This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft File: cRGFk3fq1vRPlA640xw_O-zFOwU.mft (raw, json) Hash identifier: Ha9Q86IQ6Ihb0fBWc3dvMR6RFUx1/w4DJBa25nIIxWM= Subject key identifier: AD:18:24:E5:3A:82:DE:88:39:D0:A4:F7:84:DE:86:AA:FA:23:98:57 Authority key identifier: 71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 Certificate issuer: /CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Certificate serial: 019C438FE8AE18744B038E5C60C9966EA61C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft Manifest number: 1364 Signing time: Mon 09 Feb 2026 18:00:30 +0000 Manifest this update: Mon 09 Feb 2026 18:00:30 +0000 Manifest next update: Tue 10 Feb 2026 18:00:30 +0000 Files and hashes: 1: cRGFk3fq1vRPlA640xw_O-zFOwU.crl (hash: Y3y+uMQukyWpVSsrI6FkYRHljoqoVuOCvhwHcL9yBos=) 2: pUazdjRdFJkBrTHoULISxbR8Lyk.roa (hash: spesHfXOuqKlEX5RunxdrOt5uA0eHq4U5s/6CkWrMg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:e8:ae:18:74:4b:03:8e:5c:60:c9:96:6e:a6:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7111859377ead6f44f940eb8d31c3f3becc53b05 Validity Not Before: Feb 9 18:00:30 2026 GMT Not After : Feb 10 18:00:30 2026 GMT Subject: CN=ad1824e53a82de8839d0a4f784de86aafa239857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d7:6f:2b:44:07:89:b8:9c:67:ff:1b:f6:25: 8e:53:64:65:cb:77:a1:7f:8d:23:db:1b:4a:2a:3b: 6a:7f:de:c0:83:4b:9b:60:e0:6d:77:21:7d:53:4a: 57:e8:36:b0:e1:03:fe:55:7c:68:ef:80:18:15:ac: 07:19:32:83:24:2a:e4:b1:c8:b7:51:28:1f:63:36: 2e:ab:c4:05:17:49:a5:7c:8e:62:68:38:52:ec:29: 92:14:cd:31:01:1c:92:17:1e:e1:9f:6d:3e:f9:2f: a3:e3:23:25:4f:40:9e:ed:a8:e7:9f:47:2e:40:52: 19:e9:c7:93:32:af:fc:c0:91:94:28:3f:c7:d0:1a: d2:d3:a8:fe:f8:e1:69:af:77:e9:99:b6:63:e4:8c: a2:89:39:dc:93:b7:98:a8:45:7f:d4:34:e1:48:54: 21:b8:01:24:94:65:e8:c8:37:40:f8:a1:a5:9c:ed: 94:d3:6c:32:1a:0d:47:bd:32:b7:f7:44:a8:31:4c: 79:c5:64:2e:d1:6b:d4:ee:14:c7:ef:ea:6a:57:c5: fb:97:ac:5a:71:9b:d9:a7:17:6b:ad:49:57:83:44: c8:c7:89:10:cb:38:52:c4:7f:52:df:71:79:85:86: 22:cb:ca:a0:e7:9f:5b:91:68:d8:60:ea:1f:e5:ff: c8:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:18:24:E5:3A:82:DE:88:39:D0:A4:F7:84:DE:86:AA:FA:23:98:57 X509v3 Authority Key Identifier: keyid:71:11:85:93:77:EA:D6:F4:4F:94:0E:B8:D3:1C:3F:3B:EC:C5:3B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRGFk3fq1vRPlA640xw_O-zFOwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8b43cb-f209-4f22-930d-758ca4d48bc2/1/cRGFk3fq1vRPlA640xw_O-zFOwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:2c:76:14:8e:74:7b:3e:fa:bd:89:4e:6f:c6:79:04:4a:22: f7:e8:98:ac:48:73:49:b7:83:4a:9b:6c:2d:d2:07:b3:d8:25: 4c:15:20:4b:be:74:8a:9c:ab:7d:18:41:13:12:aa:0c:db:3a: ab:f5:2d:04:0b:63:9d:82:e6:9c:e0:36:09:d7:fc:d5:e3:e1: 04:36:ab:0a:e7:66:cf:6b:a8:6f:05:20:b8:8a:67:28:fe:dc: c2:15:31:36:db:d9:89:60:8e:e3:7b:85:d1:b5:95:8c:f5:c1: 2e:21:f2:99:ce:ce:2b:c9:78:a0:38:5a:4d:d9:85:62:5a:5f: fa:92:ce:77:ef:41:9b:62:0d:4e:38:45:70:f8:da:f3:2e:20: a7:5d:35:e9:03:00:27:6c:19:ed:05:f7:4a:77:f6:9a:86:60: 99:b1:90:39:9d:76:86:b1:45:8f:55:48:f5:61:c5:f7:52:f6: d9:c4:88:8e:05:be:dd:6b:b7:7b:2b:a4:a1:a4:7c:33:33:33: d1:34:19:2a:2e:c5:e0:04:53:82:f8:d9:fe:db:5f:05:42:dc: 49:6d:0b:f1:2f:f8:c5:72:27:86:2f:ca:e8:1d:e7:10:52:7a: ba:64:3e:13:f7:64:ce:5d:80:55:13:61:6e:ce:6a:b7:23:cb: 0a:6b:af:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj+iuGHRLA45cYMmWbqYcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMTE4NTkzNzdlYWQ2ZjQ0Zjk0MGViOGQzMWMzZjNiZWNj NTNiMDUwHhcNMjYwMjA5MTgwMDMwWhcNMjYwMjEwMTgwMDMwWjAzMTEwLwYDVQQD EyhhZDE4MjRlNTNhODJkZTg4MzlkMGE0Zjc4NGRlODZhYWZhMjM5ODU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9dvK0QHibicZ/8b9iWOU2Rly3eh f40j2xtKKjtqf97Ag0ubYOBtdyF9U0pX6Daw4QP+VXxo74AYFawHGTKDJCrksci3 USgfYzYuq8QFF0mlfI5iaDhS7CmSFM0xARySFx7hn20++S+j4yMlT0Ce7ajnn0cu QFIZ6ceTMq/8wJGUKD/H0BrS06j++OFpr3fpmbZj5IyiiTnck7eYqEV/1DThSFQh uAEklGXoyDdA+KGlnO2U02wyGg1HvTK390SoMUx5xWQu0WvU7hTH7+pqV8X7l6xa cZvZpxdrrUlXg0TIx4kQyzhSxH9S33F5hYYiy8qg559bkWjYYOof5f/InwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK0YJOU6gt6IOdCk94Tehqr6I5hXMB8GA1UdIwQY MBaAFHERhZN36tb0T5QOuNMcPzvsxTsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQt NzU4Y2E0ZDQ4YmMyLzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi84YjQzY2ItZjIwOS00ZjIyLTkzMGQtNzU4Y2E0ZDQ4YmMy LzEvY1JHRmszZnExdlJQbEE2NDB4d19PLXpGT3dVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnCx2FI50 ez76vYlOb8Z5BEoi9+iYrEhzSbeDSptsLdIHs9glTBUgS750ipyrfRhBExKqDNs6 q/UtBAtjnYLmnOA2Cdf81ePhBDarCudmz2uobwUguIpnKP7cwhUxNtvZiWCO43uF 0bWVjPXBLiHymc7OK8l4oDhaTdmFYlpf+pLOd+9Bm2INTjhFcPja8y4gp1016QMA J2wZ7QX3Snf2moZgmbGQOZ12hrFFj1VI9WHF91L22cSIjgW+3Wu3eyukoaR8MzMz 0TQZKi7F4ARTgvjZ/ttfBULcSW0L8S/4xXInhi/K6B3nEFJ6umQ+E/dkzl2AVRNh bs5qtyPLCmuvgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:27 2026 by rpki-client