This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft File: cpNPw8ra3m8HkHrrbgvlqexEB7k.mft (raw, json) Hash identifier: 8y2i7OZQLK7X171Q8YSPoEOdkQ4DPTeB5utz6cUXc+4= Subject key identifier: 22:0C:4E:60:00:D7:8F:5C:27:89:C1:17:9C:8F:91:C3:6D:E5:1E:E6 Authority key identifier: 72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 Certificate issuer: /CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Certificate serial: 019C420F9148AC724820774E40BAEC198329 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft Manifest number: 03AF Signing time: Mon 09 Feb 2026 11:00:42 +0000 Manifest this update: Mon 09 Feb 2026 11:00:42 +0000 Manifest next update: Tue 10 Feb 2026 11:00:42 +0000 Files and hashes: 1: O_qg8osNwxZVWEFkKnugaUlgNX0.roa (hash: 6PTHRkxXKWmLa9kwpNgMUl4X7fEqNUpfQBankJTJ/zc=) 2: WDVywjuPmMVEMoOZujYhs0VA5iQ.roa (hash: +TACHXyAjUDq+ygEBs/R5CozPkMRfDO4mkqF4larHZc=) 3: cpNPw8ra3m8HkHrrbgvlqexEB7k.crl (hash: iJ4mFPXB+kKjM4J/RiPBhQuhi8lVElzFMslbSkXuPI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:91:48:ac:72:48:20:77:4e:40:ba:ec:19:83:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72934fc3cadade6f07907aeb6e0be5a9ec4407b9 Validity Not Before: Feb 9 11:00:42 2026 GMT Not After : Feb 10 11:00:42 2026 GMT Subject: CN=220c4e6000d78f5c2789c1179c8f91c36de51ee6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:67:a4:94:6f:09:d0:94:70:39:f6:43:66: 55:a7:ba:5c:1c:a6:1c:4a:6b:7a:5d:22:05:b3:0e: 7e:af:b7:08:90:0b:80:44:7a:fc:45:64:1b:28:65: db:6d:28:c5:22:ea:fc:6a:f7:5b:d3:02:1e:8f:0f: dd:82:bd:21:39:25:ef:7b:87:9f:fb:b5:b6:06:88: 7c:bf:6e:4b:48:0d:ad:c1:62:52:01:1f:80:40:dc: 1d:f6:ed:49:84:cb:1a:6c:ce:63:99:3c:02:84:a2: a5:c8:24:ab:fb:2a:d8:d1:2e:51:fb:31:94:2f:f7: 17:ef:16:84:36:32:f2:aa:3e:76:a3:4b:fc:33:e2: f7:4c:40:d4:c7:fc:c8:b9:71:2b:c5:35:9a:39:18: 98:ac:52:e9:88:fe:37:36:ce:d9:b4:42:6e:33:12: ff:68:8a:32:83:ad:e4:cd:a3:56:57:e8:90:18:2c: 92:63:3c:53:69:41:8e:b8:b7:aa:59:ff:c7:86:24: 2d:f5:6f:3e:69:8c:76:20:62:37:5c:60:05:d8:ce: 39:2f:05:07:38:26:c1:bc:45:a8:50:33:58:12:3a: cd:4c:93:0a:1c:6f:69:21:b7:89:47:a3:39:4b:65: 16:0c:03:83:95:9f:4f:a8:cf:b5:b0:81:b3:21:36: 3c:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0C:4E:60:00:D7:8F:5C:27:89:C1:17:9C:8F:91:C3:6D:E5:1E:E6 X509v3 Authority Key Identifier: keyid:72:93:4F:C3:CA:DA:DE:6F:07:90:7A:EB:6E:0B:E5:A9:EC:44:07:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cpNPw8ra3m8HkHrrbgvlqexEB7k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c49d19-8c79-4f77-b450-c08cf197a10c/1/cpNPw8ra3m8HkHrrbgvlqexEB7k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:c6:76:68:24:c1:b2:51:67:1a:39:25:26:a7:d4:5c:21:70: 3d:24:c5:08:be:86:c5:83:ae:6e:e9:a3:ec:1c:12:bf:25:f2: 5c:c8:01:03:f6:4b:62:87:60:a1:1f:09:99:96:9d:5f:cf:36: 1f:bc:55:ad:46:dd:aa:74:c6:1e:10:ff:84:15:68:30:46:8c: e7:03:26:5f:68:15:45:fe:eb:fe:86:23:66:a4:aa:8f:85:dd: 56:28:2c:8e:0e:3a:a3:1c:a2:77:9b:e3:fe:c8:b7:c1:b5:b4: de:8e:64:b5:52:c8:d4:0b:4e:1f:0a:4f:89:5a:bc:94:0f:6b: c1:48:72:80:b7:52:a0:3f:fc:7b:12:c1:dc:76:8c:36:72:b0: b0:a8:0d:ce:a3:6f:7f:71:4a:b1:ac:45:cf:19:29:3d:86:75: be:fe:a4:95:70:9b:0d:90:ee:92:7d:6d:a3:f3:d9:ee:df:d6: 0d:71:f7:2a:75:d8:1f:18:56:ad:05:bb:cf:1c:13:7d:21:d8: 78:37:77:5e:78:55:1c:ca:eb:88:a2:1b:7a:e2:fe:d8:3d:9f: a4:39:68:c1:f7:d7:3d:51:a9:96:f2:14:75:eb:ab:56:d7:e4: f0:69:6e:72:56:6b:a5:34:96:8c:7d:53:03:f8:3d:c3:a5:f9: b8:b9:b4:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5FIrHJIIHdOQLrsGYMpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyOTM0ZmMzY2FkYWRlNmYwNzkwN2FlYjZlMGJlNWE5ZWM0 NDA3YjkwHhcNMjYwMjA5MTEwMDQyWhcNMjYwMjEwMTEwMDQyWjAzMTEwLwYDVQQD EygyMjBjNGU2MDAwZDc4ZjVjMjc4OWMxMTc5YzhmOTFjMzZkZTUxZWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrdnpJRvCdCUcDn2Q2ZVp7pcHKYc Smt6XSIFsw5+r7cIkAuARHr8RWQbKGXbbSjFIur8avdb0wIejw/dgr0hOSXve4ef +7W2Boh8v25LSA2twWJSAR+AQNwd9u1JhMsabM5jmTwChKKlyCSr+yrY0S5R+zGU L/cX7xaENjLyqj52o0v8M+L3TEDUx/zIuXErxTWaORiYrFLpiP43Ns7ZtEJuMxL/ aIoyg63kzaNWV+iQGCySYzxTaUGOuLeqWf/HhiQt9W8+aYx2IGI3XGAF2M45LwUH OCbBvEWoUDNYEjrNTJMKHG9pIbeJR6M5S2UWDAODlZ9PqM+1sIGzITY8ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIMTmAA149cJ4nBF5yPkcNt5R7mMB8GA1UdIwQY MBaAFHKTT8PK2t5vB5B6624L5ansRAe5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAt YzA4Y2YxOTdhMTBjLzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9jNDlkMTktOGM3OS00Zjc3LWI0NTAtYzA4Y2YxOTdhMTBj LzEvY3BOUHc4cmEzbThIa0hycmJndmxxZXhFQjdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAasZ2aCTB slFnGjklJqfUXCFwPSTFCL6GxYOubumj7BwSvyXyXMgBA/ZLYodgoR8JmZadX882 H7xVrUbdqnTGHhD/hBVoMEaM5wMmX2gVRf7r/oYjZqSqj4XdVigsjg46oxyid5vj /si3wbW03o5ktVLI1AtOHwpPiVq8lA9rwUhygLdSoD/8exLB3HaMNnKwsKgNzqNv f3FKsaxFzxkpPYZ1vv6klXCbDZDukn1to/PZ7t/WDXH3KnXYHxhWrQW7zxwTfSHY eDd3XnhVHMrriKIbeuL+2D2fpDlowffXPVGplvIUdeurVtfk8GluclZrpTSWjH1T A/g9w6X5uLm0SA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:30 2026 by rpki-client