This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft File: CeSsRu925l8V9UCjpCqt7KG_Luw.mft (raw, json) Hash identifier: Qp3hh0dMLkDzmkHNOZryzF2snTfOPn/3JWNeE0SCt/8= Subject key identifier: C4:AD:D0:E8:AB:E6:64:3A:2A:6E:5B:C4:DC:58:FA:8E:81:4F:3E:E5 Authority key identifier: 09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC Certificate issuer: /CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec Certificate serial: 019C43C6C848A0BF1139A4475C390AB9F6E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft Manifest number: 17D8 Signing time: Mon 09 Feb 2026 19:00:26 +0000 Manifest this update: Mon 09 Feb 2026 19:00:26 +0000 Manifest next update: Tue 10 Feb 2026 19:00:26 +0000 Files and hashes: 1: CeSsRu925l8V9UCjpCqt7KG_Luw.crl (hash: SsNx94zenyPL9xGqIUxuXJID4rObXeB3MwhSSU7GGU8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:c8:48:a0:bf:11:39:a4:47:5c:39:0a:b9:f6:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e4ac46ef76e65f15f540a3a42aadeca1bf2eec Validity Not Before: Feb 9 19:00:26 2026 GMT Not After : Feb 10 19:00:26 2026 GMT Subject: CN=c4add0e8abe6643a2a6e5bc4dc58fa8e814f3ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:41:9a:86:93:b4:f3:ce:ee:6d:f8:0b:fa:c6: 29:6e:8c:69:6e:cc:5b:85:72:85:7a:89:3b:13:78: a5:c8:0a:e1:25:4b:50:b5:1a:13:e8:2c:48:c3:40: b7:b1:c0:62:e2:82:91:97:23:6f:a0:ce:c5:e6:88: c5:fa:0b:3e:f4:40:75:dd:ea:92:1e:5f:65:6d:ab: 21:72:02:30:43:19:00:0a:fb:09:7d:f1:05:51:9b: 13:87:55:eb:6e:c2:97:18:a3:35:68:16:c4:9f:a9: 52:74:ec:a1:76:06:f3:4d:2d:6a:be:d2:1d:3d:31: f4:91:74:1b:bb:df:9f:8c:4c:28:44:95:d6:f7:71: eb:3c:05:a4:35:55:9c:3b:87:70:ea:ab:d1:7d:20: 71:72:2d:bb:da:ec:c0:a2:1a:43:3b:4d:0b:e9:20: 42:f0:3a:d6:ef:6c:6f:af:0e:de:74:f2:97:5f:b4: 6f:cd:01:46:b2:f6:dc:e9:cb:e2:49:38:6e:08:2e: 2b:44:04:25:0d:5b:75:6f:3b:85:cd:70:95:11:a1: ec:c1:55:ce:08:6d:61:fc:8c:32:96:30:4f:cf:8c: 14:74:10:8c:67:84:a2:20:a2:7e:01:b3:18:c5:91: 99:ea:35:c7:82:1c:9a:47:0c:91:56:43:a4:30:39: 9e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:AD:D0:E8:AB:E6:64:3A:2A:6E:5B:C4:DC:58:FA:8E:81:4F:3E:E5 X509v3 Authority Key Identifier: keyid:09:E4:AC:46:EF:76:E6:5F:15:F5:40:A3:A4:2A:AD:EC:A1:BF:2E:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeSsRu925l8V9UCjpCqt7KG_Luw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/174e5b-3aa6-4262-931b-e71a76502ca5/1/CeSsRu925l8V9UCjpCqt7KG_Luw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:96:dc:03:a9:c1:a5:57:17:11:bd:f9:d3:68:8f:ee:d4:50: 4a:43:ae:75:84:a6:9c:17:80:cc:63:59:c1:3f:f8:8d:ba:c6: 6e:2a:af:90:f6:0c:25:b5:e4:37:b4:9e:2c:2f:88:e6:a5:0d: 6b:1b:29:8f:9f:22:93:1d:95:74:48:d7:97:b0:16:43:54:02: cd:02:f1:c1:bc:39:08:93:64:b5:20:32:ab:5a:d6:0b:6f:da: 59:53:92:0b:59:50:b2:a7:1d:c2:eb:4c:d1:2b:1f:ad:79:dc: cd:b3:90:b9:ec:d3:5f:d3:7a:b3:8a:cc:43:09:c7:86:a7:5d: 97:80:76:0f:14:8e:2a:aa:cc:16:e3:dc:cf:e7:89:aa:8b:f3: f7:b7:ea:31:db:75:cf:59:86:39:ff:4b:4c:96:a3:f1:48:dd: 9e:3a:79:c6:db:f8:91:db:96:a3:84:9a:06:cd:bd:11:3a:e6: f8:7b:32:07:14:cb:36:90:9c:30:6e:f2:a9:6a:c2:13:85:e3: 48:1f:d9:18:ab:67:05:9e:0e:47:3c:c7:7d:8f:25:06:d2:90: 54:4d:06:0b:f9:85:1d:2f:e2:d0:a2:29:22:c0:22:0d:3f:ca: ae:a4:dd:96:24:bc:f7:64:51:e3:f5:d8:3d:07:df:2c:d8:0b: f0:e4:d4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxshIoL8ROaRHXDkKufboMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTRhYzQ2ZWY3NmU2NWYxNWY1NDBhM2E0MmFhZGVjYTFi ZjJlZWMwHhcNMjYwMjA5MTkwMDI2WhcNMjYwMjEwMTkwMDI2WjAzMTEwLwYDVQQD EyhjNGFkZDBlOGFiZTY2NDNhMmE2ZTViYzRkYzU4ZmE4ZTgxNGYzZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00GahpO0887ubfgL+sYpboxpbsxb hXKFeok7E3ilyArhJUtQtRoT6CxIw0C3scBi4oKRlyNvoM7F5ojF+gs+9EB13eqS Hl9lbashcgIwQxkACvsJffEFUZsTh1XrbsKXGKM1aBbEn6lSdOyhdgbzTS1qvtId PTH0kXQbu9+fjEwoRJXW93HrPAWkNVWcO4dw6qvRfSBxci272uzAohpDO00L6SBC 8DrW72xvrw7edPKXX7RvzQFGsvbc6cviSThuCC4rRAQlDVt1bzuFzXCVEaHswVXO CG1h/IwyljBPz4wUdBCMZ4SiIKJ+AbMYxZGZ6jXHghyaRwyRVkOkMDmeKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSt0Oir5mQ6Km5bxNxY+o6BTz7lMB8GA1UdIwQY MBaAFAnkrEbvduZfFfVAo6Qqreyhvy7sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWIt ZTcxYTc2NTAyY2E1LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8xNzRlNWItM2FhNi00MjYyLTkzMWItZTcxYTc2NTAyY2E1 LzEvQ2VTc1J1OTI1bDhWOVVDanBDcXQ3S0dfTHV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5bcA6nB pVcXEb3502iP7tRQSkOudYSmnBeAzGNZwT/4jbrGbiqvkPYMJbXkN7SeLC+I5qUN axspj58ikx2VdEjXl7AWQ1QCzQLxwbw5CJNktSAyq1rWC2/aWVOSC1lQsqcdwutM 0SsfrXnczbOQuezTX9N6s4rMQwnHhqddl4B2DxSOKqrMFuPcz+eJqovz97fqMdt1 z1mGOf9LTJaj8Ujdnjp5xtv4kduWo4SaBs29ETrm+HsyBxTLNpCcMG7yqWrCE4Xj SB/ZGKtnBZ4ORzzHfY8lBtKQVE0GC/mFHS/i0KIpIsAiDT/KrqTdliS892RR4/XY PQffLNgL8OTUJA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:43 2026 by rpki-client