This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft File: cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft (raw, json) Hash identifier: ZX0MToKml3uxR9ibkkjYJpIbnaIfVVySeN3eXI5a8Ec= Subject key identifier: 5D:FD:26:C8:EB:D9:37:FB:06:40:B0:0E:41:2F:04:EB:31:CA:50:72 Authority key identifier: 70:B1:B1:AA:11:CA:4A:A4:A3:76:E5:C7:2A:92:1A:F4:C2:77:78:39 Certificate issuer: /CN=70b1b1aa11ca4aa4a376e5c72a921af4c2777839 Certificate serial: 019C41D86050B728F4C051DABFACF1CA8511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLGxqhHKSqSjduXHKpIa9MJ3eDk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft Manifest number: 1E Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: cLGxqhHKSqSjduXHKpIa9MJ3eDk.crl (hash: yo4xjw1vN2W6Qo1FyxHX18Ry2PWbTyohQdHpLMSQ6Oo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.crl rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft rsync://rpki.ripe.net/repository/DEFAULT/cLGxqhHKSqSjduXHKpIa9MJ3eDk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:60:50:b7:28:f4:c0:51:da:bf:ac:f1:ca:85:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70b1b1aa11ca4aa4a376e5c72a921af4c2777839 Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=5dfd26c8ebd937fb0640b00e412f04eb31ca5072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:04:0c:65:fa:31:ad:8a:91:c6:e4:ee:df: 79:33:62:f4:77:06:24:55:6b:43:4b:92:f9:eb:16: 91:38:7a:c3:45:ed:df:2c:fd:2c:fd:65:b3:17:65: c1:72:87:0e:e7:77:35:58:ca:b3:14:96:0b:cd:de: 93:58:b1:11:4f:a0:49:b3:ad:00:9f:1b:cd:55:40: 14:48:12:ae:2e:67:a9:f9:59:41:f7:63:c5:60:da: bb:77:a6:e2:63:0a:9d:35:1b:69:2b:fe:46:b6:56: 06:71:5d:a5:2e:cd:be:16:c5:9f:93:fe:f1:e6:03: b3:b2:91:d4:dd:50:cf:f5:b8:0a:27:9b:fb:21:ee: 05:fd:83:94:65:c3:9b:c0:2e:7d:57:2f:7d:8c:0b: b1:ef:3e:80:26:59:09:5d:99:84:ad:a7:df:fb:ba: 2e:12:68:09:fa:1a:f0:b6:3f:39:e6:f8:ac:64:c4: 92:e5:d8:a0:93:05:1e:9e:84:0d:16:cd:99:81:8c: 3e:11:c5:f2:80:7c:03:9e:a9:bb:a7:31:82:e8:7c: 17:3e:17:cb:52:90:b5:56:9b:a5:17:6c:33:56:fb: f6:8e:46:e3:c9:54:3a:5a:e6:95:51:ef:db:8c:6b: 39:4c:25:32:26:21:0e:24:53:34:af:43:68:32:e6: 77:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FD:26:C8:EB:D9:37:FB:06:40:B0:0E:41:2F:04:EB:31:CA:50:72 X509v3 Authority Key Identifier: keyid:70:B1:B1:AA:11:CA:4A:A4:A3:76:E5:C7:2A:92:1A:F4:C2:77:78:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLGxqhHKSqSjduXHKpIa9MJ3eDk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/df74c0-cb06-4791-b709-4d7fb8383d1d/1/cLGxqhHKSqSjduXHKpIa9MJ3eDk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b3:3b:52:44:d2:45:64:04:54:a8:74:97:35:cd:24:5d:82: 8c:ed:aa:dc:5b:92:16:4a:e0:10:66:d5:32:71:b5:08:dc:76: 0a:c0:92:05:f4:88:b6:aa:85:bf:a0:14:2b:2c:18:3f:88:0b: 3f:30:2c:c4:64:5d:b3:cc:67:48:fb:94:11:be:a0:db:ea:38: 04:fa:25:68:c7:26:db:0d:f2:c9:ec:6c:84:93:11:69:ca:39: a5:b0:b5:ec:e9:ee:b3:b2:29:f3:f3:33:82:02:4b:4e:75:46: f0:07:9a:6e:4b:ed:69:1c:70:76:be:f2:13:4e:fd:26:68:b5: 16:0e:52:9f:33:60:47:e6:31:3b:e5:1f:e4:cb:61:17:02:4c: f2:ac:6b:da:d3:29:30:1d:2f:5d:d0:b9:aa:c0:d2:b6:49:d9: 06:c4:1f:92:6b:d0:19:ea:5a:06:85:15:4b:93:75:4b:5a:72: ad:8b:58:b5:46:70:5a:3a:e8:41:92:36:c8:1c:d8:6a:03:64: f9:38:6f:10:11:7c:e1:fd:fb:22:66:dc:0a:e5:48:0f:e7:4f: 12:2d:d2:66:87:1d:d8:bc:b2:73:44:39:c4:79:69:bb:a6:c4: 0f:1c:84:e2:89:5a:18:1f:a5:75:89:33:44:3b:7b:b8:96:25: 30:a1:e4:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GBQtyj0wFHav6zxyoURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwYjFiMWFhMTFjYTRhYTRhMzc2ZTVjNzJhOTIxYWY0YzI3 Nzc4MzkwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD Eyg1ZGZkMjZjOGViZDkzN2ZiMDY0MGIwMGU0MTJmMDRlYjMxY2E1MDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFsEDGX6Ma2Kkcbk7t95M2L0dwYk VWtDS5L56xaROHrDRe3fLP0s/WWzF2XBcocO53c1WMqzFJYLzd6TWLERT6BJs60A nxvNVUAUSBKuLmep+VlB92PFYNq7d6biYwqdNRtpK/5GtlYGcV2lLs2+FsWfk/7x 5gOzspHU3VDP9bgKJ5v7Ie4F/YOUZcObwC59Vy99jAux7z6AJlkJXZmEraff+7ou EmgJ+hrwtj855visZMSS5digkwUenoQNFs2ZgYw+EcXygHwDnqm7pzGC6HwXPhfL UpC1VpulF2wzVvv2jkbjyVQ6WuaVUe/bjGs5TCUyJiEOJFM0r0NoMuZ3yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF39Jsjr2Tf7BkCwDkEvBOsxylByMB8GA1UdIwQY MBaAFHCxsaoRykqko3blxyqSGvTCd3g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0xHeHFoSEtTcVNqZHVYSEtwSWE5TUozZURrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kZjc0YzAtY2IwNi00NzkxLWI3MDkt NGQ3ZmI4MzgzZDFkLzEvY0xHeHFoSEtTcVNqZHVYSEtwSWE5TUozZURrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS9kZjc0YzAtY2IwNi00NzkxLWI3MDktNGQ3ZmI4MzgzZDFk LzEvY0xHeHFoSEtTcVNqZHVYSEtwSWE5TUozZURrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVbM7UkTS RWQEVKh0lzXNJF2CjO2q3FuSFkrgEGbVMnG1CNx2CsCSBfSItqqFv6AUKywYP4gL PzAsxGRds8xnSPuUEb6g2+o4BPolaMcm2w3yyexshJMRaco5pbC17Onus7Ip8/Mz ggJLTnVG8AeabkvtaRxwdr7yE079Jmi1Fg5SnzNgR+YxO+Uf5MthFwJM8qxr2tMp MB0vXdC5qsDStknZBsQfkmvQGepaBoUVS5N1S1pyrYtYtUZwWjroQZI2yBzYagNk +ThvEBF84f37ImbcCuVID+dPEi3SZocd2Lyyc0Q5xHlpu6bEDxyE4olaGB+ldYkz RDt7uJYlMKHkHw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:08 2026 by rpki-client