This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft File: CNC8jFiQLIynu4aewuKDAvpFFek.mft (raw, json) Hash identifier: SdZ3GCKuGq+eRtdlyma4fOQJtkO7PL0bYcrPTVFeVnU= Subject key identifier: CF:81:7E:8A:C4:D2:BC:C2:A9:B6:75:58:E7:98:7D:FF:97:CD:4F:1E Authority key identifier: 08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 Certificate issuer: /CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Certificate serial: 019C427D68845FA951A540380EF03CDABC24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:00:40 +0000 Manifest this update: Mon 09 Feb 2026 13:00:40 +0000 Manifest next update: Tue 10 Feb 2026 13:00:40 +0000 Files and hashes: 1: CNC8jFiQLIynu4aewuKDAvpFFek.crl (hash: HIHT8CjfVZuRCXrqkfsTx5n9686JF3NNmdZmWqV224s=) 2: pJjdeZuekZ9QTR10eFG7UylmsAs.roa (hash: dPPlwFRB2GTwEhBlEXXi16Mfi1J7v+Uwl/hOty31Xtg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:68:84:5f:a9:51:a5:40:38:0e:f0:3c:da:bc:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08d0bc8c58902c8ca7bb869ec2e28302fa4515e9 Validity Not Before: Feb 9 13:00:40 2026 GMT Not After : Feb 10 13:00:40 2026 GMT Subject: CN=cf817e8ac4d2bcc2a9b67558e7987dff97cd4f1e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9e:35:e6:7d:ec:79:e2:95:00:30:43:a7:95: c2:db:a7:88:0a:97:6e:ee:da:38:87:86:6f:a8:88: b1:bc:47:0a:b4:3e:10:0d:31:5b:8a:33:be:9b:d4: 87:56:b0:65:d8:85:44:bf:cb:4d:2b:e4:3f:30:31: 45:3d:fc:b4:35:e6:62:60:62:61:ad:d5:ef:de:39: 35:bd:6c:c2:5e:ee:fd:34:65:b9:df:13:70:5a:d7: 56:2c:c5:32:5a:59:31:31:a4:73:67:b2:03:db:94: 4b:51:87:32:2c:2b:73:06:43:22:0a:34:a5:2e:79: 20:7f:da:60:ae:58:06:73:3e:af:d3:5d:4e:71:70: b5:5f:b3:c2:50:26:4e:25:91:0d:89:36:e7:dc:e1: 75:a4:a9:f9:2e:af:fb:f7:62:90:ac:c2:13:51:aa: 67:3b:f3:28:67:59:43:94:c5:75:b2:88:fa:89:fb: f8:6a:21:d1:69:0c:77:05:3f:e4:f2:ec:24:17:ec: 23:5a:31:3a:18:63:5e:70:b3:3d:0e:e9:c0:5d:93: 47:69:22:48:4e:e3:23:b0:b0:cd:a0:0c:12:33:73: c8:05:07:ef:f2:ee:dd:c6:18:be:c5:59:e8:4f:7b: fe:45:10:f3:45:f9:d8:2e:ca:58:77:53:3f:a3:2d: e2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:81:7E:8A:C4:D2:BC:C2:A9:B6:75:58:E7:98:7D:FF:97:CD:4F:1E X509v3 Authority Key Identifier: keyid:08:D0:BC:8C:58:90:2C:8C:A7:BB:86:9E:C2:E2:83:02:FA:45:15:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CNC8jFiQLIynu4aewuKDAvpFFek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ff4a67-59fc-4f00-a3ad-b3754afe9529/1/CNC8jFiQLIynu4aewuKDAvpFFek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:bd:99:92:2a:c9:70:a8:ae:01:2d:46:2d:5b:b9:ba:00:96: 2e:ad:e6:f3:c2:ea:92:10:84:e5:e4:04:80:45:c1:61:20:38: 4f:b3:51:1b:4b:3f:4b:3e:a1:58:09:4a:c9:28:85:e8:86:77: 78:df:bd:92:82:ac:a0:e2:76:32:d2:e4:21:5a:3b:8c:9d:2c: c4:91:f2:c3:b0:f8:84:20:66:47:46:c1:4f:f8:1d:4d:00:2e: 9f:a7:ea:93:f2:d3:d2:fa:33:8f:61:b1:27:86:36:5a:5a:8d: ab:f0:09:83:08:f5:9b:af:75:c4:dd:9c:18:c4:8f:78:f2:23: 2f:e3:ac:ac:aa:5a:3f:10:c8:3e:83:37:0a:a5:07:07:af:a1: 0d:ca:45:4a:2f:a2:d4:93:f7:c8:12:8e:5d:f2:7a:e3:c9:ab: 97:d3:51:9f:50:8c:8c:c1:34:8b:b0:ce:b1:1c:77:5c:4b:ee: c5:95:9a:ba:09:97:b0:c8:0a:23:63:06:23:e7:15:db:53:ad: b7:77:65:00:3e:cc:d7:4e:b9:0c:03:e3:52:32:5a:5f:98:a6: 85:e2:1d:c6:4a:9e:4e:b8:da:66:d4:74:8b:6c:b3:ab:e4:eb: b9:fe:cb:b4:0a:95:26:5a:52:1c:43:07:ad:80:b1:2d:15:41: 47:c3:2e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWiEX6lRpUA4DvA82rwkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZDBiYzhjNTg5MDJjOGNhN2JiODY5ZWMyZTI4MzAyZmE0 NTE1ZTkwHhcNMjYwMjA5MTMwMDQwWhcNMjYwMjEwMTMwMDQwWjAzMTEwLwYDVQQD EyhjZjgxN2U4YWM0ZDJiY2MyYTliNjc1NThlNzk4N2RmZjk3Y2Q0ZjFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ415n3seeKVADBDp5XC26eICpdu 7to4h4ZvqIixvEcKtD4QDTFbijO+m9SHVrBl2IVEv8tNK+Q/MDFFPfy0NeZiYGJh rdXv3jk1vWzCXu79NGW53xNwWtdWLMUyWlkxMaRzZ7ID25RLUYcyLCtzBkMiCjSl Lnkgf9pgrlgGcz6v011OcXC1X7PCUCZOJZENiTbn3OF1pKn5Lq/792KQrMITUapn O/MoZ1lDlMV1soj6ifv4aiHRaQx3BT/k8uwkF+wjWjE6GGNecLM9DunAXZNHaSJI TuMjsLDNoAwSM3PIBQfv8u7dxhi+xVnoT3v+RRDzRfnYLspYd1M/oy3iVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+BforE0rzCqbZ1WOeYff+XzU8eMB8GA1UdIwQY MBaAFAjQvIxYkCyMp7uGnsLigwL6RRXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQt YjM3NTRhZmU5NTI5LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mZjRhNjctNTlmYy00ZjAwLWEzYWQtYjM3NTRhZmU5NTI5 LzEvQ05DOGpGaVFMSXludTRhZXd1S0RBdnBGRmVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWL2ZkirJ cKiuAS1GLVu5ugCWLq3m88LqkhCE5eQEgEXBYSA4T7NRG0s/Sz6hWAlKySiF6IZ3 eN+9koKsoOJ2MtLkIVo7jJ0sxJHyw7D4hCBmR0bBT/gdTQAun6fqk/LT0vozj2Gx J4Y2WlqNq/AJgwj1m691xN2cGMSPePIjL+OsrKpaPxDIPoM3CqUHB6+hDcpFSi+i 1JP3yBKOXfJ648mrl9NRn1CMjME0i7DOsRx3XEvuxZWaugmXsMgKI2MGI+cV21Ot t3dlAD7M1065DAPjUjJaX5imheIdxkqeTrjaZtR0i2yzq+Truf7LtAqVJlpSHEMH rYCxLRVBR8Mu2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:17 2026 by rpki-client