This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft File: CdR3O7Q9trKeh94C42U_p9jyb2U.mft (raw, json) Hash identifier: M4xTSvDBlHDItgQlL3O9JQWWkSRf7N7F7m8igd5vREY= Subject key identifier: FF:D9:CA:4F:24:52:ED:A7:53:03:C0:95:CB:48:40:99:53:25:CD:25 Authority key identifier: 09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 Certificate issuer: /CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Certificate serial: 019C4246A8F32DB87451B5938376F0EB7EEA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft Manifest number: 03B0 Signing time: Mon 09 Feb 2026 12:00:52 +0000 Manifest this update: Mon 09 Feb 2026 12:00:52 +0000 Manifest next update: Tue 10 Feb 2026 12:00:52 +0000 Files and hashes: 1: CdR3O7Q9trKeh94C42U_p9jyb2U.crl (hash: rruDitQsim/dNewtIvAhiEFjLBmlWq+5Pd2X4c5QPTs=) 2: nHg8KiKunlrxMMIxV9zgF0mtZ8A.roa (hash: nxlRegrduzOpiFfaQUDQOciM2lxOXMdYCO9fBBCczdE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a8:f3:2d:b8:74:51:b5:93:83:76:f0:eb:7e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d4773bb43db6b29e87de02e3653fa7d8f26f65 Validity Not Before: Feb 9 12:00:52 2026 GMT Not After : Feb 10 12:00:52 2026 GMT Subject: CN=ffd9ca4f2452eda75303c095cb4840995325cd25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:db:2e:09:4f:da:0c:0a:f2:79:e3:d0:2a: 42:16:9e:79:fa:95:97:4d:f8:11:0b:c5:39:09:09: d5:4a:2d:6b:1d:69:b6:fd:e7:4d:fd:2b:e5:bf:37: 2e:ea:14:a8:82:ac:71:1c:bf:b9:1c:82:0b:07:77: 9f:39:5d:14:54:50:7d:33:0f:d5:63:82:23:39:ed: d6:d7:c1:26:09:63:d8:ab:94:d3:6e:80:a2:08:85: 29:f0:41:15:2c:2c:ec:fd:40:85:d0:9b:b3:d2:8e: e7:6a:9c:20:b3:31:dd:cc:0c:b3:53:c4:7d:44:66: e4:d7:49:db:0c:3c:9d:88:ac:d9:cb:27:d7:fa:05: ad:d6:94:aa:50:e7:48:08:62:86:34:27:9b:1d:07: cb:1d:43:ac:bb:f3:53:9c:f8:8b:16:08:25:47:c5: 0c:98:01:14:df:67:b6:98:bd:ad:d4:18:a5:ca:87: 6a:c0:60:16:3f:9e:5a:ff:05:b5:20:65:15:33:3f: 10:6c:29:32:89:c4:19:5b:2f:33:63:3d:13:d2:76: 4c:6b:c0:c7:76:79:7f:69:b6:13:da:4e:32:e0:43: e5:19:64:3a:84:bf:9a:1a:29:5a:d9:49:5e:29:ef: 1c:5b:27:d2:ca:09:8b:1c:e3:56:54:57:9f:ec:31: 2a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D9:CA:4F:24:52:ED:A7:53:03:C0:95:CB:48:40:99:53:25:CD:25 X509v3 Authority Key Identifier: keyid:09:D4:77:3B:B4:3D:B6:B2:9E:87:DE:02:E3:65:3F:A7:D8:F2:6F:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdR3O7Q9trKeh94C42U_p9jyb2U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/c2dc50-f895-4757-ae8b-afb500a4482a/1/CdR3O7Q9trKeh94C42U_p9jyb2U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:78:dc:b5:b1:b0:07:13:6f:f8:ba:79:90:6e:45:ea:60:d5: 91:63:1f:a4:24:5e:17:b1:50:c5:9c:bf:a7:e9:68:6f:4f:c5: 94:33:d0:18:68:7a:2b:b7:3d:8c:a4:8a:aa:c9:d2:19:70:da: 37:2d:1e:3e:6e:f5:5b:9f:12:36:e2:7d:88:83:91:79:ec:3e: 47:0c:1d:f1:bd:2b:d1:e9:e3:06:83:fe:4c:d7:e3:58:92:34: 46:19:f9:f0:d5:a7:13:3e:18:eb:60:b8:d6:fe:81:75:eb:6d: b7:c6:52:c2:40:3a:f4:ec:70:18:41:92:8c:76:29:80:42:d4: b1:0f:a5:0e:4d:e7:de:39:21:d6:ef:2d:82:da:df:74:96:0d: 45:34:b8:7a:52:17:fe:a9:77:2c:21:64:86:af:8e:42:91:e2: c0:37:53:1c:9e:85:f3:c4:d4:6a:d8:1d:9f:bc:48:66:2b:37: a2:de:49:db:74:39:3b:c5:6a:eb:08:a2:cc:e0:d4:71:88:b4: d5:30:1a:ee:16:34:d3:22:ef:a9:7b:4c:6d:1c:45:1f:cf:a8: d2:67:ba:b2:3f:03:5a:c3:ea:06:a5:11:d5:65:c3:67:72:0d: bb:38:e4:a6:27:01:91:89:d9:56:e8:a9:98:89:0a:cf:f4:62: 64:05:8d:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqjzLbh0UbWTg3bw637qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDQ3NzNiYjQzZGI2YjI5ZTg3ZGUwMmUzNjUzZmE3ZDhm MjZmNjUwHhcNMjYwMjA5MTIwMDUyWhcNMjYwMjEwMTIwMDUyWjAzMTEwLwYDVQQD EyhmZmQ5Y2E0ZjI0NTJlZGE3NTMwM2MwOTVjYjQ4NDA5OTUzMjVjZDI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYrbLglP2gwK8nnj0CpCFp55+pWX TfgRC8U5CQnVSi1rHWm2/edN/Svlvzcu6hSogqxxHL+5HIILB3efOV0UVFB9Mw/V Y4IjOe3W18EmCWPYq5TTboCiCIUp8EEVLCzs/UCF0Juz0o7napwgszHdzAyzU8R9 RGbk10nbDDydiKzZyyfX+gWt1pSqUOdICGKGNCebHQfLHUOsu/NTnPiLFgglR8UM mAEU32e2mL2t1BilyodqwGAWP55a/wW1IGUVMz8QbCkyicQZWy8zYz0T0nZMa8DH dnl/abYT2k4y4EPlGWQ6hL+aGila2UleKe8cWyfSygmLHONWVFef7DEq4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP/Zyk8kUu2nUwPAlctIQJlTJc0lMB8GA1UdIwQY MBaAFAnUdzu0PbaynofeAuNlP6fY8m9lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGIt YWZiNTAwYTQ0ODJhLzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS9jMmRjNTAtZjg5NS00NzU3LWFlOGItYWZiNTAwYTQ0ODJh LzEvQ2RSM083UTl0cktlaDk0QzQyVV9wOWp5YjJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACXjctbGw BxNv+Lp5kG5F6mDVkWMfpCReF7FQxZy/p+lob0/FlDPQGGh6K7c9jKSKqsnSGXDa Ny0ePm71W58SNuJ9iIOReew+Rwwd8b0r0enjBoP+TNfjWJI0Rhn58NWnEz4Y62C4 1v6Bdettt8ZSwkA69OxwGEGSjHYpgELUsQ+lDk3n3jkh1u8tgtrfdJYNRTS4elIX /ql3LCFkhq+OQpHiwDdTHJ6F88TUatgdn7xIZis3ot5J23Q5O8Vq6wiizODUcYi0 1TAa7hY00yLvqXtMbRxFH8+o0me6sj8DWsPqBqUR1WXDZ3INuzjkpicBkYnZVuip mIkKz/RiZAWNXw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:59 2026 by rpki-client