This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft File: CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft (raw, json) Hash identifier: xS55QcGhiGb9jl8hZl9qKlyBXZ8xvBVK/UACfiRWZsM= Subject key identifier: 7D:A4:57:AB:7F:3E:2C:B0:7C:B3:35:F1:D7:15:C2:50:8C:40:0C:0C Authority key identifier: 09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC Certificate issuer: /CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Certificate serial: 019C427D22860E2D474010D98E902FC156AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft Manifest number: 01E8 Signing time: Mon 09 Feb 2026 13:00:22 +0000 Manifest this update: Mon 09 Feb 2026 13:00:22 +0000 Manifest next update: Tue 10 Feb 2026 13:00:22 +0000 Files and hashes: 1: CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl (hash: ZQTpyhPxa2vN+xHpvX8Wt1pCZWuA93TmXKSRmBI3T7Q=) 2: GMlNWwMvstKZbXWgh06o9T5EqTE.roa (hash: 3II56/e7g+EGOg2XDQ8qDvIUZO0rTVJTTs+Pzt9rihQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:22:86:0e:2d:47:40:10:d9:8e:90:2f:c1:56:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d943f9d5c75b1f50564f2d1dd0511788eb0afc Validity Not Before: Feb 9 13:00:22 2026 GMT Not After : Feb 10 13:00:22 2026 GMT Subject: CN=7da457ab7f3e2cb07cb335f1d715c2508c400c0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:21:f1:93:53:eb:e1:7b:9e:30:23:cc:25:5a: 3b:a5:c5:96:e5:44:00:60:49:5a:0e:f3:4c:be:d9: a9:0f:d6:d5:78:56:29:5d:2f:c1:bb:66:d2:18:fe: 10:90:65:a9:52:61:07:c5:af:8f:b3:64:fb:c8:de: d5:67:cb:fd:83:b5:df:5e:6a:c5:44:31:dd:fd:1f: 55:de:40:21:03:2c:b5:b9:3a:f2:11:4e:90:e5:57: f5:c0:fd:eb:7b:3a:ac:0c:c4:dd:6c:83:17:6d:cf: a3:ff:eb:c5:2b:98:b9:16:62:de:70:5c:c3:13:29: cb:75:5b:86:6c:4f:4b:e9:52:ba:29:68:ef:ac:1d: d7:cd:fc:97:22:bb:52:69:2d:ae:5d:d9:f2:64:e9: 61:f4:8a:b8:21:3c:b3:81:36:59:89:4d:f6:3e:c1: f9:35:6e:c9:48:ff:1b:92:ae:4a:e0:5e:a7:da:24: 6f:bd:8d:2d:63:aa:f7:57:7b:5f:8c:9d:69:fa:94: 7f:11:9a:4a:ba:32:71:c6:82:56:93:4c:a8:be:ce: 13:40:72:d6:e6:bf:36:51:98:94:5b:a5:67:bd:84: 30:2d:3b:93:39:99:8c:cb:e3:c3:2b:62:37:a3:1f: 8e:c9:3a:61:95:05:d9:b1:22:57:04:57:fc:92:87: f5:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:57:AB:7F:3E:2C:B0:7C:B3:35:F1:D7:15:C2:50:8C:40:0C:0C X509v3 Authority Key Identifier: keyid:09:D9:43:F9:D5:C7:5B:1F:50:56:4F:2D:1D:D0:51:17:88:EB:0A:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdlD-dXHWx9QVk8tHdBRF4jrCvw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/62c002-b94c-423b-b4eb-e792cc2fd07e/1/CdlD-dXHWx9QVk8tHdBRF4jrCvw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:58:3c:45:1b:85:85:40:b1:56:a7:d6:02:0b:9e:f5:31:eb: 19:cd:28:32:0d:9d:85:93:01:0c:1e:f0:82:f3:19:fa:0f:b7: 0d:e3:b0:72:f6:50:50:4b:21:57:90:ba:36:b2:ed:1b:9b:cb: 65:46:67:ea:49:b8:25:1c:1e:38:07:02:c6:ba:df:f9:37:fd: 88:a7:49:c5:3d:0c:39:15:3a:cc:0c:97:fc:d3:c7:94:cd:3e: af:b5:37:a1:b4:04:f9:d2:a3:dc:1c:f4:98:05:cb:da:35:b1: ed:b1:39:05:bd:a8:cb:e9:ec:75:95:4e:1e:8a:61:51:56:f5: 73:ab:9a:3f:0f:99:3d:24:57:e3:44:85:d2:3b:3e:fd:b4:84: 63:6b:e1:4d:59:90:cf:e3:f9:69:94:48:60:6c:8e:f0:1c:d6: 7b:3f:75:12:46:ce:54:0c:a9:8c:9b:51:cc:e1:2a:65:b1:ee: e3:77:b7:31:59:8e:f2:e1:98:d4:15:3d:47:f8:a9:ac:73:11: 5c:77:13:d2:5d:7c:d2:c4:2e:9b:8c:77:77:0b:f8:95:79:f2: b0:be:70:03:0c:72:38:83:e3:a1:75:60:ad:aa:45:13:29:e2: 7b:f7:9a:ff:ed:91:ef:96:44:11:bd:c0:c3:32:52:c4:54:5b: e2:98:79:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSKGDi1HQBDZjpAvwVarMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDk0M2Y5ZDVjNzViMWY1MDU2NGYyZDFkZDA1MTE3ODhl YjBhZmMwHhcNMjYwMjA5MTMwMDIyWhcNMjYwMjEwMTMwMDIyWjAzMTEwLwYDVQQD Eyg3ZGE0NTdhYjdmM2UyY2IwN2NiMzM1ZjFkNzE1YzI1MDhjNDAwYzBjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyHxk1Pr4XueMCPMJVo7pcWW5UQA YElaDvNMvtmpD9bVeFYpXS/Bu2bSGP4QkGWpUmEHxa+Ps2T7yN7VZ8v9g7XfXmrF RDHd/R9V3kAhAyy1uTryEU6Q5Vf1wP3rezqsDMTdbIMXbc+j/+vFK5i5FmLecFzD EynLdVuGbE9L6VK6KWjvrB3XzfyXIrtSaS2uXdnyZOlh9Iq4ITyzgTZZiU32PsH5 NW7JSP8bkq5K4F6n2iRvvY0tY6r3V3tfjJ1p+pR/EZpKujJxxoJWk0yovs4TQHLW 5r82UZiUW6VnvYQwLTuTOZmMy+PDK2I3ox+OyTphlQXZsSJXBFf8kof1UwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2kV6t/PiywfLM18dcVwlCMQAwMMB8GA1UdIwQY MBaAFAnZQ/nVx1sfUFZPLR3QUReI6wr8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWIt ZTc5MmNjMmZkMDdlLzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Zi82MmMwMDItYjk0Yy00MjNiLWI0ZWItZTc5MmNjMmZkMDdl LzEvQ2RsRC1kWEhXeDlRVms4dEhkQlJGNGpyQ3Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs1g8RRuF hUCxVqfWAgue9THrGc0oMg2dhZMBDB7wgvMZ+g+3DeOwcvZQUEshV5C6NrLtG5vL ZUZn6km4JRweOAcCxrrf+Tf9iKdJxT0MORU6zAyX/NPHlM0+r7U3obQE+dKj3Bz0 mAXL2jWx7bE5Bb2oy+nsdZVOHophUVb1c6uaPw+ZPSRX40SF0js+/bSEY2vhTVmQ z+P5aZRIYGyO8BzWez91EkbOVAypjJtRzOEqZbHu43e3MVmO8uGY1BU9R/iprHMR XHcT0l180sQum4x3dwv4lXnysL5wAwxyOIPjoXVgrapFEynie/ea/+2R75ZEEb3A wzJSxFRb4ph5pA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:41 2026 by rpki-client