This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft File: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft (raw, json) Hash identifier: Penj/0MICJPweije38xZg2eetKwGMpJfYxfQy1CqY0k= Subject key identifier: 1A:E1:EE:59:23:B3:CF:E0:EF:8D:79:18:49:4B:0B:83:33:A5:6E:72 Authority key identifier: 09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98 Certificate issuer: /CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098 Certificate serial: 019C44A2AFF5A3F8AA9A9A1E7F8F9B8D584E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 23:00:38 +0000 Manifest this update: Mon 09 Feb 2026 23:00:38 +0000 Manifest next update: Tue 10 Feb 2026 23:00:38 +0000 Files and hashes: 1: CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl (hash: Vc5Fb9IuwmGmcJ7amIru72CvuhbV2dhKqk3VFyWbB9k=) 2: WnQNBeJ77W1lWNnHWWSvM1zW9Ss.roa (hash: 4WNmsHvXiTbK61q93ojoVESn4x/SoVpSfuMXeeNjBw0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:af:f5:a3:f8:aa:9a:9a:1e:7f:8f:9b:8d:58:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=094ea1cf4fdc3475c1f28d611c1f18fe027c1098 Validity Not Before: Feb 9 23:00:38 2026 GMT Not After : Feb 10 23:00:38 2026 GMT Subject: CN=1ae1ee5923b3cfe0ef8d7918494b0b8333a56e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:79:78:c3:3c:2c:95:f9:12:0d:56:e3:20: ab:cf:a7:cc:80:22:a9:c7:ac:47:f5:d1:26:f0:65: 57:5e:ff:a2:8a:8a:d6:a5:f0:cd:a6:c0:18:ce:b9: c6:88:34:3d:84:2e:07:ee:ed:ee:00:e2:49:a8:99: a5:75:ab:22:d2:f7:5c:87:f6:64:1f:11:47:9a:fd: 65:a4:b6:74:ea:60:7e:58:33:d6:95:72:aa:a8:c5: 38:76:48:c2:c6:ee:b0:9d:32:1f:d5:69:35:b0:c4: a6:27:9b:11:aa:f8:c0:36:1f:15:37:63:4c:c8:54: 9b:98:54:99:03:e7:eb:d3:0f:b2:8f:2a:12:a7:18: dc:49:e9:42:25:c1:de:7b:86:04:9f:67:4c:42:e5: 8a:3f:eb:70:e5:b0:b9:fc:87:1a:95:b5:3a:0b:bf: 17:94:e5:5f:91:9e:d7:34:a5:7a:53:ca:00:bb:e2: bc:81:db:9b:28:05:2e:37:d4:68:11:f5:0b:63:0f: 3d:53:44:c2:78:ec:a8:49:5c:5e:1b:50:43:7a:a7: fb:34:e5:8e:ed:b2:5f:85:90:f6:03:ee:b1:71:d6: 1d:13:b8:0d:cc:25:5b:ac:d3:ad:2b:ee:10:78:6a: 08:df:c5:99:f5:1b:93:de:7c:e5:df:06:84:9c:7f: 66:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:E1:EE:59:23:B3:CF:E0:EF:8D:79:18:49:4B:0B:83:33:A5:6E:72 X509v3 Authority Key Identifier: keyid:09:4E:A1:CF:4F:DC:34:75:C1:F2:8D:61:1C:1F:18:FE:02:7C:10:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/eae3d7-eee8-421e-80d9-982cce868ffa/1/CU6hz0_cNHXB8o1hHB8Y_gJ8EJg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:2a:c7:72:8a:e0:59:83:8d:f1:56:d7:d2:09:64:9e:d7:7e: ef:dc:dd:06:66:59:a8:e1:60:ad:38:43:b6:53:9e:ef:1b:ed: 4a:05:cc:da:41:e4:25:31:3b:40:f0:d2:a9:d3:b3:dd:ca:3f: f3:8c:09:ea:ad:1e:93:86:5f:c2:bd:ec:6c:9b:75:2b:d8:d4: 3a:b8:e7:15:b9:7e:6e:ca:5d:7c:50:9f:27:95:c9:cb:f2:ae: ac:a6:06:0c:18:d8:b7:2f:c0:c4:d7:63:9b:90:96:da:39:2e: 13:b9:e3:42:5b:f7:ed:66:96:ce:b9:e3:b6:fe:6e:26:68:34: 34:c2:16:76:4f:ed:3f:79:e6:6d:42:d3:89:8e:06:4b:67:b6: 33:ac:63:14:7e:b4:29:1e:8c:d6:0f:68:ef:54:69:f4:50:f4: 0f:29:d0:50:27:df:aa:cf:d2:73:fc:a1:a9:b3:59:f9:64:8f: 2f:21:ad:38:fb:50:53:dc:ca:62:1f:4f:c5:8e:a5:9c:28:86: 08:20:0a:6d:45:a0:b1:06:a7:1f:a9:04:80:e0:b6:d9:ba:d6: c0:78:b6:22:e1:8a:33:3b:15:67:88:6d:37:72:bb:18:fa:b6: ec:1e:16:66:1a:9c:f2:d9:53:88:3a:54:86:d5:b5:f9:d8:74: 83:ce:97:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEoq/1o/iqmpoef4+bjVhOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5NGVhMWNmNGZkYzM0NzVjMWYyOGQ2MTFjMWYxOGZlMDI3 YzEwOTgwHhcNMjYwMjA5MjMwMDM4WhcNMjYwMjEwMjMwMDM4WjAzMTEwLwYDVQQD EygxYWUxZWU1OTIzYjNjZmUwZWY4ZDc5MTg0OTRiMGI4MzMzYTU2ZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk15eMM8LJX5Eg1W4yCrz6fMgCKp x6xH9dEm8GVXXv+iiorWpfDNpsAYzrnGiDQ9hC4H7u3uAOJJqJmldasi0vdch/Zk HxFHmv1lpLZ06mB+WDPWlXKqqMU4dkjCxu6wnTIf1Wk1sMSmJ5sRqvjANh8VN2NM yFSbmFSZA+fr0w+yjyoSpxjcSelCJcHee4YEn2dMQuWKP+tw5bC5/IcalbU6C78X lOVfkZ7XNKV6U8oAu+K8gdubKAUuN9RoEfULYw89U0TCeOyoSVxeG1BDeqf7NOWO 7bJfhZD2A+6xcdYdE7gNzCVbrNOtK+4QeGoI38WZ9RuT3nzl3waEnH9mdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBrh7lkjs8/g7415GElLC4MzpW5yMB8GA1UdIwQY MBaAFAlOoc9P3DR1wfKNYRwfGP4CfBCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDkt OTgyY2NlODY4ZmZhLzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC9lYWUzZDctZWVlOC00MjFlLTgwZDktOTgyY2NlODY4ZmZh LzEvQ1U2aHowX2NOSFhCOG8xaEhCOFlfZ0o4RUpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSrHcorg WYON8VbX0glkntd+79zdBmZZqOFgrThDtlOe7xvtSgXM2kHkJTE7QPDSqdOz3co/ 84wJ6q0ek4Zfwr3sbJt1K9jUOrjnFbl+bspdfFCfJ5XJy/KurKYGDBjYty/AxNdj m5CW2jkuE7njQlv37WaWzrnjtv5uJmg0NMIWdk/tP3nmbULTiY4GS2e2M6xjFH60 KR6M1g9o71Rp9FD0DynQUCffqs/Sc/yhqbNZ+WSPLyGtOPtQU9zKYh9PxY6lnCiG CCAKbUWgsQanH6kEgOC22brWwHi2IuGKMzsVZ4htN3K7GPq27B4WZhqc8tlTiDpU htW1+dh0g86XFw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:13 2026 by rpki-client