This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft File: CvFmObpIfvljxWzLMm8lCNGoPv0.mft (raw, json) Hash identifier: yX6co7mw1S4mes4gBXBhwrC5a6gMxrSQF5vcyjKf2Hs= Subject key identifier: 69:21:B9:71:3D:5E:D1:B4:16:E6:97:9F:C5:6B:54:C9:94:E2:45:E8 Authority key identifier: 0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD Certificate issuer: /CN=0af16639ba487ef963c56ccb326f2508d1a83efd Certificate serial: 019C432222504150A5EAFA43097F7D2273B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft Manifest number: 0AFF Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: CvFmObpIfvljxWzLMm8lCNGoPv0.crl (hash: qLSrpsyTUeNAqR/mW6hqDMXLzoYMLpJd3piJfRvpPUs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:22:50:41:50:a5:ea:fa:43:09:7f:7d:22:73:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af16639ba487ef963c56ccb326f2508d1a83efd Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=6921b9713d5ed1b416e6979fc56b54c994e245e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:fb:69:0e:49:22:08:c0:49:ac:75:68:74:b2: 02:ab:cc:54:01:09:0b:a8:3d:42:bb:a8:01:4f:17: 53:46:c1:8c:ce:a4:ac:b0:18:49:4c:f1:9d:29:e7: 9c:9c:47:51:fe:b4:ab:1f:b7:4e:5a:2e:3c:ed:31: 33:31:af:6b:58:65:ee:dc:04:0f:51:dd:0d:39:0f: 91:3f:e1:c3:9a:69:de:b0:58:97:3f:a8:7a:36:4d: 9e:31:80:27:b2:a3:1e:e0:c9:08:b5:66:32:37:b9: 13:c0:10:dc:42:ef:10:77:c6:5e:7c:fb:25:68:d8: cf:df:de:71:fb:a8:06:14:f0:a4:e6:d6:7d:13:8b: 40:4a:ff:6f:e5:e4:c0:65:a7:1c:c6:a1:ad:b5:c3: bd:b6:4c:a3:91:c4:c8:6a:38:8f:a3:45:d6:d1:61: 04:6e:c5:72:96:ca:c8:b8:b8:a1:ad:89:06:f6:ae: 42:fd:80:a9:c7:50:7c:f8:6c:87:41:9f:61:96:1a: 29:b6:18:bd:d7:5f:46:38:62:5d:9a:c0:33:80:77: f3:77:ce:33:05:49:e1:64:a2:3c:2a:72:07:f2:d8: 10:c8:52:aa:40:47:e9:20:66:51:21:41:7e:c5:3f: fa:e0:29:7c:8e:cd:ab:30:f3:2b:75:b6:2b:ac:00: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:21:B9:71:3D:5E:D1:B4:16:E6:97:9F:C5:6B:54:C9:94:E2:45:E8 X509v3 Authority Key Identifier: keyid:0A:F1:66:39:BA:48:7E:F9:63:C5:6C:CB:32:6F:25:08:D1:A8:3E:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvFmObpIfvljxWzLMm8lCNGoPv0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fc7e2d-7b76-468f-8529-3c637651507d/1/CvFmObpIfvljxWzLMm8lCNGoPv0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:02:c6:ec:d2:75:a0:a2:5f:30:9d:aa:d2:e2:90:af:9a:58: 70:79:6e:98:a8:a7:95:68:90:a9:fa:40:1c:67:a6:8e:62:41: 45:69:4f:cc:4a:8f:a4:6b:3b:69:73:1d:aa:d5:ea:bc:d8:d6: 72:f2:09:a8:5e:46:bf:e3:8c:8c:53:ae:ce:4b:18:5c:f8:00: 97:9e:44:8c:53:76:45:77:b7:a0:6b:1a:0c:71:09:82:d9:75: 31:9f:f0:de:b6:bf:dc:4b:f6:3a:60:17:53:73:fe:0e:97:0e: cd:a5:3a:a0:a0:7a:07:7b:2b:c0:27:82:c4:26:b1:82:34:4b: 84:20:88:5d:a7:31:b3:a0:89:4f:f2:5a:73:d7:fe:9c:b4:2c: c6:fe:d9:78:26:8f:37:f2:e0:46:26:29:04:83:7e:1a:01:be: 79:0b:00:53:f6:de:59:71:fe:f2:e9:17:a0:79:40:e6:65:48: df:3e:2b:1c:52:b6:31:ed:ff:df:1c:36:01:aa:d9:c6:e1:bc: 90:80:69:34:97:09:27:6e:1b:69:3a:45:3b:84:9e:5f:7d:7a: e3:56:a2:95:b6:c4:2a:cf:3e:8c:d8:07:e0:8d:36:88:65:7a: 13:63:52:3d:cc:e9:0c:a3:f6:80:5b:b4:d1:0c:1c:ff:ad:ab: cf:20:52:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiJQQVCl6vpDCX99InOwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjE2NjM5YmE0ODdlZjk2M2M1NmNjYjMyNmYyNTA4ZDFh ODNlZmQwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD Eyg2OTIxYjk3MTNkNWVkMWI0MTZlNjk3OWZjNTZiNTRjOTk0ZTI0NWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwvtpDkkiCMBJrHVodLICq8xUAQkL qD1Cu6gBTxdTRsGMzqSssBhJTPGdKeecnEdR/rSrH7dOWi487TEzMa9rWGXu3AQP Ud0NOQ+RP+HDmmnesFiXP6h6Nk2eMYAnsqMe4MkItWYyN7kTwBDcQu8Qd8ZefPsl aNjP395x+6gGFPCk5tZ9E4tASv9v5eTAZaccxqGttcO9tkyjkcTIajiPo0XW0WEE bsVylsrIuLihrYkG9q5C/YCpx1B8+GyHQZ9hlhopthi9119GOGJdmsAzgHfzd84z BUnhZKI8KnIH8tgQyFKqQEfpIGZRIUF+xT/64Cl8js2rMPMrdbYrrABk7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkhuXE9XtG0FuaXn8VrVMmU4kXoMB8GA1UdIwQY MBaAFArxZjm6SH75Y8VsyzJvJQjRqD79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mYzdlMmQtN2I3Ni00NjhmLTg1Mjkt M2M2Mzc2NTE1MDdkLzEvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mYzdlMmQtN2I3Ni00NjhmLTg1MjktM2M2Mzc2NTE1MDdk LzEvQ3ZGbU9icElmdmxqeFd6TE1tOGxDTkdvUHYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQLG7NJ1 oKJfMJ2q0uKQr5pYcHlumKinlWiQqfpAHGemjmJBRWlPzEqPpGs7aXMdqtXqvNjW cvIJqF5Gv+OMjFOuzksYXPgAl55EjFN2RXe3oGsaDHEJgtl1MZ/w3ra/3Ev2OmAX U3P+DpcOzaU6oKB6B3srwCeCxCaxgjRLhCCIXacxs6CJT/Jac9f+nLQsxv7ZeCaP N/LgRiYpBIN+GgG+eQsAU/beWXH+8ukXoHlA5mVI3z4rHFK2Me3/3xw2AarZxuG8 kIBpNJcJJ24baTpFO4SeX31641ailbbEKs8+jNgH4I02iGV6E2NSPczpDKP2gFu0 0Qwc/62rzyBSww== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:55 2026 by rpki-client