This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft File: CR2q09J9vPlNMAb7-6fh3dXSnxY.mft (raw, json) Hash identifier: 1rMa+DQuu/6dhpzoYWC50cW7gvwbe5yjdG5SLkBixGQ= Subject key identifier: 17:F5:35:F7:6B:A5:DB:2F:84:A2:7A:8D:D3:2F:78:73:DA:19:09:95 Authority key identifier: 09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16 Certificate issuer: /CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16 Certificate serial: 019C446C5A00F2CCE7472FE53A09FB83BDAF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft Manifest number: 08CF Signing time: Mon 09 Feb 2026 22:01:17 +0000 Manifest this update: Mon 09 Feb 2026 22:01:17 +0000 Manifest next update: Tue 10 Feb 2026 22:01:17 +0000 Files and hashes: 1: 6WscQ8tiDx9m3v4sx_CKg9wEEnE.roa (hash: QpRl5gulsjXB/beShhOtBcm8ekjd5kSr4bAzu9gdErs=) 2: CR2q09J9vPlNMAb7-6fh3dXSnxY.crl (hash: kemZ84tGgOQA0QgJRMyiqByCqDkMlKw52LHwqbHDp0A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:5a:00:f2:cc:e7:47:2f:e5:3a:09:fb:83:bd:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091daad3d27dbcf94d3006fbfba7e1ddd5d29f16 Validity Not Before: Feb 9 22:01:17 2026 GMT Not After : Feb 10 22:01:17 2026 GMT Subject: CN=17f535f76ba5db2f84a27a8dd32f7873da190995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:35:bb:28:f7:d6:8e:fa:90:60:01:f9:7a: b4:8e:e8:2a:96:15:92:86:48:c6:b6:08:db:21:98: 6f:1b:ff:4d:8a:37:62:96:09:28:e8:12:2e:da:90: 43:1b:54:6a:e4:eb:0d:fe:a9:a1:14:c2:98:ef:24: 3f:18:80:41:ad:89:fd:ac:57:b3:9d:f4:2b:b3:b4: 1a:e4:5c:61:69:cb:59:14:0f:3c:72:83:f0:4a:6b: 0b:2e:ca:13:b9:59:bb:c4:90:0e:8f:cd:28:b8:4b: 5f:f2:26:9f:78:23:36:38:5a:e3:eb:1e:fd:ce:ac: 50:7b:eb:a2:37:d2:15:3c:e5:f7:d7:59:eb:0c:31: c8:a5:fa:17:9e:75:0d:62:b7:b2:c6:9b:03:15:39: 27:c0:8c:03:29:46:0f:38:53:7c:a6:ec:0a:dd:6f: 2a:74:13:d9:7f:d7:ca:c5:eb:d0:b0:52:19:a3:8f: 1f:f5:6a:d2:c8:7c:52:75:e9:0e:91:14:f5:66:db: 6d:1d:3a:f3:76:7a:b1:01:b2:81:69:af:2a:49:ae: e6:d3:a1:87:ab:1c:5f:d0:dc:1a:f2:1f:ac:03:16: 16:51:7a:50:c2:dc:c2:e1:b2:0c:1c:a7:4d:ed:65: 72:85:2f:0f:2c:5e:62:48:2a:78:aa:45:69:ac:da: c5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F5:35:F7:6B:A5:DB:2F:84:A2:7A:8D:D3:2F:78:73:DA:19:09:95 X509v3 Authority Key Identifier: keyid:09:1D:AA:D3:D2:7D:BC:F9:4D:30:06:FB:FB:A7:E1:DD:D5:D2:9F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR2q09J9vPlNMAb7-6fh3dXSnxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a86f77-fae6-4fe2-ba4b-eb37e776ddd2/1/CR2q09J9vPlNMAb7-6fh3dXSnxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:17:69:16:80:f4:00:99:f7:63:1f:9b:96:09:d8:74:5c:5d: 63:d3:9f:65:ec:35:aa:43:47:b5:2f:58:58:df:0d:a3:27:6d: f1:f3:78:dc:a6:b2:20:95:4b:3c:5e:9f:f3:22:a1:1d:14:38: 3c:ba:58:25:29:af:b5:f4:a7:e1:79:10:6b:17:62:bc:10:8e: 31:38:2d:00:a8:cd:ca:82:30:20:b4:5d:8f:59:b5:c9:d0:33: 56:0c:64:46:7e:3a:16:e7:02:0a:07:e6:5f:0a:27:21:05:e9: 36:7e:ec:aa:c9:55:a9:81:c4:77:19:8f:24:b0:55:7a:fd:39: 2a:43:c1:50:8b:0d:2f:86:fb:5b:5a:73:c3:dc:34:69:13:19: 0e:c4:c2:27:a7:f3:d4:cb:0b:80:74:9f:b8:40:e5:5e:9f:61: df:5d:5a:55:c6:2e:5e:57:e8:6a:6f:78:8c:73:e5:9f:9e:16: fb:93:b7:09:ba:cd:c7:09:59:07:09:ac:30:19:6c:e9:cb:e7: 4a:66:63:8d:27:8f:78:12:41:39:e4:3a:ee:42:ae:f6:72:dd: 2a:5b:40:5a:e8:4b:cb:87:e2:0c:ae:33:82:b8:7e:05:a2:6b: d5:b4:46:5e:87:cb:eb:17:f5:e3:0a:3a:b4:45:7f:1a:1e:19: 53:3a:b4:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbFoA8sznRy/lOgn7g72vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWRhYWQzZDI3ZGJjZjk0ZDMwMDZmYmZiYTdlMWRkZDVk MjlmMTYwHhcNMjYwMjA5MjIwMTE3WhcNMjYwMjEwMjIwMTE3WjAzMTEwLwYDVQQD EygxN2Y1MzVmNzZiYTVkYjJmODRhMjdhOGRkMzJmNzg3M2RhMTkwOTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIc1uyj31o76kGAB+Xq0jugqlhWS hkjGtgjbIZhvG/9Nijdilgko6BIu2pBDG1Rq5OsN/qmhFMKY7yQ/GIBBrYn9rFez nfQrs7Qa5FxhactZFA88coPwSmsLLsoTuVm7xJAOj80ouEtf8iafeCM2OFrj6x79 zqxQe+uiN9IVPOX311nrDDHIpfoXnnUNYreyxpsDFTknwIwDKUYPOFN8puwK3W8q dBPZf9fKxevQsFIZo48f9WrSyHxSdekOkRT1ZtttHTrzdnqxAbKBaa8qSa7m06GH qxxf0Nwa8h+sAxYWUXpQwtzC4bIMHKdN7WVyhS8PLF5iSCp4qkVprNrFhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBf1NfdrpdsvhKJ6jdMveHPaGQmVMB8GA1UdIwQY MBaAFAkdqtPSfbz5TTAG+/un4d3V0p8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGIt ZWIzN2U3NzZkZGQyLzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9hODZmNzctZmFlNi00ZmUyLWJhNGItZWIzN2U3NzZkZGQy LzEvQ1IycTA5Sjl2UGxOTUFiNy02ZmgzZFhTbnhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbRdpFoD0 AJn3Yx+blgnYdFxdY9OfZew1qkNHtS9YWN8Noydt8fN43KayIJVLPF6f8yKhHRQ4 PLpYJSmvtfSn4XkQaxdivBCOMTgtAKjNyoIwILRdj1m1ydAzVgxkRn46FucCCgfm XwonIQXpNn7sqslVqYHEdxmPJLBVev05KkPBUIsNL4b7W1pzw9w0aRMZDsTCJ6fz 1MsLgHSfuEDlXp9h311aVcYuXlfoam94jHPln54W+5O3CbrNxwlZBwmsMBls6cvn SmZjjSePeBJBOeQ67kKu9nLdKltAWuhLy4fiDK4zgrh+BaJr1bRGXofL6xf14wo6 tEV/Gh4ZUzq0Pg== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:26 2026 by rpki-client