This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft File: cTm2kHj5bKuvcYo5u1hniurBzMI.mft (raw, json) Hash identifier: 1Y+gY5e+R6UE2+VMVHh3KdVd/3/AT/DQpv0oMSckXSU= Subject key identifier: E6:5A:1C:03:AC:B0:BF:1C:5C:58:4F:43:78:93:D7:6E:CB:18:9E:57 Authority key identifier: 71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 Certificate issuer: /CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Certificate serial: 019C42B432395B4A1D49CA371DD47267F230 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft Manifest number: 120B Signing time: Mon 09 Feb 2026 14:00:31 +0000 Manifest this update: Mon 09 Feb 2026 14:00:31 +0000 Manifest next update: Tue 10 Feb 2026 14:00:31 +0000 Files and hashes: 1: cTm2kHj5bKuvcYo5u1hniurBzMI.crl (hash: Z13tfaMixk6n/wiaEXlXxtQLNHC3GUnaLWb42xHhNO8=) 2: kghyh_nxdTf25rPoKF6M0zemjIY.roa (hash: ngurKcfdQu5xMulMoMEszSDNjnNbW5VunkobEE1hVdc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:32:39:5b:4a:1d:49:ca:37:1d:d4:72:67:f2:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7139b69078f96cabaf718a39bb58678aeac1ccc2 Validity Not Before: Feb 9 14:00:31 2026 GMT Not After : Feb 10 14:00:31 2026 GMT Subject: CN=e65a1c03acb0bf1c5c584f437893d76ecb189e57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:14:3a:51:cd:de:0f:5b:57:49:e3:07:9f:d6: b4:22:7e:8b:76:30:26:c7:12:87:2d:01:d3:b5:d6: 36:71:04:01:9d:a9:b8:be:29:ab:f5:8c:e7:28:54: b1:ac:51:45:a2:8e:02:69:c1:d0:80:25:47:61:46: 1f:48:f7:0e:2b:f7:8f:de:a6:81:0b:6e:6d:88:1c: 85:d6:39:5d:40:b2:c6:9e:a0:b9:b6:81:7c:ec:12: cf:fd:f5:e2:08:46:3c:26:92:6b:8f:33:79:0c:2b: e5:3c:75:5c:cf:1e:97:6e:7f:7a:6d:ee:43:1d:07: 4b:da:4a:b4:9b:a1:34:84:1c:41:aa:f2:ea:bc:c0: 14:09:49:d5:09:3e:f8:98:ae:bf:b6:29:cf:a9:13: 1b:18:6e:5a:db:77:6d:3a:2c:30:08:52:c3:bf:51: dc:14:77:d9:7a:bc:b1:44:54:3e:42:bf:0e:d7:e6: 44:9a:f3:d2:ac:6f:ef:94:27:3d:24:0e:68:7a:4b: e6:29:a8:7e:c2:07:6a:81:c6:c4:7f:03:be:af:8c: b8:5d:ce:87:02:70:5e:16:d9:ce:ee:9f:e4:e9:ee: f3:87:d8:b9:05:64:79:35:45:55:b2:3e:ce:1e:2b: 2d:1b:44:f8:a8:03:f0:e1:a8:97:98:71:4c:25:82: a1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5A:1C:03:AC:B0:BF:1C:5C:58:4F:43:78:93:D7:6E:CB:18:9E:57 X509v3 Authority Key Identifier: keyid:71:39:B6:90:78:F9:6C:AB:AF:71:8A:39:BB:58:67:8A:EA:C1:CC:C2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cTm2kHj5bKuvcYo5u1hniurBzMI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/cab149-d567-48fc-ac9b-20b024c6fc2f/1/cTm2kHj5bKuvcYo5u1hniurBzMI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:53:4a:7b:3d:26:b2:a4:6d:fc:84:5c:4e:44:52:9a:8d:c9: 35:3b:cf:c9:37:63:4b:d6:3f:11:32:90:e6:5b:d0:ca:56:32: 6e:c0:20:75:42:6e:fa:26:f8:f6:8e:5e:2a:b7:25:0e:cd:42: 36:f2:6a:08:1e:9f:53:a4:b3:fd:49:cd:5b:f2:44:1b:56:97: 1d:9e:4d:b8:e0:2f:e8:0e:75:a5:df:ed:ac:4a:18:34:d5:ec: 3c:15:b7:3a:62:92:b4:00:6b:2d:90:7d:d1:e8:13:b1:78:63: a4:1f:a0:95:e9:59:27:b1:02:fb:97:c3:5a:e3:e5:b4:52:d7: 32:9a:bc:b7:ba:d7:e4:8f:90:60:57:de:93:b5:ff:18:0c:b6: b0:69:b8:67:45:07:b5:98:d8:c5:17:16:7a:e6:f7:3a:83:1a: 67:19:2f:86:aa:eb:17:d0:8d:96:d7:99:8a:d0:d2:6e:52:28: 72:5b:cd:02:ae:2a:d9:d7:e8:6b:b7:f9:80:be:df:d9:60:ec: 6b:9a:61:d1:b3:b6:83:a6:6a:3c:bd:98:01:3a:e7:a8:11:a2: 6c:4a:3b:b9:68:74:eb:3d:e5:62:77:a0:03:42:55:dd:61:a3: a6:76:09:26:2b:e8:be:dc:df:b6:03:8d:d4:c5:f0:9c:9e:bd: ee:87:6f:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDI5W0odSco3HdRyZ/IwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxMzliNjkwNzhmOTZjYWJhZjcxOGEzOWJiNTg2NzhhZWFj MWNjYzIwHhcNMjYwMjA5MTQwMDMxWhcNMjYwMjEwMTQwMDMxWjAzMTEwLwYDVQQD EyhlNjVhMWMwM2FjYjBiZjFjNWM1ODRmNDM3ODkzZDc2ZWNiMTg5ZTU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hQ6Uc3eD1tXSeMHn9a0In6LdjAm xxKHLQHTtdY2cQQBnam4vimr9YznKFSxrFFFoo4CacHQgCVHYUYfSPcOK/eP3qaB C25tiByF1jldQLLGnqC5toF87BLP/fXiCEY8JpJrjzN5DCvlPHVczx6Xbn96be5D HQdL2kq0m6E0hBxBqvLqvMAUCUnVCT74mK6/tinPqRMbGG5a23dtOiwwCFLDv1Hc FHfZeryxRFQ+Qr8O1+ZEmvPSrG/vlCc9JA5oekvmKah+wgdqgcbEfwO+r4y4Xc6H AnBeFtnO7p/k6e7zh9i5BWR5NUVVsj7OHistG0T4qAPw4aiXmHFMJYKhfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZaHAOssL8cXFhPQ3iT127LGJ5XMB8GA1UdIwQY MBaAFHE5tpB4+Wyrr3GKObtYZ4rqwczCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWIt MjBiMDI0YzZmYzJmLzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9jYWIxNDktZDU2Ny00OGZjLWFjOWItMjBiMDI0YzZmYzJm LzEvY1RtMmtIajViS3V2Y1lvNXUxaG5pdXJCek1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR1NKez0m sqRt/IRcTkRSmo3JNTvPyTdjS9Y/ETKQ5lvQylYybsAgdUJu+ib49o5eKrclDs1C NvJqCB6fU6Sz/UnNW/JEG1aXHZ5NuOAv6A51pd/trEoYNNXsPBW3OmKStABrLZB9 0egTsXhjpB+glelZJ7EC+5fDWuPltFLXMpq8t7rX5I+QYFfek7X/GAy2sGm4Z0UH tZjYxRcWeub3OoMaZxkvhqrrF9CNlteZitDSblIoclvNAq4q2dfoa7f5gL7f2WDs a5ph0bO2g6ZqPL2YATrnqBGibEo7uWh06z3lYnegA0JV3WGjpnYJJivovtzftgON 1MXwnJ697odvrA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:54 2026 by rpki-client