This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft File: CQggTXz1vEqrOP-jnaOmge0he9Q.mft (raw, json) Hash identifier: vdBlktbYXSd+NfcSxAYWRQ4nvZ0aplBNxpe7Trod2t0= Subject key identifier: 10:BA:01:11:16:19:2F:9A:3B:FA:4A:99:FD:0A:09:43:68:D2:6A:11 Authority key identifier: 09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4 Certificate issuer: /CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4 Certificate serial: 019C43904842770153EEF42C8E31A2E4CD8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 18:00:55 +0000 Manifest this update: Mon 09 Feb 2026 18:00:55 +0000 Manifest next update: Tue 10 Feb 2026 18:00:55 +0000 Files and hashes: 1: CQggTXz1vEqrOP-jnaOmge0he9Q.crl (hash: LqtZaCR3nq1JXxrTejaih8/rV9ORAPu0+gu+7vSpxTs=) 2: l99T-FK5yYY4px9pdlKhIlbZPRc.roa (hash: p/Hh7r12y6v1GNP3LrB2mSwj7gic+vMWivhi5TkoB/I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:48:42:77:01:53:ee:f4:2c:8e:31:a2:e4:cd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0908204d7cf5bc4aab38ffa39da3a681ed217bd4 Validity Not Before: Feb 9 18:00:55 2026 GMT Not After : Feb 10 18:00:55 2026 GMT Subject: CN=10ba011116192f9a3bfa4a99fd0a094368d26a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:79:e8:48:cd:78:30:dc:16:1b:2c:cc:19:4e: c6:55:f2:bb:b1:49:14:bf:ef:33:79:a2:5f:d8:49: 04:50:70:5e:99:03:fc:69:99:0e:61:bc:61:79:ed: d6:49:e7:1d:77:09:f4:45:d4:07:d1:e7:28:e8:fa: 63:eb:0f:3a:f1:90:df:56:b2:cd:08:5a:ff:65:52: 32:09:7e:58:22:8c:67:12:54:d0:96:27:33:fe:fb: d7:5f:0e:8b:02:9e:a7:72:17:6e:8c:db:c7:ad:32: 89:5c:5c:24:f1:8f:48:db:b6:7d:c0:41:4f:3e:e8: a8:03:6f:18:9e:ba:de:74:f9:6d:3d:0f:2a:97:60: d5:c9:f3:56:c6:1e:fb:12:ee:9b:23:0a:74:bc:17: 02:d2:32:ff:aa:37:ca:bd:71:78:c4:2b:53:7a:7c: 2f:1f:9a:67:2a:a4:09:de:c3:90:a0:a4:49:a6:9b: 5d:77:d7:8b:70:cf:13:f5:a5:e2:89:32:8d:27:32: 95:b7:86:3b:45:83:40:af:68:0e:47:4c:90:ce:f8: 0e:f4:9e:34:a0:02:da:db:92:22:fa:77:9f:59:fe: 72:a1:bb:84:ac:82:06:83:0c:0d:4b:df:1f:aa:ea: a6:9b:a4:b0:a3:65:15:72:44:31:2f:5a:00:7b:58: 68:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:01:11:16:19:2F:9A:3B:FA:4A:99:FD:0A:09:43:68:D2:6A:11 X509v3 Authority Key Identifier: keyid:09:08:20:4D:7C:F5:BC:4A:AB:38:FF:A3:9D:A3:A6:81:ED:21:7B:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQggTXz1vEqrOP-jnaOmge0he9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/db9e58-ee42-4a10-8222-8823f111df07/1/CQggTXz1vEqrOP-jnaOmge0he9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d3:3a:98:31:19:29:cc:ad:77:7c:99:97:c5:70:b8:90:d9: 64:5a:37:f6:22:a0:5c:31:d1:7f:da:80:b0:03:bd:60:c6:5d: e5:65:2e:e1:b7:3b:99:0d:84:86:49:cc:22:cf:e3:09:38:47: bf:df:a8:c9:1a:18:e3:d9:25:18:6b:42:3d:0d:23:55:60:b1: 6f:1b:1b:51:69:15:51:35:c3:64:d8:aa:6a:10:77:9f:5c:7b: 7f:69:6a:50:34:dd:41:47:72:89:28:89:ba:5d:f0:e3:06:91: 81:1f:48:0c:c7:a0:43:3a:b0:be:62:fe:6a:ec:ca:3e:a4:c6: d1:5b:1c:60:91:e1:f9:62:27:ce:43:1c:04:04:09:81:9e:77: 1c:36:a4:b9:1c:e0:d6:48:e8:a0:ed:f3:66:ba:3a:ae:34:b6: 56:48:a5:dc:a3:3c:ac:e6:88:42:45:f2:8e:02:e5:5f:7e:f6: 56:28:f1:a3:d0:a3:ed:e7:0b:87:c7:cc:48:fc:1c:4e:8c:80: 5f:39:17:7f:95:51:d3:b9:48:9b:f3:33:ab:35:14:89:b0:e6: dc:c0:1d:7f:92:08:3e:2b:2e:31:ed:cf:30:e9:e7:bb:9d:74: 10:2a:94:67:eb:49:3b:ea:f8:87:29:e7:46:47:0f:d7:87:26: cc:f2:02:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkEhCdwFT7vQsjjGi5M2NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MDgyMDRkN2NmNWJjNGFhYjM4ZmZhMzlkYTNhNjgxZWQy MTdiZDQwHhcNMjYwMjA5MTgwMDU1WhcNMjYwMjEwMTgwMDU1WjAzMTEwLwYDVQQD EygxMGJhMDExMTE2MTkyZjlhM2JmYTRhOTlmZDBhMDk0MzY4ZDI2YTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXnoSM14MNwWGyzMGU7GVfK7sUkU v+8zeaJf2EkEUHBemQP8aZkOYbxhee3WSecddwn0RdQH0eco6Ppj6w868ZDfVrLN CFr/ZVIyCX5YIoxnElTQlicz/vvXXw6LAp6nchdujNvHrTKJXFwk8Y9I27Z9wEFP PuioA28YnrredPltPQ8ql2DVyfNWxh77Eu6bIwp0vBcC0jL/qjfKvXF4xCtTenwv H5pnKqQJ3sOQoKRJpptdd9eLcM8T9aXiiTKNJzKVt4Y7RYNAr2gOR0yQzvgO9J40 oALa25Ii+nefWf5yobuErIIGgwwNS98fquqmm6Swo2UVckQxL1oAe1hoYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC6AREWGS+aO/pKmf0KCUNo0moRMB8GA1UdIwQY MBaAFAkIIE189bxKqzj/o52jpoHtIXvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjIt ODgyM2YxMTFkZjA3LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9kYjllNTgtZWU0Mi00YTEwLTgyMjItODgyM2YxMTFkZjA3 LzEvQ1FnZ1RYejF2RXFyT1Atam5hT21nZTBoZTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp9M6mDEZ Kcytd3yZl8VwuJDZZFo39iKgXDHRf9qAsAO9YMZd5WUu4bc7mQ2EhknMIs/jCThH v9+oyRoY49klGGtCPQ0jVWCxbxsbUWkVUTXDZNiqahB3n1x7f2lqUDTdQUdyiSiJ ul3w4waRgR9IDMegQzqwvmL+auzKPqTG0VscYJHh+WInzkMcBAQJgZ53HDakuRzg 1kjooO3zZro6rjS2Vkil3KM8rOaIQkXyjgLlX372Vijxo9Cj7ecLh8fMSPwcToyA XzkXf5VR07lIm/MzqzUUibDm3MAdf5IIPisuMe3PMOnnu510ECqUZ+tJO+r4hynn RkcP14cmzPICtQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:13:31 2026 by rpki-client