This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft File: cxwTgoWLDclamtvqRyizH54iwNg.mft (raw, json) Hash identifier: Q9LKPCGl9Eup2+VeZE9q2H/mN1Qd226h6tJZTEzA5Js= Subject key identifier: 9C:68:D6:1B:7F:73:7E:30:B9:6F:3E:56:4D:11:BC:21:D3:1C:9B:25 Authority key identifier: 73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 Certificate issuer: /CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Certificate serial: 019C416A5AD0A3FFC3ECDCF12962FF398BCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft Manifest number: 096D Signing time: Mon 09 Feb 2026 08:00:14 +0000 Manifest this update: Mon 09 Feb 2026 08:00:14 +0000 Manifest next update: Tue 10 Feb 2026 08:00:14 +0000 Files and hashes: 1: cxwTgoWLDclamtvqRyizH54iwNg.crl (hash: iIUgEvzvmTmFtQNMG5mnKIR5/F3xaZCkRa2Xf3/m17o=) 2: eCfciMd8WvfOpLwSmZnFxhRFtP8.roa (hash: mnu1L5F4WUL4nlzWuT0asBSz38ZR2rhi6ZOxZOIl63c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:5a:d0:a3:ff:c3:ec:dc:f1:29:62:ff:39:8b:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=731c1382858b0dc95a9adbea4728b31f9e22c0d8 Validity Not Before: Feb 9 08:00:14 2026 GMT Not After : Feb 10 08:00:14 2026 GMT Subject: CN=9c68d61b7f737e30b96f3e564d11bc21d31c9b25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:13:b0:69:d7:9d:50:33:74:c9:9c:14:e9:4a: 24:62:fd:01:9e:fd:6e:98:4b:de:d7:47:a0:70:92: e8:11:03:0a:ff:8b:a5:5c:b2:dc:c9:5b:3e:e4:d9: d3:e6:40:58:8a:b2:cb:5d:1e:b0:c2:cf:dc:21:58: 20:94:d7:32:d3:34:75:2b:b4:b0:85:65:4a:40:f7: a3:3d:9b:d2:c4:27:0b:21:d7:f6:69:b2:6d:a0:49: 4d:c3:6f:59:42:1a:fd:bb:4f:d9:2c:2b:a3:61:00: 06:be:7a:98:12:97:f5:d1:61:a0:75:db:51:dc:14: 0e:0f:c1:3e:82:28:50:cd:db:86:ce:32:fa:e3:03: 7c:00:33:1c:cc:6c:4f:c1:3f:ba:09:b2:55:cb:d8: b3:a5:cf:47:25:52:ea:0b:d1:d2:e8:1e:50:a6:40: 29:9d:c0:0c:ea:0d:b1:a1:78:91:60:af:0e:9a:b4: b0:d5:e0:6d:29:09:01:d5:67:65:4e:5a:0b:c9:76: a1:03:7b:10:d2:ef:b6:f7:ce:8b:c5:49:d8:93:32: ff:dd:1c:37:46:b4:88:fd:0b:5b:39:7b:2b:6a:1c: b1:8f:5e:7e:30:5b:c9:4f:a9:15:c2:af:0c:af:2e: 51:06:5b:0f:ed:af:7c:85:0d:8e:6e:f1:b6:c4:75: d8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:68:D6:1B:7F:73:7E:30:B9:6F:3E:56:4D:11:BC:21:D3:1C:9B:25 X509v3 Authority Key Identifier: keyid:73:1C:13:82:85:8B:0D:C9:5A:9A:DB:EA:47:28:B3:1F:9E:22:C0:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cxwTgoWLDclamtvqRyizH54iwNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/172e0b-8cbb-402e-8f2c-8595b4500884/1/cxwTgoWLDclamtvqRyizH54iwNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fb:eb:a5:c0:ef:7d:d8:33:a3:72:a0:fd:80:dd:09:a8:f4: 20:c5:86:db:82:56:78:2b:49:b6:97:b6:60:59:df:a3:c2:90: 4d:f2:3b:97:23:56:15:6e:80:62:59:bf:57:21:d5:d8:e2:e0: a5:0d:fe:4e:24:fb:20:3b:0d:1f:55:a1:e3:6b:1f:be:54:42: b6:31:eb:a0:9f:9e:6a:ba:84:fa:ad:48:82:91:57:8f:5d:62: 3d:98:b5:8a:20:33:cf:5b:a4:c6:2c:e2:a1:dd:57:f8:d9:ae: 85:57:7b:43:38:0f:50:20:f0:6b:10:ce:06:cc:3d:b3:dd:28: 84:0e:01:e2:51:26:e2:7a:88:12:be:2c:6c:5d:c6:f8:fd:f4: a4:c2:29:13:00:0c:11:05:76:84:7b:94:ba:e7:86:e8:2d:c8: dd:f2:48:2e:f0:6c:37:f3:ed:4d:46:b2:c3:59:df:be:72:32: d0:d6:4e:7f:c1:d2:43:29:12:59:d1:9a:2d:a8:f7:fe:42:0d: ee:65:a3:01:f7:0c:c4:00:be:83:4e:7a:bd:1f:cd:16:88:ff: 55:5b:dd:ef:6f:4f:b4:64:71:cc:19:4f:8f:44:e2:1b:a2:62: 93:e5:58:ab:fd:fa:d3:b5:46:77:54:a6:5f:5f:4f:5d:72:9d: 28:eb:21:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBalrQo//D7NzxKWL/OYvMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczMWMxMzgyODU4YjBkYzk1YTlhZGJlYTQ3MjhiMzFmOWUy MmMwZDgwHhcNMjYwMjA5MDgwMDE0WhcNMjYwMjEwMDgwMDE0WjAzMTEwLwYDVQQD Eyg5YzY4ZDYxYjdmNzM3ZTMwYjk2ZjNlNTY0ZDExYmMyMWQzMWM5YjI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqROwadedUDN0yZwU6UokYv0Bnv1u mEve10egcJLoEQMK/4ulXLLcyVs+5NnT5kBYirLLXR6wws/cIVgglNcy0zR1K7Sw hWVKQPejPZvSxCcLIdf2abJtoElNw29ZQhr9u0/ZLCujYQAGvnqYEpf10WGgddtR 3BQOD8E+gihQzduGzjL64wN8ADMczGxPwT+6CbJVy9izpc9HJVLqC9HS6B5QpkAp ncAM6g2xoXiRYK8OmrSw1eBtKQkB1WdlTloLyXahA3sQ0u+2986LxUnYkzL/3Rw3 RrSI/QtbOXsrahyxj15+MFvJT6kVwq8Mry5RBlsP7a98hQ2ObvG2xHXY9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJxo1ht/c34wuW8+Vk0RvCHTHJslMB8GA1UdIwQY MBaAFHMcE4KFiw3JWprb6kcosx+eIsDYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMt ODU5NWI0NTAwODg0LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xNzJlMGItOGNiYi00MDJlLThmMmMtODU5NWI0NTAwODg0 LzEvY3h3VGdvV0xEY2xhbXR2cVJ5aXpINTRpd05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPvrpcDv fdgzo3Kg/YDdCaj0IMWG24JWeCtJtpe2YFnfo8KQTfI7lyNWFW6AYlm/VyHV2OLg pQ3+TiT7IDsNH1Wh42sfvlRCtjHroJ+earqE+q1IgpFXj11iPZi1iiAzz1ukxizi od1X+NmuhVd7QzgPUCDwaxDOBsw9s90ohA4B4lEm4nqIEr4sbF3G+P30pMIpEwAM EQV2hHuUuueG6C3I3fJILvBsN/PtTUayw1nfvnIy0NZOf8HSQykSWdGaLaj3/kIN 7mWjAfcMxAC+g056vR/NFoj/VVvd729PtGRxzBlPj0TiG6Jik+VYq/3607VGd1Sm X19PXXKdKOshaw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:01 2026 by rpki-client