This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft File: cC9OAJQ3AMCJfeetvPztXRC_LgE.mft (raw, json) Hash identifier: bCAItUSxU3tI2IkX2c7P+1UfvvzdMSYYjHSQMLRiYFY= Subject key identifier: 54:04:A8:0A:CD:FC:2B:AB:C2:62:63:C0:96:A8:A7:4D:D4:05:AC:7B Authority key identifier: 70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 Certificate issuer: /CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Certificate serial: 019C43904EED27C761A494C43093BCB1B1E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 18:00:56 +0000 Manifest this update: Mon 09 Feb 2026 18:00:56 +0000 Manifest next update: Tue 10 Feb 2026 18:00:56 +0000 Files and hashes: 1: 4sUUJ2plPGrlHgJqJEpnOT8db0k.roa (hash: 9TkCWduhIaGb7gCxKXssPcvjYmu7Zi+zWKigf1ePUnI=) 2: cC9OAJQ3AMCJfeetvPztXRC_LgE.crl (hash: 6srObVEb2C20c25vyKViJ+mdmyCefhqyX9jta6EHcZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:4e:ed:27:c7:61:a4:94:c4:30:93:bc:b1:b1:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=702f4e00943700c0897de7adbcfced5d10bf2e01 Validity Not Before: Feb 9 18:00:56 2026 GMT Not After : Feb 10 18:00:56 2026 GMT Subject: CN=5404a80acdfc2babc26263c096a8a74dd405ac7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f5:98:91:ab:85:c4:cd:9e:3f:15:f3:24:03: c7:1e:4b:e3:d6:f3:c9:fd:2e:a1:2f:f9:c8:8b:eb: a5:d8:8c:da:c5:fa:39:59:6f:df:fe:99:dc:81:69: 23:22:33:d4:88:d6:3b:32:ff:c7:9c:f7:72:ab:fe: 55:d3:e0:31:28:af:5d:13:48:2f:27:03:eb:c4:3e: 0c:fb:8b:2f:78:ee:2d:79:ad:1b:6f:50:4f:c7:d3: 2c:e1:df:3d:d9:0b:e8:bb:d7:cf:f1:e3:3c:b3:cc: 95:0f:b8:b4:7d:9f:69:1b:26:02:90:00:0b:d3:d2: cf:67:0c:52:74:16:12:ee:9e:8a:3b:24:97:a1:1b: 1c:c4:8b:03:6c:68:0d:68:11:a5:d2:82:91:cf:23: ae:83:02:7b:db:13:c5:2e:4e:55:d4:cb:5f:f8:7f: 65:95:30:99:0a:02:56:34:b6:c5:bc:05:55:e7:2d: b1:b3:e3:cb:bf:df:21:36:4b:00:31:6c:08:ed:85: 5a:ef:82:19:cc:4b:57:f3:12:fb:05:9b:de:ca:93: be:3d:73:b7:c8:a4:b7:ae:e6:1d:42:6a:35:64:9e: 70:8b:86:99:a8:f9:e1:54:15:40:32:af:bb:c4:54: 59:4e:f4:bc:6e:c0:45:4e:58:4f:e4:74:41:9c:a1: e9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:04:A8:0A:CD:FC:2B:AB:C2:62:63:C0:96:A8:A7:4D:D4:05:AC:7B X509v3 Authority Key Identifier: keyid:70:2F:4E:00:94:37:00:C0:89:7D:E7:AD:BC:FC:ED:5D:10:BF:2E:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cC9OAJQ3AMCJfeetvPztXRC_LgE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/bcb6eb-e262-4d69-80fb-59b0fc913d36/1/cC9OAJQ3AMCJfeetvPztXRC_LgE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:13:c8:28:c1:9c:e4:34:c4:1d:86:7a:a8:c5:cb:8e:3e:ac: c2:2f:c1:b4:b2:69:0e:07:59:93:5b:f7:61:99:c6:27:33:1a: 50:d3:6f:da:25:a7:a5:76:f0:1a:83:c4:d0:cc:e7:59:d4:75: 0b:b4:87:07:eb:3c:af:2a:66:e0:59:0e:f1:ad:15:05:aa:85: 8b:0c:70:a3:59:a5:0f:e8:b3:a7:dd:56:98:b3:0b:66:c2:bf: 75:4c:ba:8a:f3:83:1c:af:55:4f:8d:ea:12:7e:f7:c3:a7:ab: a6:83:0a:18:f4:fc:ee:46:70:54:52:fa:6b:4f:fc:3b:0f:ab: 8f:b5:08:43:df:7d:23:51:5a:5b:94:4e:89:2d:88:25:ff:09: 0c:34:30:e2:d0:08:dc:4a:42:72:4b:c3:92:5a:d9:b4:38:6f: 4e:0a:e6:ae:f1:49:3a:87:16:07:f0:c2:4e:a2:38:ab:66:c1: f5:9a:24:d4:7a:b8:27:5b:e5:d0:c4:74:e4:69:02:21:d5:4a: 19:3f:d3:c6:5e:c1:57:9a:13:e2:27:4c:42:74:22:de:ee:05: f9:bf:cb:7b:e4:37:a5:66:07:75:8c:37:11:73:98:3e:eb:ae: ff:59:43:0c:1e:5c:72:65:17:41:2c:61:8d:cb:e2:54:dd:3f: 18:69:05:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkE7tJ8dhpJTEMJO8sbHjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMmY0ZTAwOTQzNzAwYzA4OTdkZTdhZGJjZmNlZDVkMTBi ZjJlMDEwHhcNMjYwMjA5MTgwMDU2WhcNMjYwMjEwMTgwMDU2WjAzMTEwLwYDVQQD Eyg1NDA0YTgwYWNkZmMyYmFiYzI2MjYzYzA5NmE4YTc0ZGQ0MDVhYzdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/WYkauFxM2ePxXzJAPHHkvj1vPJ /S6hL/nIi+ul2Izaxfo5WW/f/pncgWkjIjPUiNY7Mv/HnPdyq/5V0+AxKK9dE0gv JwPrxD4M+4sveO4tea0bb1BPx9Ms4d892Qvou9fP8eM8s8yVD7i0fZ9pGyYCkAAL 09LPZwxSdBYS7p6KOySXoRscxIsDbGgNaBGl0oKRzyOugwJ72xPFLk5V1Mtf+H9l lTCZCgJWNLbFvAVV5y2xs+PLv98hNksAMWwI7YVa74IZzEtX8xL7BZveypO+PXO3 yKS3ruYdQmo1ZJ5wi4aZqPnhVBVAMq+7xFRZTvS8bsBFTlhP5HRBnKHpwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQEqArN/CurwmJjwJaop03UBax7MB8GA1UdIwQY MBaAFHAvTgCUNwDAiX3nrbz87V0Qvy4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmIt NTliMGZjOTEzZDM2LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC9iY2I2ZWItZTI2Mi00ZDY5LTgwZmItNTliMGZjOTEzZDM2 LzEvY0M5T0FKUTNBTUNKZmVldHZQenRYUkNfTGdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBPIKMGc 5DTEHYZ6qMXLjj6swi/BtLJpDgdZk1v3YZnGJzMaUNNv2iWnpXbwGoPE0MznWdR1 C7SHB+s8rypm4FkO8a0VBaqFiwxwo1mlD+izp91WmLMLZsK/dUy6ivODHK9VT43q En73w6erpoMKGPT87kZwVFL6a0/8Ow+rj7UIQ999I1FaW5ROiS2IJf8JDDQw4tAI 3EpCckvDklrZtDhvTgrmrvFJOocWB/DCTqI4q2bB9Zok1Hq4J1vl0MR05GkCIdVK GT/Txl7BV5oT4idMQnQi3u4F+b/Le+Q3pWYHdYw3EXOYPuuu/1lDDB5ccmUXQSxh jcviVN0/GGkFFg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:31 2026 by rpki-client