This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft File: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft (raw, json) Hash identifier: W5nCXAo6zIfZY5pHXbKd+tmKWgXxzQZU1qtM6zt0Ee8= Subject key identifier: 50:50:43:BC:69:0F:BA:85:EA:63:F0:0D:99:D2:66:79:B1:05:4C:75 Authority key identifier: 0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C Certificate issuer: /CN=0a36b97736762d69080b43d9b00c61af1d311d8c Certificate serial: 019C42EB2E538B28465C5E847A8C07ABC740 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft Manifest number: 0586 Signing time: Mon 09 Feb 2026 15:00:34 +0000 Manifest this update: Mon 09 Feb 2026 15:00:34 +0000 Manifest next update: Tue 10 Feb 2026 15:00:34 +0000 Files and hashes: 1: Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl (hash: DLp8CB+roHsKcbU93m5yEXAdwdiJv3i6zARZfKRJO38=) 2: HhyQ1xbfi1ZT4qXLErneHVnMZKQ.roa (hash: LTQHQ2QemVphT2OwaYY6pIObkofdkSf8QmySEt23OP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:2e:53:8b:28:46:5c:5e:84:7a:8c:07:ab:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a36b97736762d69080b43d9b00c61af1d311d8c Validity Not Before: Feb 9 15:00:34 2026 GMT Not After : Feb 10 15:00:34 2026 GMT Subject: CN=505043bc690fba85ea63f00d99d26679b1054c75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:13:41:9d:5f:13:70:bb:43:62:ce:34:d3:77: 95:9e:16:0d:1d:45:9a:c2:ac:22:53:90:e0:bb:f0: d8:53:b0:f7:cd:cf:f7:9e:52:c7:3b:0a:21:32:13: ca:24:b6:a5:2c:da:7a:a6:9e:f2:bd:75:5c:f1:49: 96:bb:f4:11:fb:91:f8:b1:9d:b2:1d:79:99:6f:86: a1:b1:0a:92:16:49:ee:e1:81:58:8d:28:f1:f9:8a: 4a:fe:a2:dc:f8:c1:24:d2:2e:50:fb:3c:a1:ef:7a: bd:07:1c:92:6f:d0:e1:ff:cc:79:b9:01:d6:4b:d6: e0:ac:bb:4c:96:9e:d2:60:dd:c8:e9:69:5d:dd:65: c6:4a:9f:53:20:f7:e1:ee:72:88:4f:9a:86:ae:29: 38:22:27:b7:e3:2d:a4:7b:87:f8:c8:14:d4:f4:32: fd:d9:22:55:1a:11:c8:55:61:0c:46:ee:41:40:43: 8c:85:b2:cf:35:f9:78:0e:9b:ea:f5:66:7d:f6:06: c2:07:19:2e:04:10:90:4c:3f:c1:4c:8a:85:19:77: 56:80:f3:98:ed:a5:d3:31:72:31:f2:16:6b:03:3f: 48:8b:1b:0f:7e:0a:fd:2a:f0:63:ab:78:1f:12:c5: 8c:ed:10:db:96:f9:be:34:8d:a9:e8:34:33:e2:06: 96:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:50:43:BC:69:0F:BA:85:EA:63:F0:0D:99:D2:66:79:B1:05:4C:75 X509v3 Authority Key Identifier: keyid:0A:36:B9:77:36:76:2D:69:08:0B:43:D9:B0:0C:61:AF:1D:31:1D:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dcd2ed-d35b-4cd5-a822-1a3226832c91/1/Cja5dzZ2LWkIC0PZsAxhrx0xHYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:28:09:92:4f:b1:78:29:19:60:41:39:f9:0d:17:c7:c7:cb: ad:92:19:ac:bd:fe:29:fd:aa:07:60:30:df:8e:f0:fa:58:b5: a3:e6:ab:23:a5:63:ec:c4:33:1a:2b:fc:36:ff:6a:df:75:1a: 03:65:85:fd:01:ef:2c:dc:7b:04:4b:4b:ee:be:dc:45:17:79: a7:bb:a4:b8:92:38:0f:5a:b7:76:a2:a2:b4:8a:2a:37:b7:e1: 7b:c6:80:25:b0:42:da:ab:04:ac:7a:9f:12:09:dc:52:d3:d7: 62:f5:11:be:b0:64:3b:ac:29:a1:ce:6e:91:74:43:62:fd:dd: fb:9e:fb:08:d3:6a:55:ef:d4:09:d3:67:65:d1:e1:d0:3d:cd: e6:b3:e9:5f:c9:f0:4c:b7:c7:c9:0b:61:e9:fd:9c:b2:63:20: 4f:1a:d2:e7:94:ad:10:38:67:df:2c:ba:fb:61:51:89:27:35: 99:6f:af:22:fc:51:ef:c1:6e:41:00:3c:1d:d9:21:80:77:1a: a8:84:98:0b:f3:91:fe:d4:b6:a8:75:c9:d4:b8:33:37:ab:ce: ed:7d:8a:71:0a:a0:dc:6f:00:21:22:af:0b:6a:c1:ca:42:72: 8b:fd:4b:8d:7f:4d:cf:fe:37:2c:30:2d:f7:27:bb:8e:a3:b9: 82:17:07:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6y5TiyhGXF6EeowHq8dAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhMzZiOTc3MzY3NjJkNjkwODBiNDNkOWIwMGM2MWFmMWQz MTFkOGMwHhcNMjYwMjA5MTUwMDM0WhcNMjYwMjEwMTUwMDM0WjAzMTEwLwYDVQQD Eyg1MDUwNDNiYzY5MGZiYTg1ZWE2M2YwMGQ5OWQyNjY3OWIxMDU0Yzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxNBnV8TcLtDYs4003eVnhYNHUWa wqwiU5Dgu/DYU7D3zc/3nlLHOwohMhPKJLalLNp6pp7yvXVc8UmWu/QR+5H4sZ2y HXmZb4ahsQqSFknu4YFYjSjx+YpK/qLc+MEk0i5Q+zyh73q9BxySb9Dh/8x5uQHW S9bgrLtMlp7SYN3I6Wld3WXGSp9TIPfh7nKIT5qGrik4Iie34y2ke4f4yBTU9DL9 2SJVGhHIVWEMRu5BQEOMhbLPNfl4Dpvq9WZ99gbCBxkuBBCQTD/BTIqFGXdWgPOY 7aXTMXIx8hZrAz9IixsPfgr9KvBjq3gfEsWM7RDblvm+NI2p6DQz4gaWZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFBQQ7xpD7qF6mPwDZnSZnmxBUx1MB8GA1UdIwQY MBaAFAo2uXc2di1pCAtD2bAMYa8dMR2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjIt MWEzMjI2ODMyYzkxLzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kY2QyZWQtZDM1Yi00Y2Q1LWE4MjItMWEzMjI2ODMyYzkx LzEvQ2phNWR6WjJMV2tJQzBQWnNBeGhyeDB4SFl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASigJkk+x eCkZYEE5+Q0Xx8fLrZIZrL3+Kf2qB2Aw347w+li1o+arI6Vj7MQzGiv8Nv9q33Ua A2WF/QHvLNx7BEtL7r7cRRd5p7ukuJI4D1q3dqKitIoqN7fhe8aAJbBC2qsErHqf EgncUtPXYvURvrBkO6wpoc5ukXRDYv3d+577CNNqVe/UCdNnZdHh0D3N5rPpX8nw TLfHyQth6f2csmMgTxrS55StEDhn3yy6+2FRiSc1mW+vIvxR78FuQQA8HdkhgHca qISYC/OR/tS2qHXJ1LgzN6vO7X2KcQqg3G8AISKvC2rBykJyi/1LjX9Nz/43LDAt 9ye7jqO5ghcH3g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:39 2026 by rpki-client