This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft File: CkvR0w9yNc1xc5wEIxDcJggHOPY.mft (raw, json) Hash identifier: vqf4YHcXATC4raPlk7fyINH0jXGXINru9n9n10/83mw= Subject key identifier: 5D:67:9D:F7:24:26:33:3E:81:7B:67:4F:34:EA:98:AA:7B:4D:12:87 Authority key identifier: 0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 Certificate issuer: /CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Certificate serial: 019C427DA68A459B96608887BECABBB75E5E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:00:56 +0000 Manifest this update: Mon 09 Feb 2026 13:00:56 +0000 Manifest next update: Tue 10 Feb 2026 13:00:56 +0000 Files and hashes: 1: 4_VYxnt4iXAg8OJrfJjg9PAotmY.roa (hash: Akm/ByEBk49YqUy9ZSZK+QcVI8/pv/K13FfF4hTRGSY=) 2: CkvR0w9yNc1xc5wEIxDcJggHOPY.crl (hash: TTSo01/v2No5Exn++xDtrzBzIbAsbyEZpWUeZCf+VR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:a6:8a:45:9b:96:60:88:87:be:ca:bb:b7:5e:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a4bd1d30f7235cd71739c042310dc26080738f6 Validity Not Before: Feb 9 13:00:56 2026 GMT Not After : Feb 10 13:00:56 2026 GMT Subject: CN=5d679df72426333e817b674f34ea98aa7b4d1287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:cb:4e:74:28:fd:ad:40:46:e1:1c:3f:58:7d: 68:44:5f:2d:fa:0e:a5:d5:bf:1a:49:3e:09:b4:63: ec:11:36:72:ad:ef:24:9d:1b:33:85:1c:51:a0:e1: 8f:c4:f0:c5:d8:d0:d5:03:8a:c1:dd:58:c2:9d:8c: 60:3c:05:c4:2e:cf:0f:e9:24:35:27:2a:54:11:f1: 1b:d9:80:f7:ad:d8:f5:96:28:6f:17:24:2a:be:af: 27:56:72:94:a0:94:e0:64:e7:e2:09:a4:bd:65:56: e4:de:2c:0c:25:0f:2d:08:49:cc:ba:79:d0:23:46: 8f:b4:5f:e6:55:90:90:21:27:53:13:13:78:6a:15: 0f:0b:b3:44:59:a8:8f:19:91:c9:26:7a:1e:4b:55: a3:7a:78:f3:6a:47:25:ca:5c:d7:7a:35:65:ae:2a: 67:91:12:8d:1d:50:85:15:e3:8a:da:5e:f2:8d:b1: 3e:44:d1:91:a1:98:83:ba:bc:f5:8f:36:54:2f:f2: 2b:0b:9c:08:95:c4:d1:db:8e:92:39:b5:51:45:bf: 1d:6c:c8:a7:38:eb:cd:f5:0f:d0:62:75:fe:56:9c: 8b:f5:23:53:f1:e9:26:47:b1:da:41:96:4a:0b:33: 1d:3d:21:ed:8a:3d:cc:89:16:be:01:4a:b5:98:d0: 14:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:67:9D:F7:24:26:33:3E:81:7B:67:4F:34:EA:98:AA:7B:4D:12:87 X509v3 Authority Key Identifier: keyid:0A:4B:D1:D3:0F:72:35:CD:71:73:9C:04:23:10:DC:26:08:07:38:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkvR0w9yNc1xc5wEIxDcJggHOPY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/8d509f-fb64-423d-b261-388443d5f00f/1/CkvR0w9yNc1xc5wEIxDcJggHOPY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:c1:40:ed:e9:41:66:8f:72:4d:9a:79:29:0e:1b:2d:49:24: e4:13:02:ee:c2:46:9b:81:f9:20:f7:d6:83:bd:cf:b4:d1:29: 62:aa:ef:af:1e:a6:ad:33:20:93:f4:84:93:8d:27:c6:8d:0f: 00:1f:ce:8c:fc:88:2a:a8:94:b2:83:a7:1a:f1:ce:ad:aa:d2: d2:eb:9b:ee:28:ef:eb:bc:75:bb:0f:9a:a8:67:6b:80:93:4d: b8:25:e0:bd:13:4c:2f:15:00:2c:74:58:b6:a0:f9:56:fd:0a: 02:b0:6b:ca:68:38:0b:a1:d4:0c:b2:51:05:34:75:41:25:0c: e7:82:6e:41:fb:94:24:b7:43:6c:a4:c5:5e:e4:bc:7a:92:1f: b7:65:e6:79:44:ed:5a:08:22:ca:5a:51:b2:b6:67:6d:4c:40: e7:9a:03:e8:bd:37:c6:c5:9d:a3:cd:48:f4:b7:cc:7a:6a:55: c9:f2:3e:c3:d6:ce:e3:18:f1:25:36:37:e9:b7:05:80:2e:aa: 3f:fd:59:70:78:ed:c0:02:ca:59:c2:24:78:95:99:c0:28:da: 89:0a:b6:44:0f:0a:e6:e8:52:59:00:3f:cf:14:fa:9c:c7:a8: 4f:d3:6c:c2:8d:49:dd:ed:6e:35:32:37:9c:ad:e4:ea:10:8f: 7c:46:09:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfaaKRZuWYIiHvsq7t15eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNGJkMWQzMGY3MjM1Y2Q3MTczOWMwNDIzMTBkYzI2MDgw NzM4ZjYwHhcNMjYwMjA5MTMwMDU2WhcNMjYwMjEwMTMwMDU2WjAzMTEwLwYDVQQD Eyg1ZDY3OWRmNzI0MjYzMzNlODE3YjY3NGYzNGVhOThhYTdiNGQxMjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38tOdCj9rUBG4Rw/WH1oRF8t+g6l 1b8aST4JtGPsETZyre8knRszhRxRoOGPxPDF2NDVA4rB3VjCnYxgPAXELs8P6SQ1 JypUEfEb2YD3rdj1lihvFyQqvq8nVnKUoJTgZOfiCaS9ZVbk3iwMJQ8tCEnMunnQ I0aPtF/mVZCQISdTExN4ahUPC7NEWaiPGZHJJnoeS1WjenjzakclylzXejVlripn kRKNHVCFFeOK2l7yjbE+RNGRoZiDurz1jzZUL/IrC5wIlcTR246SObVRRb8dbMin OOvN9Q/QYnX+VpyL9SNT8ekmR7HaQZZKCzMdPSHtij3MiRa+AUq1mNAUMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1nnfckJjM+gXtnTzTqmKp7TRKHMB8GA1UdIwQY MBaAFApL0dMPcjXNcXOcBCMQ3CYIBzj2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEt Mzg4NDQzZDVmMDBmLzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi84ZDUwOWYtZmI2NC00MjNkLWIyNjEtMzg4NDQzZDVmMDBm LzEvQ2t2UjB3OXlOYzF4YzV3RUl4RGNKZ2dIT1BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacFA7elB Zo9yTZp5KQ4bLUkk5BMC7sJGm4H5IPfWg73PtNEpYqrvrx6mrTMgk/SEk40nxo0P AB/OjPyIKqiUsoOnGvHOrarS0uub7ijv67x1uw+aqGdrgJNNuCXgvRNMLxUALHRY tqD5Vv0KArBrymg4C6HUDLJRBTR1QSUM54JuQfuUJLdDbKTFXuS8epIft2XmeUTt WggiylpRsrZnbUxA55oD6L03xsWdo81I9LfMempVyfI+w9bO4xjxJTY36bcFgC6q P/1ZcHjtwALKWcIkeJWZwCjaiQq2RA8K5uhSWQA/zxT6nMeoT9Nswo1J3e1uNTI3 nK3k6hCPfEYJ9w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:31 2026 by rpki-client