemlfuJHNinDMcyYH1HY5fyAMBOMi0HP2qYVwOzYA9qzE
4zColEpjMylJjUJwDq/HeCfxe7oYAi6fJlQEWv+3nEU0zS1GBb9jwR8nNnBve2Nq
RollhOj40UpMUBeR4zBmTMcNUBGGrq951fSBVSbdZ8Te0WhnTeEt0KOkvj2lCuAU
XrHBXkDuR/IWo3sU4hthuv0d0++1oylb1j6VmYrOiwpfmljCO+EgkEEb8UEpmWCc
Tcux0jbNFaqJyA==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:27 2026 by rpki-client