This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft File: CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft (raw, json) Hash identifier: i0M8aNMpho8vcV4zL4gT9v3ZQQ28nJinPogTIfriVQ8= Subject key identifier: F1:82:67:B5:4A:41:EB:61:F6:1C:1E:C4:82:A3:80:D2:97:60:79:3B Authority key identifier: 08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B Certificate issuer: /CN=085fb6df2105f2c081578624d18731439f06f26b Certificate serial: 019C420F284C9B8A1D94D032F41CF034EFC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft Manifest number: 41 Signing time: Mon 09 Feb 2026 11:00:15 +0000 Manifest this update: Mon 09 Feb 2026 11:00:15 +0000 Manifest next update: Tue 10 Feb 2026 11:00:15 +0000 Files and hashes: 1: CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl (hash: W81IY7ZQzduFu+gycX0NZDWg/5EaM9Hcr7HuuUlgGn4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:28:4c:9b:8a:1d:94:d0:32:f4:1c:f0:34:ef:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=085fb6df2105f2c081578624d18731439f06f26b Validity Not Before: Feb 9 11:00:15 2026 GMT Not After : Feb 10 11:00:15 2026 GMT Subject: CN=f18267b54a41eb61f61c1ec482a380d29760793b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:cd:7c:9e:14:76:92:7f:8f:8c:ba:8a:9a: 84:c4:3a:bb:a4:da:2e:4f:7b:b3:f6:33:dc:d4:e7: 89:cd:a1:58:fb:38:80:21:20:76:8c:0d:54:2d:fd: e5:0b:d2:b2:93:ff:8b:a3:7c:b2:7f:aa:45:f2:8d: b9:c2:0c:75:3a:ed:a6:60:07:1b:4d:a2:4f:28:d5: eb:58:59:3f:48:a0:1d:27:16:73:ff:e8:0a:e6:ea: 35:ed:99:ea:b0:2d:6a:1a:96:13:a8:ba:75:e2:59: 8f:be:b8:df:b5:5f:75:04:3c:bc:41:6f:b0:d0:18: bb:b7:19:b3:37:4f:35:88:91:ec:52:49:e6:37:e2: 0a:c5:11:b4:fc:bc:6e:0f:3c:c5:fc:e7:96:3e:b1: 01:60:9b:92:a0:15:07:aa:19:59:44:15:aa:2f:7f: 8c:e4:33:d4:e8:dd:93:2d:a3:f0:04:29:35:ac:10: 92:dd:c0:f0:c3:72:1f:40:8e:b5:4d:05:5f:fd:ad: 86:5f:ef:87:14:23:b5:a7:d4:2e:4b:d5:01:6b:38: 4d:ca:eb:71:e2:f7:82:78:36:05:95:7d:59:df:6f: f5:9e:7e:91:85:79:c8:2d:ef:4d:e5:03:76:e1:bf: 17:0b:08:a0:99:fa:a3:57:72:df:7a:61:86:1d:87: 69:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:82:67:B5:4A:41:EB:61:F6:1C:1E:C4:82:A3:80:D2:97:60:79:3B X509v3 Authority Key Identifier: keyid:08:5F:B6:DF:21:05:F2:C0:81:57:86:24:D1:87:31:43:9F:06:F2:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CF-23yEF8sCBV4Yk0YcxQ58G8ms.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd3eb8-4966-4d57-9440-17fe65850132/1/CF-23yEF8sCBV4Yk0YcxQ58G8ms.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:80:b1:91:8b:bf:92:b1:3c:4b:b1:68:80:ee:61:96:dd:9a: 92:a2:c4:48:c7:a1:e8:5d:0a:8e:99:d0:95:72:48:51:0d:c9: b5:67:5a:52:a6:2f:71:d2:9c:c2:f6:0b:54:7c:df:61:89:93: ca:db:3c:de:13:5d:5f:ea:7a:12:d6:e4:54:52:be:17:11:26: 6d:36:18:8b:1c:ad:bd:c6:bc:93:e2:77:44:90:b1:c7:55:e6: bf:ec:e8:08:d2:ad:0d:99:a4:5f:1e:61:e8:62:6e:99:e2:a2: 6d:b7:ea:0a:c5:bc:42:a0:36:b0:fa:11:d4:97:db:b2:29:fd: 1b:15:cb:a3:3d:80:cd:2a:b2:b6:8b:72:57:b7:61:97:71:4a: 5e:99:83:5d:6d:7f:f5:97:67:71:33:51:01:99:86:9f:7a:24: c4:ac:b1:81:e9:22:d6:76:15:28:9f:1e:22:d0:00:c8:f1:d4: c3:05:2a:cd:74:00:77:db:0e:f4:2b:8e:c2:31:13:bd:89:cd: 04:92:5a:d5:54:e7:c5:e0:ae:6a:4a:d6:bd:23:b0:bf:02:bd: ce:e5:3a:47:d2:1a:fc:2d:5e:e5:2a:b2:2c:f4:de:29:24:b5: 6c:34:15:27:c6:5f:b0:1c:da:ad:b9:cc:82:f4:d7:ee:06:91: 56:16:78:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyhMm4odlNAy9BzwNO/HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4NWZiNmRmMjEwNWYyYzA4MTU3ODYyNGQxODczMTQzOWYw NmYyNmIwHhcNMjYwMjA5MTEwMDE1WhcNMjYwMjEwMTEwMDE1WjAzMTEwLwYDVQQD EyhmMTgyNjdiNTRhNDFlYjYxZjYxYzFlYzQ4MmEzODBkMjk3NjA3OTNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bDNfJ4UdpJ/j4y6ipqExDq7pNou T3uz9jPc1OeJzaFY+ziAISB2jA1ULf3lC9Kyk/+Lo3yyf6pF8o25wgx1Ou2mYAcb TaJPKNXrWFk/SKAdJxZz/+gK5uo17ZnqsC1qGpYTqLp14lmPvrjftV91BDy8QW+w 0Bi7txmzN081iJHsUknmN+IKxRG0/LxuDzzF/OeWPrEBYJuSoBUHqhlZRBWqL3+M 5DPU6N2TLaPwBCk1rBCS3cDww3IfQI61TQVf/a2GX++HFCO1p9QuS9UBazhNyutx 4veCeDYFlX1Z32/1nn6RhXnILe9N5QN24b8XCwigmfqjV3LfemGGHYdpCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPGCZ7VKQeth9hwexIKjgNKXYHk7MB8GA1UdIwQY MBaAFAhftt8hBfLAgVeGJNGHMUOfBvJrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0YtMjN5RUY4c0NCVjRZazBZY3hRNThHOG1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDNlYjgtNDk2Ni00ZDU3LTk0NDAt MTdmZTY1ODUwMTMyLzEvQ0YtMjN5RUY4c0NCVjRZazBZY3hRNThHOG1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC9iZDNlYjgtNDk2Ni00ZDU3LTk0NDAtMTdmZTY1ODUwMTMy LzEvQ0YtMjN5RUY4c0NCVjRZazBZY3hRNThHOG1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwoCxkYu/ krE8S7FogO5hlt2akqLESMeh6F0KjpnQlXJIUQ3JtWdaUqYvcdKcwvYLVHzfYYmT yts83hNdX+p6EtbkVFK+FxEmbTYYixytvca8k+J3RJCxx1Xmv+zoCNKtDZmkXx5h 6GJumeKibbfqCsW8QqA2sPoR1Jfbsin9GxXLoz2AzSqytotyV7dhl3FKXpmDXW1/ 9ZdncTNRAZmGn3okxKyxgeki1nYVKJ8eItAAyPHUwwUqzXQAd9sO9CuOwjETvYnN BJJa1VTnxeCuakrWvSOwvwK9zuU6R9Ia/C1e5SqyLPTeKSS1bDQVJ8ZfsBzarbnM gvTX7gaRVhZ4qw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:14 2026 by rpki-client