This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft File: cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft (raw, json) Hash identifier: 6rWIepfBGnOpDQPEkbQ5lCMsJRnn6e2C8m1T/QrLlh8= Subject key identifier: 01:B6:6E:B4:E8:76:CB:E6:EA:09:48:FB:47:10:51:79:D6:0F:2A:40 Authority key identifier: 72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 Certificate issuer: /CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Certificate serial: 019C43C69B5842F71757A255355324D977BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft Manifest number: 08E1 Signing time: Mon 09 Feb 2026 19:00:15 +0000 Manifest this update: Mon 09 Feb 2026 19:00:15 +0000 Manifest next update: Tue 10 Feb 2026 19:00:15 +0000 Files and hashes: 1: cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl (hash: lGQ+FWrwGYbsTytxY+dBgwi2PRFfrMRMFyeOqcq4X4k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:9b:58:42:f7:17:57:a2:55:35:53:24:d9:77:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72e588da4a6cf0413ffb3016be4678ec99a98df9 Validity Not Before: Feb 9 19:00:15 2026 GMT Not After : Feb 10 19:00:15 2026 GMT Subject: CN=01b66eb4e876cbe6ea0948fb47105179d60f2a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:db:fe:ff:24:d1:6b:1b:9e:6e:f5:9f:c8:5a: 19:3b:be:04:5a:08:b3:cf:79:eb:71:b6:44:04:e2: b8:15:e0:b5:06:47:bd:32:73:f6:02:61:ce:f7:9c: ef:6b:66:18:1e:92:ff:c9:fd:25:0c:02:fb:83:bf: 12:f3:b7:33:57:ca:47:d6:b5:16:59:8f:44:26:31: 15:99:bb:09:00:48:c7:e2:b4:6c:1c:71:3b:7e:04: 8c:db:b2:fd:d1:f2:88:cd:6a:8a:0a:a2:44:24:fc: c9:0b:92:a5:d7:09:59:f6:88:95:02:2d:b2:93:93: 41:a2:6f:40:c0:5f:4d:bb:ec:15:6b:77:7a:5a:fa: 38:dd:56:31:d7:b4:bd:50:a6:34:a4:3f:74:69:ed: 7a:24:b5:28:33:89:cd:5d:95:69:71:5d:e7:f0:35: a4:56:00:78:ee:f9:da:1a:11:6d:50:c7:e9:30:12: da:8c:32:75:be:c5:a1:bf:60:5e:95:1b:44:76:56: 61:b9:83:46:c8:07:1a:1b:13:49:00:2d:f6:a3:3f: 69:f7:65:cf:a2:1c:1c:fa:5b:a3:40:d9:5b:e6:eb: 0a:c1:52:0c:7e:39:f9:4b:6d:69:86:77:35:f4:52: 00:21:4f:c2:48:cb:90:54:e2:e6:4f:d9:61:ec:20: 65:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B6:6E:B4:E8:76:CB:E6:EA:09:48:FB:47:10:51:79:D6:0F:2A:40 X509v3 Authority Key Identifier: keyid:72:E5:88:DA:4A:6C:F0:41:3F:FB:30:16:BE:46:78:EC:99:A9:8D:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuWI2kps8EE_-zAWvkZ47Jmpjfk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/33fb0f-8275-4461-8e70-f6c2cd67f859/1/cuWI2kps8EE_-zAWvkZ47Jmpjfk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:db:9d:3c:3c:24:cf:d2:94:e0:ff:6e:be:5a:36:42:2f:ef: 5a:45:a0:0c:83:26:d9:2e:77:be:0d:4e:34:80:95:ec:7e:81: de:93:95:56:c3:58:99:cc:c0:6f:a9:b7:a2:41:77:5e:71:2b: 17:3a:c9:9a:87:21:92:a8:85:60:bc:cf:7c:22:71:a0:fb:6c: 64:5b:c4:f3:29:cd:ef:a4:db:8c:b4:0f:ab:ce:3f:67:3f:0a: 5a:ac:60:21:1c:80:66:34:52:8b:14:c0:8b:39:b3:ae:c8:43: 1a:f9:89:d1:cf:90:e4:64:fa:23:32:a1:a9:bf:f9:d4:6e:7c: 34:7f:87:f8:8c:35:c2:c3:e0:44:7a:e3:3e:82:69:3d:22:e2: 89:da:c8:fe:6a:f9:4b:d2:a2:06:75:3f:6a:7d:f1:cf:ce:ca: 51:0c:63:99:e0:c6:02:a3:d5:a3:54:f9:67:16:25:54:d2:e5: 27:71:23:02:ba:5d:43:e8:d3:4c:27:24:78:19:69:32:db:57: 7d:68:a8:93:08:d1:b5:68:ae:be:7c:89:7f:1d:01:d8:c6:77: 5f:d6:a1:37:6d:3f:a1:be:69:17:30:8d:3b:cd:f2:e7:9a:3f: 31:aa:40:d6:e7:17:84:2f:34:3b:d4:b3:fc:b8:0a:bd:a7:9c: 7b:9b:f9:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxptYQvcXV6JVNVMk2Xe7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyZTU4OGRhNGE2Y2YwNDEzZmZiMzAxNmJlNDY3OGVjOTlh OThkZjkwHhcNMjYwMjA5MTkwMDE1WhcNMjYwMjEwMTkwMDE1WjAzMTEwLwYDVQQD EygwMWI2NmViNGU4NzZjYmU2ZWEwOTQ4ZmI0NzEwNTE3OWQ2MGYyYTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNv+/yTRaxuebvWfyFoZO74EWgiz z3nrcbZEBOK4FeC1Bke9MnP2AmHO95zva2YYHpL/yf0lDAL7g78S87czV8pH1rUW WY9EJjEVmbsJAEjH4rRsHHE7fgSM27L90fKIzWqKCqJEJPzJC5Kl1wlZ9oiVAi2y k5NBom9AwF9Nu+wVa3d6Wvo43VYx17S9UKY0pD90ae16JLUoM4nNXZVpcV3n8DWk VgB47vnaGhFtUMfpMBLajDJ1vsWhv2BelRtEdlZhuYNGyAcaGxNJAC32oz9p92XP ohwc+lujQNlb5usKwVIMfjn5S21phnc19FIAIU/CSMuQVOLmT9lh7CBlmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAG2brTodsvm6glI+0cQUXnWDypAMB8GA1UdIwQY MBaAFHLliNpKbPBBP/swFr5GeOyZqY35MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAt ZjZjMmNkNjdmODU5LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8zM2ZiMGYtODI3NS00NDYxLThlNzAtZjZjMmNkNjdmODU5 LzEvY3VXSTJrcHM4RUVfLXpBV3ZrWjQ3Sm1wamZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNudPDwk z9KU4P9uvlo2Qi/vWkWgDIMm2S53vg1ONICV7H6B3pOVVsNYmczAb6m3okF3XnEr FzrJmochkqiFYLzPfCJxoPtsZFvE8ynN76TbjLQPq84/Zz8KWqxgIRyAZjRSixTA izmzrshDGvmJ0c+Q5GT6IzKhqb/51G58NH+H+Iw1wsPgRHrjPoJpPSLiidrI/mr5 S9KiBnU/an3xz87KUQxjmeDGAqPVo1T5ZxYlVNLlJ3EjArpdQ+jTTCckeBlpMttX fWiokwjRtWiuvnyJfx0B2MZ3X9ahN20/ob5pFzCNO83y55o/MapA1ucXhC80O9Sz /LgKvaece5v5Xw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:44 2026 by rpki-client