This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft File: ciLFq32z3TlmGS-q_gfzEVsMjuU.mft (raw, json) Hash identifier: ftlg35lEU0UAkY1S5EpQ75/B7niNf53/g1L7+gGaJYY= Subject key identifier: 8F:2D:55:BF:40:BA:38:37:3E:6C:2E:2C:82:2D:6F:32:5A:02:8F:70 Authority key identifier: 72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5 Certificate issuer: /CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5 Certificate serial: 019C427D6F3F1E3109B1D09780458AE56B8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft Manifest number: 14E6 Signing time: Mon 09 Feb 2026 13:00:42 +0000 Manifest this update: Mon 09 Feb 2026 13:00:42 +0000 Manifest next update: Tue 10 Feb 2026 13:00:42 +0000 Files and hashes: 1: ciLFq32z3TlmGS-q_gfzEVsMjuU.crl (hash: RM1Zitp74pdrUM56A2yqF8ila4BpZWBTk9PyLQRy1W8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:6f:3f:1e:31:09:b1:d0:97:80:45:8a:e5:6b:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7222c5ab7db3dd3966192faafe07f3115b0c8ee5 Validity Not Before: Feb 9 13:00:42 2026 GMT Not After : Feb 10 13:00:42 2026 GMT Subject: CN=8f2d55bf40ba38373e6c2e2c822d6f325a028f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:24:72:33:23:57:26:7b:81:6f:12:01:54:09: d3:65:f6:e0:1a:f9:68:7c:cc:ab:ac:e8:94:be:95: 78:d0:fe:ad:a9:ee:35:ba:62:bc:fd:21:13:b7:c6: 6f:e1:98:28:8f:18:23:2a:b0:db:8a:90:20:e4:af: 9c:0c:75:84:92:16:48:fb:87:42:83:68:28:a5:4e: a8:a6:ab:2b:1f:13:fe:48:df:32:f8:4b:83:50:72: aa:03:f5:56:4e:0e:94:ba:38:c5:5a:81:e1:9d:9c: d9:1e:15:05:81:50:e9:bc:5f:12:94:6b:d3:44:f1: 29:1c:70:75:3b:5e:ef:22:11:31:e2:d1:74:2f:18: 99:80:0b:ae:30:91:a4:d9:60:8b:63:72:ad:2e:e1: 27:27:a7:4d:5f:de:41:7a:f8:94:9c:13:c4:10:61: 74:77:80:96:02:24:44:ee:a2:53:91:2a:15:3b:72: a3:c4:d2:66:2b:1a:bd:ea:36:59:da:51:34:d9:4c: 5d:ab:18:1e:22:c2:10:09:e0:d7:d2:74:c4:8b:80: 13:d3:12:e4:0b:ac:e7:2e:4d:fd:7f:99:b3:20:93: 71:11:97:0f:a6:fd:04:a3:c8:81:f9:ef:cf:aa:56: 8e:d6:98:7e:d3:17:4a:d1:30:19:6b:2e:67:d5:d0: e8:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2D:55:BF:40:BA:38:37:3E:6C:2E:2C:82:2D:6F:32:5A:02:8F:70 X509v3 Authority Key Identifier: keyid:72:22:C5:AB:7D:B3:DD:39:66:19:2F:AA:FE:07:F3:11:5B:0C:8E:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciLFq32z3TlmGS-q_gfzEVsMjuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/1c60ac-ba3f-440b-868b-ea12ef9422ec/1/ciLFq32z3TlmGS-q_gfzEVsMjuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:63:76:f8:cd:dc:09:35:69:50:3d:46:16:11:05:3e:bb:61: fe:da:67:50:b8:3d:34:d9:7c:b5:e5:cb:db:a1:f2:15:d2:ef: a6:55:30:9f:2e:c5:9a:f2:fc:7f:58:61:39:12:de:94:e9:fb: 80:93:de:5d:1a:08:72:66:c0:d5:e3:f7:06:3a:bf:a8:57:8f: 4f:5f:6b:bb:ef:18:a6:37:f7:fa:d5:5e:74:03:bf:83:c6:59: d8:96:da:a8:45:e1:2c:c0:30:ce:bc:2e:ae:6a:9d:79:68:c4: c5:59:05:5d:e9:85:d5:46:49:bb:76:e1:a0:35:2e:27:02:2a: 60:78:d5:9c:81:53:26:d2:e7:48:5a:90:6d:eb:ed:cb:fe:9c: 37:e3:f6:96:91:ce:fb:01:12:a6:8a:51:eb:fa:8e:fb:55:47: 5b:0a:9b:1c:86:87:5b:3c:11:89:c1:94:db:18:79:d7:e6:f3: 29:0f:f1:43:e4:08:c9:f0:df:b8:b9:14:e2:33:11:4f:42:9a: de:df:e2:63:41:f7:1e:39:5f:eb:e4:c7:5d:ef:2f:b5:5e:58: df:7f:06:d6:39:82:ab:fd:08:2d:da:eb:7d:43:1c:e0:ec:6e: 56:ad:93:d6:51:20:91:56:ec:69:df:d4:7c:b5:ac:8b:81:85: 73:f5:fb:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfW8/HjEJsdCXgEWK5WuOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMjJjNWFiN2RiM2RkMzk2NjE5MmZhYWZlMDdmMzExNWIw YzhlZTUwHhcNMjYwMjA5MTMwMDQyWhcNMjYwMjEwMTMwMDQyWjAzMTEwLwYDVQQD Eyg4ZjJkNTViZjQwYmEzODM3M2U2YzJlMmM4MjJkNmYzMjVhMDI4ZjcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCRyMyNXJnuBbxIBVAnTZfbgGvlo fMyrrOiUvpV40P6tqe41umK8/SETt8Zv4ZgojxgjKrDbipAg5K+cDHWEkhZI+4dC g2gopU6opqsrHxP+SN8y+EuDUHKqA/VWTg6UujjFWoHhnZzZHhUFgVDpvF8SlGvT RPEpHHB1O17vIhEx4tF0LxiZgAuuMJGk2WCLY3KtLuEnJ6dNX95BeviUnBPEEGF0 d4CWAiRE7qJTkSoVO3KjxNJmKxq96jZZ2lE02UxdqxgeIsIQCeDX0nTEi4AT0xLk C6znLk39f5mzIJNxEZcPpv0Eo8iB+e/PqlaO1ph+0xdK0TAZay5n1dDo3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI8tVb9Aujg3PmwuLIItbzJaAo9wMB8GA1UdIwQY MBaAFHIixat9s905Zhkvqv4H8xFbDI7lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGIt ZWExMmVmOTQyMmVjLzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy8xYzYwYWMtYmEzZi00NDBiLTg2OGItZWExMmVmOTQyMmVj LzEvY2lMRnEzMnozVGxtR1MtcV9nZnpFVnNNanVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWGN2+M3c CTVpUD1GFhEFPrth/tpnULg9NNl8teXL26HyFdLvplUwny7FmvL8f1hhORLelOn7 gJPeXRoIcmbA1eP3Bjq/qFePT19ru+8Ypjf3+tVedAO/g8ZZ2JbaqEXhLMAwzrwu rmqdeWjExVkFXemF1UZJu3bhoDUuJwIqYHjVnIFTJtLnSFqQbevty/6cN+P2lpHO +wESpopR6/qO+1VHWwqbHIaHWzwRicGU2xh51+bzKQ/xQ+QIyfDfuLkU4jMRT0Ka 3t/iY0H3Hjlf6+THXe8vtV5Y338G1jmCq/0ILdrrfUMc4OxuVq2T1lEgkVbsad/U fLWsi4GFc/X7IQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:41 2026 by rpki-client