This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft File: CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft (raw, json) Hash identifier: PHDf2pBsCHlMvbQQYCOgCxtVebeuFd9CUtdCasH+rss= Subject key identifier: F8:F4:B7:DA:E5:A4:24:C2:AE:46:EF:51:3B:0A:3D:EC:93:8E:13:A1 Authority key identifier: 0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1 Certificate issuer: /CN=0a23e2f0b064087fd84f048b1fa9997023d599e1 Certificate serial: 019C43C69273CC8DFF980B9F5732CB7D2206 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 19:00:12 +0000 Manifest this update: Mon 09 Feb 2026 19:00:12 +0000 Manifest next update: Tue 10 Feb 2026 19:00:12 +0000 Files and hashes: 1: CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl (hash: s0B7YirnDH36ZlWiMwTrFnXL1rYDKUSt726ICEQRdDQ=) 2: jr3Qwfg8Z9qypQ7083QLXtA-1bs.roa (hash: BStTXqRwyFgu7NL9U4UDu4snXF66XXGZwBXM2f9Q63k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:92:73:cc:8d:ff:98:0b:9f:57:32:cb:7d:22:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a23e2f0b064087fd84f048b1fa9997023d599e1 Validity Not Before: Feb 9 19:00:12 2026 GMT Not After : Feb 10 19:00:12 2026 GMT Subject: CN=f8f4b7dae5a424c2ae46ef513b0a3dec938e13a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0b:67:61:00:7b:91:c3:4a:31:1e:5f:33:b8: 08:a0:6d:e0:23:65:b0:22:1b:8c:c9:53:cb:65:43: c9:ec:09:46:a0:9c:38:9b:fe:2e:cc:c6:c6:cb:d9: 71:6d:33:67:a6:5d:82:81:8f:2a:90:43:71:a2:25: 8f:d3:ce:43:3e:d9:ca:cd:86:dd:1a:70:f2:3e:a1: c0:07:2c:cd:cc:db:c9:57:6c:53:7f:f9:9e:06:7e: 89:a7:c4:37:0e:b3:b5:5d:80:0b:4c:fd:0b:19:11: 88:01:78:b0:6d:8e:79:83:a5:20:02:31:5e:35:8e: c0:d7:3e:2d:0b:08:05:47:fa:87:cd:54:4e:d2:81: 9b:27:55:c6:6a:57:1d:10:15:a4:e1:2f:14:93:5d: 9a:36:19:bf:bd:d6:ee:77:46:71:ff:3a:fd:54:cd: e5:a2:44:13:34:f6:63:6c:e8:a9:cb:38:0b:b1:ff: ce:3e:36:be:3a:84:f6:d6:95:9f:a4:58:05:73:66: b3:dd:31:4a:ff:40:2b:b9:66:24:47:61:e3:ef:0b: 22:cb:7c:0a:26:a4:0f:90:05:79:ca:e4:21:ae:42: 5d:f2:1f:c7:75:eb:c7:37:b2:5a:c6:27:e7:4a:92: b5:69:9e:62:08:be:f5:e1:95:13:72:e6:8c:7a:d3: 05:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:F4:B7:DA:E5:A4:24:C2:AE:46:EF:51:3B:0A:3D:EC:93:8E:13:A1 X509v3 Authority Key Identifier: keyid:0A:23:E2:F0:B0:64:08:7F:D8:4F:04:8B:1F:A9:99:70:23:D5:99:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CiPi8LBkCH_YTwSLH6mZcCPVmeE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c983aa-b61e-4ed8-8e81-bc1e55c69755/1/CiPi8LBkCH_YTwSLH6mZcCPVmeE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:2d:25:80:a8:a5:b8:4f:b8:8f:a7:ad:f3:79:1d:87:e6:2b: e7:f9:a6:33:09:9c:00:2c:73:1c:ba:39:01:47:88:0d:9b:7c: 52:4b:a5:62:f2:98:9c:d8:dd:21:95:7d:da:db:44:3a:6b:8d: 56:b1:ac:25:01:5f:12:a9:7d:79:23:83:b2:a1:f7:a5:5f:dc: a3:84:23:01:d8:f0:05:f8:0d:23:fd:02:a3:d4:e6:14:a4:97: 20:80:8d:0b:ad:38:b1:1e:31:09:c8:63:c3:d7:05:50:88:99: a0:51:04:24:40:70:62:a5:8d:b6:60:15:1a:61:ec:fd:c0:8d: 62:ab:0f:61:88:ae:82:b2:af:59:d5:dd:72:8f:cd:42:ce:5a: 92:fd:3d:b1:01:1c:c2:5c:1d:af:ee:19:f5:da:28:22:72:e9: 96:a7:d9:a8:68:e6:72:93:1a:12:65:bc:8e:b9:a8:cc:fd:80: 96:b5:ca:56:cd:73:be:be:d4:0e:a3:cc:85:f6:2a:78:e9:64: d6:c5:83:6f:8e:2a:0c:99:21:6f:37:4a:0d:ed:59:1e:5e:79: 0a:50:1f:d0:da:9e:cf:fb:ca:87:16:f3:13:b9:0d:ad:06:53: e8:13:66:9e:48:53:de:36:a1:98:4f:2a:a8:bf:26:28:30:a0: a7:a7:ce:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxpJzzI3/mAufVzLLfSIGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMjNlMmYwYjA2NDA4N2ZkODRmMDQ4YjFmYTk5OTcwMjNk NTk5ZTEwHhcNMjYwMjA5MTkwMDEyWhcNMjYwMjEwMTkwMDEyWjAzMTEwLwYDVQQD EyhmOGY0YjdkYWU1YTQyNGMyYWU0NmVmNTEzYjBhM2RlYzkzOGUxM2ExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngtnYQB7kcNKMR5fM7gIoG3gI2Ww IhuMyVPLZUPJ7AlGoJw4m/4uzMbGy9lxbTNnpl2CgY8qkENxoiWP085DPtnKzYbd GnDyPqHAByzNzNvJV2xTf/meBn6Jp8Q3DrO1XYALTP0LGRGIAXiwbY55g6UgAjFe NY7A1z4tCwgFR/qHzVRO0oGbJ1XGalcdEBWk4S8Uk12aNhm/vdbud0Zx/zr9VM3l okQTNPZjbOipyzgLsf/OPja+OoT21pWfpFgFc2az3TFK/0AruWYkR2Hj7wsiy3wK JqQPkAV5yuQhrkJd8h/HdevHN7JaxifnSpK1aZ5iCL714ZUTcuaMetMF9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPj0t9rlpCTCrkbvUTsKPeyTjhOhMB8GA1UdIwQY MBaAFAoj4vCwZAh/2E8Eix+pmXAj1ZnhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEt YmMxZTU1YzY5NzU1LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9jOTgzYWEtYjYxZS00ZWQ4LThlODEtYmMxZTU1YzY5NzU1 LzEvQ2lQaThMQmtDSF9ZVHdTTEg2bVpjQ1BWbWVFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATC0lgKil uE+4j6et83kdh+Yr5/mmMwmcACxzHLo5AUeIDZt8UkulYvKYnNjdIZV92ttEOmuN VrGsJQFfEql9eSODsqH3pV/co4QjAdjwBfgNI/0Co9TmFKSXIICNC604sR4xCchj w9cFUIiZoFEEJEBwYqWNtmAVGmHs/cCNYqsPYYiugrKvWdXdco/NQs5akv09sQEc wlwdr+4Z9dooInLplqfZqGjmcpMaEmW8jrmozP2AlrXKVs1zvr7UDqPMhfYqeOlk 1sWDb44qDJkhbzdKDe1ZHl55ClAf0Nqez/vKhxbzE7kNrQZT6BNmnkhT3jahmE8q qL8mKDCgp6fO8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:18 2026 by rpki-client