This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft File: _cmkuOXbmY8RgGzH-d-PpZeZOMs.mft (raw, json) Hash identifier: /JQwXH31+nTLjq6j5gFIXAzDXPz2gUZnX89/sZ3HTUY= Subject key identifier: 67:A1:52:FD:07:C1:49:FE:6C:D5:B8:3C:D8:E1:80:F4:E9:8C:00:28 Authority key identifier: FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB Certificate issuer: /CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb Certificate serial: 019C41D885A9888FCEBBF9B0048E66A195A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft Manifest number: 57 Signing time: Mon 09 Feb 2026 10:00:34 +0000 Manifest this update: Mon 09 Feb 2026 10:00:34 +0000 Manifest next update: Tue 10 Feb 2026 10:00:34 +0000 Files and hashes: 1: _cmkuOXbmY8RgGzH-d-PpZeZOMs.crl (hash: Ng0HFaDolSBe7zUZkC2NMqR44K+jT9Y5aCGs2U5iCU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:85:a9:88:8f:ce:bb:f9:b0:04:8e:66:a1:95:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fdc9a4b8e5db998f11806cc7f9df8fa5979938cb Validity Not Before: Feb 9 10:00:34 2026 GMT Not After : Feb 10 10:00:34 2026 GMT Subject: CN=67a152fd07c149fe6cd5b83cd8e180f4e98c0028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:11:cc:02:c5:23:ef:3c:16:b8:d4:09:e6:52: c7:57:33:5c:7c:b9:1b:02:c7:ad:7d:44:d2:f7:5e: 49:a5:b2:26:c6:b0:c0:66:04:c5:fd:b3:3d:b1:12: f0:ba:7a:82:f5:39:49:9b:9b:4c:0e:3b:19:9e:a7: d6:45:22:10:80:3f:0d:01:6c:cc:a5:70:5f:0f:b4: f8:73:84:9e:99:b6:b4:c1:51:18:8f:23:d9:1a:0f: 90:04:5f:72:c0:57:0b:37:21:30:5e:1d:18:3b:45: c2:0f:64:b9:69:7b:a0:53:36:b6:15:c6:c3:3a:ae: a6:3e:91:93:5e:dc:6e:a5:88:f6:59:1b:be:8e:25: c0:b5:b4:22:aa:6d:3f:70:6e:96:97:57:a9:c7:67: f1:f6:96:ec:b0:91:6b:d0:0d:55:82:a2:ea:14:f1: e8:2d:c0:91:89:50:b5:39:3b:c0:b8:e4:03:5c:e3: 82:7c:f9:e3:f4:e3:52:ff:f9:87:98:69:3f:d9:e2: 2a:c5:96:36:a1:c9:a7:31:90:27:7b:75:db:0d:da: 7f:7f:77:20:1d:8d:86:14:62:d2:a3:0f:5a:b2:bc: d6:81:c4:30:6d:0a:92:b6:f1:ff:ac:61:66:ff:b1: 8d:21:2b:36:9c:3f:22:a7:9f:77:77:87:d4:16:00: ac:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:A1:52:FD:07:C1:49:FE:6C:D5:B8:3C:D8:E1:80:F4:E9:8C:00:28 X509v3 Authority Key Identifier: keyid:FD:C9:A4:B8:E5:DB:99:8F:11:80:6C:C7:F9:DF:8F:A5:97:99:38:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cmkuOXbmY8RgGzH-d-PpZeZOMs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/548f1a-1598-48a8-ba71-5d88866e38ca/1/_cmkuOXbmY8RgGzH-d-PpZeZOMs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:cc:0f:dc:ea:14:36:4b:d0:81:fe:f4:a7:f8:ee:d1:5a:cf: b7:89:b5:3e:2b:01:ed:6e:1e:4d:8b:9b:20:97:ea:7a:71:37: 18:8d:fc:91:39:99:94:a8:67:31:b8:73:91:80:a5:59:c6:2c: fd:7c:0c:22:3e:11:1b:5e:d4:5d:b3:c4:d6:71:87:fd:90:14: eb:3a:49:c7:fe:53:69:31:fa:2d:bc:9b:86:7e:88:a0:c9:95: 1d:8d:aa:73:1b:27:d7:69:61:e9:24:1e:e3:59:8d:68:41:22: 24:40:cd:cf:70:19:7a:f2:8e:ab:cc:48:83:9d:51:a4:98:db: c6:db:82:88:6f:ae:ab:37:2c:2c:88:2c:d6:ce:2a:ce:ab:38: 56:6a:e1:95:5d:35:8c:43:59:fd:c7:d6:f2:b1:44:e6:a5:9e: f7:27:cc:4d:66:f0:d4:89:c2:33:3d:99:b4:39:bb:77:98:f6: 9b:9c:88:40:bf:2d:7f:9c:e0:3b:59:59:04:29:e7:10:32:ee: d6:da:5e:ae:3c:31:74:8b:b7:d7:00:7a:af:4a:c7:4d:f6:5e: 45:3f:ed:d2:bc:d8:f4:30:41:5c:33:f0:47:93:e4:3c:35:9b: 2d:3a:90:9c:f2:ae:2b:79:70:89:c6:bf:6a:10:d8:9a:b1:05: b6:57:91:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2IWpiI/Ou/mwBI5moZWgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYzlhNGI4ZTVkYjk5OGYxMTgwNmNjN2Y5ZGY4ZmE1OTc5 OTM4Y2IwHhcNMjYwMjA5MTAwMDM0WhcNMjYwMjEwMTAwMDM0WjAzMTEwLwYDVQQD Eyg2N2ExNTJmZDA3YzE0OWZlNmNkNWI4M2NkOGUxODBmNGU5OGMwMDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBHMAsUj7zwWuNQJ5lLHVzNcfLkb AsetfUTS915JpbImxrDAZgTF/bM9sRLwunqC9TlJm5tMDjsZnqfWRSIQgD8NAWzM pXBfD7T4c4Semba0wVEYjyPZGg+QBF9ywFcLNyEwXh0YO0XCD2S5aXugUza2FcbD Oq6mPpGTXtxupYj2WRu+jiXAtbQiqm0/cG6Wl1epx2fx9pbssJFr0A1VgqLqFPHo LcCRiVC1OTvAuOQDXOOCfPnj9ONS//mHmGk/2eIqxZY2ocmnMZAne3XbDdp/f3cg HY2GFGLSow9asrzWgcQwbQqStvH/rGFm/7GNISs2nD8ip593d4fUFgCsqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGehUv0HwUn+bNW4PNjhgPTpjAAoMB8GA1UdIwQY MBaAFP3JpLjl25mPEYBsx/nfj6WXmTjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2Nta3VPWGJtWThSZ0d6SC1kLVBwWmVaT01zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NDhmMWEtMTU5OC00OGE4LWJhNzEt NWQ4ODg2NmUzOGNhLzEvX2Nta3VPWGJtWThSZ0d6SC1kLVBwWmVaT01zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NDhmMWEtMTU5OC00OGE4LWJhNzEtNWQ4ODg2NmUzOGNh LzEvX2Nta3VPWGJtWThSZ0d6SC1kLVBwWmVaT01zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm8wP3OoU NkvQgf70p/ju0VrPt4m1PisB7W4eTYubIJfqenE3GI38kTmZlKhnMbhzkYClWcYs /XwMIj4RG17UXbPE1nGH/ZAU6zpJx/5TaTH6Lbybhn6IoMmVHY2qcxsn12lh6SQe 41mNaEEiJEDNz3AZevKOq8xIg51RpJjbxtuCiG+uqzcsLIgs1s4qzqs4VmrhlV01 jENZ/cfW8rFE5qWe9yfMTWbw1InCMz2ZtDm7d5j2m5yIQL8tf5zgO1lZBCnnEDLu 1tperjwxdIu31wB6r0rHTfZeRT/t0rzY9DBBXDPwR5PkPDWbLTqQnPKuK3lwica/ ahDYmrEFtleRIQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:08 2026 by rpki-client