This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft File: CuenjWwPepgBOXu51SmocVlcgEc.mft (raw, json) Hash identifier: F7Es/M9aBi44UmB7uA9rgkXKJ2KLQYiy7RKMkh1TkDw= Subject key identifier: 21:3E:9A:55:53:5C:F7:D6:03:CF:C9:FA:02:F4:20:79:EC:B5:09:ED Authority key identifier: 0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 Certificate issuer: /CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Certificate serial: 019C4390CD18CD03C7745452FE2D03795750 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft Manifest number: 0995 Signing time: Mon 09 Feb 2026 18:01:28 +0000 Manifest this update: Mon 09 Feb 2026 18:01:28 +0000 Manifest next update: Tue 10 Feb 2026 18:01:28 +0000 Files and hashes: 1: CuenjWwPepgBOXu51SmocVlcgEc.crl (hash: nHLQ3bpHybUjEAL6krYmPw4ByJIOx5Q7ZMKGWPBBLig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:cd:18:cd:03:c7:74:54:52:fe:2d:03:79:57:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ae7a78d6c0f7a9801397bb9d529a871595c8047 Validity Not Before: Feb 9 18:01:28 2026 GMT Not After : Feb 10 18:01:28 2026 GMT Subject: CN=213e9a55535cf7d603cfc9fa02f42079ecb509ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:96:68:ab:7f:91:0b:a4:2c:7c:bb:0b:85:aa: c6:67:98:d9:b1:e1:56:f0:6b:39:6f:f3:b9:19:c7: 31:03:55:07:9b:d8:66:3c:84:86:48:1d:38:22:16: 16:ce:2f:b3:71:b8:08:c9:32:00:78:2c:96:86:5c: 22:d5:4b:72:63:82:5b:ec:51:33:d5:23:84:fe:31: 1b:3e:40:81:30:3e:4a:06:81:84:e6:ba:2a:e3:d5: 69:c8:65:4b:da:bd:0d:a4:05:49:c0:2e:41:e0:e9: b1:45:d0:0f:8e:89:45:28:34:0d:c4:91:f4:82:7d: 8a:24:0c:1d:16:5d:11:aa:56:37:50:00:9b:cc:aa: 4c:65:ac:ae:97:7a:59:bc:c2:81:eb:ec:54:be:7a: 60:fe:ce:13:36:40:d7:4c:fa:9a:83:5a:f7:9d:5b: 98:3f:0f:8e:0d:69:29:f3:5e:8c:7b:64:ce:09:e9: a0:ce:26:61:b4:5d:a9:7d:c0:cb:b4:9d:a6:a4:cf: 10:66:85:56:ec:fd:5d:3e:29:40:81:3a:bc:d7:14: 6e:64:7a:bd:c4:9c:35:72:bc:65:aa:30:a5:68:0d: cb:c8:62:46:ce:4a:1f:83:a9:d5:1c:08:94:7d:7c: b7:0c:3d:1e:9c:bb:b4:42:13:85:2e:36:d0:55:91: 7f:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:3E:9A:55:53:5C:F7:D6:03:CF:C9:FA:02:F4:20:79:EC:B5:09:ED X509v3 Authority Key Identifier: keyid:0A:E7:A7:8D:6C:0F:7A:98:01:39:7B:B9:D5:29:A8:71:59:5C:80:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuenjWwPepgBOXu51SmocVlcgEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c7695-90e2-4825-9d85-ac0f95d8ef20/1/CuenjWwPepgBOXu51SmocVlcgEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:11:ec:68:92:a1:78:b4:32:dc:21:f7:57:23:cc:7a:30:81: 4f:e9:96:6e:4e:5e:c9:88:60:32:c5:66:12:18:ef:ab:f1:60: 0c:97:f2:45:29:d9:85:04:be:d2:b5:54:4a:49:77:a3:b6:4f: 22:93:60:61:51:19:13:4b:3e:73:54:a8:07:36:b3:b8:82:dc: 2b:bd:1d:92:b9:d8:a1:e2:1a:56:0c:07:f2:d1:99:9c:ab:0d: e4:33:4e:42:9b:78:05:09:b8:d0:4e:62:ad:bb:67:25:5d:de: ef:7a:e9:49:00:02:e5:ac:01:74:ce:5c:ee:9a:53:bf:4e:d6: ed:84:ea:75:e5:4a:4d:51:c7:ed:84:c7:18:fa:e0:5a:ba:20: 53:5c:ac:28:01:79:1f:41:89:18:ef:70:80:cb:8f:50:3b:52: 05:9d:9c:fa:5c:d4:99:cf:cd:c3:79:64:71:c3:c0:7d:91:85: 41:de:17:41:1d:7f:c7:d4:d4:d7:a0:9a:11:d1:36:dd:e0:91: 8b:16:3b:2c:2e:df:a3:52:e5:15:55:94:6b:59:f0:f2:1b:b7: 33:08:ab:6d:eb:0e:ae:30:6f:ea:e6:b5:c9:72:62:42:2d:03: f8:a2:d2:36:76:f2:d3:45:9a:f8:fb:cb:45:72:42:e0:d4:98: 47:95:dc:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkM0YzQPHdFRS/i0DeVdQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhZTdhNzhkNmMwZjdhOTgwMTM5N2JiOWQ1MjlhODcxNTk1 YzgwNDcwHhcNMjYwMjA5MTgwMTI4WhcNMjYwMjEwMTgwMTI4WjAzMTEwLwYDVQQD EygyMTNlOWE1NTUzNWNmN2Q2MDNjZmM5ZmEwMmY0MjA3OWVjYjUwOWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JZoq3+RC6QsfLsLharGZ5jZseFW 8Gs5b/O5GccxA1UHm9hmPISGSB04IhYWzi+zcbgIyTIAeCyWhlwi1UtyY4Jb7FEz 1SOE/jEbPkCBMD5KBoGE5roq49VpyGVL2r0NpAVJwC5B4OmxRdAPjolFKDQNxJH0 gn2KJAwdFl0RqlY3UACbzKpMZayul3pZvMKB6+xUvnpg/s4TNkDXTPqag1r3nVuY Pw+ODWkp816Me2TOCemgziZhtF2pfcDLtJ2mpM8QZoVW7P1dPilAgTq81xRuZHq9 xJw1crxlqjClaA3LyGJGzkofg6nVHAiUfXy3DD0enLu0QhOFLjbQVZF/QQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCE+mlVTXPfWA8/J+gL0IHnstQntMB8GA1UdIwQY MBaAFArnp41sD3qYATl7udUpqHFZXIBHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUt YWMwZjk1ZDhlZjIwLzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85Yzc2OTUtOTBlMi00ODI1LTlkODUtYWMwZjk1ZDhlZjIw LzEvQ3VlbmpXd1BlcGdCT1h1NTFTbW9jVmxjZ0VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsBHsaJKh eLQy3CH3VyPMejCBT+mWbk5eyYhgMsVmEhjvq/FgDJfyRSnZhQS+0rVUSkl3o7ZP IpNgYVEZE0s+c1SoBzazuILcK70dkrnYoeIaVgwH8tGZnKsN5DNOQpt4BQm40E5i rbtnJV3e73rpSQAC5awBdM5c7ppTv07W7YTqdeVKTVHH7YTHGPrgWrogU1ysKAF5 H0GJGO9wgMuPUDtSBZ2c+lzUmc/Nw3lkccPAfZGFQd4XQR1/x9TU16CaEdE23eCR ixY7LC7fo1LlFVWUa1nw8hu3MwirbesOrjBv6ua1yXJiQi0D+KLSNnby00Wa+PvL RXJC4NSYR5Xchw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:17 2026 by rpki-client