This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft File: CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft (raw, json) Hash identifier: R1lBBFK4JBMsKgFYy/v2IQQJvr2W+Jy7v3LZn/INdjY= Subject key identifier: A3:14:C7:56:5E:CF:68:8A:68:51:EA:47:DB:80:F2:FF:35:BC:92:54 Authority key identifier: 09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90 Certificate issuer: /CN=097b5d1490b385a2f80c2a0324fe98e351091490 Certificate serial: 019C41A2484F3D527A03ABCA4006D2629348 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft Manifest number: 09D3 Signing time: Mon 09 Feb 2026 09:01:20 +0000 Manifest this update: Mon 09 Feb 2026 09:01:20 +0000 Manifest next update: Tue 10 Feb 2026 09:01:20 +0000 Files and hashes: 1: CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl (hash: V4MQni02uSbuKZIjX71hjVMtjQLybCJbSph0RTPyMrY=) 2: bLCakBk74vA_pvVpNhXg4pCbVXw.roa (hash: GBhXQa+nuToOfYjhvINVNifJDhn+gqtN3QAytiiva2Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:48:4f:3d:52:7a:03:ab:ca:40:06:d2:62:93:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097b5d1490b385a2f80c2a0324fe98e351091490 Validity Not Before: Feb 9 09:01:20 2026 GMT Not After : Feb 10 09:01:20 2026 GMT Subject: CN=a314c7565ecf688a6851ea47db80f2ff35bc9254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bd:78:5f:4f:31:92:26:76:35:de:48:07:a6: ba:e5:2e:4e:93:1f:53:6d:68:3a:09:2f:e7:2e:3e: 89:be:93:7f:87:b4:b8:5d:48:d3:90:af:9a:db:77: 3b:b4:ac:82:b0:9e:a2:1d:00:6e:a3:d7:df:b7:65: bd:63:35:9f:7b:94:7f:ef:6c:22:2a:ae:43:a0:88: 59:c4:ca:e3:07:12:7c:34:e7:f3:63:ce:64:fa:e4: d9:d6:cf:bf:5d:c7:b4:ba:a0:15:e7:09:a9:30:c1: 14:0b:97:8e:dc:ed:a6:51:79:c4:24:49:05:89:b4: f0:e8:8c:79:24:c2:fa:ca:cc:59:cf:d5:d5:b4:73: 10:67:7d:6c:55:62:6d:71:01:b3:3f:ce:3b:9f:2d: 95:5b:4a:37:77:22:e8:3e:bf:bd:02:d9:df:bf:9e: 2f:24:54:18:75:c4:d8:08:b6:74:c5:22:ef:14:e4: 9e:95:70:1d:64:01:1b:29:04:3e:f6:a9:94:97:69: f0:72:d6:cf:6c:68:15:f6:45:a9:52:a1:97:7e:25: 90:e6:a3:8d:61:28:36:62:f7:8c:59:65:fe:ed:48: 72:41:06:65:7c:f0:3f:87:f1:1c:5c:5b:6a:84:40: 90:73:12:ce:62:d5:af:68:bd:da:2e:f5:20:5b:a8: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:14:C7:56:5E:CF:68:8A:68:51:EA:47:DB:80:F2:FF:35:BC:92:54 X509v3 Authority Key Identifier: keyid:09:7B:5D:14:90:B3:85:A2:F8:0C:2A:03:24:FE:98:E3:51:09:14:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXtdFJCzhaL4DCoDJP6Y41EJFJA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7e3816-8c8e-47a0-94ec-4fc9f0d2aca3/1/CXtdFJCzhaL4DCoDJP6Y41EJFJA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:dd:4a:01:25:52:e4:73:82:ee:f5:17:e2:a6:cb:7c:fc:1e: 9b:bb:fd:b7:d0:1d:06:1c:1f:e2:be:36:0a:4f:a1:03:b0:42: 56:a5:06:2d:d9:d8:b4:17:42:f6:ef:10:41:2d:60:c4:f5:8c: f5:12:d8:80:49:75:ad:cd:8c:24:0d:81:f0:69:89:e3:74:13: 2c:17:92:a4:90:54:42:a6:0e:09:49:2f:3c:b5:2a:ff:1f:8a: f5:5d:d5:b5:ac:f3:fd:20:e6:ad:5b:5d:02:1c:4f:38:0b:4e: a2:24:d7:65:27:05:24:81:2b:ac:c5:2e:b6:39:65:c2:5e:bc: 8f:ce:75:ca:ae:7a:ac:96:9b:b0:cd:b5:65:53:69:6f:0b:9d: 0f:89:ae:48:4b:4e:d7:8a:a2:78:4f:0d:4f:ad:c9:ca:37:35: 38:99:30:6b:46:17:d3:14:84:32:23:81:ee:4c:ec:5f:14:70: b7:6d:c9:fd:64:75:57:51:f7:ac:b8:2f:65:36:1b:b2:6f:7e: e6:f4:2a:fd:4b:3b:20:71:16:d6:22:89:54:4f:ac:87:78:aa: 5d:b7:52:77:67:fd:25:af:5e:b8:4e:37:af:9d:bb:01:58:ba: bb:89:99:01:44:f6:76:1d:61:2e:87:a9:e5:b9:19:68:ab:36: 7a:cf:3e:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBokhPPVJ6A6vKQAbSYpNIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5N2I1ZDE0OTBiMzg1YTJmODBjMmEwMzI0ZmU5OGUzNTEw OTE0OTAwHhcNMjYwMjA5MDkwMTIwWhcNMjYwMjEwMDkwMTIwWjAzMTEwLwYDVQQD EyhhMzE0Yzc1NjVlY2Y2ODhhNjg1MWVhNDdkYjgwZjJmZjM1YmM5MjU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyr14X08xkiZ2Nd5IB6a65S5Okx9T bWg6CS/nLj6JvpN/h7S4XUjTkK+a23c7tKyCsJ6iHQBuo9fft2W9YzWfe5R/72wi Kq5DoIhZxMrjBxJ8NOfzY85k+uTZ1s+/Xce0uqAV5wmpMMEUC5eO3O2mUXnEJEkF ibTw6Ix5JML6ysxZz9XVtHMQZ31sVWJtcQGzP847ny2VW0o3dyLoPr+9Atnfv54v JFQYdcTYCLZ0xSLvFOSelXAdZAEbKQQ+9qmUl2nwctbPbGgV9kWpUqGXfiWQ5qON YSg2YveMWWX+7UhyQQZlfPA/h/EcXFtqhECQcxLOYtWvaL3aLvUgW6g+mwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMUx1Zez2iKaFHqR9uA8v81vJJUMB8GA1UdIwQY MBaAFAl7XRSQs4Wi+AwqAyT+mONRCRSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC83ZTM4MTYtOGM4ZS00N2EwLTk0ZWMt NGZjOWYwZDJhY2EzLzEvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NC83ZTM4MTYtOGM4ZS00N2EwLTk0ZWMtNGZjOWYwZDJhY2Ez LzEvQ1h0ZEZKQ3poYUw0RENvREpQNlk0MUVKRkpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFt1KASVS 5HOC7vUX4qbLfPwem7v9t9AdBhwf4r42Ck+hA7BCVqUGLdnYtBdC9u8QQS1gxPWM 9RLYgEl1rc2MJA2B8GmJ43QTLBeSpJBUQqYOCUkvPLUq/x+K9V3Vtazz/SDmrVtd AhxPOAtOoiTXZScFJIErrMUutjllwl68j851yq56rJabsM21ZVNpbwudD4muSEtO 14qieE8NT63Jyjc1OJkwa0YX0xSEMiOB7kzsXxRwt23J/WR1V1H3rLgvZTYbsm9+ 5vQq/Us7IHEW1iKJVE+sh3iqXbdSd2f9Ja9euE43r527AVi6u4mZAUT2dh1hLoep 5bkZaKs2es8+Cw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:30 2026 by rpki-client