This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft File: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft (raw, json) Hash identifier: 4t7X48uH89yi2b9JRew+01/hoEGwJcaNYOnGkjAXt8I= Subject key identifier: A0:AF:99:AE:B8:C2:CC:E7:3F:BC:4E:68:6B:1F:AF:AE:D9:16:00:2B Authority key identifier: 71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D Certificate issuer: /CN=7135e3894634482b08317775c79657e9b8312d4d Certificate serial: 019C41A17E05259C896ECA182863279DFCA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft Manifest number: 1246 Signing time: Mon 09 Feb 2026 09:00:28 +0000 Manifest this update: Mon 09 Feb 2026 09:00:28 +0000 Manifest next update: Tue 10 Feb 2026 09:00:28 +0000 Files and hashes: 1: cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl (hash: Lc/N9rsbUgPoI29Hs+RfHu7O66K6t4Y242YitI4+S94=) 2: zrNuRSDkOgaF-KxvQ8ikOlaPVQ8.roa (hash: DWHX759MBY5oSohs6eXDS/mq7ExmCSn3ePXPS3bnmPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:7e:05:25:9c:89:6e:ca:18:28:63:27:9d:fc:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7135e3894634482b08317775c79657e9b8312d4d Validity Not Before: Feb 9 09:00:28 2026 GMT Not After : Feb 10 09:00:28 2026 GMT Subject: CN=a0af99aeb8c2cce73fbc4e686b1fafaed916002b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5a:ac:8d:1b:cb:0d:4e:aa:8f:54:0b:03:53: c0:72:7e:b6:5f:cc:d7:c9:92:d5:25:fe:f7:1d:42: 31:5a:2b:6a:1a:56:cd:5a:df:1d:36:6b:25:1e:8a: 87:75:9d:1d:bc:2f:b5:88:23:29:a7:a0:57:73:4f: c5:d6:a6:f5:0b:9e:b7:6c:14:f2:7b:61:8c:f1:e3: 35:91:a5:b4:50:19:80:83:4e:e2:80:bf:02:9e:76: 66:50:ab:2e:d6:4a:55:b2:76:1b:53:03:0b:6f:5c: 55:6f:11:02:03:56:31:ad:65:f9:7d:fb:91:de:45: 41:3f:8d:b9:e6:0a:8a:77:bd:66:69:b0:b8:7a:32: ad:1d:9e:62:7d:3b:ac:48:c5:eb:c1:41:b8:3a:a5: cb:49:71:6a:26:7b:dd:06:19:05:e0:23:ff:67:a1: 6f:27:8e:dc:d3:8d:7b:e4:d6:ad:83:c1:b6:2d:7c: 50:6a:c7:96:a4:46:5b:b9:78:22:bb:8a:e7:03:6f: f9:24:6d:d3:45:32:57:85:68:62:d9:d3:a7:b2:c8: e0:e8:84:f5:4e:40:e6:d7:2f:89:ac:4c:44:fe:98: 41:bc:26:4f:68:c5:1e:fb:e8:28:7c:f4:c9:d0:5e: ed:d8:eb:7f:19:46:b4:d0:6b:15:5f:f6:ab:d4:03: 69:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:AF:99:AE:B8:C2:CC:E7:3F:BC:4E:68:6B:1F:AF:AE:D9:16:00:2B X509v3 Authority Key Identifier: keyid:71:35:E3:89:46:34:48:2B:08:31:77:75:C7:96:57:E9:B8:31:2D:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1cb9fc-6b33-42d5-9423-79ecd8a9b6d6/1/cTXjiUY0SCsIMXd1x5ZX6bgxLU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c4:44:41:83:2b:46:ed:14:c9:cf:48:86:1c:5d:81:ba:d9: 2c:aa:f5:0f:8d:5b:78:d3:2e:63:46:7b:63:c2:e4:69:6c:64: 95:10:9b:4a:b8:23:4b:57:e4:e4:57:5c:b3:c6:84:24:47:91: 17:81:14:88:a6:14:c5:6e:71:00:ef:e7:0b:00:72:07:2b:59: 28:53:2e:1b:67:72:9d:bf:75:ff:12:09:07:be:e1:f2:45:ff: 35:02:a7:02:b1:3c:5f:7a:56:22:90:3a:55:36:7e:cb:b7:04: 91:f2:f3:82:47:2c:70:a4:77:19:0c:35:20:ed:d8:8e:6b:20: 07:2c:5b:0a:2a:2d:78:cf:ba:bd:e3:01:7b:c3:99:3d:5e:be: b0:18:e0:f1:9a:4e:8e:3b:b7:54:96:64:72:d6:30:bf:1e:a0: aa:a0:00:0a:8e:23:81:a5:43:97:4a:a8:be:b0:e0:ea:94:eb: b3:96:5f:16:6e:dd:9f:95:2b:f6:cc:27:d1:22:c3:ed:5a:a5: 5a:aa:9c:ae:a4:03:6c:4b:30:8e:15:4a:4c:b4:98:d8:e5:8a: 87:58:a5:43:32:b1:a0:5d:68:33:37:af:c0:f6:1c:5b:b4:56: 3e:3e:f2:89:62:23:01:b4:73:bb:52:0f:92:d1:cf:c2:21:b8: a5:54:cf:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoX4FJZyJbsoYKGMnnfyiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzVlMzg5NDYzNDQ4MmIwODMxNzc3NWM3OTY1N2U5Yjgz MTJkNGQwHhcNMjYwMjA5MDkwMDI4WhcNMjYwMjEwMDkwMDI4WjAzMTEwLwYDVQQD EyhhMGFmOTlhZWI4YzJjY2U3M2ZiYzRlNjg2YjFmYWZhZWQ5MTYwMDJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lqsjRvLDU6qj1QLA1PAcn62X8zX yZLVJf73HUIxWitqGlbNWt8dNmslHoqHdZ0dvC+1iCMpp6BXc0/F1qb1C563bBTy e2GM8eM1kaW0UBmAg07igL8CnnZmUKsu1kpVsnYbUwMLb1xVbxECA1YxrWX5ffuR 3kVBP4255gqKd71mabC4ejKtHZ5ifTusSMXrwUG4OqXLSXFqJnvdBhkF4CP/Z6Fv J47c04175Natg8G2LXxQaseWpEZbuXgiu4rnA2/5JG3TRTJXhWhi2dOnssjg6IT1 TkDm1y+JrExE/phBvCZPaMUe++gofPTJ0F7t2Ot/GUa00GsVX/ar1ANprwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCvma64wsznP7xOaGsfr67ZFgArMB8GA1UdIwQY MBaAFHE144lGNEgrCDF3dceWV+m4MS1NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMt NzllY2Q4YTliNmQ2LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi8xY2I5ZmMtNmIzMy00MmQ1LTk0MjMtNzllY2Q4YTliNmQ2 LzEvY1RYamlVWTBTQ3NJTVhkMXg1Wlg2Ymd4TFUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8REQYMr Ru0Uyc9IhhxdgbrZLKr1D41beNMuY0Z7Y8LkaWxklRCbSrgjS1fk5Fdcs8aEJEeR F4EUiKYUxW5xAO/nCwByBytZKFMuG2dynb91/xIJB77h8kX/NQKnArE8X3pWIpA6 VTZ+y7cEkfLzgkcscKR3GQw1IO3YjmsgByxbCioteM+6veMBe8OZPV6+sBjg8ZpO jju3VJZkctYwvx6gqqAACo4jgaVDl0qovrDg6pTrs5ZfFm7dn5Ur9swn0SLD7Vql WqqcrqQDbEswjhVKTLSY2OWKh1ilQzKxoF1oMzevwPYcW7RWPj7yiWIjAbRzu1IP ktHPwiG4pVTPsw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:56 2026 by rpki-client