This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft File: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft (raw, json) Hash identifier: gdnszftDvZ7STYjSz5+LmpaEI8HY3cmXAxMpsSMq8B0= Subject key identifier: 70:C7:C5:EF:6F:03:11:EB:C5:53:35:82:52:4B:7F:25:32:54:1E:CB Authority key identifier: 08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 Certificate issuer: /CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Certificate serial: 019C43FDB3FB27C70EDFB01E9D53D2725AEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 20:00:25 +0000 Manifest this update: Mon 09 Feb 2026 20:00:25 +0000 Manifest next update: Tue 10 Feb 2026 20:00:25 +0000 Files and hashes: 1: CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl (hash: uQ9IZWtyCgvkTWocLfzXit6gKW+oP4immnEgLyvjIMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:b3:fb:27:c7:0e:df:b0:1e:9d:53:d2:72:5a:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f2eb8fb02e87e7184337b245af99e3133ef524 Validity Not Before: Feb 9 20:00:25 2026 GMT Not After : Feb 10 20:00:25 2026 GMT Subject: CN=70c7c5ef6f0311ebc5533582524b7f2532541ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b4:42:32:0b:c2:c0:ca:ff:0d:7c:8b:36:c8: 9e:a1:b3:ab:bf:0b:2d:12:18:2d:bf:44:8c:7c:3f: 2b:f9:ef:d1:d1:67:47:3f:29:65:1c:1c:82:e0:da: 15:6d:0c:04:cc:c0:fa:3b:4b:37:43:67:01:57:0e: e1:22:0f:ff:96:6e:34:9b:6f:2f:dc:e9:8b:ec:7b: ea:ac:f5:69:d2:a9:38:52:d2:ea:7a:6d:9a:7a:99: 2d:24:6d:e9:85:d5:12:f5:6e:cc:4d:d6:5d:bd:3f: c1:56:0f:ef:2e:af:99:63:c4:bd:98:f6:92:7b:4a: 9a:6a:87:37:83:b0:20:aa:a4:23:66:9b:21:64:c2: 7a:e8:ee:a1:c4:ff:a7:50:bb:e6:4a:75:fc:cc:45: 95:79:66:55:39:f9:93:9c:d5:8b:14:f2:3d:b0:09: 3b:e8:a2:28:c1:0e:07:0c:fe:81:44:75:23:8b:14: bb:19:cd:69:e4:fe:08:b4:70:c8:c7:a3:be:21:96: 94:71:33:5f:b7:30:11:32:44:44:a2:22:ed:22:05: d4:f8:17:95:73:33:53:d7:99:91:7a:a9:d0:bd:09: f0:f7:9c:af:49:b2:cf:36:7b:b9:d0:18:55:2d:71: 78:8f:b6:a7:a8:a1:e2:20:f7:f6:6e:19:71:8a:09: 00:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C7:C5:EF:6F:03:11:EB:C5:53:35:82:52:4B:7F:25:32:54:1E:CB X509v3 Authority Key Identifier: keyid:08:F2:EB:8F:B0:2E:87:E7:18:43:37:B2:45:AF:99:E3:13:3E:F5:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/95ea48-c3ed-4e47-bd12-6cdecd4db8b5/1/CPLrj7Auh-cYQzeyRa-Z4xM-9SQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:d2:65:58:2c:5a:8f:d8:4e:9a:62:e5:f6:43:4d:4f:15:67: 8b:43:04:41:a6:45:2c:12:01:f9:ca:08:08:cb:0b:b8:e0:a8: c8:43:36:43:96:d4:be:49:a6:0b:4c:fa:28:0e:54:99:30:51: f8:de:3c:f6:15:2a:d6:7f:fa:f8:1c:52:fb:11:06:1a:71:d5: 69:a8:72:54:c0:41:24:5d:20:9c:2f:94:ee:13:99:cd:b5:b8: 3a:d0:93:30:69:84:da:01:2c:3e:52:77:39:4e:bf:f3:27:06: d3:4d:6d:59:17:ce:55:0d:8b:33:a8:6b:53:d5:fb:a0:c5:05: e0:7b:67:e6:f6:28:7a:e8:e3:51:01:da:84:61:8b:bd:b4:0d: 95:f6:54:69:a7:cb:8d:0f:1b:62:e9:83:fe:f8:da:ac:92:2f: 4f:b5:13:15:74:57:86:fa:af:28:6e:c7:ef:44:62:07:2f:1b: 4b:ce:16:5f:5c:c8:ee:e3:b1:2c:b6:53:33:62:ec:32:c4:67: 78:82:05:6f:36:72:e6:a2:c2:34:bd:99:4c:19:31:8b:b0:d6: 9c:9c:f0:63:dc:e3:ea:18:62:b2:f8:ca:57:53:55:73:15:9e: 07:b6:9e:4b:06:8f:63:65:01:f3:15:be:65:f7:41:94:36:92: 4f:00:a7:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/bP7J8cO37AenVPSclrqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjJlYjhmYjAyZTg3ZTcxODQzMzdiMjQ1YWY5OWUzMTMz ZWY1MjQwHhcNMjYwMjA5MjAwMDI1WhcNMjYwMjEwMjAwMDI1WjAzMTEwLwYDVQQD Eyg3MGM3YzVlZjZmMDMxMWViYzU1MzM1ODI1MjRiN2YyNTMyNTQxZWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubRCMgvCwMr/DXyLNsieobOrvwst Ehgtv0SMfD8r+e/R0WdHPyllHByC4NoVbQwEzMD6O0s3Q2cBVw7hIg//lm40m28v 3OmL7HvqrPVp0qk4UtLqem2aepktJG3phdUS9W7MTdZdvT/BVg/vLq+ZY8S9mPaS e0qaaoc3g7AgqqQjZpshZMJ66O6hxP+nULvmSnX8zEWVeWZVOfmTnNWLFPI9sAk7 6KIowQ4HDP6BRHUjixS7Gc1p5P4ItHDIx6O+IZaUcTNftzARMkREoiLtIgXU+BeV czNT15mReqnQvQnw95yvSbLPNnu50BhVLXF4j7anqKHiIPf2bhlxigkALwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDHxe9vAxHrxVM1glJLfyUyVB7LMB8GA1UdIwQY MBaAFAjy64+wLofnGEM3skWvmeMTPvUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTIt NmNkZWNkNGRiOGI1LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC85NWVhNDgtYzNlZC00ZTQ3LWJkMTItNmNkZWNkNGRiOGI1 LzEvQ1BMcmo3QXVoLWNZUXpleVJhLVo0eE0tOVNRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNJlWCxa j9hOmmLl9kNNTxVni0MEQaZFLBIB+coICMsLuOCoyEM2Q5bUvkmmC0z6KA5UmTBR +N489hUq1n/6+BxS+xEGGnHVaahyVMBBJF0gnC+U7hOZzbW4OtCTMGmE2gEsPlJ3 OU6/8ycG001tWRfOVQ2LM6hrU9X7oMUF4Htn5vYoeujjUQHahGGLvbQNlfZUaafL jQ8bYumD/vjarJIvT7UTFXRXhvqvKG7H70RiBy8bS84WX1zI7uOxLLZTM2LsMsRn eIIFbzZy5qLCNL2ZTBkxi7DWnJzwY9zj6hhisvjKV1NVcxWeB7aeSwaPY2UB8xW+ ZfdBlDaSTwCn0g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:10 2026 by rpki-client