This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json) Hash identifier: 0TlA7OlVfxzUNDeHFQbG2nNcy3LpER2EJBvAiDhbu3Q= Subject key identifier: 29:29:F5:10:79:75:8E:E4:BD:7A:14:5A:88:48:8D:E9:C5:4F:9E:61 Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a Certificate serial: 019C41D85249FBE2060D30B9B8B06651993E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: NlPvIi/1jUIgaZSU5KjiNBjGPDGNu02FMugHp/JJ4h0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:52:49:fb:e2:06:0d:30:b9:b8:b0:66:51:99:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=2929f51079758ee4bd7a145a88488de9c54f9e61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d7:7c:02:06:97:53:c3:ea:c9:e4:87:d1:ad: 30:ac:34:89:1b:30:5e:b0:0d:1e:10:2b:61:3c:c0: 26:40:07:d8:77:ab:2e:81:26:5d:54:4b:46:33:3f: 85:f7:72:56:66:60:b4:7d:ec:c9:68:41:64:e8:8b: 1e:4a:4a:90:53:de:5c:f2:7e:3f:94:4a:1e:48:87: 45:61:86:09:60:3c:18:8c:f4:da:a6:82:2d:d1:13: 40:a8:10:b8:1e:3e:83:36:8f:bc:28:2a:20:5b:83: 50:a7:0d:4c:e2:b0:da:83:84:b1:5c:ea:83:8d:99: 60:21:f9:4f:31:c8:b4:2e:8d:40:fd:f2:cb:87:be: 7d:63:f3:70:94:b6:78:9a:c7:27:d1:2a:32:7b:ff: 1b:af:3d:44:6f:9a:53:04:f9:8c:2a:59:71:d5:60: 69:1b:39:2c:eb:3a:1e:12:f0:e3:3e:36:3b:df:0c: f8:9e:85:fa:4f:a0:79:d0:82:9f:28:33:fa:b1:5e: 26:e9:38:86:78:2d:ac:c5:69:8c:42:d3:4a:8a:cb: 72:5e:43:0c:57:2f:88:a5:45:dc:07:06:a1:10:b5: c0:9b:bd:2b:16:d9:2d:50:b8:ec:ea:dc:e1:82:8c: 90:5d:dd:6d:7e:59:2b:31:37:fa:65:00:b7:1a:97: a8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:29:F5:10:79:75:8E:E4:BD:7A:14:5A:88:48:8D:E9:C5:4F:9E:61 X509v3 Authority Key Identifier: keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d3:29:5a:18:05:38:24:23:ad:a8:e9:6a:95:29:b1:28:aa: 27:f4:69:4c:74:8a:9b:b1:82:e0:46:2d:f7:df:24:33:34:62: 8b:36:2f:24:2c:5c:4f:b7:d1:d4:25:b7:b8:aa:87:ea:cb:1f: 35:4a:6e:02:6c:54:4f:d7:41:73:e3:b9:94:d2:dd:6d:ec:9d: b4:6e:58:9a:0a:81:d2:45:98:80:15:89:a5:b8:75:3c:b8:c1: c8:76:5a:86:f1:0d:2a:0d:ea:46:08:fb:71:bd:1d:ec:41:ad: 9b:b0:c9:65:46:9d:31:19:b4:03:70:31:c4:c8:30:36:ce:24: 55:d7:20:63:ec:e7:78:8c:97:7b:24:66:1f:a6:c7:32:52:da: d9:f3:97:22:d3:5e:d6:e9:23:60:4f:2a:d5:43:fe:98:08:09: 4b:c3:2f:08:94:3c:29:c4:a5:6c:e5:49:79:34:5c:2a:a3:d9: 8b:0c:18:62:68:e3:da:f1:5b:4f:c3:83:95:ee:6c:de:f6:40: 55:a1:08:a1:aa:33:f9:d0:6a:a1:50:c1:a3:fa:5b:68:41:18: 6b:2c:fd:30:ad:cd:04:ae:cb:5c:ef:1a:6e:a2:de:d3:3c:33: 51:5c:25:54:66:04:12:16:d6:64:0b:6d:87:35:25:97:e8:fa: 75:0d:0b:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FJJ++IGDTC5uLBmUZk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZDZkMDdjYjY0ZWEwZTgxOWUzYTBiMjllMDkzZmU0MTk2 M2IyOWEwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD EygyOTI5ZjUxMDc5NzU4ZWU0YmQ3YTE0NWE4ODQ4OGRlOWM1NGY5ZTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9d8AgaXU8PqyeSH0a0wrDSJGzBe sA0eECthPMAmQAfYd6sugSZdVEtGMz+F93JWZmC0fezJaEFk6IseSkqQU95c8n4/ lEoeSIdFYYYJYDwYjPTapoIt0RNAqBC4Hj6DNo+8KCogW4NQpw1M4rDag4SxXOqD jZlgIflPMci0Lo1A/fLLh759Y/NwlLZ4mscn0Soye/8brz1Eb5pTBPmMKllx1WBp Gzks6zoeEvDjPjY73wz4noX6T6B50IKfKDP6sV4m6TiGeC2sxWmMQtNKistyXkMM Vy+IpUXcBwahELXAm70rFtktULjs6tzhgoyQXd1tflkrMTf6ZQC3GpeoVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkp9RB5dY7kvXoUWohIjenFT55hMB8GA1UdIwQY MBaAFHDW0Hy2TqDoGeOgsp4JP+QZY7KaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgt ODI0Yzc3Zjg5MWM5LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ni8wNTkxMGItMjVkOC00MTNkLWFjNTgtODI0Yzc3Zjg5MWM5 LzEvY05iUWZMWk9vT2daNDZDeW5na181Qmxqc3BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtMpWhgF OCQjrajpapUpsSiqJ/RpTHSKm7GC4EYt998kMzRiizYvJCxcT7fR1CW3uKqH6ssf NUpuAmxUT9dBc+O5lNLdbeydtG5YmgqB0kWYgBWJpbh1PLjByHZahvENKg3qRgj7 cb0d7EGtm7DJZUadMRm0A3AxxMgwNs4kVdcgY+zneIyXeyRmH6bHMlLa2fOXItNe 1ukjYE8q1UP+mAgJS8MvCJQ8KcSlbOVJeTRcKqPZiwwYYmjj2vFbT8ODle5s3vZA VaEIoaoz+dBqoVDBo/pbaEEYayz9MK3NBK7LXO8abqLe0zwzUVwlVGYEEhbWZAtt hzUll+j6dQ0Llw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:26 2026 by rpki-client