This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json) Hash identifier: 34IFbm7zfxu9GUpkOs2sKRnFAG4JiKISOlALz4rBw5Y= Subject key identifier: E9:3D:BF:F7:A0:E2:43:72:48:41:39:24:01:DE:EC:10:94:F4:06:00 Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86 Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386 Certificate serial: 019C4321ECAAD4564DEAEADE398C6A92A90E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft Manifest number: 1141 Signing time: Mon 09 Feb 2026 16:00:22 +0000 Manifest this update: Mon 09 Feb 2026 16:00:22 +0000 Manifest next update: Tue 10 Feb 2026 16:00:22 +0000 Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: +WqkSwhlL8nZHsTZVOUJ+DEwLaI8JmjdqVLXafneWmU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ec:aa:d4:56:4d:ea:ea:de:39:8c:6a:92:a9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386 Validity Not Before: Feb 9 16:00:22 2026 GMT Not After : Feb 10 16:00:22 2026 GMT Subject: CN=e93dbff7a0e243724841392401deec1094f40600 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:5a:ac:e9:99:8c:fb:22:33:94:a5:8f:05: 70:40:b3:8f:6b:2c:79:87:ef:51:96:b8:1f:bd:68: 6d:e1:65:32:4a:2f:22:6a:7e:bf:50:4c:f1:0a:f5: de:3f:53:7b:36:93:2b:1d:84:09:8d:63:94:b7:d7: 0a:b5:ee:84:82:26:6c:95:02:9d:94:13:e6:d4:d1: c1:e8:ca:a0:a9:f7:78:a5:b3:ae:58:ef:6e:4a:db: 6c:1b:8a:67:3d:2b:b8:12:71:5e:68:de:61:f8:3b: 13:26:0a:5c:19:af:8d:cc:26:d4:af:7c:6a:20:72: c5:b9:0f:ea:4e:a6:ca:69:66:bd:d5:52:ca:72:84: af:84:1b:93:ae:ae:a2:ee:da:d4:6e:3f:be:57:4d: b3:36:70:d9:28:da:2f:62:11:73:d0:3f:fb:f2:ad: d0:5e:ed:99:7f:ce:44:c9:50:95:79:b8:8a:f5:a0: 13:61:b1:9c:78:a9:5e:40:f6:16:8f:78:af:38:b0: 43:0c:4e:8b:91:c8:02:1d:fe:a3:b3:3d:94:07:2c: b3:20:8d:d8:53:91:23:e7:22:75:8b:e2:0c:c8:21: 3c:25:d9:15:38:dd:d5:51:06:f1:eb:35:20:dd:ba: b9:be:37:2f:07:16:97:97:68:57:98:f4:ad:77:d4: 7d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:3D:BF:F7:A0:E2:43:72:48:41:39:24:01:DE:EC:10:94:F4:06:00 X509v3 Authority Key Identifier: keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:99:0b:37:b8:7b:38:c5:21:4d:5d:c5:21:ed:f6:bf:7a:fe: 20:6d:c3:61:5e:8e:f3:fc:db:c0:7a:d9:30:d1:2c:5a:63:73: 17:38:ba:0b:ca:35:f2:5e:94:c2:37:25:05:b2:b7:53:f8:1c: 44:35:7b:3c:21:17:a8:43:5a:8b:17:1b:af:03:41:4d:ec:57: 9c:d8:ef:9f:3f:b9:70:61:c2:af:36:3e:36:64:f8:18:50:f5: 42:8f:7a:f2:a0:e6:3e:6d:93:86:8f:45:41:d4:ed:e0:37:12: 5b:30:72:4a:95:8f:5b:10:60:2f:ae:77:1c:f4:39:3b:77:f8: 90:b6:e4:d4:67:6d:c3:4a:d0:6e:68:1c:3c:1a:5f:17:80:37: fb:3e:57:cf:33:04:2a:66:d3:56:39:79:92:e7:d6:c1:37:1d: 36:67:b8:52:ad:ef:5b:fe:27:55:26:ff:ef:c5:e2:dd:c8:e3: 53:be:4c:49:38:37:e7:8f:a6:ec:d3:07:59:ce:bf:81:59:77: b4:f9:0d:bf:98:14:9a:a1:49:d4:49:a6:78:99:a8:04:66:f8: 3d:9e:f2:ca:19:0c:25:96:18:74:03:1f:37:9f:75:f1:11:12: 3b:33:7f:3f:50:64:ac:ea:b4:b2:ba:44:0e:aa:06:ad:a9:57: 08:90:67:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIeyq1FZN6ureOYxqkqkOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxNTYxYWI5YzVmMzkyOTIyZGE3Y2FlMTgwYzMzMDczNjVm MDIzODYwHhcNMjYwMjA5MTYwMDIyWhcNMjYwMjEwMTYwMDIyWjAzMTEwLwYDVQQD EyhlOTNkYmZmN2EwZTI0MzcyNDg0MTM5MjQwMWRlZWMxMDk0ZjQwNjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtlarOmZjPsiM5SljwVwQLOPayx5 h+9RlrgfvWht4WUySi8ian6/UEzxCvXeP1N7NpMrHYQJjWOUt9cKte6EgiZslQKd lBPm1NHB6Mqgqfd4pbOuWO9uSttsG4pnPSu4EnFeaN5h+DsTJgpcGa+NzCbUr3xq IHLFuQ/qTqbKaWa91VLKcoSvhBuTrq6i7trUbj++V02zNnDZKNovYhFz0D/78q3Q Xu2Zf85EyVCVebiK9aATYbGceKleQPYWj3ivOLBDDE6LkcgCHf6jsz2UByyzII3Y U5Ej5yJ1i+IMyCE8JdkVON3VUQbx6zUg3bq5vjcvBxaXl2hXmPStd9R9VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOk9v/eg4kNySEE5JAHe7BCU9AYAMB8GA1UdIwQY MBaAFHFWGrnF85KSLafK4YDDMHNl8COGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMTM1ZTMtNTkzZi00Y2RiLWFmNTUt YzZmNGVlODcyMzY0LzEvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC8yMTM1ZTMtNTkzZi00Y2RiLWFmNTUtYzZmNGVlODcyMzY0 LzEvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYJkLN7h7 OMUhTV3FIe32v3r+IG3DYV6O8/zbwHrZMNEsWmNzFzi6C8o18l6UwjclBbK3U/gc RDV7PCEXqENaixcbrwNBTexXnNjvnz+5cGHCrzY+NmT4GFD1Qo968qDmPm2Tho9F QdTt4DcSWzBySpWPWxBgL653HPQ5O3f4kLbk1Gdtw0rQbmgcPBpfF4A3+z5XzzME KmbTVjl5kufWwTcdNme4Uq3vW/4nVSb/78Xi3cjjU75MSTg354+m7NMHWc6/gVl3 tPkNv5gUmqFJ1EmmeJmoBGb4PZ7yyhkMJZYYdAMfN5918RESOzN/P1BkrOq0srpE DqoGralXCJBnRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:52 2026 by rpki-client