This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft File: cG8KFhshe5zv03gc4mEZUb5Bnbo.mft (raw, json) Hash identifier: r9RkhTy0AK+BMy7zeNzLdVCwAGHhBvqgbQaP2iaaTEc= Subject key identifier: 65:35:ED:3E:1F:5E:24:80:A2:A5:E3:EC:08:F3:6B:8B:7E:CE:B6:EC Authority key identifier: 70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA Certificate issuer: /CN=706f0a161b217b9cefd3781ce2611951be419dba Certificate serial: 019C43C6DA3CC212A3AB712B1CD24A6480C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft Manifest number: 0946 Signing time: Mon 09 Feb 2026 19:00:31 +0000 Manifest this update: Mon 09 Feb 2026 19:00:31 +0000 Manifest next update: Tue 10 Feb 2026 19:00:31 +0000 Files and hashes: 1: KhzaAbAn3_Qsuar7p5qwswlTC_o.roa (hash: t3+nQzkQvp951a+38EJDZpoSf5luy0cimxl8a8ewvNA=) 2: cG8KFhshe5zv03gc4mEZUb5Bnbo.crl (hash: IZaY4gowHDDEUNHypTYNnELmSjrAdGISLj6ZwywTG2U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:da:3c:c2:12:a3:ab:71:2b:1c:d2:4a:64:80:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706f0a161b217b9cefd3781ce2611951be419dba Validity Not Before: Feb 9 19:00:31 2026 GMT Not After : Feb 10 19:00:31 2026 GMT Subject: CN=6535ed3e1f5e2480a2a5e3ec08f36b8b7eceb6ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:da:30:9c:c4:b9:92:0d:da:38:61:5f:11:55: 9b:17:b1:de:7f:08:00:13:82:9d:77:ed:78:f9:62: df:55:bf:c2:8f:a9:f9:fb:43:81:af:37:cd:73:13: 46:f3:c3:a6:8d:c0:e2:80:ac:18:c3:32:11:48:de: 80:0d:44:7e:7f:3a:44:71:a4:5c:b5:c7:97:4a:8f: e0:cc:cd:28:12:a1:7b:c0:5e:d7:55:94:00:f1:ae: 24:6f:b3:5f:e9:e0:d2:9a:c0:bd:c8:b1:1f:a7:72: b1:2e:93:bc:56:a2:18:41:34:21:fd:07:1b:c1:64: fa:f3:f4:ce:4f:36:69:f8:61:c6:18:c5:4e:ab:97: a1:2d:c0:46:09:20:cd:c1:b3:a4:b1:a9:32:6b:61: b8:54:77:43:f0:4e:04:47:ee:16:b8:d0:94:8f:01: f4:d4:59:4b:7a:57:e6:71:de:ab:b7:6b:b9:2e:e5: a1:c0:88:2a:bd:91:20:dc:f2:41:97:77:1c:26:da: 01:06:ba:3f:f7:68:ce:ba:fe:d6:87:c8:54:ab:e8: c1:15:db:a4:f6:59:9d:b4:cb:39:63:11:27:89:44: 28:1b:32:c1:8b:ee:3a:cf:93:03:fa:3f:6c:e0:be: 82:8a:98:82:02:d8:a4:8e:59:18:77:6d:b3:b3:b7: 0a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:35:ED:3E:1F:5E:24:80:A2:A5:E3:EC:08:F3:6B:8B:7E:CE:B6:EC X509v3 Authority Key Identifier: keyid:70:6F:0A:16:1B:21:7B:9C:EF:D3:78:1C:E2:61:19:51:BE:41:9D:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG8KFhshe5zv03gc4mEZUb5Bnbo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fc0a4a-a74a-4c2b-833b-1049c997bc7a/1/cG8KFhshe5zv03gc4mEZUb5Bnbo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:35:0f:09:7d:69:aa:69:a5:b0:8c:27:de:87:2e:b0:68:57: 03:15:f4:50:61:4d:17:bf:3b:1e:52:c5:f0:e4:cc:01:46:57: 10:dc:f5:c6:8c:4f:ba:90:82:e8:89:cb:3f:ad:4b:3a:17:a7: fc:a6:b0:ea:66:5e:19:07:04:a6:47:f5:55:77:38:cc:ab:cd: be:55:a5:d4:cd:34:6a:4f:07:1a:50:30:31:ed:5e:22:f9:e2: ab:6c:a8:63:ec:2d:d4:0b:3f:39:c6:4f:47:00:41:a7:cd:f0: 7f:f2:e4:b4:fa:f3:c6:0b:a4:a3:69:d3:88:07:30:79:bc:a7: aa:35:71:c8:2b:86:d8:07:c9:a6:47:ee:97:78:a1:91:d9:d0: 21:7a:5d:3e:ac:c1:5a:07:5a:af:b9:34:8e:93:80:7f:e3:e7: 13:e6:04:fc:57:40:c0:61:03:6c:a9:97:d1:40:0d:eb:75:e6: fa:50:25:3c:10:5b:dd:b7:7c:7a:78:71:4c:62:54:c4:00:07: 82:d9:19:1a:98:21:36:4b:6a:78:81:35:53:a3:94:47:f3:56: 93:f5:63:1e:fa:02:65:99:fa:8f:d6:62:26:e5:b6:86:4c:d7: ea:f3:e5:c3:fd:1e:48:e3:17:14:59:d6:f3:2b:66:7b:e6:d8: 24:13:82:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxto8whKjq3ErHNJKZIDIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmYwYTE2MWIyMTdiOWNlZmQzNzgxY2UyNjExOTUxYmU0 MTlkYmEwHhcNMjYwMjA5MTkwMDMxWhcNMjYwMjEwMTkwMDMxWjAzMTEwLwYDVQQD Eyg2NTM1ZWQzZTFmNWUyNDgwYTJhNWUzZWMwOGYzNmI4YjdlY2ViNmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdownMS5kg3aOGFfEVWbF7HefwgA E4Kdd+14+WLfVb/Cj6n5+0OBrzfNcxNG88OmjcDigKwYwzIRSN6ADUR+fzpEcaRc tceXSo/gzM0oEqF7wF7XVZQA8a4kb7Nf6eDSmsC9yLEfp3KxLpO8VqIYQTQh/Qcb wWT68/TOTzZp+GHGGMVOq5ehLcBGCSDNwbOksakya2G4VHdD8E4ER+4WuNCUjwH0 1FlLelfmcd6rt2u5LuWhwIgqvZEg3PJBl3ccJtoBBro/92jOuv7Wh8hUq+jBFduk 9lmdtMs5YxEniUQoGzLBi+46z5MD+j9s4L6CipiCAtikjlkYd22zs7cKZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGU17T4fXiSAoqXj7Ajza4t+zrbsMB8GA1UdIwQY MBaAFHBvChYbIXuc79N4HOJhGVG+QZ26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2It MTA0OWM5OTdiYzdhLzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9mYzBhNGEtYTc0YS00YzJiLTgzM2ItMTA0OWM5OTdiYzdh LzEvY0c4S0Zoc2hlNXp2MDNnYzRtRVpVYjVCbmJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASDUPCX1p qmmlsIwn3ocusGhXAxX0UGFNF787HlLF8OTMAUZXENz1xoxPupCC6InLP61LOhen /Kaw6mZeGQcEpkf1VXc4zKvNvlWl1M00ak8HGlAwMe1eIvniq2yoY+wt1As/OcZP RwBBp83wf/LktPrzxguko2nTiAcwebynqjVxyCuG2AfJpkful3ihkdnQIXpdPqzB Wgdar7k0jpOAf+PnE+YE/FdAwGEDbKmX0UAN63Xm+lAlPBBb3bd8enhxTGJUxAAH gtkZGpghNktqeIE1U6OUR/NWk/VjHvoCZZn6j9ZiJuW2hkzX6vPlw/0eSOMXFFnW 8ytme+bYJBOC5g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:05 2026 by rpki-client