This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft File: CNOlFWg-nduF0456s5wzrtrK9-8.mft (raw, json) Hash identifier: YC+AjEUwLUsbxSw2UEY+sbsunCnQw6nqZAJBpO92u/4= Subject key identifier: 60:34:C0:67:35:DB:FB:41:FD:B8:17:72:00:96:35:60:A0:A2:09:86 Authority key identifier: 08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF Certificate issuer: /CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Certificate serial: 019C41A1EC2B56FFA15138B44F57FE4E22BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 09:00:56 +0000 Manifest this update: Mon 09 Feb 2026 09:00:56 +0000 Manifest next update: Tue 10 Feb 2026 09:00:56 +0000 Files and hashes: 1: 6HdhKoBXAtdyvCLBXYceUEgkG_w.roa (hash: e5lfNI/c3zfYBAg85/aYkCAmj1r5btvuHTM0GNLkW7I=) 2: CNOlFWg-nduF0456s5wzrtrK9-8.crl (hash: j+7VphrAObQ4d+/0i+6YS9JEIzM6Ppi+fqjXjm7d7dg=) 3: cuP-bCZeFrV9kTmJnmKD5EbUeso.roa (hash: k1pZ8QNEfHSpeH3z2ped2bgTzeQQUlHYjTHorbIcTsE=) 4: pMY2G7x73wBoXGM586Db9RcFDxY.roa (hash: 9gsZC3WF9scrT9Qn8MwE1JOLyps6ENzUI0Jj7Vf/mzQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ec:2b:56:ff:a1:51:38:b4:4f:57:fe:4e:22:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d3a515683e9ddb85d38e7ab39c33aedacaf7ef Validity Not Before: Feb 9 09:00:56 2026 GMT Not After : Feb 10 09:00:56 2026 GMT Subject: CN=6034c06735dbfb41fdb8177200963560a0a20986 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:13:4b:80:16:e5:ec:29:51:16:94:8e:9b:1e: 34:cd:6d:9c:8c:5f:27:48:eb:65:9b:70:50:e2:b1: cf:2c:30:26:7e:05:f6:d3:c4:83:21:a6:ee:fd:a7: 1c:8f:d4:9e:f2:1c:67:45:6a:79:f5:b1:96:eb:57: 0a:d9:83:3d:ab:d4:bf:1a:b7:34:67:7a:d8:ab:d0: 8b:69:e7:e1:82:95:a7:b5:fc:30:54:84:bd:1b:28: 8d:93:8f:25:5f:f2:24:3b:21:31:80:b0:5d:ec:af: b9:67:07:75:69:55:47:d8:74:37:16:23:48:aa:48: 49:b4:8f:d4:9f:19:30:f5:88:a5:7f:b9:ac:aa:cc: 4a:d5:0a:28:47:0a:5c:8f:fb:72:42:ec:a3:98:5f: 66:22:b4:fd:51:8e:fc:3d:0a:75:2a:9a:c5:a8:1f: 3a:bd:93:ac:7d:89:11:bc:84:03:4c:1d:e3:fe:21: cc:f1:97:49:df:03:cb:72:c7:78:1a:9b:00:5f:00: 8e:b3:2e:d4:72:b1:ab:59:e0:2d:e1:f9:4c:03:3c: 60:b1:5a:7b:4e:cd:76:df:6c:de:c1:69:91:e5:71: b5:a4:52:3c:f6:c3:ad:43:be:b9:16:cf:f2:c7:55: 3d:f8:0e:b4:83:c7:1d:e0:37:0d:c8:09:23:3b:3b: 9b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:C0:67:35:DB:FB:41:FD:B8:17:72:00:96:35:60:A0:A2:09:86 X509v3 Authority Key Identifier: keyid:08:D3:A5:15:68:3E:9D:DB:85:D3:8E:7A:B3:9C:33:AE:DA:CA:F7:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNOlFWg-nduF0456s5wzrtrK9-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/67cfa0-a32b-4063-9370-0b5c5d94426a/1/CNOlFWg-nduF0456s5wzrtrK9-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:40:cd:39:63:c7:1a:af:60:62:a7:e1:64:31:7c:df:a3:0e: f4:97:e9:a1:f1:6e:98:4c:99:12:be:81:b1:12:b8:87:3f:4b: 90:13:9a:ec:bf:17:5b:9d:b7:29:60:ef:c7:8e:95:6d:c8:93: 55:7c:ba:b3:db:66:f4:67:e0:fc:59:05:26:8a:35:16:b0:d7: a8:24:99:10:79:e8:83:2e:87:6c:8d:95:04:1e:a0:55:36:bd: 82:27:76:64:7a:24:97:09:1b:c1:25:9b:38:1d:98:8d:b6:60: c4:0e:7e:36:f0:42:82:74:a5:96:ce:43:52:93:cc:0a:3c:96: 70:45:38:8b:0d:9b:d5:c8:43:53:f7:7a:92:fe:0d:f8:16:7a: 05:50:10:ca:79:82:5b:1f:db:77:d9:2a:b2:ba:9b:61:b8:0d: e2:69:7d:e8:ca:5d:eb:6c:7e:d5:ec:d5:85:19:f1:f7:08:44: ee:9e:4a:c0:8e:f5:e0:fe:00:3c:1d:0b:8f:53:39:ed:9b:96: 83:31:fa:7f:1a:0d:af:de:21:14:5f:21:12:7d:3d:a5:43:cf: 84:5a:c3:56:a4:4f:e0:ca:f0:07:b0:67:9a:56:76:52:7b:88: d1:f7:d3:ce:e1:1e:58:c6:68:d8:cc:d8:26:e4:ff:8a:76:db: 35:13:4a:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoewrVv+hUTi0T1f+TiK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDNhNTE1NjgzZTlkZGI4NWQzOGU3YWIzOWMzM2FlZGFj YWY3ZWYwHhcNMjYwMjA5MDkwMDU2WhcNMjYwMjEwMDkwMDU2WjAzMTEwLwYDVQQD Eyg2MDM0YzA2NzM1ZGJmYjQxZmRiODE3NzIwMDk2MzU2MGEwYTIwOTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2RNLgBbl7ClRFpSOmx40zW2cjF8n SOtlm3BQ4rHPLDAmfgX208SDIabu/accj9Se8hxnRWp59bGW61cK2YM9q9S/Grc0 Z3rYq9CLaefhgpWntfwwVIS9GyiNk48lX/IkOyExgLBd7K+5Zwd1aVVH2HQ3FiNI qkhJtI/Unxkw9Yilf7msqsxK1QooRwpcj/tyQuyjmF9mIrT9UY78PQp1KprFqB86 vZOsfYkRvIQDTB3j/iHM8ZdJ3wPLcsd4GpsAXwCOsy7UcrGrWeAt4flMAzxgsVp7 Ts1232zewWmR5XG1pFI89sOtQ765Fs/yx1U9+A60g8cd4DcNyAkjOzubJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGA0wGc12/tB/bgXcgCWNWCgogmGMB8GA1UdIwQY MBaAFAjTpRVoPp3bhdOOerOcM67ayvfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAt MGI1YzVkOTQ0MjZhLzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82N2NmYTAtYTMyYi00MDYzLTkzNzAtMGI1YzVkOTQ0MjZh LzEvQ05PbEZXZy1uZHVGMDQ1NnM1d3pydHJLOS04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB0DNOWPH Gq9gYqfhZDF836MO9JfpofFumEyZEr6BsRK4hz9LkBOa7L8XW523KWDvx46VbciT VXy6s9tm9Gfg/FkFJoo1FrDXqCSZEHnogy6HbI2VBB6gVTa9gid2ZHoklwkbwSWb OB2YjbZgxA5+NvBCgnSlls5DUpPMCjyWcEU4iw2b1chDU/d6kv4N+BZ6BVAQynmC Wx/bd9kqsrqbYbgN4ml96Mpd62x+1ezVhRnx9whE7p5KwI714P4APB0Lj1M57ZuW gzH6fxoNr94hFF8hEn09pUPPhFrDVqRP4MrwB7BnmlZ2UnuI0ffTzuEeWMZo2MzY JuT/inbbNRNKvw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:29 2026 by rpki-client