This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft File: CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft (raw, json) Hash identifier: 46YmyDQOinBWjeg5Hh5of3Jng9Lm+U574vOZttp7Tl0= Subject key identifier: 7F:F8:24:35:D3:F2:0D:2E:72:AC:DD:4C:96:D1:F7:68:7A:52:9B:85 Authority key identifier: 08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F Certificate issuer: /CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f Certificate serial: 019C4322627A543D9C630C8E525B215D72E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft Manifest number: 061F Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl (hash: Ln0BYu+nbhU7wpsHhz7j+qTqXSnlV02R/2Xkf9CcxyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:62:7a:54:3d:9c:63:0c:8e:52:5b:21:5d:72:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08a8b8fe0c885a45f2485523342e9ba8dc89e68f Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=7ff82435d3f20d2e72acdd4c96d1f7687a529b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:37:a3:e2:ee:3d:bc:c5:19:c0:e1:b0:b0:a5: c3:d8:0e:2c:5a:9d:eb:94:cd:f0:af:8c:bf:9e:5e: 88:c3:96:a8:a6:b2:13:6f:4f:d9:bd:ec:4e:a6:83: 75:7d:3b:37:6f:58:39:70:d8:b3:e7:09:27:1d:99: c1:c7:29:79:a8:88:c6:f9:08:13:9c:2a:b9:b9:0f: ed:42:76:99:51:ca:6d:ee:38:09:41:d5:f4:f0:94: 45:b7:37:f8:02:29:d7:fa:fc:96:a9:15:70:98:a7: a9:ce:d3:ea:49:aa:bd:77:8c:a8:36:7b:89:a1:6c: 98:23:52:47:fc:1a:20:6a:e6:ca:9e:35:dd:c5:fd: 81:e0:13:bd:bc:d5:92:4a:39:54:ec:12:06:37:fe: 6b:57:ef:24:09:63:2f:ed:dd:c2:e0:03:c9:cb:b7: a4:43:70:df:58:59:23:b9:64:b3:75:aa:cf:10:a6: 5f:00:f4:27:34:b3:04:4f:b8:0e:03:76:85:3b:ad: 85:2f:58:c0:36:8d:7a:60:85:04:1c:ff:6f:d5:19: 5f:34:9c:a0:a1:82:ab:74:b1:01:e3:a5:e3:43:20: df:bd:72:e1:69:5e:b0:78:a7:f6:d9:20:6f:d9:8c: 6b:7e:bf:ee:37:e3:84:84:be:34:4c:c6:bc:7c:48: cb:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F8:24:35:D3:F2:0D:2E:72:AC:DD:4C:96:D1:F7:68:7A:52:9B:85 X509v3 Authority Key Identifier: keyid:08:A8:B8:FE:0C:88:5A:45:F2:48:55:23:34:2E:9B:A8:DC:89:E6:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKi4_gyIWkXySFUjNC6bqNyJ5o8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f8e599-b57a-44a2-9c35-9ee53442c3e9/1/CKi4_gyIWkXySFUjNC6bqNyJ5o8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:93:2b:60:44:b0:b3:6a:d3:80:30:03:50:8b:96:a8:ab:66: c5:a4:ee:4b:6a:b7:f4:39:df:eb:f0:cf:89:8a:7c:75:4b:c2: b8:c0:4c:d4:0f:4d:54:83:65:f8:7d:bc:58:21:86:5e:73:b7: 83:69:ae:88:3e:75:fd:0e:5f:a5:3a:fc:ff:19:f4:4e:17:c7: ad:08:b3:b0:7a:3d:d8:5e:3d:46:91:fc:a6:e7:be:a7:97:40: 06:10:51:b1:c5:62:49:c9:e0:bf:06:28:31:2f:bf:69:e0:48: 13:6f:0c:55:89:0e:90:3e:70:bc:0e:c9:61:06:85:df:11:5a: b4:dd:58:9b:e8:9b:8c:f8:c8:36:3b:ec:91:30:77:4f:4b:13: 95:a3:0f:0e:4c:47:fc:af:b1:13:56:d8:39:61:22:fc:4e:e6: a4:52:ad:60:ac:65:ee:4b:33:9d:41:7f:f8:83:d4:7b:55:28: f9:18:15:4f:fa:c7:a4:88:c5:78:cd:59:8a:87:89:1a:36:a9: e7:5f:7c:42:a2:59:8e:89:92:c4:8c:70:e1:6c:ad:d9:8a:08: 91:fa:4b:15:0e:9b:e8:ab:b8:2b:ea:70:d5:41:8a:1c:e6:99: 43:1d:eb:ea:c8:6f:a1:31:8c:ff:0c:b0:b8:38:4a:6d:82:7b: 14:dc:a7:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImJ6VD2cYwyOUlshXXLmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YThiOGZlMGM4ODVhNDVmMjQ4NTUyMzM0MmU5YmE4ZGM4 OWU2OGYwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD Eyg3ZmY4MjQzNWQzZjIwZDJlNzJhY2RkNGM5NmQxZjc2ODdhNTI5Yjg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6zej4u49vMUZwOGwsKXD2A4sWp3r lM3wr4y/nl6Iw5aoprITb0/ZvexOpoN1fTs3b1g5cNiz5wknHZnBxyl5qIjG+QgT nCq5uQ/tQnaZUcpt7jgJQdX08JRFtzf4AinX+vyWqRVwmKepztPqSaq9d4yoNnuJ oWyYI1JH/BogaubKnjXdxf2B4BO9vNWSSjlU7BIGN/5rV+8kCWMv7d3C4APJy7ek Q3DfWFkjuWSzdarPEKZfAPQnNLMET7gOA3aFO62FL1jANo16YIUEHP9v1RlfNJyg oYKrdLEB46XjQyDfvXLhaV6weKf22SBv2Yxrfr/uN+OEhL40TMa8fEjLOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/4JDXT8g0ucqzdTJbR92h6UpuFMB8GA1UdIwQY MBaAFAiouP4MiFpF8khVIzQum6jcieaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUt OWVlNTM0NDJjM2U5LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mOGU1OTktYjU3YS00NGEyLTljMzUtOWVlNTM0NDJjM2U5 LzEvQ0tpNF9neUlXa1h5U0ZVak5DNmJxTnlKNW84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZMrYESw s2rTgDADUIuWqKtmxaTuS2q39Dnf6/DPiYp8dUvCuMBM1A9NVINl+H28WCGGXnO3 g2muiD51/Q5fpTr8/xn0ThfHrQizsHo92F49RpH8pue+p5dABhBRscViScngvwYo MS+/aeBIE28MVYkOkD5wvA7JYQaF3xFatN1Ym+ibjPjINjvskTB3T0sTlaMPDkxH /K+xE1bYOWEi/E7mpFKtYKxl7ksznUF/+IPUe1Uo+RgVT/rHpIjFeM1ZioeJGjap 5198QqJZjomSxIxw4Wyt2YoIkfpLFQ6b6Ku4K+pw1UGKHOaZQx3r6shvoTGM/wyw uDhKbYJ7FNynKw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:58 2026 by rpki-client