This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json) Hash identifier: dsJOei7SlmsvLXYUyoVpFJhUD5mrXyK15o+ov9GC1u8= Subject key identifier: 80:D7:1D:55:F1:20:FA:32:90:29:26:46:1A:4D:B9:43:62:DC:47:CE Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9 Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9 Certificate serial: 019C42EBB0718BC39E009CF0A911A8CD1CC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:01:08 +0000 Manifest this update: Mon 09 Feb 2026 15:01:08 +0000 Manifest next update: Tue 10 Feb 2026 15:01:08 +0000 Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: hiCQ7hxdYyNzqKawapqppufCOKCSkERftGEtRvcATZo=) 2: kq69GnNoNu6MMrOZ-y4Qc5G78H4.roa (hash: Qq3p0Adj2yisz3nh39TpBp7Y6DeK5Jya860Z6Zza3NU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b0:71:8b:c3:9e:00:9c:f0:a9:11:a8:cd:1c:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9 Validity Not Before: Feb 9 15:01:08 2026 GMT Not After : Feb 10 15:01:08 2026 GMT Subject: CN=80d71d55f120fa32902926461a4db94362dc47ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:38:81:cf:8a:f7:aa:ce:41:4f:00:e7:0c:7b: 87:46:f8:c5:86:5c:14:b0:29:d2:14:96:2c:87:20: 5d:f5:69:21:33:22:58:67:9a:5f:d2:9b:f2:47:94: fe:39:e3:c5:1e:89:b6:36:7d:9f:47:a6:65:2f:1e: c4:3d:d5:da:12:d4:6e:df:8e:12:d9:ba:f1:ba:11: a5:eb:6e:3e:45:2d:af:07:d7:16:75:14:b9:e9:00: 86:65:73:7c:b3:34:28:ab:31:7a:23:84:c6:29:c1: 7a:4a:a5:29:46:7b:ae:40:ee:c4:65:ce:b0:fe:3b: af:63:e5:2b:f3:af:77:fc:6d:29:15:7e:cf:90:d7: 23:4f:33:27:f7:d3:a5:ff:2b:3e:c2:7d:eb:c3:61: 1d:7f:4d:ec:d4:66:2c:50:b0:46:81:89:7a:96:89: 7d:59:9e:76:f4:0c:ee:1a:a3:4a:41:7b:a6:f3:75: 4b:5c:f3:95:91:0d:1d:62:40:d8:90:54:c5:ed:50: 2f:d3:bd:3e:b3:ba:82:fa:f7:2f:c1:36:06:bf:ec: c1:f8:63:66:6d:56:59:70:28:f8:87:7b:c3:3c:7a: e5:3c:4c:32:55:c8:31:64:8f:da:74:2d:a5:5f:4e: 93:22:4e:33:6f:57:0a:ac:09:e5:e3:8e:44:c5:d8: 78:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D7:1D:55:F1:20:FA:32:90:29:26:46:1A:4D:B9:43:62:DC:47:CE X509v3 Authority Key Identifier: keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:07:ec:ca:24:ab:bb:63:82:78:de:f0:ca:e4:b3:a1:2c:d2: b9:2d:58:4c:11:da:8b:90:56:f4:43:53:09:9f:a9:fe:36:b1: aa:77:59:b9:f4:29:b7:29:b2:37:c6:2a:5f:7a:44:04:c4:38: 2e:81:34:66:8e:80:72:08:e1:14:18:9d:b3:85:f6:b1:5a:e4: 7e:b4:fc:a4:90:10:e1:e8:e3:49:0d:30:db:03:6c:2d:10:3f: 11:2f:5c:1c:14:76:fb:b1:a1:b4:3c:ad:85:72:09:ed:53:a7: aa:80:75:f6:14:41:dd:5a:9a:ac:00:fc:09:c9:17:68:de:a3: 52:ea:88:ba:3d:02:d2:34:d1:bd:62:73:3a:09:f6:be:1b:7e: db:f0:ff:bd:fb:c6:66:32:24:6f:4b:66:b7:27:ef:cb:eb:4e: 49:d2:06:ad:db:b3:83:4b:42:10:31:6f:1f:be:4a:f2:b0:67: cb:3b:32:4e:44:97:d4:46:7e:e0:a7:97:90:a3:f4:08:f0:f3: 5a:9c:63:9a:2d:4f:f7:34:30:fa:4c:61:6e:8b:da:e2:63:95: 5e:87:a2:fa:55:5b:20:94:e5:52:ea:f2:8a:06:62:ec:f0:c1: 7b:a9:34:cd:9c:92:92:af:3e:92:0c:e3:2d:3e:58:5d:20:58: 08:dd:de:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67Bxi8OeAJzwqRGozRzHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhYjM4ZGFiOTBjNjE0NTBkYzhhZDY2YjQ4NWQ1MzZjYmFm OWUwZjkwHhcNMjYwMjA5MTUwMTA4WhcNMjYwMjEwMTUwMTA4WjAzMTEwLwYDVQQD Eyg4MGQ3MWQ1NWYxMjBmYTMyOTAyOTI2NDYxYTRkYjk0MzYyZGM0N2NlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ziBz4r3qs5BTwDnDHuHRvjFhlwU sCnSFJYshyBd9WkhMyJYZ5pf0pvyR5T+OePFHom2Nn2fR6ZlLx7EPdXaEtRu344S 2brxuhGl624+RS2vB9cWdRS56QCGZXN8szQoqzF6I4TGKcF6SqUpRnuuQO7EZc6w /juvY+Ur8693/G0pFX7PkNcjTzMn99Ol/ys+wn3rw2Edf03s1GYsULBGgYl6lol9 WZ529AzuGqNKQXum83VLXPOVkQ0dYkDYkFTF7VAv070+s7qC+vcvwTYGv+zB+GNm bVZZcCj4h3vDPHrlPEwyVcgxZI/adC2lX06TIk4zb1cKrAnl445Exdh4OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDXHVXxIPoykCkmRhpNuUNi3EfOMB8GA1UdIwQY MBaAFAqzjauQxhRQ3IrWa0hdU2y6+eD5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMt NDNlODExZjc3NjgxLzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9kYTI3ZWQtM2NjMy00OTM3LTg1ODMtNDNlODExZjc3Njgx LzEvQ3JPTnE1REdGRkRjaXRaclNGMVRiTHI1NFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwfsyiSr u2OCeN7wyuSzoSzSuS1YTBHai5BW9ENTCZ+p/jaxqndZufQptymyN8YqX3pEBMQ4 LoE0Zo6AcgjhFBids4X2sVrkfrT8pJAQ4ejjSQ0w2wNsLRA/ES9cHBR2+7GhtDyt hXIJ7VOnqoB19hRB3VqarAD8CckXaN6jUuqIuj0C0jTRvWJzOgn2vht+2/D/vfvG ZjIkb0tmtyfvy+tOSdIGrduzg0tCEDFvH75K8rBnyzsyTkSX1EZ+4KeXkKP0CPDz Wpxjmi1P9zQw+kxhbova4mOVXoei+lVbIJTlUuryigZi7PDBe6k0zZySkq8+kgzj LT5YXSBYCN3e3w== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:31 2026 by rpki-client