This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json) Hash identifier: 8VpaP0fa/DPKU1upezI1Sh5biZRHC+0BOpOueFZMHg4= Subject key identifier: AE:80:58:86:1F:A2:6E:D0:64:94:4A:03:88:78:AE:18:C9:8A:6C:56 Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21 Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21 Certificate serial: 019C41A15C5717377D57CA68AE51900FFC03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft Manifest number: 0B67 Signing time: Mon 09 Feb 2026 09:00:19 +0000 Manifest this update: Mon 09 Feb 2026 09:00:19 +0000 Manifest next update: Tue 10 Feb 2026 09:00:19 +0000 Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: jYl9u8CnPL/XW5IhksF3rmzXCzpHpNSxlg9EWOZ0ZCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:5c:57:17:37:7d:57:ca:68:ae:51:90:0f:fc:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21 Validity Not Before: Feb 9 09:00:19 2026 GMT Not After : Feb 10 09:00:19 2026 GMT Subject: CN=ae8058861fa26ed064944a038878ae18c98a6c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:56:24:76:44:95:93:45:53:c4:20:00:5e:d5: a5:22:76:c6:20:2a:e1:cb:68:4c:24:98:85:10:8f: 4b:b9:d7:9a:1f:ad:45:a4:59:49:74:3d:af:f7:04: 87:d9:3f:a5:33:f6:81:78:5a:27:93:95:bb:86:c9: 70:cb:d6:89:7d:4a:94:0f:3a:cc:d4:3d:bc:76:9f: 2c:35:65:d8:cd:9f:57:ac:b1:b0:ec:3b:04:dc:1b: fa:f0:3b:08:5a:d1:dc:4c:3e:56:c8:1c:ac:68:5d: 86:86:93:30:6f:4d:83:b3:83:88:28:8f:21:0c:3c: 48:9d:1b:69:0c:f9:be:e8:e7:43:be:44:51:9c:19: 8c:dc:f2:39:00:b8:3e:da:c8:be:12:34:76:0a:4d: 32:7e:96:69:22:27:ef:ce:fe:7c:b9:34:d7:87:53: 3f:d1:bf:19:35:eb:cf:be:a6:30:f0:f2:22:28:b5: 74:47:fb:b3:c9:42:93:00:9e:51:4b:0d:df:9a:59: ea:ba:69:aa:5a:2d:95:a0:48:a0:a7:0c:d2:1c:85: 99:fa:bd:7f:43:a8:d8:87:4c:e9:86:3b:1c:e6:9f: 1c:28:90:0c:d3:56:12:7a:e7:73:15:cc:fb:c0:83: 69:8d:4d:50:83:f4:27:c2:3e:0c:24:d2:24:80:dc: 8f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:58:86:1F:A2:6E:D0:64:94:4A:03:88:78:AE:18:C9:8A:6C:56 X509v3 Authority Key Identifier: keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a8:03:b2:56:b9:b1:5f:33:b2:9f:7c:e5:d6:3c:48:df:74: f8:0d:9a:84:c0:4e:d3:c6:9a:aa:a6:29:7b:58:18:91:44:7e: cd:93:e6:50:51:e9:1f:03:4c:2e:e2:7e:ae:e3:9c:24:a1:3c: 69:f3:ad:7c:62:ca:82:68:a8:7d:e3:4c:2a:34:dd:2c:ae:b3: 4d:94:c5:4e:de:6e:6a:07:11:18:5b:c4:5e:b9:93:b3:24:5c: e9:c9:88:84:66:62:d5:8e:8b:49:a0:f0:21:f3:f9:3f:20:64: b8:6a:36:04:c0:18:92:4a:8c:28:4d:94:b0:39:9d:9a:d2:b1: a2:ff:6f:c0:62:43:e1:25:31:98:ff:2a:a1:20:9a:fe:4e:69: 8d:b1:9c:14:de:26:c5:11:4d:7a:90:99:c0:64:13:19:97:1e: 98:9b:ed:00:60:3b:8b:28:71:71:f1:1e:8e:a6:6d:a3:bb:62: bc:96:16:48:6d:b4:4b:7d:45:6b:4f:34:b7:49:30:dc:c6:7b: 56:54:58:bb:02:a7:8b:53:25:53:bb:59:ac:35:4d:23:07:c0: e4:89:a1:cf:0b:e0:30:33:b6:a8:3f:b8:41:aa:5f:80:a2:ae: 95:7f:0e:a6:ec:3e:61:a4:d0:d4:f3:8f:5a:57:7b:72:00:ce: bf:c7:89:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoVxXFzd9V8porlGQD/wDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODAyYTg2MjFmODc4MjdmZDU5NzIzY2U2NmNiNTljMzhm OTFmMjEwHhcNMjYwMjA5MDkwMDE5WhcNMjYwMjEwMDkwMDE5WjAzMTEwLwYDVQQD EyhhZTgwNTg4NjFmYTI2ZWQwNjQ5NDRhMDM4ODc4YWUxOGM5OGE2YzU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYkdkSVk0VTxCAAXtWlInbGICrh y2hMJJiFEI9LudeaH61FpFlJdD2v9wSH2T+lM/aBeFonk5W7hslwy9aJfUqUDzrM 1D28dp8sNWXYzZ9XrLGw7DsE3Bv68DsIWtHcTD5WyBysaF2GhpMwb02Ds4OIKI8h DDxInRtpDPm+6OdDvkRRnBmM3PI5ALg+2si+EjR2Ck0yfpZpIifvzv58uTTXh1M/ 0b8ZNevPvqYw8PIiKLV0R/uzyUKTAJ5RSw3fmlnqummqWi2VoEigpwzSHIWZ+r1/ Q6jYh0zphjsc5p8cKJAM01YSeudzFcz7wINpjU1Qg/Qnwj4MJNIkgNyPdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK6AWIYfom7QZJRKA4h4rhjJimxWMB8GA1UdIwQY MBaAFAiAKoYh+Hgn/VlyPOZstZw4+R8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2Et ZjE2Zjk5NGVjZjQzLzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2EtZjE2Zjk5NGVjZjQz LzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqgDsla5 sV8zsp985dY8SN90+A2ahMBO08aaqqYpe1gYkUR+zZPmUFHpHwNMLuJ+ruOcJKE8 afOtfGLKgmiofeNMKjTdLK6zTZTFTt5uagcRGFvEXrmTsyRc6cmIhGZi1Y6LSaDw IfP5PyBkuGo2BMAYkkqMKE2UsDmdmtKxov9vwGJD4SUxmP8qoSCa/k5pjbGcFN4m xRFNepCZwGQTGZcemJvtAGA7iyhxcfEejqZto7tivJYWSG20S31Fa080t0kw3MZ7 VlRYuwKni1MlU7tZrDVNIwfA5ImhzwvgMDO2qD+4QapfgKKulX8Opuw+YaTQ1POP Wld7cgDOv8eJBg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:22 2026 by rpki-client