This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft File: CvPkI70elzal9deE7JKZ1QgnJ9w.mft (raw, json) Hash identifier: forxeR6ZkS01VePPRZ79DRLXuS/ZHhdUZwEy7Ntdm/M= Subject key identifier: 4D:12:6D:02:96:26:F7:BD:16:D3:85:8F:97:CA:DF:7D:3B:F6:5A:B8 Authority key identifier: 0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC Certificate issuer: /CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc Certificate serial: 019C420FCB65DE2D4732326446C8B245331A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft Manifest number: 04DC Signing time: Mon 09 Feb 2026 11:00:57 +0000 Manifest this update: Mon 09 Feb 2026 11:00:57 +0000 Manifest next update: Tue 10 Feb 2026 11:00:57 +0000 Files and hashes: 1: CvPkI70elzal9deE7JKZ1QgnJ9w.crl (hash: MCmBkicvGVAjhVSNO/0hSJPbWL1Z/R/GS1CqDHEbj+c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:cb:65:de:2d:47:32:32:64:46:c8:b2:45:33:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0af3e423bd1e9736a5f5d784ec9299d5082727dc Validity Not Before: Feb 9 11:00:57 2026 GMT Not After : Feb 10 11:00:57 2026 GMT Subject: CN=4d126d029626f7bd16d3858f97cadf7d3bf65ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:7d:5c:42:09:c2:99:e7:79:ae:c3:41:bd: 52:f8:cb:ee:cd:26:e5:c2:17:8a:f2:3c:48:7d:55: 25:f8:ad:ca:5c:5f:05:9f:99:1a:54:7a:10:74:68: 56:ef:2e:d2:9a:b4:c1:f0:5f:aa:a4:c9:87:cb:75: aa:97:27:8c:fe:c7:06:87:68:d3:25:5d:0f:c7:b4: 07:02:97:83:a6:03:fb:b5:b0:69:28:0c:ab:28:08: 60:b9:3a:f9:25:4a:72:2f:ae:da:9e:33:99:2a:49: 84:43:eb:eb:6b:11:4c:ba:10:cd:1e:d1:19:94:a5: ea:31:df:05:ca:63:a6:25:c5:27:0c:77:0e:79:c0: 2b:39:ba:c9:fd:f2:d9:f2:89:b1:e8:08:c3:5f:6f: be:53:98:e5:d7:4e:d4:ea:79:b1:b6:7c:6f:88:23: b1:8a:78:21:db:40:11:9e:c2:44:78:c0:28:79:69: a3:05:b9:2c:20:6a:68:4d:5c:d4:6c:60:19:fe:d9: ec:b3:15:34:80:38:12:63:1f:62:53:62:1c:c7:07: 39:a0:ed:1b:68:4d:e9:b1:9e:96:62:84:fe:0b:99: 42:af:40:d7:06:f1:04:ff:9d:29:67:15:7b:19:17: b5:2c:59:db:4e:17:84:5e:a8:b8:e0:de:38:f5:b0: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:12:6D:02:96:26:F7:BD:16:D3:85:8F:97:CA:DF:7D:3B:F6:5A:B8 X509v3 Authority Key Identifier: keyid:0A:F3:E4:23:BD:1E:97:36:A5:F5:D7:84:EC:92:99:D5:08:27:27:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvPkI70elzal9deE7JKZ1QgnJ9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/a751f7-76e5-478c-915a-fe1e92c36adb/1/CvPkI70elzal9deE7JKZ1QgnJ9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:95:88:10:19:a8:a2:62:35:06:50:79:8c:7e:cb:33:5a:a2: a1:55:a5:ed:30:77:4d:ed:4c:0a:07:13:03:fe:37:87:2e:fc: 6b:2d:61:f6:72:d5:d8:2b:e9:95:4d:e3:48:4c:84:07:7a:4a: cb:cd:cd:cb:b0:11:b3:61:cd:5e:55:3c:45:31:96:d8:9a:a9: a9:b0:15:dd:3d:2a:4b:1b:0d:93:89:b3:44:e5:d1:ee:05:d8: 56:3e:81:d3:88:00:47:ff:56:73:28:91:62:b6:fd:65:a9:81: ac:b0:32:f2:6a:00:59:c0:c1:be:69:4f:b6:c8:06:8d:f9:0f: c7:33:5c:b0:4c:20:90:12:c5:83:77:ae:cb:08:57:47:57:eb: 3d:cb:01:04:0b:d5:21:0c:6b:38:b0:fc:01:58:c5:d5:b5:af: 32:02:4e:3f:f4:69:88:ba:40:50:2b:d7:1b:dc:93:15:3d:f2: e9:c0:29:19:2c:ea:53:11:88:5d:ce:ec:a5:1c:93:e4:2b:84: 37:20:16:6a:65:ed:fd:a7:3e:13:da:5c:a0:9e:5c:7f:70:04: a1:de:48:de:ac:9a:02:fb:a1:64:55:02:b0:e9:66:31:27:85: 50:e6:f1:88:fc:55:26:a1:c0:b1:75:df:0c:5f:bc:8f:75:08: 40:e2:88:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD8tl3i1HMjJkRsiyRTMaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZjNlNDIzYmQxZTk3MzZhNWY1ZDc4NGVjOTI5OWQ1MDgy NzI3ZGMwHhcNMjYwMjA5MTEwMDU3WhcNMjYwMjEwMTEwMDU3WjAzMTEwLwYDVQQD Eyg0ZDEyNmQwMjk2MjZmN2JkMTZkMzg1OGY5N2NhZGY3ZDNiZjY1YWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyG59XEIJwpnnea7DQb1S+MvuzSbl wheK8jxIfVUl+K3KXF8Fn5kaVHoQdGhW7y7SmrTB8F+qpMmHy3WqlyeM/scGh2jT JV0Px7QHApeDpgP7tbBpKAyrKAhguTr5JUpyL67anjOZKkmEQ+vraxFMuhDNHtEZ lKXqMd8FymOmJcUnDHcOecArObrJ/fLZ8omx6AjDX2++U5jl107U6nmxtnxviCOx ingh20ARnsJEeMAoeWmjBbksIGpoTVzUbGAZ/tnssxU0gDgSYx9iU2Icxwc5oO0b aE3psZ6WYoT+C5lCr0DXBvEE/50pZxV7GRe1LFnbTheEXqi44N449bCHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0SbQKWJve9FtOFj5fK33079lq4MB8GA1UdIwQY MBaAFArz5CO9Hpc2pfXXhOySmdUIJyfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEt ZmUxZTkyYzM2YWRiLzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS9hNzUxZjctNzZlNS00NzhjLTkxNWEtZmUxZTkyYzM2YWRi LzEvQ3ZQa0k3MGVsemFsOWRlRTdKS1oxUWduSjl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANJWIEBmo omI1BlB5jH7LM1qioVWl7TB3Te1MCgcTA/43hy78ay1h9nLV2CvplU3jSEyEB3pK y83Ny7ARs2HNXlU8RTGW2JqpqbAV3T0qSxsNk4mzROXR7gXYVj6B04gAR/9WcyiR Yrb9ZamBrLAy8moAWcDBvmlPtsgGjfkPxzNcsEwgkBLFg3euywhXR1frPcsBBAvV IQxrOLD8AVjF1bWvMgJOP/RpiLpAUCvXG9yTFT3y6cApGSzqUxGIXc7spRyT5CuE NyAWamXt/ac+E9pcoJ5cf3AEod5I3qyaAvuhZFUCsOlmMSeFUObxiPxVJqHAsXXf DF+8j3UIQOKIDA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:47 2026 by rpki-client