This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft File: CdCil56bZlLWG5Ad1VoZKNv9z20.mft (raw, json) Hash identifier: ftqduZUBGGoC2R07mayff38DwYWAgdCuXXmtGj1P87c= Subject key identifier: 48:EA:36:29:D8:9C:7B:DB:B6:43:1F:73:62:3B:45:AA:FD:1E:69:88 Authority key identifier: 09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D Certificate issuer: /CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d Certificate serial: 019C416AD01765C0B01F34E3B026A5C9A0E4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 08:00:44 +0000 Manifest this update: Mon 09 Feb 2026 08:00:44 +0000 Manifest next update: Tue 10 Feb 2026 08:00:44 +0000 Files and hashes: 1: CdCil56bZlLWG5Ad1VoZKNv9z20.crl (hash: PP2+19a21NvC37To70aGP+JyPDeyyBNqUna+EmvD8Dk=) 2: NmgrOBcP0tgFCTOWcRYJnixwDJY.roa (hash: Ao15E11G2dQ+8WLi/IRmXPfGBQ5eaUZAO3CZk8b1evU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:d0:17:65:c0:b0:1f:34:e3:b0:26:a5:c9:a0:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09d0a2979e9b6652d61b901dd55a1928dbfdcf6d Validity Not Before: Feb 9 08:00:44 2026 GMT Not After : Feb 10 08:00:44 2026 GMT Subject: CN=48ea3629d89c7bdbb6431f73623b45aafd1e6988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:90:a3:bf:4b:92:65:14:ec:a6:1d:c7:19:21: eb:db:84:b7:11:a7:e7:af:5d:18:51:e4:81:b0:5b: 19:d0:c6:4b:41:89:7c:7b:76:51:7e:21:6a:d5:1c: 1b:93:3c:20:29:cb:b7:02:5f:72:aa:63:38:74:99: 52:cc:5c:9b:57:67:85:b8:5b:98:f3:1d:d7:bf:1c: b6:39:d2:4e:23:b1:61:08:ea:b5:b4:da:78:75:60: 15:04:12:a9:07:73:ac:21:ad:51:4c:64:8d:2d:50: 76:7e:91:5c:28:e7:ac:5b:78:68:84:f7:ea:db:24: 7c:6e:ad:17:b7:3e:82:1f:60:46:38:80:a8:75:28: 5f:37:38:af:ad:da:e2:a3:2f:73:86:9f:9a:87:80: a8:8c:47:84:26:56:4c:c4:43:e2:23:38:cc:6d:b0: bb:5a:57:48:1e:f2:fa:08:c9:3d:ba:2d:50:80:fa: d8:33:aa:3c:23:71:db:7f:d1:09:10:6b:15:08:39: 82:c9:44:c0:ef:ed:3d:0d:94:c6:7b:1c:60:63:89: fd:5d:66:1b:36:58:32:bc:0c:2b:3b:b5:92:8e:f0: 32:70:51:80:b5:50:53:fb:f3:1e:4a:a9:47:7f:d4: 23:e0:8f:18:7b:d3:38:32:ce:3c:2f:c8:13:af:f1: b8:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:EA:36:29:D8:9C:7B:DB:B6:43:1F:73:62:3B:45:AA:FD:1E:69:88 X509v3 Authority Key Identifier: keyid:09:D0:A2:97:9E:9B:66:52:D6:1B:90:1D:D5:5A:19:28:DB:FD:CF:6D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CdCil56bZlLWG5Ad1VoZKNv9z20.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/8c33c2-6f72-41b6-a9e4-09f73c354e7c/1/CdCil56bZlLWG5Ad1VoZKNv9z20.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fc:4f:b6:c9:9f:8c:1f:97:1d:ea:f8:c4:be:76:17:94:15: 2b:46:26:79:5c:64:85:15:8a:a0:cb:f2:0b:c4:d9:b8:11:47: 64:4c:98:4d:c5:82:5d:de:28:d1:d1:cc:af:8f:ba:25:e8:d6: 4d:e8:e8:77:0c:9b:aa:73:08:cc:88:f2:03:fd:c4:7e:d7:5b: e4:b6:63:b9:ab:e7:91:3b:c0:66:c0:9d:99:23:e1:45:f6:b4: bb:68:d3:4e:fd:96:8b:9a:8b:2d:eb:2f:8d:14:84:7b:f7:41: f8:af:56:75:82:b7:29:7c:e3:08:75:f5:39:85:40:ae:5a:6a: b9:93:87:78:27:26:0b:f1:6c:4a:fb:be:88:97:a2:40:a7:ef: d1:b4:6d:97:db:05:95:77:fa:d1:76:df:9c:43:8f:e1:b0:54: 6b:b6:44:e6:54:0c:4f:73:7b:17:3d:9b:46:15:74:5a:a0:11: 4e:8e:0c:49:ea:b4:db:aa:30:2b:ec:d3:05:89:5d:fd:36:23: 74:7d:b0:5d:50:80:df:f8:74:4d:fa:23:8e:17:96:f8:4f:70: 6c:01:46:4c:aa:14:df:41:0a:d0:80:ba:ba:ab:8a:b8:ec:9d: b1:c3:ae:8a:64:65:13:d1:3e:17:b9:51:70:01:f5:b8:c7:bf: c8:e1:44:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBatAXZcCwHzTjsCalyaDkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5ZDBhMjk3OWU5YjY2NTJkNjFiOTAxZGQ1NWExOTI4ZGJm ZGNmNmQwHhcNMjYwMjA5MDgwMDQ0WhcNMjYwMjEwMDgwMDQ0WjAzMTEwLwYDVQQD Eyg0OGVhMzYyOWQ4OWM3YmRiYjY0MzFmNzM2MjNiNDVhYWZkMWU2OTg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpCjv0uSZRTsph3HGSHr24S3Eafn r10YUeSBsFsZ0MZLQYl8e3ZRfiFq1RwbkzwgKcu3Al9yqmM4dJlSzFybV2eFuFuY 8x3Xvxy2OdJOI7FhCOq1tNp4dWAVBBKpB3OsIa1RTGSNLVB2fpFcKOesW3hohPfq 2yR8bq0Xtz6CH2BGOICodShfNzivrdrioy9zhp+ah4CojEeEJlZMxEPiIzjMbbC7 WldIHvL6CMk9ui1QgPrYM6o8I3Hbf9EJEGsVCDmCyUTA7+09DZTGexxgY4n9XWYb NlgyvAwrO7WSjvAycFGAtVBT+/MeSqlHf9Qj4I8Ye9M4Ms48L8gTr/G4EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEjqNinYnHvbtkMfc2I7Rar9HmmIMB8GA1UdIwQY MBaAFAnQopeem2ZS1huQHdVaGSjb/c9tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQt MDlmNzNjMzU0ZTdjLzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS84YzMzYzItNmY3Mi00MWI2LWE5ZTQtMDlmNzNjMzU0ZTdj LzEvQ2RDaWw1NmJabExXRzVBZDFWb1pLTnY5ejIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlfxPtsmf jB+XHer4xL52F5QVK0YmeVxkhRWKoMvyC8TZuBFHZEyYTcWCXd4o0dHMr4+6JejW TejodwybqnMIzIjyA/3Eftdb5LZjuavnkTvAZsCdmSPhRfa0u2jTTv2Wi5qLLesv jRSEe/dB+K9WdYK3KXzjCHX1OYVArlpquZOHeCcmC/FsSvu+iJeiQKfv0bRtl9sF lXf60XbfnEOP4bBUa7ZE5lQMT3N7Fz2bRhV0WqARTo4MSeq026owK+zTBYld/TYj dH2wXVCA3/h0TfojjheW+E9wbAFGTKoU30EK0IC6uquKuOydscOuimRlE9E+F7lR cAH1uMe/yOFENQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:31 2026 by rpki-client