This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft File: CWv35rMqViP1S7nHN9uPgU6TrTk.mft (raw, json) Hash identifier: pPnEu4fdh/qAUkGi45js9oxeS2s/P/jxd4inE21O0wY= Subject key identifier: 69:5D:F5:F8:76:DD:9B:73:18:A1:9F:87:E8:1F:CC:DA:B6:2D:3B:04 Authority key identifier: 09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 Certificate issuer: /CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Certificate serial: 019C432206A2D013FADF9CBD2D13D25ECE36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft Manifest number: 1338 Signing time: Mon 09 Feb 2026 16:00:29 +0000 Manifest this update: Mon 09 Feb 2026 16:00:29 +0000 Manifest next update: Tue 10 Feb 2026 16:00:29 +0000 Files and hashes: 1: 55XgO8_Vwqnh0dBKWvVkuxHs6Ww.roa (hash: Y8RrsYQy5lHgQUMkKZpotYnnwjRaHtFf6Zo8BbV2RP4=) 2: CWv35rMqViP1S7nHN9uPgU6TrTk.crl (hash: 0Ah693mokIBB0EeAHCS+TCT+02rF9fvlsyvyv0sEj/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:06:a2:d0:13:fa:df:9c:bd:2d:13:d2:5e:ce:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=096bf7e6b32a5623f54bb9c737db8f814e93ad39 Validity Not Before: Feb 9 16:00:29 2026 GMT Not After : Feb 10 16:00:29 2026 GMT Subject: CN=695df5f876dd9b7318a19f87e81fccdab62d3b04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1b:58:66:cb:89:b1:48:2e:c3:9d:ce:99:3f: a6:c4:66:ba:2f:d7:66:ae:0f:54:93:2f:a6:35:c1: 8c:21:2f:3d:c5:9d:cd:42:4d:c8:49:87:90:78:c0: b7:74:a1:a6:f6:2b:fc:a2:5d:8d:65:18:c9:76:40: 3c:36:8e:f8:ee:5e:73:4b:54:ed:b1:26:aa:62:f1: 13:b1:62:f1:26:16:fe:ca:c8:0c:1a:06:36:9f:e4: 74:5f:5c:d8:b8:d6:a9:c7:67:b7:ea:17:64:f6:d4: 2e:a5:9e:65:3b:5a:2c:9e:26:b6:4d:21:94:f0:38: 03:84:4b:0a:99:ba:0b:1d:11:d7:ca:d2:f9:89:c1: 3a:40:31:20:bb:4d:7a:54:b9:6b:f1:48:45:38:68: 9e:ad:86:34:91:e5:cb:5f:47:9e:ab:56:65:72:cb: 52:af:1b:c3:f6:75:e6:5c:8f:53:08:0e:1c:dd:d2: a6:a0:2e:e8:49:36:48:d2:03:1c:42:b1:48:24:9f: 2f:b2:72:1a:0a:e2:83:b3:c4:38:fc:6f:2f:02:ba: a2:4a:07:10:41:59:10:20:76:e9:d4:5b:fd:23:31: 15:75:1f:28:6f:7b:aa:c1:d1:b3:e0:9f:93:97:12: 2c:c3:34:08:f4:9b:bf:82:c0:5d:f1:e2:41:48:af: bf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:5D:F5:F8:76:DD:9B:73:18:A1:9F:87:E8:1F:CC:DA:B6:2D:3B:04 X509v3 Authority Key Identifier: keyid:09:6B:F7:E6:B3:2A:56:23:F5:4B:B9:C7:37:DB:8F:81:4E:93:AD:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CWv35rMqViP1S7nHN9uPgU6TrTk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/b56b01-292f-4a1d-baa2-bcd6ada1b9da/1/CWv35rMqViP1S7nHN9uPgU6TrTk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:a3:81:bb:06:9c:07:d0:59:f8:15:7d:4a:7d:a8:5f:b8:18: 51:81:f0:f5:6f:85:8a:b5:cd:f7:5a:97:75:d2:3d:63:9f:04: 96:78:6a:7c:9f:7c:42:3f:01:9e:c1:30:2c:06:79:ba:ed:d1: cd:60:bd:fd:93:f5:8c:e7:4f:53:d8:80:95:78:4e:5c:83:45: b8:43:10:01:e5:b0:e3:86:30:6e:ba:e7:af:84:9c:ec:e7:b1: 5d:5e:f7:72:a6:fb:b7:ce:dd:f3:fd:ba:06:7b:8b:0b:a3:34: 7d:54:66:3e:97:e1:52:ad:4c:9e:a8:38:d6:b8:19:e6:e0:9b: 92:78:df:93:f7:22:0f:48:d1:ec:c9:82:70:77:a6:58:34:fb: 35:ee:d7:fa:0f:75:5a:bc:5f:54:a8:9d:d2:6c:5a:37:ab:f3: a2:4d:24:1b:78:7f:71:6a:9a:c6:d9:fe:a7:b9:dd:30:a3:88: 1b:89:b9:6a:20:56:24:c9:02:84:80:f1:f5:57:94:d5:84:14: ee:91:b9:2a:ca:36:c9:06:8b:57:67:5f:58:6e:5f:60:6c:d7: 4d:b3:8b:1c:99:ed:ae:83:a1:39:bc:71:e6:cb:07:41:8d:6c: d8:43:53:c8:2a:9d:7f:11:da:f7:c8:a8:e4:bf:bf:eb:e6:50: fe:b8:7c:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgai0BP635y9LRPSXs42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NmJmN2U2YjMyYTU2MjNmNTRiYjljNzM3ZGI4ZjgxNGU5 M2FkMzkwHhcNMjYwMjA5MTYwMDI5WhcNMjYwMjEwMTYwMDI5WjAzMTEwLwYDVQQD Eyg2OTVkZjVmODc2ZGQ5YjczMThhMTlmODdlODFmY2NkYWI2MmQzYjA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhtYZsuJsUguw53OmT+mxGa6L9dm rg9Uky+mNcGMIS89xZ3NQk3ISYeQeMC3dKGm9iv8ol2NZRjJdkA8No747l5zS1Tt sSaqYvETsWLxJhb+ysgMGgY2n+R0X1zYuNapx2e36hdk9tQupZ5lO1osnia2TSGU 8DgDhEsKmboLHRHXytL5icE6QDEgu016VLlr8UhFOGierYY0keXLX0eeq1ZlcstS rxvD9nXmXI9TCA4c3dKmoC7oSTZI0gMcQrFIJJ8vsnIaCuKDs8Q4/G8vArqiSgcQ QVkQIHbp1Fv9IzEVdR8ob3uqwdGz4J+TlxIswzQI9Ju/gsBd8eJBSK+/FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGld9fh23ZtzGKGfh+gfzNq2LTsEMB8GA1UdIwQY MBaAFAlr9+azKlYj9Uu5xzfbj4FOk605MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTIt YmNkNmFkYTFiOWRhLzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9iNTZiMDEtMjkyZi00YTFkLWJhYTItYmNkNmFkYTFiOWRh LzEvQ1d2MzVyTXFWaVAxUzduSE45dVBnVTZUclRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcaOBuwac B9BZ+BV9Sn2oX7gYUYHw9W+FirXN91qXddI9Y58ElnhqfJ98Qj8BnsEwLAZ5uu3R zWC9/ZP1jOdPU9iAlXhOXINFuEMQAeWw44Ywbrrnr4Sc7OexXV73cqb7t87d8/26 BnuLC6M0fVRmPpfhUq1Mnqg41rgZ5uCbknjfk/ciD0jR7MmCcHemWDT7Ne7X+g91 WrxfVKid0mxaN6vzok0kG3h/cWqaxtn+p7ndMKOIG4m5aiBWJMkChIDx9VeU1YQU 7pG5Kso2yQaLV2dfWG5fYGzXTbOLHJntroOhObxx5ssHQY1s2ENTyCqdfxHa98io 5L+/6+ZQ/rh8Kg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:43 2026 by rpki-client