This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft File: cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft (raw, json) Hash identifier: JTv/rJPeWRUg3/ISrQb5W5OR0Wc9nlYDhoB9bOv5nSg= Subject key identifier: DD:4F:AD:E4:1F:98:2E:46:25:B7:17:86:2B:C7:ED:C7:48:B0:EE:83 Authority key identifier: 71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 Certificate issuer: /CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Certificate serial: 019C4246B7D45EF41754D293FB87FB9040A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft Manifest number: 0954 Signing time: Mon 09 Feb 2026 12:00:56 +0000 Manifest this update: Mon 09 Feb 2026 12:00:56 +0000 Manifest next update: Tue 10 Feb 2026 12:00:56 +0000 Files and hashes: 1: T-RVDwu2R5GREmXjp9oK0pO-emk.roa (hash: NLaXBrxUU7l8TdptUYXzcoGWDubvJljOT1d1MNSpjzA=) 2: cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl (hash: uaDf9YkNX7ReFVY2oQEJz4pCn+awayaXb5vgbJKRO0E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:b7:d4:5e:f4:17:54:d2:93:fb:87:fb:90:40:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b2b04ff9b72ebfbeb918385233e028c8f3fdf1 Validity Not Before: Feb 9 12:00:56 2026 GMT Not After : Feb 10 12:00:56 2026 GMT Subject: CN=dd4fade41f982e4625b717862bc7edc748b0ee83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e2:b4:d1:dd:4a:bd:d5:d4:75:fe:37:35:d7: 12:6c:60:40:21:c6:7f:47:1c:02:a8:5a:2e:83:9a: 7a:8c:30:a3:22:e7:ae:fd:89:e1:bf:55:cb:29:09: 8b:31:2a:d3:18:38:96:a7:9a:86:22:b9:d6:ba:f3: 69:e2:ba:8a:87:64:c0:0b:fd:31:f3:30:52:a7:5e: 41:9d:a9:b4:34:7b:e7:92:a2:f6:b7:4d:bf:e0:61: bc:f7:cd:a3:0e:64:d1:a9:3a:a1:ab:47:50:7b:a0: d3:60:b9:95:e0:a3:9c:81:da:b9:2b:99:f1:5d:c8: de:c3:55:4d:51:5a:7e:db:bc:6b:5f:2e:81:f3:24: 66:13:c4:0d:f9:04:dc:ef:cb:2b:af:29:cc:3b:0f: e4:1b:9e:37:d3:bd:57:98:ca:6d:70:6e:e7:59:0b: 32:c8:6a:e7:67:9b:9f:75:8f:d1:11:da:f3:c9:d8: 7b:aa:12:d1:0a:11:3e:24:45:53:98:0d:01:b9:a0: c8:a9:66:b3:3f:23:55:e6:de:9c:f5:29:8f:d7:a8: ae:77:2e:2f:f6:9d:66:53:d5:ab:e9:11:48:17:36: 0b:b8:37:95:8c:9c:63:30:6a:58:68:fa:14:86:9f: 4e:79:4e:8c:45:e3:6b:04:9f:bf:bc:af:76:f8:de: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4F:AD:E4:1F:98:2E:46:25:B7:17:86:2B:C7:ED:C7:48:B0:EE:83 X509v3 Authority Key Identifier: keyid:71:B2:B0:4F:F9:B7:2E:BF:BE:B9:18:38:52:33:E0:28:C8:F3:FD:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbKwT_m3Lr--uRg4UjPgKMjz_fE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/87e666-7248-4240-b4e4-959559b96f87/1/cbKwT_m3Lr--uRg4UjPgKMjz_fE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:7b:99:55:36:ba:a3:13:21:49:d7:e3:76:a1:e5:ef:f2:7c: 26:df:07:82:0d:44:17:0c:74:43:3d:2b:e4:77:e4:ca:62:8c: e9:75:fb:98:34:37:63:23:68:ea:92:3c:17:a7:76:d3:ab:48: 64:3e:74:74:1d:44:7b:58:53:df:3c:ed:fe:46:e8:9d:4b:fa: 8f:22:07:23:4c:b8:8a:0c:c9:cc:5c:da:e9:99:d8:8d:9f:b7: 9d:68:cc:de:5f:02:97:dc:ca:9b:d2:19:6f:5f:e5:64:83:97: 7b:f6:61:f0:3d:97:8b:3a:40:46:05:56:db:64:82:65:fd:19: a8:bf:8c:83:81:79:b1:c1:95:06:b4:e2:52:ad:9c:7e:62:03: 31:cb:ba:f6:b2:32:c5:fe:97:bb:76:e3:41:76:e4:25:31:a4: 63:33:3a:be:e6:da:62:76:6a:cf:e8:42:b0:44:db:3f:47:f4: 29:1a:92:cb:91:db:d8:63:ec:bd:dd:02:86:f0:ce:10:cc:70: 50:83:a3:3e:10:09:a4:20:fa:ff:64:f2:8e:64:d7:54:77:70: 66:14:e6:77:3b:fc:8f:4f:cc:2b:83:cc:b1:ab:98:7c:bb:09: ac:04:36:c2:d0:18:44:d1:0d:4e:ca:3f:3b:99:06:a4:9d:0d: 5b:aa:15:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRrfUXvQXVNKT+4f7kECnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjJiMDRmZjliNzJlYmZiZWI5MTgzODUyMzNlMDI4Yzhm M2ZkZjEwHhcNMjYwMjA5MTIwMDU2WhcNMjYwMjEwMTIwMDU2WjAzMTEwLwYDVQQD EyhkZDRmYWRlNDFmOTgyZTQ2MjViNzE3ODYyYmM3ZWRjNzQ4YjBlZTgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuK00d1KvdXUdf43NdcSbGBAIcZ/ RxwCqFoug5p6jDCjIueu/Ynhv1XLKQmLMSrTGDiWp5qGIrnWuvNp4rqKh2TAC/0x 8zBSp15Bnam0NHvnkqL2t02/4GG8982jDmTRqTqhq0dQe6DTYLmV4KOcgdq5K5nx Xcjew1VNUVp+27xrXy6B8yRmE8QN+QTc78srrynMOw/kG543071XmMptcG7nWQsy yGrnZ5ufdY/REdrzydh7qhLRChE+JEVTmA0BuaDIqWazPyNV5t6c9SmP16iudy4v 9p1mU9Wr6RFIFzYLuDeVjJxjMGpYaPoUhp9OeU6MReNrBJ+/vK92+N79FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1PreQfmC5GJbcXhivH7cdIsO6DMB8GA1UdIwQY MBaAFHGysE/5ty6/vrkYOFIz4CjI8/3xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQt OTU5NTU5Yjk2Zjg3LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC84N2U2NjYtNzI0OC00MjQwLWI0ZTQtOTU5NTU5Yjk2Zjg3 LzEvY2JLd1RfbTNMci0tdVJnNFVqUGdLTWp6X2ZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3uZVTa6 oxMhSdfjdqHl7/J8Jt8Hgg1EFwx0Qz0r5HfkymKM6XX7mDQ3YyNo6pI8F6d206tI ZD50dB1Ee1hT3zzt/kbonUv6jyIHI0y4igzJzFza6ZnYjZ+3nWjM3l8Cl9zKm9IZ b1/lZIOXe/Zh8D2XizpARgVW22SCZf0ZqL+Mg4F5scGVBrTiUq2cfmIDMcu69rIy xf6Xu3bjQXbkJTGkYzM6vubaYnZqz+hCsETbP0f0KRqSy5Hb2GPsvd0ChvDOEMxw UIOjPhAJpCD6/2TyjmTXVHdwZhTmdzv8j0/MK4PMsauYfLsJrAQ2wtAYRNENTso/ O5kGpJ0NW6oVgg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:27 2026 by rpki-client