This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
File: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft (raw, json)
Hash identifier: cvNJhcOEvsGWrKcPncWHSjwZMkvu/j1AggmpWn8j+JY=
Subject key identifier: 82:C4:63:F0:07:94:AA:FB:C5:A6:60:50:39:37:F4:E6:DE:E9:C6:30
Authority key identifier: CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
Certificate issuer: /CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Certificate serial: 1D38000E9BBB8820ED02D8280B11B9EA87A144B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
Manifest number: 0487
Signing time: Mon 09 Feb 2026 14:33:40 +0000
Manifest this update: Mon 09 Feb 2026 14:28:40 +0000
Manifest next update: Tue 10 Feb 2026 17:06:40 +0000
Files and hashes: 1: CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl (hash: lTdVcqniMVPIPnSN/zHZ4ILO/AN+jNapGH8AC2JIAD8=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 14:10:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:38:00:0e:9b:bb:88:20:ed:02:d8:28:0b:11:b9:ea:87:a1:44:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfc26a6def2e2ff1ebcc10a9871478b8a8bf3908
Validity
Not Before: Feb 9 14:28:40 2026 GMT
Not After : Feb 10 17:06:40 2026 GMT
Subject: CN=82C463F00794AAFBC5A660503937F4E6DEE9C630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:21:92:df:9c:7b:8e:95:5e:69:5b:0c:89:6b:
0d:6a:dc:56:d8:83:97:f6:b3:d7:8d:02:54:22:9e:
af:02:f3:fd:41:0e:1d:7f:ff:f0:60:3a:f0:57:c4:
07:dd:d4:8a:08:59:08:35:55:63:07:15:53:1b:49:
46:50:66:37:95:f9:f1:8b:53:9a:4d:c7:89:d7:bc:
f6:46:6b:80:e3:41:da:c7:96:60:64:56:64:de:68:
ef:0f:d5:4d:50:4c:34:1e:01:ad:21:28:6e:4a:9c:
c6:5a:e7:18:fc:ac:b9:9f:2a:06:7c:da:f3:b3:76:
43:99:bc:d4:34:8e:65:f1:07:73:66:e6:73:55:15:
d9:a9:4a:84:b1:d2:74:53:7e:ad:f8:61:77:77:62:
68:7c:2d:dc:3b:e9:ed:e8:c7:30:f5:27:39:26:ea:
9e:6a:36:39:df:82:d3:65:e2:5e:ac:31:5b:dd:6b:
58:6f:91:38:d8:cf:65:12:b2:89:cd:58:00:9d:81:
ed:22:b6:7b:2b:c4:c6:31:1a:7f:b4:94:b0:f2:76:
ec:34:16:50:67:e2:19:56:fc:7a:4b:41:1e:3d:c6:
d6:16:7b:02:28:0e:06:14:f0:a9:f1:e6:f9:52:ff:
2f:d7:f1:b4:1b:9e:a7:04:ef:42:3f:85:5f:16:5e:
57:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C4:63:F0:07:94:AA:FB:C5:A6:60:50:39:37:F4:E6:DE:E9:C6:30
X509v3 Authority Key Identifier:
keyid:CF:C2:6A:6D:EF:2E:2F:F1:EB:CC:10:A9:87:14:78:B8:A8:BF:39:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8Jqbe8uL_HrzBCphxR4uKi_OQg.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ae6edeec-08ba-4cde-8979-4faea4b1bc12/9/CFC26A6DEF2E2FF1EBCC10A9871478B8A8BF3908.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:42:4d:d2:8d:e3:07:00:52:3f:2c:22:1b:92:5b:2f:41:4d:
f2:c5:7f:2c:24:00:a3:33:26:85:63:88:bd:21:33:52:31:9c:
32:52:30:1e:eb:04:29:ca:51:f8:f1:3c:b0:8c:e5:8b:ef:e1:
ef:2a:89:ea:98:de:0d:0d:38:56:ae:f5:73:a7:cf:08:97:3d:
09:42:76:86:df:ec:6f:17:c1:fa:0b:63:c5:a7:90:88:5e:f8:
75:de:6b:06:94:24:22:5b:9d:07:0c:6b:f8:bf:af:14:18:42:
06:07:05:c0:dd:c2:b8:e9:b2:d9:2f:f5:0a:c7:e3:31:3c:3e:
7f:ba:ae:11:a3:e0:4c:83:93:66:aa:5d:04:ab:06:77:69:67:
16:d0:ea:a8:19:08:a0:be:4d:a7:9c:71:6e:bc:f0:0f:b1:1c:
a9:44:9c:3a:03:37:59:66:47:26:79:a4:49:5c:42:03:48:2f:
9b:8e:0f:4a:67:17:be:7b:a0:44:4f:23:1d:37:cd:8a:50:de:
cd:28:6c:12:38:f8:06:63:34:fe:a2:d5:56:85:e0:b7:f6:86:
59:ff:e5:76:2e:52:55:f8:20:82:75:3d:09:e8:6e:60:c7:68:
90:1d:ae:e9:52:9d:51:a8:e7:90:d5:47:c3:76:e6:5a:f6:cc:
db:1d:1d:63
-----BEGIN CERTIFICATE-----
MIIFPTCCBCWgAwIBAgIUHTgADpu7iCDtAtgoCxG56oehRLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoY2ZjMjZhNmRlZjJlMmZmMWViY2MxMGE5ODcxNDc4Yjhh
OGJmMzkwODAeFw0yNjAyMDkxNDI4NDBaFw0yNjAyMTAxNzA2NDBaMDMxMTAvBgNV
BAMTKDgyQzQ2M0YwMDc5NEFBRkJDNUE2NjA1MDM5MzdGNEU2REVFOUM2MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAIZLfnHuOlV5pWwyJaw1q3FbY
g5f2s9eNAlQinq8C8/1BDh1///BgOvBXxAfd1IoIWQg1VWMHFVMbSUZQZjeV+fGL
U5pNx4nXvPZGa4DjQdrHlmBkVmTeaO8P1U1QTDQeAa0hKG5KnMZa5xj8rLmfKgZ8
2vOzdkOZvNQ0jmXxB3Nm5nNVFdmpSoSx0nRTfq34YXd3Ymh8Ldw76e3oxzD1Jzkm
6p5qNjnfgtNl4l6sMVvda1hvkTjYz2USsonNWACdge0itnsrxMYxGn+0lLDyduw0
FlBn4hlW/HpLQR49xtYWewIoDgYU8Knx5vlS/y/X8bQbnqcE70I/hV8WXlczAgMB
AAGjggJHMIICQzAdBgNVHQ4EFgQUgsRj8AeUqvvFpmBQOTf05t7pxjAwHwYDVR0j
BBgwFoAUz8Jqbe8uL/HrzBCphxR4uKi/OQgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvYWU2ZWRlZWMtMDhiYS00Y2RlLTg5NzktNGZhZWE0YjFi
YzEyLzkvQ0ZDMjZBNkRFRjJFMkZGMUVCQ0MxMEE5ODcxNDc4QjhBOEJGMzkwOC5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3o4SnFiZTh1TF9IcnpCQ3BoeFI0dUtp
X09RZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6
Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hZTZlZGVlYy0w
OGJhLTRjZGUtODk3OS00ZmFlYTRiMWJjMTIvOS9DRkMyNkE2REVGMkUyRkYxRUJD
QzEwQTk4NzE0NzhCOEE4QkYzOTA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH
AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO0JN0o3jBwBSPywiG5Jb
L0FN8sV/LCQAozMmhWOIvSEzUjGcMlIwHusEKcpR+PE8sIzli+/h7yqJ6pjeDQ04
Vq71c6fPCJc9CUJ2ht/sbxfB+gtjxaeQiF74dd5rBpQkIludBwxr+L+vFBhCBgcF
wN3CuOmy2S/1CsfjMTw+f7quEaPgTIOTZqpdBKsGd2lnFtDqqBkIoL5Np5xxbrzw
D7EcqUScOgM3WWZHJnmkSVxCA0gvm44PSmcXvnugRE8jHTfNilDezShsEjj4BmM0
/qLVVoXgt/aGWf/ldi5SVfgggnU9CehuYMdokB2u6VKdUajnkNVHw3bmWvbM2x0d
Yw==
-----END CERTIFICATE-----
Generated at Mon Feb 9 16:59:31 2026 by rpki-client