This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft File: ci0p5qil5cpi3rc-r_OrE95VBq0.mft (raw, json) Hash identifier: 91u1UydwMoKcF1SYZ8IbmpyQXUDhG8kezXY81FvFmmU= Subject key identifier: E0:BB:F5:9C:0A:FD:EF:88:B1:F8:56:E2:42:87:A4:C2:BF:F9:AE:FF Authority key identifier: 72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD Certificate issuer: /CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad Certificate serial: 019C446BC1EBEB58F379930D4E9553F1AC22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft Manifest number: 0317 Signing time: Mon 09 Feb 2026 22:00:38 +0000 Manifest this update: Mon 09 Feb 2026 22:00:38 +0000 Manifest next update: Tue 10 Feb 2026 22:00:38 +0000 Files and hashes: 1: ci0p5qil5cpi3rc-r_OrE95VBq0.crl (hash: 0R7zs+6ZYC6yvfYbw6BnfxM5SnwCzZjQ7YhScMs5d4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:c1:eb:eb:58:f3:79:93:0d:4e:95:53:f1:ac:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722d29e6a8a5e5ca62deb73eaff3ab13de5506ad Validity Not Before: Feb 9 22:00:38 2026 GMT Not After : Feb 10 22:00:38 2026 GMT Subject: CN=e0bbf59c0afdef88b1f856e24287a4c2bff9aeff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b5:5d:d4:f0:06:96:86:05:1c:d3:41:00:4e: ca:a1:c1:dd:cc:a4:9a:9a:0e:3f:e6:e4:cb:fa:46: 33:bc:98:30:57:e7:9e:b8:a7:ba:74:61:73:2e:40: e9:8a:80:b8:94:b7:3c:e2:e1:6c:86:2f:8a:c2:a9: 14:13:f9:3c:f5:c0:aa:c6:d0:db:4c:36:2e:12:75: 49:9a:20:47:d4:ec:36:ff:62:ca:c7:fd:fe:eb:a3: 73:66:36:58:9f:08:8a:69:9e:58:90:b3:b6:f2:20: c2:f6:af:b7:fd:c4:b8:e2:33:1b:c1:59:db:22:59: a5:ef:3c:62:ae:3d:8a:7f:92:f5:0a:cf:15:cb:87: f8:42:a9:41:6a:eb:5f:fb:24:f0:fa:46:55:97:ce: 93:9e:68:88:37:c7:5e:09:f2:31:52:18:c6:b3:c8: 34:dc:ce:ec:5d:2f:87:ab:42:68:fe:6f:db:73:6c: 27:b3:08:6f:2e:5f:63:45:55:19:ed:5c:f0:7a:b8: 0a:b8:5f:a3:80:47:9c:37:0d:86:a0:69:f6:b5:e2: 90:8c:b5:22:f1:ed:23:f9:bb:49:b8:dc:cf:d5:ec: a8:fc:ab:6a:62:63:de:57:bd:2e:8e:f4:1e:e0:ef: bf:bd:00:81:90:44:ae:78:d9:8f:72:cd:2d:27:82: 5b:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:BB:F5:9C:0A:FD:EF:88:B1:F8:56:E2:42:87:A4:C2:BF:F9:AE:FF X509v3 Authority Key Identifier: keyid:72:2D:29:E6:A8:A5:E5:CA:62:DE:B7:3E:AF:F3:AB:13:DE:55:06:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ci0p5qil5cpi3rc-r_OrE95VBq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/106e0f-ad80-47c3-bd4f-5547900b8d59/1/ci0p5qil5cpi3rc-r_OrE95VBq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:98:61:5f:86:db:4f:e0:89:6e:70:9a:60:52:b3:31:4a:92: ec:79:3b:24:c7:20:f5:33:53:6a:33:17:55:32:d2:3b:5b:95: 0c:76:dd:ad:0e:66:44:c6:b1:0b:c4:ca:2f:0e:38:16:e6:90: 2f:ba:08:08:a0:a3:95:1f:24:05:36:9b:f0:b2:16:bf:35:f5: 8e:92:9a:00:00:e3:60:47:3b:ca:8a:68:ef:b3:e3:e1:f1:d6: 4a:e0:53:e2:37:7c:9b:6d:a6:80:48:72:f5:c3:0a:0f:25:18: ca:41:3f:7b:c4:22:9b:6d:71:60:88:87:8b:45:a4:a5:c4:e7: 44:38:57:7d:9e:82:0d:e8:23:35:27:0f:59:d4:4d:83:d7:7e: d0:d7:4f:66:80:fe:e9:9e:0c:b5:6b:8e:25:34:5b:13:ff:c8: fa:08:aa:b8:7c:5a:99:cb:5a:01:13:0a:84:c7:e8:58:5f:c6: d6:bb:de:ce:47:50:49:14:c1:87:e6:d8:1b:3a:8c:25:b3:5f: b5:93:55:19:a4:bf:09:25:6a:d3:b4:d4:11:38:a4:6a:61:8b: 18:2b:48:82:70:19:10:7d:0d:90:a8:8a:21:53:07:f9:be:49: 1c:24:5b:f7:5d:70:bf:9b:24:9b:6a:7d:69:c5:5a:0f:48:6f: 69:a0:0f:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa8Hr61jzeZMNTpVT8awiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmQyOWU2YThhNWU1Y2E2MmRlYjczZWFmZjNhYjEzZGU1 NTA2YWQwHhcNMjYwMjA5MjIwMDM4WhcNMjYwMjEwMjIwMDM4WjAzMTEwLwYDVQQD EyhlMGJiZjU5YzBhZmRlZjg4YjFmODU2ZTI0Mjg3YTRjMmJmZjlhZWZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrVd1PAGloYFHNNBAE7KocHdzKSa mg4/5uTL+kYzvJgwV+eeuKe6dGFzLkDpioC4lLc84uFshi+KwqkUE/k89cCqxtDb TDYuEnVJmiBH1Ow2/2LKx/3+66NzZjZYnwiKaZ5YkLO28iDC9q+3/cS44jMbwVnb Ilml7zxirj2Kf5L1Cs8Vy4f4QqlBautf+yTw+kZVl86TnmiIN8deCfIxUhjGs8g0 3M7sXS+Hq0Jo/m/bc2wnswhvLl9jRVUZ7VzwergKuF+jgEecNw2GoGn2teKQjLUi 8e0j+btJuNzP1eyo/KtqYmPeV70ujvQe4O+/vQCBkESueNmPcs0tJ4JbaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOC79ZwK/e+IsfhW4kKHpMK/+a7/MB8GA1UdIwQY MBaAFHItKeaopeXKYt63Pq/zqxPeVQatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2kwcDVxaWw1Y3BpM3JjLXJfT3JFOTVWQnEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8xMDZlMGYtYWQ4MC00N2MzLWJkNGYt NTU0NzkwMGI4ZDU5LzEvY2kwcDVxaWw1Y3BpM3JjLXJfT3JFOTVWQnEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8xMDZlMGYtYWQ4MC00N2MzLWJkNGYtNTU0NzkwMGI4ZDU5 LzEvY2kwcDVxaWw1Y3BpM3JjLXJfT3JFOTVWQnEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJhhX4bb T+CJbnCaYFKzMUqS7Hk7JMcg9TNTajMXVTLSO1uVDHbdrQ5mRMaxC8TKLw44FuaQ L7oICKCjlR8kBTab8LIWvzX1jpKaAADjYEc7yopo77Pj4fHWSuBT4jd8m22mgEhy 9cMKDyUYykE/e8Qim21xYIiHi0WkpcTnRDhXfZ6CDegjNScPWdRNg9d+0NdPZoD+ 6Z4MtWuOJTRbE//I+giquHxamctaARMKhMfoWF/G1rvezkdQSRTBh+bYGzqMJbNf tZNVGaS/CSVq07TUETikamGLGCtIgnAZEH0NkKiKIVMH+b5JHCRb911wv5skm2p9 acVaD0hvaaAPuw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:01 2026 by rpki-client