This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft File: CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft (raw, json) Hash identifier: cNtPBxZpSwmvLXwWvsYU+2olzgRZIawkZAkivVm8qW0= Subject key identifier: 02:5F:D3:6E:9A:92:BC:03:16:88:0B:7F:3F:28:39:37:D9:21:88:60 Authority key identifier: 08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 Certificate issuer: /CN=08819c27a5be3d2db222b05637447ed6e8324873 Certificate serial: 019C427D6A4AC38489FDEA0DF363BAD96BFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft Manifest number: 1551 Signing time: Mon 09 Feb 2026 13:00:41 +0000 Manifest this update: Mon 09 Feb 2026 13:00:41 +0000 Manifest next update: Tue 10 Feb 2026 13:00:41 +0000 Files and hashes: 1: CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl (hash: 8TfKHK6aL+Kcgh5wbypDHMZl9W6vj7PEVt0LodzVehs=) 2: IQDg8XUunRwYK-C6GvbnJQ7EHM0.roa (hash: DFgB9yi6JU5q5PfQOPOS6steUe02MkhWX55KVlM+wDo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:6a:4a:c3:84:89:fd:ea:0d:f3:63:ba:d9:6b:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08819c27a5be3d2db222b05637447ed6e8324873 Validity Not Before: Feb 9 13:00:41 2026 GMT Not After : Feb 10 13:00:41 2026 GMT Subject: CN=025fd36e9a92bc0316880b7f3f283937d9218860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:89:73:7a:89:92:ab:4c:86:ea:c4:a1:5a:a3: ca:a4:7e:b0:f6:25:ed:19:14:23:0d:c4:5b:0b:ad: d9:e2:35:fc:ed:b0:59:d8:71:19:b4:ff:fa:02:f6: 1f:e6:43:bd:8f:7a:47:4a:87:49:8f:5d:a5:47:e5: 45:16:f3:0c:9b:3f:29:e4:43:f2:be:da:b1:ed:3a: b5:42:18:bc:ae:9b:4a:29:50:ca:d3:ef:1d:2f:53: 29:46:50:df:2e:54:e8:a4:e9:fc:b7:e2:2b:2b:5d: 2f:03:7b:72:32:e5:1c:7c:91:c7:28:79:bf:2b:fa: 87:8b:8f:55:0a:b3:8b:c9:b5:28:82:ef:6d:ca:79: d8:5b:4b:eb:15:0b:34:fb:7a:2b:b1:94:93:39:c0: 1b:2c:93:45:3b:30:b6:70:a2:36:f0:68:c9:46:5b: 38:a2:18:51:d0:0b:14:29:0a:44:b9:6b:7e:39:20: 15:e1:0e:a4:1f:87:49:68:d4:d0:94:e7:9d:7d:85: a0:ac:fd:44:b2:ea:d2:5f:ad:a0:1e:1c:a9:1e:9f: 7e:57:2b:25:ab:b2:b1:59:7e:0b:83:f9:ac:76:39: 07:43:28:de:0d:32:f8:53:b4:6f:8c:68:86:6d:0b: 7c:02:53:83:41:47:18:ce:e4:a2:27:45:e2:3f:f5: f0:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:5F:D3:6E:9A:92:BC:03:16:88:0B:7F:3F:28:39:37:D9:21:88:60 X509v3 Authority Key Identifier: keyid:08:81:9C:27:A5:BE:3D:2D:B2:22:B0:56:37:44:7E:D6:E8:32:48:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIGcJ6W-PS2yIrBWN0R-1ugySHM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/ad18a0-b32c-4fcb-be9c-1caf0611374d/1/CIGcJ6W-PS2yIrBWN0R-1ugySHM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:0d:d9:dc:fd:42:9c:fb:84:4b:6d:25:04:f8:7f:fb:a4:ae: 2b:5a:8e:50:b1:55:25:32:e9:80:df:c3:16:d8:29:94:d0:68: cc:2a:2a:ba:15:02:b1:9c:94:32:28:63:ec:2b:2c:2a:8c:ab: 1c:1a:25:e9:07:05:93:bd:a7:95:b1:b6:50:af:4c:3a:0a:14: f7:e0:f9:c9:ea:83:9e:fe:18:fd:a7:ca:6c:8c:a0:c3:e2:35: ff:19:a5:35:e4:79:ae:ab:d9:42:46:4b:85:4e:16:f4:8f:a0: 9e:13:e3:50:54:3f:c8:46:c4:de:1c:a1:4a:70:da:b1:15:91: 77:f1:ca:5b:d8:30:1a:8a:47:9d:b7:d0:df:ce:18:2e:42:64: c9:d7:34:2d:ce:5c:08:42:c1:a6:11:a5:92:71:09:93:df:90: 10:ea:d1:bf:fb:7c:57:87:a0:86:c0:d4:ed:6b:b2:1b:c5:fd: ac:2a:e8:a5:b9:0c:cb:6e:51:db:83:d6:a7:ec:f2:8e:00:b0: 3e:68:98:6b:c2:d5:f3:ca:05:cc:45:50:aa:fe:e4:f2:71:90: b3:ee:ce:84:22:c6:05:01:ff:25:8c:1c:6d:17:40:a2:bf:57: 6c:46:4b:1d:ec:d0:3b:e9:bb:73:88:38:28:b0:3c:b1:a8:a4: f3:6e:39:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWpKw4SJ/eoN82O62Wv8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ODE5YzI3YTViZTNkMmRiMjIyYjA1NjM3NDQ3ZWQ2ZTgz MjQ4NzMwHhcNMjYwMjA5MTMwMDQxWhcNMjYwMjEwMTMwMDQxWjAzMTEwLwYDVQQD EygwMjVmZDM2ZTlhOTJiYzAzMTY4ODBiN2YzZjI4MzkzN2Q5MjE4ODYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzolzeomSq0yG6sShWqPKpH6w9iXt GRQjDcRbC63Z4jX87bBZ2HEZtP/6AvYf5kO9j3pHSodJj12lR+VFFvMMmz8p5EPy vtqx7Tq1Qhi8rptKKVDK0+8dL1MpRlDfLlTopOn8t+IrK10vA3tyMuUcfJHHKHm/ K/qHi49VCrOLybUogu9tynnYW0vrFQs0+3orsZSTOcAbLJNFOzC2cKI28GjJRls4 ohhR0AsUKQpEuWt+OSAV4Q6kH4dJaNTQlOedfYWgrP1EsurSX62gHhypHp9+Vysl q7KxWX4Lg/msdjkHQyjeDTL4U7RvjGiGbQt8AlODQUcYzuSiJ0XiP/XwFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJf026akrwDFogLfz8oOTfZIYhgMB8GA1UdIwQY MBaAFAiBnCelvj0tsiKwVjdEftboMkhzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMt MWNhZjA2MTEzNzRkLzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9hZDE4YTAtYjMyYy00ZmNiLWJlOWMtMWNhZjA2MTEzNzRk LzEvQ0lHY0o2Vy1QUzJ5SXJCV04wUi0xdWd5U0hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABA3Z3P1C nPuES20lBPh/+6SuK1qOULFVJTLpgN/DFtgplNBozCoquhUCsZyUMihj7CssKoyr HBol6QcFk72nlbG2UK9MOgoU9+D5yeqDnv4Y/afKbIygw+I1/xmlNeR5rqvZQkZL hU4W9I+gnhPjUFQ/yEbE3hyhSnDasRWRd/HKW9gwGopHnbfQ384YLkJkydc0Lc5c CELBphGlknEJk9+QEOrRv/t8V4eghsDU7WuyG8X9rCropbkMy25R24PWp+zyjgCw PmiYa8LV88oFzEVQqv7k8nGQs+7OhCLGBQH/JYwcbRdAor9XbEZLHezQO+m7c4g4 KLA8saik8245VQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:23 2026 by rpki-client