This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft File: csKTdgpzQBjN0qB_HYvVTyffaAo.mft (raw, json) Hash identifier: dxw3dEY/1rsoeadCtaBJ9SDMKC88Sv31Xgp4bZQ59BA= Subject key identifier: 4F:E8:67:6D:9A:AE:DB:77:A2:91:44:79:06:97:FC:F2:A1:6D:1E:6E Authority key identifier: 72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A Certificate issuer: /CN=72c293760a734018cdd2a07f1d8bd54f27df680a Certificate serial: 019C427DBDAA8D7F33C46D8137229D78D845 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft Manifest number: 10FD Signing time: Mon 09 Feb 2026 13:01:02 +0000 Manifest this update: Mon 09 Feb 2026 13:01:02 +0000 Manifest next update: Tue 10 Feb 2026 13:01:02 +0000 Files and hashes: 1: csKTdgpzQBjN0qB_HYvVTyffaAo.crl (hash: 1zA+PdFGsTkpKOVO/1ZRhdDDaCZeOMaQEI1Pd5qKs9I=) 2: q2qThfV9Ai5wiIn0c08uJZv3KrE.roa (hash: jiHXB6EKqhlURIcUG7IJCYAsgSe6xZGy7VNpUltYFZ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:bd:aa:8d:7f:33:c4:6d:81:37:22:9d:78:d8:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72c293760a734018cdd2a07f1d8bd54f27df680a Validity Not Before: Feb 9 13:01:02 2026 GMT Not After : Feb 10 13:01:02 2026 GMT Subject: CN=4fe8676d9aaedb77a29144790697fcf2a16d1e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:65:e8:3b:7e:16:84:79:4f:17:60:2c:67:18: 84:b8:fa:2f:37:99:ce:91:2c:ea:5c:4c:86:22:d3: e3:3a:cb:a0:b6:72:9f:b8:a1:1a:66:4a:cf:de:7a: 91:63:1a:ec:09:ab:4b:d6:04:55:3b:3e:d3:00:12: 59:3b:5b:2a:fc:f1:1a:c8:ed:52:7c:f0:4d:44:d4: 56:5f:28:d5:51:57:dc:bf:c6:4d:8c:70:2f:03:5c: 5e:ca:e2:a8:57:bb:74:77:80:7a:a1:03:a4:54:00: b1:b9:59:2a:2a:fc:d9:3f:5d:a0:a9:92:ef:90:77: a4:7c:0e:a9:81:fe:14:33:51:25:7a:b9:54:b3:db: b5:0a:6b:1a:c3:7c:25:e8:c2:08:7f:69:d6:68:93: 29:8d:75:90:1f:47:41:41:8c:1a:0c:7b:54:0c:43: 24:d9:33:ca:c8:df:45:ad:7c:ce:e4:64:08:19:4b: 99:9d:5e:07:d3:e0:61:a1:a5:3e:51:45:ab:ae:ec: f2:86:cf:91:89:32:a2:d6:90:e2:6d:ea:61:7c:d6: 46:3e:70:0b:0f:c4:2e:7a:64:61:e8:1b:39:c1:c0: 6f:a8:9c:bd:00:2f:f9:89:81:23:5f:4d:04:1c:4e: 8d:c0:53:f8:8e:c3:2a:9c:94:f7:b1:70:b4:05:31: 26:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E8:67:6D:9A:AE:DB:77:A2:91:44:79:06:97:FC:F2:A1:6D:1E:6E X509v3 Authority Key Identifier: keyid:72:C2:93:76:0A:73:40:18:CD:D2:A0:7F:1D:8B:D5:4F:27:DF:68:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csKTdgpzQBjN0qB_HYvVTyffaAo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/44aac4-45f4-4d19-8c15-3623b9b50f96/1/csKTdgpzQBjN0qB_HYvVTyffaAo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:6d:da:f2:7c:b5:0a:ed:ef:92:12:42:03:69:39:9b:ff: f3:df:2a:bb:68:15:dc:74:cc:16:84:d3:d1:dd:77:30:a3:1a: 6c:2b:43:76:f2:9c:31:58:72:35:24:3d:66:25:8b:2d:e3:29: b4:a4:3a:b5:f1:e2:18:cf:0b:e4:56:27:f5:92:1c:1c:f3:ff: 50:44:4e:eb:b3:7a:2f:3b:8f:b2:9f:4e:2a:ac:5f:60:28:fc: 85:99:00:cd:f7:22:75:6c:74:ae:36:31:47:77:b6:b8:41:56: aa:30:a7:15:6d:cb:6b:65:7c:11:94:41:43:eb:87:4b:30:8f: 47:71:55:28:21:96:d9:d7:2b:37:b3:92:97:e3:06:40:c1:5b: 6f:a8:f5:e5:5f:d9:9c:1b:98:c9:34:b2:7d:f6:b8:97:c9:3f: d1:47:5d:81:5e:67:e6:fb:d2:96:64:2b:d4:47:e5:65:0b:05: d3:96:ba:bb:26:a0:46:04:9a:ac:6f:d2:48:97:9a:b5:de:ae: 13:a9:5d:da:46:48:9f:0b:4c:8b:91:4a:86:98:5e:f0:88:3c: 1b:5e:dd:65:b4:59:23:59:4d:a1:57:35:d3:2a:32:f6:05:fd: 7b:f7:b2:0f:11:f3:6c:3a:a3:e8:3b:eb:b4:7c:8e:29:dc:2d: c2:07:06:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfb2qjX8zxG2BNyKdeNhFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyYzI5Mzc2MGE3MzQwMThjZGQyYTA3ZjFkOGJkNTRmMjdk ZjY4MGEwHhcNMjYwMjA5MTMwMTAyWhcNMjYwMjEwMTMwMTAyWjAzMTEwLwYDVQQD Eyg0ZmU4Njc2ZDlhYWVkYjc3YTI5MTQ0NzkwNjk3ZmNmMmExNmQxZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGXoO34WhHlPF2AsZxiEuPovN5nO kSzqXEyGItPjOsugtnKfuKEaZkrP3nqRYxrsCatL1gRVOz7TABJZO1sq/PEayO1S fPBNRNRWXyjVUVfcv8ZNjHAvA1xeyuKoV7t0d4B6oQOkVACxuVkqKvzZP12gqZLv kHekfA6pgf4UM1ElerlUs9u1Cmsaw3wl6MIIf2nWaJMpjXWQH0dBQYwaDHtUDEMk 2TPKyN9FrXzO5GQIGUuZnV4H0+BhoaU+UUWrruzyhs+RiTKi1pDibephfNZGPnAL D8QuemRh6Bs5wcBvqJy9AC/5iYEjX00EHE6NwFP4jsMqnJT3sXC0BTEmvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/oZ22artt3opFEeQaX/PKhbR5uMB8GA1UdIwQY MBaAFHLCk3YKc0AYzdKgfx2L1U8n32gKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80NGFhYzQtNDVmNC00ZDE5LThjMTUt MzYyM2I5YjUwZjk2LzEvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS80NGFhYzQtNDVmNC00ZDE5LThjMTUtMzYyM2I5YjUwZjk2 LzEvY3NLVGRncHpRQmpOMHFCX0hZdlZUeWZmYUFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl1Bt2vJ8 tQrt75ISQgNpOZv/898qu2gV3HTMFoTT0d13MKMabCtDdvKcMVhyNSQ9ZiWLLeMp tKQ6tfHiGM8L5FYn9ZIcHPP/UERO67N6LzuPsp9OKqxfYCj8hZkAzfcidWx0rjYx R3e2uEFWqjCnFW3La2V8EZRBQ+uHSzCPR3FVKCGW2dcrN7OSl+MGQMFbb6j15V/Z nBuYyTSyffa4l8k/0UddgV5n5vvSlmQr1EflZQsF05a6uyagRgSarG/SSJeatd6u E6ld2kZInwtMi5FKhphe8Ig8G17dZbRZI1lNoVc10yoy9gX9e/eyDxHzbDqj6Dvr tHyOKdwtwgcG5g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:42 2026 by rpki-client