This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json) Hash identifier: JNyUKP6Jzq7RnJb4F+019qh7webA5HRb+pGlA4IG9S8= Subject key identifier: BD:AE:63:24:63:A1:99:39:79:9E:D6:5C:8C:27:D5:14:7D:91:FE:7E Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5 Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5 Certificate serial: 019C43226054B13E373DE4D20B1BB578D828 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft Manifest number: 118B Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: eeoEHgfdkWzkFQOn7DlF3piV+cKVcDArsscalS2GNqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:60:54:b1:3e:37:3d:e4:d2:0b:1b:b5:78:d8:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5 Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=bdae632463a19939799ed65c8c27d5147d91fe7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:6a:6d:8b:a3:cf:f0:0f:e1:09:32:8b:f0: 7f:5e:0c:1b:9d:e1:69:45:42:e3:42:df:3d:18:ce: 63:77:ee:73:59:87:26:9e:c4:f9:ad:6b:3f:f9:65: b7:66:c2:3d:3e:4d:e1:10:7d:2d:bb:3e:59:19:24: dc:53:db:c6:8c:68:23:19:c3:fd:5a:73:e4:22:4a: 78:de:d0:6d:47:d6:21:e1:6f:b2:20:3d:ef:9e:4b: 76:49:18:71:82:9a:f4:fa:38:70:fd:da:ca:4e:15: 1f:61:cb:29:15:37:ea:16:cb:08:ff:b6:f9:4e:a4: d8:07:0e:a0:3a:00:d6:cb:cb:a0:25:d7:be:88:5c: a1:72:33:3c:41:62:cb:27:1b:c9:a1:36:bd:7f:d2: 3c:6e:d6:9a:95:9e:ea:13:0e:77:bc:95:0e:7b:79: 73:21:55:23:9d:3f:24:de:44:01:16:0f:f2:ab:53: 73:e2:d6:e5:11:7a:17:e6:79:9a:b7:e8:8a:16:43: 98:ad:a1:35:7d:e4:5e:b8:24:b7:f2:84:f2:9c:e7: 0f:03:1c:5c:37:bf:bd:41:36:a7:ff:4b:f2:99:9d: 19:4d:d1:c8:66:9e:26:04:53:df:5e:5a:fb:90:78: ec:35:a6:b2:79:ff:60:43:b6:b5:f8:55:79:d7:e9: 37:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:AE:63:24:63:A1:99:39:79:9E:D6:5C:8C:27:D5:14:7D:91:FE:7E X509v3 Authority Key Identifier: keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:3d:60:19:92:64:71:49:6e:06:9f:e4:0b:a8:1a:ae:cb:ec: a1:d7:2c:51:59:10:0d:67:35:f7:3d:ea:aa:c7:bd:ae:53:58: 65:18:ff:25:3a:30:a6:30:db:07:e2:b9:d2:9c:58:db:0c:81: 1a:84:7c:46:94:d5:02:b5:8e:25:6f:38:64:f4:f1:da:fd:de: fa:c2:eb:ae:c0:08:fa:65:ab:ae:a9:de:9f:33:8e:00:95:e8: 31:41:9b:75:f1:c2:a5:de:69:fd:d1:1c:f1:e4:b8:89:ab:6b: 32:af:2b:b3:9d:45:20:ee:ea:7e:a5:1c:9b:e7:39:7b:45:23: 0d:35:fc:84:3b:10:0e:b1:32:f5:a5:f3:65:8d:17:38:06:df: 24:b3:ac:e9:ce:d3:18:90:c5:13:2a:9f:98:6d:07:7d:be:79: b6:de:36:8c:55:a0:3b:a7:33:75:3b:69:ba:02:94:b4:c9:b8: d7:ff:a2:4b:9e:4c:9d:c6:0f:06:4a:1e:28:7c:34:48:c2:10: ac:31:65:3c:01:c2:cc:1c:85:a5:78:1f:04:6b:c8:6f:69:df: 1c:39:a2:b4:a7:0e:03:02:b3:6b:cc:f6:bb:3d:94:68:c8:f9: b5:8f:79:fe:da:b3:4c:59:15:c6:55:53:04:45:b4:a9:c5:81: 52:6b:30:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImBUsT43PeTSCxu1eNgoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwM2Y3ODVlMTQzNDBhYzZhODQwNDg2M2Q3YmY3YWY5NGU1 YWI5YjUwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD EyhiZGFlNjMyNDYzYTE5OTM5Nzk5ZWQ2NWM4YzI3ZDUxNDdkOTFmZTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6BqbYujz/AP4Qkyi/B/XgwbneFp RULjQt89GM5jd+5zWYcmnsT5rWs/+WW3ZsI9Pk3hEH0tuz5ZGSTcU9vGjGgjGcP9 WnPkIkp43tBtR9Yh4W+yID3vnkt2SRhxgpr0+jhw/drKThUfYcspFTfqFssI/7b5 TqTYBw6gOgDWy8ugJde+iFyhcjM8QWLLJxvJoTa9f9I8btaalZ7qEw53vJUOe3lz IVUjnT8k3kQBFg/yq1Nz4tblEXoX5nmat+iKFkOYraE1feReuCS38oTynOcPAxxc N7+9QTan/0vymZ0ZTdHIZp4mBFPfXlr7kHjsNaayef9gQ7a1+FV51+k3NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL2uYyRjoZk5eZ7WXIwn1RR9kf5+MB8GA1UdIwQY MBaAFHA/eF4UNArGqEBIY9e/evlOWrm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMt NDc2YmNjNDQxNTRkLzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMtNDc2YmNjNDQxNTRk LzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfT1gGZJk cUluBp/kC6garsvsodcsUVkQDWc19z3qqse9rlNYZRj/JTowpjDbB+K50pxY2wyB GoR8RpTVArWOJW84ZPTx2v3e+sLrrsAI+mWrrqnenzOOAJXoMUGbdfHCpd5p/dEc 8eS4iatrMq8rs51FIO7qfqUcm+c5e0UjDTX8hDsQDrEy9aXzZY0XOAbfJLOs6c7T GJDFEyqfmG0Hfb55tt42jFWgO6czdTtpugKUtMm41/+iS55MncYPBkoeKHw0SMIQ rDFlPAHCzByFpXgfBGvIb2nfHDmitKcOAwKza8z2uz2UaMj5tY95/tqzTFkVxlVT BEW0qcWBUmswhw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:53 2026 by rpki-client