This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft File: CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft (raw, json) Hash identifier: TNheBS9FdGwaLXLbJRIt9ahBlTge3ag1cz93802Zi2c= Subject key identifier: B8:B3:38:1E:B7:05:52:8C:06:15:9E:C6:37:E9:F5:EE:41:F3:B4:F0 Authority key identifier: 09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 Certificate issuer: /CN=09e5518e68467b4290c3509268b6d6d664962c86 Certificate serial: 019C43592C67BF3545C8BD84B2083FF792AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft Manifest number: 1209 Signing time: Mon 09 Feb 2026 17:00:43 +0000 Manifest this update: Mon 09 Feb 2026 17:00:43 +0000 Manifest next update: Tue 10 Feb 2026 17:00:43 +0000 Files and hashes: 1: 1TUQTU00MEl499XUdrSRL1I8LFk.roa (hash: LR0SWWMB8Awe+6NzalLAwpz6bv1tNIh3m2MbySdjLTs=) 2: CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl (hash: k8pZk6VfUqKXiFYcMAY/u2Ce1Y+qWWUl8uEXWPasvuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2c:67:bf:35:45:c8:bd:84:b2:08:3f:f7:92:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09e5518e68467b4290c3509268b6d6d664962c86 Validity Not Before: Feb 9 17:00:43 2026 GMT Not After : Feb 10 17:00:43 2026 GMT Subject: CN=b8b3381eb705528c06159ec637e9f5ee41f3b4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8c:54:f4:0b:88:25:89:1b:e9:99:42:c7:1d: 95:fc:b1:ff:ad:d5:ff:79:f2:87:90:cd:d5:fc:fc: 84:20:67:88:ce:eb:60:b8:43:38:4a:66:83:80:a3: 58:a8:04:79:22:ea:4f:bb:56:1a:ce:eb:95:c3:1e: 72:79:da:0d:19:c1:d7:fe:e7:c6:74:1d:7a:84:fc: d9:48:be:a3:9c:b7:fb:9d:a0:ec:6b:0c:88:80:fd: eb:03:67:cb:ab:23:85:23:40:87:1c:97:76:de:72: 62:0c:3f:ce:8c:97:f7:b7:07:7e:18:1d:19:ac:30: e7:bc:6c:a0:cb:72:f3:df:4b:2f:af:44:0e:60:b2: b5:bb:39:9c:3f:27:82:30:a1:53:97:49:a4:6f:3a: e5:8a:01:8d:57:70:6c:27:7b:3d:33:90:21:13:3f: f4:6d:f0:e9:c1:b5:77:bb:ea:fb:79:b2:30:ed:e7: 26:5d:c2:38:ea:a5:b9:8a:3e:a9:19:f1:18:47:cb: ec:8a:c0:5f:88:e7:85:91:a4:3f:e3:2e:9a:05:9a: ae:60:4c:9d:4c:90:d2:d9:28:09:21:63:3f:b1:59: a9:e7:da:45:5c:0f:ea:59:e1:cf:38:d2:66:b4:cb: 29:75:06:40:ac:9e:eb:ee:18:87:89:aa:ce:95:a3: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:38:1E:B7:05:52:8C:06:15:9E:C6:37:E9:F5:EE:41:F3:B4:F0 X509v3 Authority Key Identifier: keyid:09:E5:51:8E:68:46:7B:42:90:C3:50:92:68:B6:D6:D6:64:96:2C:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CeVRjmhGe0KQw1CSaLbW1mSWLIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/30282c-3c82-4730-b95e-e745948983ed/1/CeVRjmhGe0KQw1CSaLbW1mSWLIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fc:a9:bc:f2:a0:9f:02:ee:51:6c:98:cc:6c:96:d1:b3:63: 8e:f1:48:0f:6b:7b:c2:58:5f:7f:bf:ae:d3:34:bb:be:e0:11: b6:0b:1e:18:25:3d:15:26:ec:0f:64:e9:d0:c1:ab:1c:1e:3f: 43:b9:38:06:3e:ef:18:3b:a0:58:1d:f9:7e:2e:ad:89:7b:20: d6:50:a5:05:16:24:87:c1:b3:d4:50:d0:e1:94:90:63:b6:c1: 6a:ab:47:37:20:50:bf:56:7e:fd:d2:9a:ac:d2:08:6d:78:a1: b5:66:56:a0:14:a5:40:80:82:26:6c:be:e2:a5:68:46:2a:b9: cc:7c:c1:b7:09:18:fb:f1:64:75:bf:45:86:e2:b7:24:1e:09: e1:5a:15:08:ec:e5:04:bc:84:c1:98:56:f4:1e:b9:56:0a:9b: fe:84:24:7b:68:30:90:bf:5f:54:ca:48:97:03:ec:ec:18:ce: 40:60:ca:75:41:9f:e6:22:4c:cb:ba:b7:bb:7f:a3:97:5a:9d: 25:46:b2:18:ab:51:ac:f8:3c:ef:cc:55:f7:6b:4a:1b:bf:8b: be:73:ca:ea:e3:4d:50:cc:ec:12:1b:b6:16:3f:a4:0c:d7:42: b7:24:56:7d:a3:ce:97:53:14:44:8e:2a:73:73:ae:ef:b1:79: 06:4a:60:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSxnvzVFyL2Esgg/95KrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZTU1MThlNjg0NjdiNDI5MGMzNTA5MjY4YjZkNmQ2NjQ5 NjJjODYwHhcNMjYwMjA5MTcwMDQzWhcNMjYwMjEwMTcwMDQzWjAzMTEwLwYDVQQD EyhiOGIzMzgxZWI3MDU1MjhjMDYxNTllYzYzN2U5ZjVlZTQxZjNiNGYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oxU9AuIJYkb6ZlCxx2V/LH/rdX/ efKHkM3V/PyEIGeIzutguEM4SmaDgKNYqAR5IupPu1YazuuVwx5yedoNGcHX/ufG dB16hPzZSL6jnLf7naDsawyIgP3rA2fLqyOFI0CHHJd23nJiDD/OjJf3twd+GB0Z rDDnvGygy3Lz30svr0QOYLK1uzmcPyeCMKFTl0mkbzrligGNV3BsJ3s9M5AhEz/0 bfDpwbV3u+r7ebIw7ecmXcI46qW5ij6pGfEYR8vsisBfiOeFkaQ/4y6aBZquYEyd TJDS2SgJIWM/sVmp59pFXA/qWeHPONJmtMspdQZArJ7r7hiHiarOlaMDBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLizOB63BVKMBhWexjfp9e5B87TwMB8GA1UdIwQY MBaAFAnlUY5oRntCkMNQkmi21tZkliyGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUt ZTc0NTk0ODk4M2VkLzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC8zMDI4MmMtM2M4Mi00NzMwLWI5NWUtZTc0NTk0ODk4M2Vk LzEvQ2VWUmptaEdlMEtRdzFDU2FMYlcxbVNXTElZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUPypvPKg nwLuUWyYzGyW0bNjjvFID2t7wlhff7+u0zS7vuARtgseGCU9FSbsD2Tp0MGrHB4/ Q7k4Bj7vGDugWB35fi6tiXsg1lClBRYkh8Gz1FDQ4ZSQY7bBaqtHNyBQv1Z+/dKa rNIIbXihtWZWoBSlQICCJmy+4qVoRiq5zHzBtwkY+/Fkdb9FhuK3JB4J4VoVCOzl BLyEwZhW9B65Vgqb/oQke2gwkL9fVMpIlwPs7BjOQGDKdUGf5iJMy7q3u3+jl1qd JUayGKtRrPg878xV92tKG7+LvnPK6uNNUMzsEhu2Fj+kDNdCtyRWfaPOl1MURI4q c3Ou77F5Bkpgpw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:48 2026 by rpki-client