This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft File: CzEv6XRkvA5qHv-i8ciW96igJng.mft (raw, json) Hash identifier: 9GD/GBaGV53RqcqIfegV/DnaaynsHTB++vZSwO/qPYc= Subject key identifier: 61:C2:AA:CA:9D:C0:82:6E:9F:2B:1A:5E:59:54:0D:53:E7:29:1F:3D Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Certificate serial: 019C438FF4B1DB1F4EB9719B3C86E99893B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft Manifest number: 169E Signing time: Mon 09 Feb 2026 18:00:33 +0000 Manifest this update: Mon 09 Feb 2026 18:00:33 +0000 Manifest next update: Tue 10 Feb 2026 18:00:33 +0000 Files and hashes: 1: CzEv6XRkvA5qHv-i8ciW96igJng.crl (hash: YGdKeQj17mh/4eEq+295/j/wIfzGIs0noQW8I5kzJjU=) 2: O4FogktllEObQ3m4gcGbxOTXFjc.roa (hash: LSEt+DfGeh7UZL23uB93PJ34d8wXBxGJPcCGrkXjZy8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f4:b1:db:1f:4e:b9:71:9b:3c:86:e9:98:93:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678 Validity Not Before: Feb 9 18:00:33 2026 GMT Not After : Feb 10 18:00:33 2026 GMT Subject: CN=61c2aaca9dc0826e9f2b1a5e59540d53e7291f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:13:2e:6c:d6:00:46:e5:d3:59:62:72:5b:ac: 8c:7d:d0:7a:fd:0d:a4:8c:24:12:27:43:67:8d:8d: 20:12:39:e8:a3:19:2c:f0:50:af:d4:3f:88:6a:0b: a7:4f:6f:95:41:91:83:b7:b1:b1:f5:27:0e:6c:20: f4:36:49:1f:c4:dd:a1:a5:9e:e4:a5:a6:02:b0:20: fc:8a:29:0b:4d:38:8e:95:5a:8b:ca:45:08:40:2d: 73:38:58:62:43:ff:7c:ee:3f:ec:5a:a8:24:3e:ab: 47:26:9a:9b:7b:a3:60:71:af:d5:1b:e3:cc:ab:3b: ca:43:0d:70:eb:e4:ae:15:47:c9:7f:9b:1c:89:dc: bf:cb:9d:ff:aa:47:01:13:ef:b0:21:b2:f3:6e:eb: 93:be:2a:80:8b:b3:8d:19:09:be:0c:35:6c:a3:22: 93:43:49:b2:a2:df:b3:41:f8:76:8b:80:78:84:d5: 26:b4:f2:18:58:88:61:37:a7:2f:9e:40:43:5e:02: a9:03:17:8b:8f:af:e2:8c:97:1b:1a:a7:8e:7f:18: 19:97:6a:9a:a4:f3:9f:15:85:db:1d:99:85:3c:e6: 4f:c6:58:29:49:e5:89:c0:f9:9c:21:4b:01:8d:4e: b2:a8:0b:a0:86:38:ac:75:20:36:59:f9:32:4a:09: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C2:AA:CA:9D:C0:82:6E:9F:2B:1A:5E:59:54:0D:53:E7:29:1F:3D X509v3 Authority Key Identifier: keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e6:49:9d:9a:f3:09:b5:c0:f7:df:e4:53:72:86:3c:7d:58: 94:06:1e:5e:1a:37:74:75:4a:48:f7:4e:3c:e9:98:04:ce:b8: db:40:98:37:5b:c0:75:6f:03:2b:8b:0d:62:c9:9b:94:bd:1c: 98:7e:3b:b1:c7:70:e5:87:e1:e5:9f:a6:7b:20:53:5e:9b:57: 74:d6:60:2f:22:1a:bd:0f:30:05:60:fa:84:25:3a:be:f9:12: dd:ce:91:68:df:a9:95:a7:74:e2:aa:d5:54:db:45:b1:bb:99: 06:59:55:01:2c:ed:c1:87:2d:2e:e5:a0:c8:b3:c7:02:40:c4: 16:ad:6b:a5:ba:01:c2:7a:37:b9:53:56:61:95:de:ac:4b:8c: 83:51:09:36:5d:d9:7f:ce:61:ec:43:4b:11:f9:51:7e:34:21: ea:f6:dc:42:30:64:57:e5:1b:3a:1a:bb:d2:17:0d:99:17:02: 16:e7:29:34:f0:ff:a0:c0:58:2d:51:98:e5:68:68:a5:1e:81: 35:12:d9:9c:dd:9f:93:47:29:48:fe:29:5b:8d:ca:e6:09:95: f7:3f:4d:9d:55:c0:11:d0:96:f2:33:28:05:f9:81:1a:2e:0e: d1:90:a8:be:47:ca:04:ec:cb:8a:09:d4:47:50:c9:26:24:7a: 71:f5:3b:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/Sx2x9OuXGbPIbpmJO4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiMzEyZmU5NzQ2NGJjMGU2YTFlZmZhMmYxYzg5NmY3YThh MDI2NzgwHhcNMjYwMjA5MTgwMDMzWhcNMjYwMjEwMTgwMDMzWjAzMTEwLwYDVQQD Eyg2MWMyYWFjYTlkYzA4MjZlOWYyYjFhNWU1OTU0MGQ1M2U3MjkxZjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRMubNYARuXTWWJyW6yMfdB6/Q2k jCQSJ0NnjY0gEjnooxks8FCv1D+IagunT2+VQZGDt7Gx9ScObCD0NkkfxN2hpZ7k paYCsCD8iikLTTiOlVqLykUIQC1zOFhiQ/987j/sWqgkPqtHJpqbe6Ngca/VG+PM qzvKQw1w6+SuFUfJf5scidy/y53/qkcBE++wIbLzbuuTviqAi7ONGQm+DDVsoyKT Q0myot+zQfh2i4B4hNUmtPIYWIhhN6cvnkBDXgKpAxeLj6/ijJcbGqeOfxgZl2qa pPOfFYXbHZmFPOZPxlgpSeWJwPmcIUsBjU6yqAughjisdSA2WfkySgmlZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGHCqsqdwIJunysaXllUDVPnKR89MB8GA1UdIwQY MBaAFAsxL+l0ZLwOah7/ovHIlveooCZ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODIt ZmExYjU1NWRhYTkxLzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC82YjJjOWUtZTUwZS00ODg3LWI0ODItZmExYjU1NWRhYTkx LzEvQ3pFdjZYUmt2QTVxSHYtaThjaVc5NmlnSm5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+ZJnZrz CbXA99/kU3KGPH1YlAYeXho3dHVKSPdOPOmYBM6420CYN1vAdW8DK4sNYsmblL0c mH47scdw5Yfh5Z+meyBTXptXdNZgLyIavQ8wBWD6hCU6vvkS3c6RaN+plad04qrV VNtFsbuZBllVASztwYctLuWgyLPHAkDEFq1rpboBwno3uVNWYZXerEuMg1EJNl3Z f85h7ENLEflRfjQh6vbcQjBkV+UbOhq70hcNmRcCFucpNPD/oMBYLVGY5WhopR6B NRLZnN2fk0cpSP4pW43K5gmV9z9NnVXAEdCW8jMoBfmBGi4O0ZCovkfKBOzLignU R1DJJiR6cfU78A== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:58 2026 by rpki-client