This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft File: CBho7oTF8n2RadJDwze3S2_4wU0.mft (raw, json) Hash identifier: fRxOPHUHtYuz5x+ohysiOxOXh00rRDD2zyEaxOYlbeE= Subject key identifier: AC:13:24:E0:70:EE:07:65:EB:42:5A:F9:C0:05:16:E7:73:9E:3D:D7 Authority key identifier: 08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D Certificate issuer: /CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Certificate serial: 019C262A5B65F6AAACA3E100B0CF71F34C5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft Manifest number: 1265 Signing time: Wed 04 Feb 2026 01:00:35 +0000 Manifest this update: Wed 04 Feb 2026 01:00:35 +0000 Manifest next update: Thu 05 Feb 2026 01:00:35 +0000 Files and hashes: 1: CBho7oTF8n2RadJDwze3S2_4wU0.crl (hash: Y1uytbRLHtpAH1jLVendF4uNjGywPX7vxibydSSfCxo=) 2: yV-ewrH7k-ZVeTB7O_UFnpgog5A.roa (hash: SiYFSeHpUqqYdl2Q6Z3QwRJgzrvQFbWknDDTKnXeGdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:2a:5b:65:f6:aa:ac:a3:e1:00:b0:cf:71:f3:4c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081868ee84c5f27d9169d243c337b74b6ff8c14d Validity Not Before: Feb 4 01:00:35 2026 GMT Not After : Feb 5 01:00:35 2026 GMT Subject: CN=ac1324e070ee0765eb425af9c00516e7739e3dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:71:a2:d2:26:c7:37:ac:40:84:58:4a:bf:3f: 8d:0d:bc:21:f4:cd:ff:5e:2d:92:75:f8:24:69:ac: bc:93:5d:1c:7e:ac:f6:76:cc:d9:b8:49:e7:df:9a: 9c:41:d9:f6:45:10:ff:8f:0a:d7:6e:e4:0b:a1:8f: 0c:38:49:98:87:25:93:4c:c5:00:7b:89:b8:f5:95: f6:58:3f:91:10:ac:a3:1c:d3:d3:86:d0:46:24:4a: 3c:c2:b9:ca:c1:5b:bc:50:2d:36:7a:e1:ea:0e:95: 71:3a:e4:c4:78:cb:50:a6:f9:8b:ca:46:9c:95:6a: fd:bd:1e:15:da:a4:78:18:64:d3:d7:4e:23:de:85: 03:35:38:48:38:87:1a:01:9f:cc:98:05:ea:fb:86: 5c:10:8c:7a:8d:4f:08:96:14:55:96:a1:7e:8c:ff: 89:1d:09:4e:42:a7:f9:84:fb:17:6c:31:6a:5d:60: dc:11:3e:3a:85:50:7f:1c:1a:32:7e:f1:39:cc:45: 76:3d:d2:3a:05:90:2f:98:d9:c7:9d:8d:44:e0:08: ba:3d:15:09:72:56:95:90:36:63:4f:be:d7:36:09: 97:3b:91:a9:6d:34:1c:a0:13:bc:6f:0a:07:9b:0e: a1:a3:9b:12:48:5d:bb:6b:78:4d:d2:da:5a:81:98: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:13:24:E0:70:EE:07:65:EB:42:5A:F9:C0:05:16:E7:73:9E:3D:D7 X509v3 Authority Key Identifier: keyid:08:18:68:EE:84:C5:F2:7D:91:69:D2:43:C3:37:B7:4B:6F:F8:C1:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBho7oTF8n2RadJDwze3S2_4wU0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/dec3f1-ce3a-4cb5-9cfc-a30f537d9c5b/1/CBho7oTF8n2RadJDwze3S2_4wU0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b2:21:77:eb:03:91:13:02:0c:31:3e:93:4b:55:21:38:28: 47:25:28:4a:8a:28:f4:a2:af:9b:8e:99:62:49:fa:ef:de:03: c0:81:de:4a:de:49:97:19:1e:bb:48:9e:74:ed:5c:54:c3:7d: 1c:6d:ae:02:6b:71:c1:c6:c8:f2:6e:99:54:6a:b0:f2:32:52: b8:d2:0d:9b:34:ec:bb:e9:68:66:94:43:90:41:d0:98:79:b5: 7d:be:c4:37:22:79:e1:8d:23:40:53:71:03:56:bd:50:55:df: 47:39:78:05:f5:94:e7:fe:86:b5:63:7d:c1:b0:0a:b2:6a:db: ba:ec:0f:24:01:b9:58:02:89:8f:33:b5:6e:77:e8:a5:8c:2b: dc:5f:8f:67:bf:e4:6b:50:52:47:fe:29:12:49:9e:66:97:15: 23:97:76:e2:04:85:12:6c:8b:27:50:0a:2d:4b:3c:82:6c:25: 51:ca:4c:ef:64:11:3d:f1:e0:20:12:bb:a2:d7:93:47:46:86: a9:15:42:65:d1:a8:62:fe:e1:07:3c:d7:95:49:3a:9a:29:73: 9f:1e:ad:7b:54:49:1f:0b:31:87:7f:7b:96:7f:01:45:a6:53: ef:e2:f8:3d:41:e2:85:10:88:d0:96:64:b3:ac:42:f6:b7:7f: 1d:be:d9:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwmKltl9qqso+EAsM9x80xdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MTg2OGVlODRjNWYyN2Q5MTY5ZDI0M2MzMzdiNzRiNmZm OGMxNGQwHhcNMjYwMjA0MDEwMDM1WhcNMjYwMjA1MDEwMDM1WjAzMTEwLwYDVQQD EyhhYzEzMjRlMDcwZWUwNzY1ZWI0MjVhZjljMDA1MTZlNzczOWUzZGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXGi0ibHN6xAhFhKvz+NDbwh9M3/ Xi2Sdfgkaay8k10cfqz2dszZuEnn35qcQdn2RRD/jwrXbuQLoY8MOEmYhyWTTMUA e4m49ZX2WD+REKyjHNPThtBGJEo8wrnKwVu8UC02euHqDpVxOuTEeMtQpvmLykac lWr9vR4V2qR4GGTT104j3oUDNThIOIcaAZ/MmAXq+4ZcEIx6jU8IlhRVlqF+jP+J HQlOQqf5hPsXbDFqXWDcET46hVB/HBoyfvE5zEV2PdI6BZAvmNnHnY1E4Ai6PRUJ claVkDZjT77XNgmXO5GpbTQcoBO8bwoHmw6ho5sSSF27a3hN0tpagZjOWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKwTJOBw7gdl60Ja+cAFFudznj3XMB8GA1UdIwQY MBaAFAgYaO6ExfJ9kWnSQ8M3t0tv+MFNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMt YTMwZjUzN2Q5YzViLzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9kZWMzZjEtY2UzYS00Y2I1LTljZmMtYTMwZjUzN2Q5YzVi LzEvQ0JobzdvVEY4bjJSYWRKRHd6ZTNTMl80d1UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZbIhd+sD kRMCDDE+k0tVITgoRyUoSooo9KKvm46ZYkn6794DwIHeSt5Jlxkeu0iedO1cVMN9 HG2uAmtxwcbI8m6ZVGqw8jJSuNINmzTsu+loZpRDkEHQmHm1fb7ENyJ54Y0jQFNx A1a9UFXfRzl4BfWU5/6GtWN9wbAKsmrbuuwPJAG5WAKJjzO1bnfopYwr3F+PZ7/k a1BSR/4pEkmeZpcVI5d24gSFEmyLJ1AKLUs8gmwlUcpM72QRPfHgIBK7oteTR0aG qRVCZdGoYv7hBzzXlUk6milznx6te1RJHwsxh397ln8BRaZT7+L4PUHihRCI0JZk s6xC9rd/Hb7ZCQ== -----END CERTIFICATE-----Generated at Wed Feb 4 08:29:36 2026 by rpki-client