This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft File: CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json) Hash identifier: yeGwWb3m2XAmxST2zA2Xkq8SboPNthqhEUvqmiFbU7g= Subject key identifier: FB:9C:58:9C:35:F7:8C:1C:9D:27:36:30:D3:14:94:A0:F8:2D:2D:74 Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA Certificate issuer: /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Certificate serial: 019C420F23B9BD9430DB9DA014C8CF4FC77E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 11:00:14 +0000 Manifest this update: Mon 09 Feb 2026 11:00:14 +0000 Manifest next update: Tue 10 Feb 2026 11:00:14 +0000 Files and hashes: 1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=) 2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: p1IoS8pHdHZCybmwHi2Hh/0x7TUxWvUBd2qRj1H9Ewo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:23:b9:bd:94:30:db:9d:a0:14:c8:cf:4f:c7:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa Validity Not Before: Feb 9 11:00:14 2026 GMT Not After : Feb 10 11:00:14 2026 GMT Subject: CN=fb9c589c35f78c1c9d273630d31494a0f82d2d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8c:42:3d:b7:bc:cc:63:fc:3c:ba:29:46:c8: 9d:f9:5e:d8:74:89:a1:f1:ee:35:82:9e:a0:d6:77: 15:eb:c8:98:f3:11:31:ae:39:43:de:11:11:05:d3: c3:5b:23:b2:0d:64:00:23:ba:d1:17:44:85:8a:8e: 51:7f:2b:e9:ed:a4:28:88:05:44:8c:78:c0:a4:bf: b1:e1:72:a7:f3:53:cf:51:6c:85:d1:41:5f:af:c6: e6:2c:48:41:62:c2:1e:fb:7f:bf:48:14:ee:74:e8: 6f:c8:17:c6:84:16:b3:7c:d6:0e:88:66:7b:22:cc: 6a:18:bd:2e:a8:72:2a:96:b5:19:f7:bd:8c:dc:52: a0:10:e1:96:77:11:04:aa:d5:f8:1e:05:56:cd:3d: 3f:ec:5a:1f:8b:91:29:77:87:6c:bd:ce:f0:ae:0f: 36:34:2b:6b:d4:d4:ba:08:d2:6f:02:b5:a6:83:da: 26:b4:65:e7:d8:16:53:37:31:36:27:7c:f9:3b:f8: 14:2e:6d:12:e3:7b:31:37:04:94:58:7f:9f:59:d4: 8e:a2:60:08:be:4c:4d:b3:fc:8a:69:46:a3:64:a1: 9e:d4:c8:e3:62:78:4d:aa:bc:d7:7c:ae:d5:0f:5e: 29:b2:4a:b5:37:26:a7:fc:f8:95:3a:70:22:11:af: 09:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:9C:58:9C:35:F7:8C:1C:9D:27:36:30:D3:14:94:A0:F8:2D:2D:74 X509v3 Authority Key Identifier: keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:ca:3b:b0:aa:c1:79:2a:67:00:2e:f0:70:ab:3b:87:87:ed: f9:0c:89:62:b2:c0:f9:79:37:ed:9e:da:4f:8d:59:84:4a:ef: a1:d3:f2:00:96:30:65:ef:03:4b:d7:c3:e4:6b:e9:ef:21:cd: 1a:0f:a4:03:42:65:b5:55:f4:df:a0:54:45:29:55:ac:85:7c: bd:6d:3d:a7:1e:94:0f:92:8d:30:87:00:31:62:43:4a:ed:06: d4:be:9d:fe:21:49:45:72:8e:13:b5:68:77:ad:8b:5f:4e:ec: 43:55:bb:75:09:c2:54:84:d5:30:b8:c0:48:0d:46:d6:52:4e: b4:f1:b2:65:48:9d:bf:d8:22:00:cd:70:78:ea:45:37:af:9a: a6:d4:46:76:c7:74:d0:53:48:76:fc:79:f2:64:18:4f:49:0f: c3:7c:76:8e:e1:6b:ad:d7:42:8a:5e:08:4b:40:2b:2a:ca:66: 3f:d3:55:e0:a9:ba:80:fe:ba:3e:c0:64:3a:2c:12:2f:34:7b: ad:92:23:da:f6:6f:c4:eb:6c:d6:63:85:1e:0f:25:dd:74:55: 06:25:b2:c4:d1:f0:b1:63:1e:bb:2c:13:d9:9f:4f:3e:4d:db: 97:42:b7:54:8c:68:68:d2:bd:69:7a:a9:fd:3d:62:af:fe:b0: 43:bc:3c:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyO5vZQw252gFMjPT8d+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz YWYxYWEwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD EyhmYjljNTg5YzM1Zjc4YzFjOWQyNzM2MzBkMzE0OTRhMGY4MmQyZDc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYxCPbe8zGP8PLopRsid+V7YdImh 8e41gp6g1ncV68iY8xExrjlD3hERBdPDWyOyDWQAI7rRF0SFio5Rfyvp7aQoiAVE jHjApL+x4XKn81PPUWyF0UFfr8bmLEhBYsIe+3+/SBTudOhvyBfGhBazfNYOiGZ7 IsxqGL0uqHIqlrUZ972M3FKgEOGWdxEEqtX4HgVWzT0/7Fofi5Epd4dsvc7wrg82 NCtr1NS6CNJvArWmg9omtGXn2BZTNzE2J3z5O/gULm0S43sxNwSUWH+fWdSOomAI vkxNs/yKaUajZKGe1MjjYnhNqrzXfK7VD14pskq1Nyan/PiVOnAiEa8JkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPucWJw194wcnSc2MNMUlKD4LS10MB8GA1UdIwQY MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0 LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQco7sKrB eSpnAC7wcKs7h4ft+QyJYrLA+Xk37Z7aT41ZhErvodPyAJYwZe8DS9fD5Gvp7yHN Gg+kA0JltVX036BURSlVrIV8vW09px6UD5KNMIcAMWJDSu0G1L6d/iFJRXKOE7Vo d62LX07sQ1W7dQnCVITVMLjASA1G1lJOtPGyZUidv9giAM1weOpFN6+aptRGdsd0 0FNIdvx58mQYT0kPw3x2juFrrddCil4IS0ArKspmP9NV4Km6gP66PsBkOiwSLzR7 rZIj2vZvxOts1mOFHg8l3XRVBiWyxNHwsWMeuywT2Z9PPk3bl0K3VIxoaNK9aXqp /T1ir/6wQ7w8wQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:31 2026 by rpki-client