This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json) Hash identifier: b8mq11+ol2eiCkkZEE4M32E80SA1GP6VeGIiznDTcAY= Subject key identifier: CF:89:ED:92:AE:13:00:06:7E:08:15:1E:BD:AB:0F:A2:27:1F:30:33 Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d Certificate serial: 019C420F45F28FC89C09E411CE4D6318F292 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft Manifest number: 045E Signing time: Mon 09 Feb 2026 11:00:22 +0000 Manifest this update: Mon 09 Feb 2026 11:00:22 +0000 Manifest next update: Tue 10 Feb 2026 11:00:22 +0000 Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: csiMVxJM6Kq4T17ZqrjvABeJAntjDvGhTQJcO/gZTes=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:45:f2:8f:c8:9c:09:e4:11:ce:4d:63:18:f2:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d Validity Not Before: Feb 9 11:00:22 2026 GMT Not After : Feb 10 11:00:22 2026 GMT Subject: CN=cf89ed92ae1300067e08151ebdab0fa2271f3033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:ec:4e:eb:72:84:1f:96:27:32:ee:40:d4:ff: 46:60:26:cd:a9:8e:36:1e:40:3b:0c:3f:6b:ad:8d: b6:1f:b7:be:10:e2:24:24:bc:4f:22:cb:43:58:d9: a9:96:ca:9e:3e:e1:88:33:8b:00:4d:16:48:b2:95: 0d:6f:85:ed:90:45:52:bc:87:0a:16:0e:4d:90:46: 38:f1:d0:97:c3:69:f5:18:8d:44:66:62:89:09:44: ce:c9:0b:6d:76:c6:ba:31:d7:33:7d:b3:28:c7:be: a8:e0:88:01:2a:d2:5c:d7:93:86:5f:94:61:c6:fa: ac:0c:35:db:33:79:0c:04:15:aa:51:ed:4b:8b:d3: 1b:41:97:44:84:05:d1:95:40:55:1b:0a:66:9d:2b: 11:9e:13:2b:77:75:34:78:9b:76:46:6e:13:ed:40: 74:a1:fb:95:b6:97:98:05:0e:e7:28:cc:78:58:9a: 4f:b5:cd:38:38:44:76:67:d1:75:9c:bb:77:34:c3: 69:72:53:4c:0b:63:d3:2d:39:e3:c5:fe:55:7d:ed: a8:91:5d:7d:45:c0:29:da:8a:da:01:2a:35:73:9e: ba:93:10:04:b2:5d:52:7f:f5:c8:50:83:1b:fe:eb: 8d:2d:48:cf:57:02:c4:83:9d:d0:d7:64:e2:1a:7e: 39:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:89:ED:92:AE:13:00:06:7E:08:15:1E:BD:AB:0F:A2:27:1F:30:33 X509v3 Authority Key Identifier: keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:8c:37:67:46:f2:99:ef:00:1f:b8:c4:58:a1:de:0a:69:98: f7:a8:28:e0:f4:f3:5d:e8:19:04:a2:da:e2:f1:72:a8:66:e5: 41:87:60:5f:d3:eb:3d:d7:b9:6c:a7:8e:5a:56:20:7d:7e:90: 24:36:f8:3f:56:0c:e3:ef:3a:6f:b8:20:7a:4a:2a:13:e2:e9: ef:ec:de:d8:80:b9:c4:ff:c8:fb:ec:04:75:17:62:8b:a6:a8: 22:26:49:3f:e8:fd:7b:2e:90:f9:11:4a:16:4d:eb:c9:21:b4: e4:c7:22:ec:33:c3:b9:fc:47:85:2e:70:9e:17:b4:4d:02:c4: 9a:d4:a2:d2:2a:bf:11:3d:68:ce:ce:57:95:88:47:96:f3:87: c4:43:a3:f4:74:84:2c:80:d7:f5:7b:06:8d:02:61:4e:5a:23: cd:d8:4c:56:d6:1d:7a:b6:86:91:01:7d:89:1c:b8:0f:a3:65: 04:27:31:f9:dc:a3:51:44:3e:f6:b1:18:9e:f6:b2:4b:60:5c: d4:87:f0:47:bf:7c:e1:ee:6e:43:cf:3d:66:c3:2c:74:83:28: 39:d5:d4:4c:fe:ae:a1:27:c7:f0:1a:15:e7:05:11:38:6c:92: e7:97:3c:a6:15:57:75:db:dd:e0:55:c2:22:7b:9b:27:a3:59: 59:b1:f5:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0Xyj8icCeQRzk1jGPKSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMmIwMmM0NWM3NWViZjcyZDU2ZDMzYzI4MDI5N2MyYWU4 N2ViMmQwHhcNMjYwMjA5MTEwMDIyWhcNMjYwMjEwMTEwMDIyWjAzMTEwLwYDVQQD EyhjZjg5ZWQ5MmFlMTMwMDA2N2UwODE1MWViZGFiMGZhMjI3MWYzMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+xO63KEH5YnMu5A1P9GYCbNqY42 HkA7DD9rrY22H7e+EOIkJLxPIstDWNmplsqePuGIM4sATRZIspUNb4XtkEVSvIcK Fg5NkEY48dCXw2n1GI1EZmKJCUTOyQttdsa6MdczfbMox76o4IgBKtJc15OGX5Rh xvqsDDXbM3kMBBWqUe1Li9MbQZdEhAXRlUBVGwpmnSsRnhMrd3U0eJt2Rm4T7UB0 ofuVtpeYBQ7nKMx4WJpPtc04OER2Z9F1nLt3NMNpclNMC2PTLTnjxf5Vfe2okV19 RcAp2oraASo1c566kxAEsl1Sf/XIUIMb/uuNLUjPVwLEg53Q12TiGn45awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+J7ZKuEwAGfggVHr2rD6InHzAzMB8GA1UdIwQY MBaAFHErAsRcdev3LVbTPCgCl8Kuh+stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgt MzUyNDczZGQ1MTc5LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgtMzUyNDczZGQ1MTc5 LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPYw3Z0by me8AH7jEWKHeCmmY96go4PTzXegZBKLa4vFyqGblQYdgX9PrPde5bKeOWlYgfX6Q JDb4P1YM4+86b7ggekoqE+Lp7+ze2IC5xP/I++wEdRdii6aoIiZJP+j9ey6Q+RFK Fk3rySG05Mci7DPDufxHhS5wnhe0TQLEmtSi0iq/ET1ozs5XlYhHlvOHxEOj9HSE LIDX9XsGjQJhTlojzdhMVtYderaGkQF9iRy4D6NlBCcx+dyjUUQ+9rEYnvayS2Bc 1IfwR7984e5uQ889ZsMsdIMoOdXUTP6uoSfH8BoV5wUROGyS55c8phVXddvd4FXC InubJ6NZWbH1SA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:16 2026 by rpki-client