This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft File: CPRr-iBG-8mOYn9ANIMnESO-ygo.mft (raw, json) Hash identifier: 5X7BtxnipTV/1WLiPwWzDBbwmZwzinSh4Z+iWpy9kDY= Subject key identifier: 5E:72:9D:06:20:16:3F:2C:07:4B:5C:09:04:76:96:29:CA:AD:DB:95 Authority key identifier: 08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A Certificate issuer: /CN=08f46bfa2046fbc98e627f403483271123beca0a Certificate serial: 019C26CFB755A65481DA98C9C341D16B14E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft Manifest number: D3 Signing time: Wed 04 Feb 2026 04:01:12 +0000 Manifest this update: Wed 04 Feb 2026 04:01:12 +0000 Manifest next update: Thu 05 Feb 2026 04:01:12 +0000 Files and hashes: 1: CPRr-iBG-8mOYn9ANIMnESO-ygo.crl (hash: JIrIp8aRlGPqnHh4Zlx1dWZj6kUNp3biGzq58KWBQ9E=) 2: pfoAptjf90KHppVYfbniqr79bWQ.roa (hash: nzU7SasV7epGNnZEN6voJrWpKWaW62VKhMj/SG20B44=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 04:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:26:cf:b7:55:a6:54:81:da:98:c9:c3:41:d1:6b:14:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08f46bfa2046fbc98e627f403483271123beca0a Validity Not Before: Feb 4 04:01:12 2026 GMT Not After : Feb 5 04:01:12 2026 GMT Subject: CN=5e729d0620163f2c074b5c0904769629caaddb95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:61:dc:08:bd:79:d0:9a:ce:8c:b2:2d:80:df: 6f:3f:a5:aa:22:12:81:4a:e7:9f:c6:0f:39:d2:28: 9c:5c:c1:0c:d3:e1:01:9c:29:71:e3:db:62:33:f5: f6:91:a3:49:ed:d5:6f:c2:8c:02:73:8a:68:18:51: 5e:f9:66:81:88:3c:38:ce:04:33:9d:11:3d:9d:8b: 43:2f:5f:96:7c:93:93:a3:e9:4d:46:60:f1:18:5e: ce:0f:e6:06:fe:74:1a:07:f6:9f:4f:c7:af:cc:bb: 12:0c:60:43:02:30:46:95:fa:c2:7f:3e:e8:3f:34: ae:a7:95:a4:bc:7a:a5:eb:e5:d0:d9:79:35:82:ac: 42:ab:f6:04:bd:18:38:94:0e:5b:f6:ab:9b:65:bf: 85:53:ee:9a:06:76:b6:ee:5c:28:06:b0:b1:d4:a4: 26:a4:5d:bf:42:c3:ad:b5:3e:2b:55:79:d3:92:cb: 6e:49:49:56:dd:55:a6:f6:39:eb:f5:7a:a5:7b:b2: 43:9d:ea:05:a2:d1:82:f3:d8:25:4c:ba:95:26:86: ee:29:27:14:47:43:0d:d6:c9:82:3c:52:01:d5:9c: 4b:5a:36:33:c2:ae:a9:5b:d2:86:5a:95:08:a4:d4: 16:88:dc:24:81:ed:81:a3:48:7c:75:b5:42:50:b2: 48:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:72:9D:06:20:16:3F:2C:07:4B:5C:09:04:76:96:29:CA:AD:DB:95 X509v3 Authority Key Identifier: keyid:08:F4:6B:FA:20:46:FB:C9:8E:62:7F:40:34:83:27:11:23:BE:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPRr-iBG-8mOYn9ANIMnESO-ygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/6ee2f5-9f60-47dc-8cd9-cd5255733304/1/CPRr-iBG-8mOYn9ANIMnESO-ygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:15:d1:30:82:c0:f4:96:99:0e:b8:6b:6f:e5:eb:5b:33:e0: ef:4b:6f:d8:a8:eb:ad:bf:0f:5a:d1:bd:b0:d0:44:2b:df:4e: 38:64:87:93:62:12:c8:f7:72:e6:63:7a:5a:04:d6:27:4a:2f: 6d:80:81:6f:2e:14:a4:00:28:ff:0f:d6:fa:77:b4:40:92:b7: 9b:0a:29:73:8e:ab:2e:67:af:4a:9f:17:f6:4e:18:fe:65:c3: f8:25:28:c5:5a:51:3b:1f:b5:c9:a3:cc:bf:20:e9:e3:33:29: 67:b2:1b:e1:04:12:8c:ac:40:bb:ed:2e:57:11:d6:05:f1:f7: 57:b1:89:bd:3c:e1:4d:a7:a9:65:7e:01:e2:59:41:53:55:99: 47:6f:ba:2b:5f:67:0e:86:a0:c1:0a:86:88:64:6b:07:cc:04: 89:c1:47:fc:55:39:ff:0b:60:d9:be:f0:c9:a5:85:1c:0c:ce: 62:9b:6c:a0:6e:f4:de:69:7e:4c:49:f3:17:0e:9f:dd:fa:24: 8b:2d:06:a4:96:db:69:87:57:4b:a8:5f:f0:61:ab:03:d6:7c: 45:f9:de:54:e0:05:48:e7:4a:3d:55:b1:f8:5e:8f:6e:59:9e: 1a:8d:2c:29:c6:54:98:4c:e8:6f:5e:99:f9:55:43:5d:69:9c: 55:48:d5:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwmz7dVplSB2pjJw0HRaxThMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4ZjQ2YmZhMjA0NmZiYzk4ZTYyN2Y0MDM0ODMyNzExMjNi ZWNhMGEwHhcNMjYwMjA0MDQwMTEyWhcNMjYwMjA1MDQwMTEyWjAzMTEwLwYDVQQD Eyg1ZTcyOWQwNjIwMTYzZjJjMDc0YjVjMDkwNDc2OTYyOWNhYWRkYjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2HcCL150JrOjLItgN9vP6WqIhKB Suefxg850iicXMEM0+EBnClx49tiM/X2kaNJ7dVvwowCc4poGFFe+WaBiDw4zgQz nRE9nYtDL1+WfJOTo+lNRmDxGF7OD+YG/nQaB/afT8evzLsSDGBDAjBGlfrCfz7o PzSup5WkvHql6+XQ2Xk1gqxCq/YEvRg4lA5b9qubZb+FU+6aBna27lwoBrCx1KQm pF2/QsOttT4rVXnTkstuSUlW3VWm9jnr9Xqle7JDneoFotGC89glTLqVJobuKScU R0MN1smCPFIB1ZxLWjYzwq6pW9KGWpUIpNQWiNwkge2Bo0h8dbVCULJIqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF5ynQYgFj8sB0tcCQR2linKrduVMB8GA1UdIwQY MBaAFAj0a/ogRvvJjmJ/QDSDJxEjvsoKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDkt Y2Q1MjU1NzMzMzA0LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS82ZWUyZjUtOWY2MC00N2RjLThjZDktY2Q1MjU1NzMzMzA0 LzEvQ1BSci1pQkctOG1PWW45QU5JTW5FU08teWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuRXRMILA 9JaZDrhrb+XrWzPg70tv2Kjrrb8PWtG9sNBEK99OOGSHk2ISyPdy5mN6WgTWJ0ov bYCBby4UpAAo/w/W+ne0QJK3mwopc46rLmevSp8X9k4Y/mXD+CUoxVpROx+1yaPM vyDp4zMpZ7Ib4QQSjKxAu+0uVxHWBfH3V7GJvTzhTaepZX4B4llBU1WZR2+6K19n DoagwQqGiGRrB8wEicFH/FU5/wtg2b7wyaWFHAzOYptsoG703ml+TEnzFw6f3fok iy0GpJbbaYdXS6hf8GGrA9Z8RfneVOAFSOdKPVWx+F6PblmeGo0sKcZUmEzob16Z +VVDXWmcVUjVzA== -----END CERTIFICATE-----Generated at Wed Feb 4 10:56:58 2026 by rpki-client