This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft File: cF3hUpBmZK56yfIIesTQBoWl1_A.mft (raw, json) Hash identifier: XuLwyZ14svYQMjmSPScEMtZEhQszX5CKMwaqyM2RMSA= Subject key identifier: 19:1D:BC:C6:E6:2E:64:4E:C6:07:47:79:B8:94:BE:79:C2:E6:A3:30 Authority key identifier: 70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 Certificate issuer: /CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Certificate serial: 019C438FB364DB499332B783E3C20D333F2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 18:00:16 +0000 Manifest this update: Mon 09 Feb 2026 18:00:16 +0000 Manifest next update: Tue 10 Feb 2026 18:00:16 +0000 Files and hashes: 1: cF3hUpBmZK56yfIIesTQBoWl1_A.crl (hash: FMiPnASkZ82zKnho3aPBHh4+7eU2Kkx0clGt6+CIsgI=) 2: y7AqiXLlolDvCA4ci8GI1FGSGEk.roa (hash: SHdF4S1wOxIU7MQoEG79yqjjmd2Uh7jceITC2kby4Xo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:b3:64:db:49:93:32:b7:83:e3:c2:0d:33:3f:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=705de152906664ae7ac9f2087ac4d00685a5d7f0 Validity Not Before: Feb 9 18:00:16 2026 GMT Not After : Feb 10 18:00:16 2026 GMT Subject: CN=191dbcc6e62e644ec6074779b894be79c2e6a330 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:42:ef:34:61:ba:80:76:51:31:9b:98:0e:c9: c2:bd:d8:7b:57:6b:91:a1:73:83:e7:44:c4:0b:8e: a0:2a:c8:1d:eb:90:eb:e9:e8:62:e6:6e:1f:cc:06: 72:3d:1a:ea:49:14:cf:69:0a:20:90:85:85:af:af: 6f:f0:13:85:2b:c3:21:fb:35:5f:41:b2:49:c6:ae: 54:68:7e:48:c1:c3:27:75:1e:01:a0:72:a2:ee:d0: 8a:55:a6:60:4f:77:13:87:79:46:7e:0c:1f:d6:12: 0f:d7:49:28:53:0d:23:13:17:ec:5d:24:e0:c3:4f: f5:a5:c3:b6:d9:75:ce:cb:96:f4:f4:85:91:78:b9: 32:57:6b:1f:b1:db:7e:4b:09:c8:72:ca:23:61:17: d9:f5:96:74:0f:0b:3d:4e:e8:73:a2:b4:5c:73:74: 99:a1:27:05:aa:8b:55:f0:df:8d:9a:37:a7:db:4d: e9:6e:9d:bc:dd:79:66:85:d1:ee:a2:06:14:b3:a6: eb:ec:b3:f4:bd:15:e9:18:cf:ce:70:3a:86:cf:29: 01:2d:a3:cd:3f:71:f1:9a:b6:cf:d7:eb:3a:26:a5: c2:6c:40:cb:5b:91:88:47:24:c8:57:bd:22:7c:30: 56:2c:bd:5b:5d:35:fd:3d:6f:2d:28:b5:83:89:ec: a6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:1D:BC:C6:E6:2E:64:4E:C6:07:47:79:B8:94:BE:79:C2:E6:A3:30 X509v3 Authority Key Identifier: keyid:70:5D:E1:52:90:66:64:AE:7A:C9:F2:08:7A:C4:D0:06:85:A5:D7:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF3hUpBmZK56yfIIesTQBoWl1_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/212a76-7934-4cc1-82c4-f5618477f8d4/1/cF3hUpBmZK56yfIIesTQBoWl1_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:11:7a:28:46:f8:8b:41:79:ee:65:05:8b:1f:a8:b3:2e:0b: 53:de:c8:0c:bc:14:2b:a6:09:bc:e6:df:20:d9:1d:b1:df:4f: e1:51:49:0f:ce:eb:bb:36:80:1d:7c:54:f6:44:95:f3:15:9f: 8f:d5:9f:f0:07:36:7b:49:3a:41:16:85:a0:45:60:c0:7b:fa: 2d:81:ec:e5:bc:87:da:47:43:dc:71:fc:b2:03:58:4d:e4:a0: 70:ae:a0:37:dc:a2:76:9b:d2:46:fd:10:4f:87:f8:4b:db:82: e6:54:3b:7a:d0:fd:41:31:1b:5e:83:95:80:6e:9b:fe:f4:83: 1e:38:8e:5c:a9:ef:39:b2:89:f9:c1:61:2b:81:e4:39:0c:c0: ae:53:13:16:b4:f7:9a:56:1e:9e:72:03:d1:37:ca:62:cd:98: f2:0c:dc:27:cb:ba:95:ba:49:eb:f7:c6:ae:e3:02:15:67:e4: 88:99:87:12:db:1b:c8:62:ba:82:c6:71:0b:05:e0:2d:0e:20: e2:18:66:9a:cf:7a:01:18:f7:b4:f5:9e:38:ae:24:5a:bf:b8: 67:0f:bd:86:c9:a5:9d:ae:46:80:d2:7d:71:0c:d7:c9:cb:f3: 91:eb:27:19:81:0b:d5:be:5f:6c:ba:5e:56:33:ad:03:7d:36: be:5b:fb:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj7Nk20mTMreD48INMz8vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNWRlMTUyOTA2NjY0YWU3YWM5ZjIwODdhYzRkMDA2ODVh NWQ3ZjAwHhcNMjYwMjA5MTgwMDE2WhcNMjYwMjEwMTgwMDE2WjAzMTEwLwYDVQQD EygxOTFkYmNjNmU2MmU2NDRlYzYwNzQ3NzliODk0YmU3OWMyZTZhMzMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqELvNGG6gHZRMZuYDsnCvdh7V2uR oXOD50TEC46gKsgd65Dr6ehi5m4fzAZyPRrqSRTPaQogkIWFr69v8BOFK8Mh+zVf QbJJxq5UaH5IwcMndR4BoHKi7tCKVaZgT3cTh3lGfgwf1hIP10koUw0jExfsXSTg w0/1pcO22XXOy5b09IWReLkyV2sfsdt+SwnIcsojYRfZ9ZZ0Dws9TuhzorRcc3SZ oScFqotV8N+Nmjen203pbp283XlmhdHuogYUs6br7LP0vRXpGM/OcDqGzykBLaPN P3HxmrbP1+s6JqXCbEDLW5GIRyTIV70ifDBWLL1bXTX9PW8tKLWDieym8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBkdvMbmLmROxgdHebiUvnnC5qMwMB8GA1UdIwQY MBaAFHBd4VKQZmSuesnyCHrE0AaFpdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQt ZjU2MTg0NzdmOGQ0LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi8yMTJhNzYtNzkzNC00Y2MxLTgyYzQtZjU2MTg0NzdmOGQ0 LzEvY0YzaFVwQm1aSzU2eWZJSWVzVFFCb1dsMV9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohF6KEb4 i0F57mUFix+osy4LU97IDLwUK6YJvObfINkdsd9P4VFJD87ruzaAHXxU9kSV8xWf j9Wf8Ac2e0k6QRaFoEVgwHv6LYHs5byH2kdD3HH8sgNYTeSgcK6gN9yidpvSRv0Q T4f4S9uC5lQ7etD9QTEbXoOVgG6b/vSDHjiOXKnvObKJ+cFhK4HkOQzArlMTFrT3 mlYennID0TfKYs2Y8gzcJ8u6lbpJ6/fGruMCFWfkiJmHEtsbyGK6gsZxCwXgLQ4g 4hhmms96ARj3tPWeOK4kWr+4Zw+9hsmlna5GgNJ9cQzXycvzkesnGYEL1b5fbLpe VjOtA302vlv7/w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:54 2026 by rpki-client