This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft File: cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft (raw, json) Hash identifier: F0vy+mmA44w7p5BiakDo+9TncA6Hp4MKxr/ZTY2IUtk= Subject key identifier: F4:F7:A1:09:2E:3B:17:1D:ED:F0:17:C5:67:28:D8:79:D5:8E:C0:28 Authority key identifier: 72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B Certificate issuer: /CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b Certificate serial: 019C43593A276A96E3B7D1F2437AB1277A50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft Manifest number: 126F Signing time: Mon 09 Feb 2026 17:00:46 +0000 Manifest this update: Mon 09 Feb 2026 17:00:46 +0000 Manifest next update: Tue 10 Feb 2026 17:00:46 +0000 Files and hashes: 1: cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl (hash: OTOduaTyUsHzU4m3Ar8jP5YrMPQnVto/UBHRSvJfZcs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:3a:27:6a:96:e3:b7:d1:f2:43:7a:b1:27:7a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=726bdf6dfa6499e2c4aadeee106643da01c0ff8b Validity Not Before: Feb 9 17:00:46 2026 GMT Not After : Feb 10 17:00:46 2026 GMT Subject: CN=f4f7a1092e3b171dedf017c56728d879d58ec028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:f5:9d:ae:70:6f:6e:c3:86:41:ee:67:dc: f0:3a:85:09:af:59:61:87:5c:72:90:4b:0e:9b:88: 09:2f:e7:51:24:b9:17:67:48:85:e4:53:8f:52:2b: f4:db:e0:4f:41:a6:14:aa:1e:db:b9:04:11:cf:b3: 79:67:a6:38:b4:07:b7:7e:93:e0:ec:f5:a7:b4:f7: b4:94:f2:23:21:ee:93:ca:eb:2d:8e:ba:0f:69:2c: b1:52:48:1c:c0:64:c6:21:6c:58:1d:d3:00:ae:02: c8:08:87:c6:f7:e3:7b:e1:af:e2:32:63:4c:ca:4a: f9:e0:55:d4:ce:28:3e:8a:0e:97:63:68:56:cc:14: ec:84:b1:b2:0c:46:77:29:c0:8e:e2:71:3d:b9:64: db:3c:fd:87:d4:75:22:2c:a4:c0:5c:57:dc:a6:aa: b4:b7:05:d7:d4:b3:b7:74:ad:cc:c1:89:f8:69:e7: 81:3a:45:5b:4a:24:58:25:dd:71:4b:20:ba:44:22: ec:fa:cc:0d:25:6f:d3:54:a1:0d:3e:5e:8c:e9:2e: 8e:7a:c4:df:83:f8:f1:73:4a:dd:66:4d:77:d1:0c: c1:d1:48:0e:db:87:ef:db:92:5d:bc:80:ad:e2:4d: fa:62:0f:a2:d0:86:63:7f:15:be:09:ff:dc:68:96: 3c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F7:A1:09:2E:3B:17:1D:ED:F0:17:C5:67:28:D8:79:D5:8E:C0:28 X509v3 Authority Key Identifier: keyid:72:6B:DF:6D:FA:64:99:E2:C4:AA:DE:EE:10:66:43:DA:01:C0:FF:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cmvfbfpkmeLEqt7uEGZD2gHA_4s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f05f20-635f-4e25-8b6a-75b549e8bb4d/1/cmvfbfpkmeLEqt7uEGZD2gHA_4s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b8:c7:44:9c:d4:17:70:27:f1:2d:d0:55:d8:7f:85:a8:38: fc:3a:0b:2a:65:c9:5d:17:c1:fe:28:6a:83:11:bc:76:87:08: 0f:28:00:51:c3:86:9a:5b:e5:81:e9:ce:e9:fb:af:6a:d3:c6: c0:89:9e:67:e2:07:fe:40:ea:8b:a6:a4:9b:6e:b8:34:9e:78: 37:95:3d:1a:28:41:ac:89:11:49:01:a0:72:29:ec:cc:ea:e4: 1f:7c:a7:71:b7:69:ae:6c:5e:70:ce:69:10:75:1f:de:c6:02: e8:93:e3:05:15:8b:65:d8:7c:03:9e:11:e3:b3:27:dd:4f:8b: 2e:aa:e7:5f:97:d3:98:df:78:e5:10:6c:a4:c0:23:e3:16:80: 10:0a:24:81:86:e5:7e:29:b9:1f:06:67:e4:1e:6f:75:e9:d4: f8:7d:40:c9:4d:ca:ff:6a:10:0c:87:f1:d0:2c:66:a8:62:f5: ea:2c:03:97:bf:f3:d4:7c:42:a7:06:d4:93:7e:41:5f:88:00: de:5c:54:63:05:94:92:51:0a:7d:46:9a:44:31:08:58:b1:19: 1b:ee:15:72:d5:91:4c:4a:90:a1:e4:dd:bf:09:bf:bf:a8:13: f2:be:56:1e:bc:64:7b:ed:08:29:84:24:51:e5:c1:bc:34:98: 59:13:c9:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTonapbjt9HyQ3qxJ3pQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyNmJkZjZkZmE2NDk5ZTJjNGFhZGVlZTEwNjY0M2RhMDFj MGZmOGIwHhcNMjYwMjA5MTcwMDQ2WhcNMjYwMjEwMTcwMDQ2WjAzMTEwLwYDVQQD EyhmNGY3YTEwOTJlM2IxNzFkZWRmMDE3YzU2NzI4ZDg3OWQ1OGVjMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllz1na5wb27DhkHuZ9zwOoUJr1lh h1xykEsOm4gJL+dRJLkXZ0iF5FOPUiv02+BPQaYUqh7buQQRz7N5Z6Y4tAe3fpPg 7PWntPe0lPIjIe6TyustjroPaSyxUkgcwGTGIWxYHdMArgLICIfG9+N74a/iMmNM ykr54FXUzig+ig6XY2hWzBTshLGyDEZ3KcCO4nE9uWTbPP2H1HUiLKTAXFfcpqq0 twXX1LO3dK3MwYn4aeeBOkVbSiRYJd1xSyC6RCLs+swNJW/TVKENPl6M6S6OesTf g/jxc0rdZk130QzB0UgO24fv25JdvICt4k36Yg+i0IZjfxW+Cf/caJY8lwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPT3oQkuOxcd7fAXxWco2HnVjsAoMB8GA1UdIwQY MBaAFHJr3236ZJnixKre7hBmQ9oBwP+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEt NzViNTQ5ZThiYjRkLzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMDVmMjAtNjM1Zi00ZTI1LThiNmEtNzViNTQ5ZThiYjRk LzEvY212ZmJmcGttZUxFcXQ3dUVHWkQyZ0hBXzRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdrjHRJzU F3An8S3QVdh/hag4/DoLKmXJXRfB/ihqgxG8docIDygAUcOGmlvlgenO6fuvatPG wImeZ+IH/kDqi6akm264NJ54N5U9GihBrIkRSQGgcinszOrkH3yncbdprmxecM5p EHUf3sYC6JPjBRWLZdh8A54R47Mn3U+LLqrnX5fTmN945RBspMAj4xaAEAokgYbl fim5HwZn5B5vdenU+H1AyU3K/2oQDIfx0CxmqGL16iwDl7/z1HxCpwbUk35BX4gA 3lxUYwWUklEKfUaaRDEIWLEZG+4VctWRTEqQoeTdvwm/v6gT8r5WHrxke+0IKYQk UeXBvDSYWRPJIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:09 2026 by rpki-client