This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft File: ctdCYWpoBB9_D80HkvOOQQOnncI.mft (raw, json) Hash identifier: Aof7kB2cXVXILJpMGl28MJ2NIdo/q4I7LXKEwcfJn4U= Subject key identifier: 64:AF:96:67:8D:C1:71:83:45:42:C7:76:1F:E3:F5:B4:51:F9:C9:84 Authority key identifier: 72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 Certificate issuer: /CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Certificate serial: 019C4358BC7FB4FB17E8FBC5967589181E95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft Manifest number: 04E3 Signing time: Mon 09 Feb 2026 17:00:14 +0000 Manifest this update: Mon 09 Feb 2026 17:00:14 +0000 Manifest next update: Tue 10 Feb 2026 17:00:14 +0000 Files and hashes: 1: ctdCYWpoBB9_D80HkvOOQQOnncI.crl (hash: qM0tNUX7uGwsWC//LHhtat/+h0nQEmuF7XQthR5OF9w=) 2: m0MG-eJyS0zFzaAWWkTJJ5qGS-I.roa (hash: Iq+qXgVKWt2Kx6N9DmTJowNt5dRM8IzSViFs0l/+0uY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:bc:7f:b4:fb:17:e8:fb:c5:96:75:89:18:1e:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72d742616a68041f7f0fcd0792f38e4103a79dc2 Validity Not Before: Feb 9 17:00:14 2026 GMT Not After : Feb 10 17:00:14 2026 GMT Subject: CN=64af96678dc171834542c7761fe3f5b451f9c984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f4:59:3d:90:e2:55:3d:4e:29:10:37:19:11: 09:8e:16:23:72:6c:cc:77:3e:bf:2f:26:47:1f:f5: bc:5f:16:2a:68:5d:2f:ea:55:d6:76:7f:c6:ef:6c: 1b:08:fc:cf:99:58:c9:25:af:16:d5:94:e1:5f:e7: d4:17:d7:c2:ce:22:70:d7:06:db:fa:6d:1a:09:6f: ad:a1:1f:19:6a:9b:35:27:d2:fa:90:b0:a8:98:72: f0:92:81:5e:ea:b9:e2:87:08:81:46:71:c0:ba:fc: 6e:2b:52:2e:26:a8:46:e7:91:40:0a:78:24:67:3b: 7f:45:e5:1d:70:2b:2a:81:84:bb:47:5a:4d:12:1f: a7:16:2c:31:2e:ee:6e:1c:46:69:8c:07:5a:2e:8c: b5:07:b3:6e:2c:22:52:81:0a:44:31:59:c6:72:ea: de:c3:b9:84:62:89:cb:94:d2:5d:d4:04:3b:1b:45: ba:77:ca:96:e3:d4:36:e1:90:d3:61:24:f5:f1:44: 7f:3c:b4:7e:30:13:1a:23:b5:2f:e2:99:7a:67:c2: c6:9d:f0:3e:49:74:5e:85:c6:21:79:cf:62:de:5e: ae:de:38:d2:d9:97:fc:98:cb:b4:f0:79:6b:4e:3f: 60:51:92:ae:5b:67:51:88:be:91:f1:91:93:82:11: b7:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AF:96:67:8D:C1:71:83:45:42:C7:76:1F:E3:F5:B4:51:F9:C9:84 X509v3 Authority Key Identifier: keyid:72:D7:42:61:6A:68:04:1F:7F:0F:CD:07:92:F3:8E:41:03:A7:9D:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ctdCYWpoBB9_D80HkvOOQQOnncI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2bbd21-d147-4c78-8d2e-a209b90f27d9/1/ctdCYWpoBB9_D80HkvOOQQOnncI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5b:c5:c8:7a:20:53:9c:ec:85:6d:9c:6c:6f:8e:a0:de:b6: 8e:4d:dd:58:f0:a2:e7:5f:43:03:1d:7f:bc:15:c1:dd:76:d6: a4:0d:90:bc:2e:60:68:ea:01:ba:fd:ba:d3:85:67:60:16:c7: 37:28:b7:30:1b:19:49:4e:cb:fd:33:f8:21:12:34:ee:4b:fb: 92:6a:9a:14:17:0b:7f:6b:45:2f:0c:12:29:b8:0c:75:8a:ea: da:88:7c:fe:e2:d0:fa:10:a9:c5:5d:22:df:7f:a6:99:ee:76: 82:0b:b6:91:b5:77:68:92:23:fd:75:a7:f4:95:d8:d4:3a:f2: 00:70:b3:14:c5:c3:6a:0b:e4:98:6c:96:6e:8a:cc:31:d8:42: 51:f5:7e:8b:0d:94:92:6d:f4:df:27:0c:4c:03:12:84:1d:28: f1:92:1c:af:45:a3:fd:87:9d:11:be:b0:f7:4c:9e:b8:7c:77: 5b:33:c5:99:81:2e:e0:06:be:3f:af:ae:03:e2:15:b7:36:4f: 36:fc:17:f7:d8:91:87:75:b8:1c:86:e6:94:17:43:43:d9:f8: 63:bb:03:5a:a0:ed:b7:86:a5:4d:1f:c2:98:a9:e6:5c:1c:0b: fe:96:71:d8:49:f5:b9:16:95:17:cf:12:13:39:46:37:f0:2c: ec:a6:98:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWLx/tPsX6PvFlnWJGB6VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZDc0MjYxNmE2ODA0MWY3ZjBmY2QwNzkyZjM4ZTQxMDNh NzlkYzIwHhcNMjYwMjA5MTcwMDE0WhcNMjYwMjEwMTcwMDE0WjAzMTEwLwYDVQQD Eyg2NGFmOTY2NzhkYzE3MTgzNDU0MmM3NzYxZmUzZjViNDUxZjljOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfRZPZDiVT1OKRA3GREJjhYjcmzM dz6/LyZHH/W8XxYqaF0v6lXWdn/G72wbCPzPmVjJJa8W1ZThX+fUF9fCziJw1wbb +m0aCW+toR8Zaps1J9L6kLComHLwkoFe6rnihwiBRnHAuvxuK1IuJqhG55FACngk Zzt/ReUdcCsqgYS7R1pNEh+nFiwxLu5uHEZpjAdaLoy1B7NuLCJSgQpEMVnGcure w7mEYonLlNJd1AQ7G0W6d8qW49Q24ZDTYST18UR/PLR+MBMaI7Uv4pl6Z8LGnfA+ SXRehcYhec9i3l6u3jjS2Zf8mMu08HlrTj9gUZKuW2dRiL6R8ZGTghG3lQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSvlmeNwXGDRULHdh/j9bRR+cmEMB8GA1UdIwQY MBaAFHLXQmFqaAQffw/NB5LzjkEDp53CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUt YTIwOWI5MGYyN2Q5LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yYmJkMjEtZDE0Ny00Yzc4LThkMmUtYTIwOWI5MGYyN2Q5 LzEvY3RkQ1lXcG9CQjlfRDgwSGt2T09RUU9ubmNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVvFyHog U5zshW2cbG+OoN62jk3dWPCi519DAx1/vBXB3XbWpA2QvC5gaOoBuv2604VnYBbH Nyi3MBsZSU7L/TP4IRI07kv7kmqaFBcLf2tFLwwSKbgMdYrq2oh8/uLQ+hCpxV0i 33+mme52ggu2kbV3aJIj/XWn9JXY1DryAHCzFMXDagvkmGyWborMMdhCUfV+iw2U km303ycMTAMShB0o8ZIcr0Wj/YedEb6w90yeuHx3WzPFmYEu4Aa+P6+uA+IVtzZP NvwX99iRh3W4HIbmlBdDQ9n4Y7sDWqDtt4alTR/CmKnmXBwL/pZx2En1uRaVF88S EzlGN/As7KaYOQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:46:54 2026 by rpki-client