This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft File: CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft (raw, json) Hash identifier: RD1sh1QiLtW5nkKYdcEpQE5zLFrLlLcMTzaL39ZEtak= Subject key identifier: CE:89:6A:88:D7:A7:4E:34:20:08:DF:C2:AC:1F:30:79:C7:BF:5C:70 Authority key identifier: 08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F Certificate issuer: /CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Certificate serial: 019C427DC7F0FFD89EB11EE54DD48C08817A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 13:01:05 +0000 Manifest this update: Mon 09 Feb 2026 13:01:05 +0000 Manifest next update: Tue 10 Feb 2026 13:01:05 +0000 Files and hashes: 1: CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl (hash: AkvVBtSCGq1Q34PiWoheQaR9q9ltdEAfMCe+MppCHVs=) 2: NWLF3cZVQRzG-V44eTdelLvm4lo.roa (hash: 6bvdrFIc+ZqxQD9wly/w0Ts0CN7dJNjTlyrqxS7Rwpc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:c7:f0:ff:d8:9e:b1:1e:e5:4d:d4:8c:08:81:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=089523953939f8a5e464b1cc7719ebeb9467ca3f Validity Not Before: Feb 9 13:01:05 2026 GMT Not After : Feb 10 13:01:05 2026 GMT Subject: CN=ce896a88d7a74e342008dfc2ac1f3079c7bf5c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:57:4c:5e:7f:27:07:73:d2:e4:d6:58:7b:8c: 25:d2:98:61:a6:cb:d4:db:81:44:c6:dd:85:7c:67: a1:c1:5b:e8:35:f9:1e:01:a9:a9:72:30:f7:64:8c: 10:08:3c:08:b1:f5:28:66:ea:1e:a7:0a:d0:df:f4: d1:05:cd:f1:9a:a9:69:6c:40:90:33:d1:07:b0:7d: ee:1e:b6:aa:d7:08:6c:33:bb:4e:70:34:41:9d:1d: 2c:e6:4e:1f:e6:d2:43:d2:28:f2:42:19:f0:dd:7f: 94:ff:f4:22:cb:0a:1a:6c:96:fa:26:b7:f3:51:90: 99:7a:90:ba:0f:ea:58:1b:ed:18:fa:60:e4:0c:ee: 34:48:30:55:a6:06:52:b2:58:1a:a7:65:67:c5:e3: e9:a6:a9:fe:20:ca:48:b1:88:4e:85:8a:29:29:9e: 7e:8d:65:0b:e1:c2:57:cc:ed:09:68:dd:4f:90:09: 94:cc:5a:ec:bf:4a:f3:f8:18:74:eb:c2:64:40:23: cd:cc:7e:02:ec:4e:69:d3:be:73:54:0f:54:e7:cf: ec:8d:2b:fd:db:74:49:6f:5c:56:3a:5e:8a:48:d0: 64:80:ff:9b:66:79:54:a0:c7:ae:11:9b:7d:ec:03: 9a:f9:6e:98:f8:69:4c:a0:57:69:43:0f:7c:01:79: 1b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:89:6A:88:D7:A7:4E:34:20:08:DF:C2:AC:1F:30:79:C7:BF:5C:70 X509v3 Authority Key Identifier: keyid:08:95:23:95:39:39:F8:A5:E4:64:B1:CC:77:19:EB:EB:94:67:CA:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJUjlTk5-KXkZLHMdxnr65Rnyj8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/853996-6cbb-4d42-8778-b1d7ac9ea321/1/CJUjlTk5-KXkZLHMdxnr65Rnyj8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:c2:95:f6:b8:32:e8:ee:d5:c6:02:6f:48:a2:e2:af:50:37: 80:82:e4:fc:b1:3f:e8:b6:f3:aa:c2:11:86:77:6e:3e:81:c4: cd:b8:a5:2f:26:cd:be:82:ae:b0:d9:1c:63:c4:11:af:69:04: 6f:31:bc:c5:fc:78:73:7a:7f:53:16:2a:12:39:c2:64:49:86: f1:07:b9:db:0d:f4:db:af:97:17:ee:57:28:85:66:69:24:d1: fe:c5:cd:8d:45:9c:18:a3:83:48:b6:21:72:8f:13:e3:11:4d: e9:80:04:f4:80:37:3b:26:aa:40:a5:eb:ee:06:4d:63:16:a3: 30:6a:9f:11:ef:9f:34:c3:07:cd:70:48:38:02:5d:09:74:6f: eb:a1:8f:20:0f:f7:86:4c:f3:90:f6:2e:65:a8:6a:a6:53:3a: 1e:66:85:8e:49:0b:ba:71:06:f6:99:37:b3:78:f5:1b:5e:c1: aa:2c:6e:df:3b:70:66:05:cd:de:e1:f2:f8:3d:8f:93:9a:25: 4a:02:2c:6a:c6:05:fe:bb:61:0c:79:82:c2:58:6c:18:f1:55: 1c:a5:50:03:0a:ca:b8:e8:b7:a4:9b:e9:8c:61:99:af:49:a4: 5e:9d:19:69:93:e8:1f:b3:89:5e:66:02:ae:1f:b1:28:4b:4e: 07:a4:52:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcfw/9iesR7lTdSMCIF6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4OTUyMzk1MzkzOWY4YTVlNDY0YjFjYzc3MTllYmViOTQ2 N2NhM2YwHhcNMjYwMjA5MTMwMTA1WhcNMjYwMjEwMTMwMTA1WjAzMTEwLwYDVQQD EyhjZTg5NmE4OGQ3YTc0ZTM0MjAwOGRmYzJhYzFmMzA3OWM3YmY1YzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1dMXn8nB3PS5NZYe4wl0phhpsvU 24FExt2FfGehwVvoNfkeAampcjD3ZIwQCDwIsfUoZuoepwrQ3/TRBc3xmqlpbECQ M9EHsH3uHraq1whsM7tOcDRBnR0s5k4f5tJD0ijyQhnw3X+U//QiywoabJb6Jrfz UZCZepC6D+pYG+0Y+mDkDO40SDBVpgZSslgap2VnxePppqn+IMpIsYhOhYopKZ5+ jWUL4cJXzO0JaN1PkAmUzFrsv0rz+Bh068JkQCPNzH4C7E5p075zVA9U58/sjSv9 23RJb1xWOl6KSNBkgP+bZnlUoMeuEZt97AOa+W6Y+GlMoFdpQw98AXkbKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6JaojXp040IAjfwqwfMHnHv1xwMB8GA1UdIwQY MBaAFAiVI5U5Ofil5GSxzHcZ6+uUZ8o/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3Nzgt YjFkN2FjOWVhMzIxLzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi84NTM5OTYtNmNiYi00ZDQyLTg3NzgtYjFkN2FjOWVhMzIx LzEvQ0pVamxUazUtS1hrWkxITWR4bnI2NVJueWo4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADcKV9rgy 6O7VxgJvSKLir1A3gILk/LE/6LbzqsIRhnduPoHEzbilLybNvoKusNkcY8QRr2kE bzG8xfx4c3p/UxYqEjnCZEmG8Qe52w3026+XF+5XKIVmaSTR/sXNjUWcGKODSLYh co8T4xFN6YAE9IA3OyaqQKXr7gZNYxajMGqfEe+fNMMHzXBIOAJdCXRv66GPIA/3 hkzzkPYuZahqplM6HmaFjkkLunEG9pk3s3j1G17Bqixu3ztwZgXN3uHy+D2Pk5ol SgIsasYF/rthDHmCwlhsGPFVHKVQAwrKuOi3pJvpjGGZr0mkXp0ZaZPoH7OJXmYC rh+xKEtOB6RSnA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:02 2026 by rpki-client