This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft File: CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft (raw, json) Hash identifier: XR9xRmrAWURqCKu3eJzMzAlG8iiGTMZdNrWOuyPn4Hw= Subject key identifier: 98:69:51:17:07:6E:B8:1F:81:99:85:0D:9C:CA:96:5A:85:E6:12:06 Authority key identifier: 0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59 Certificate issuer: /CN=0a85d379726c8fc096d27e88fda117b3b2654e59 Certificate serial: 019C4358E07BAC4D1B56020BDABCA72CBBC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft Manifest number: 060C Signing time: Mon 09 Feb 2026 17:00:23 +0000 Manifest this update: Mon 09 Feb 2026 17:00:23 +0000 Manifest next update: Tue 10 Feb 2026 17:00:23 +0000 Files and hashes: 1: CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl (hash: dkzTE0xaLeaZg47p8Di2Rf+8Sn8CIKiUABzQpREbIvA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e0:7b:ac:4d:1b:56:02:0b:da:bc:a7:2c:bb:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a85d379726c8fc096d27e88fda117b3b2654e59 Validity Not Before: Feb 9 17:00:23 2026 GMT Not After : Feb 10 17:00:23 2026 GMT Subject: CN=98695117076eb81f8199850d9cca965a85e61206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b2:98:28:06:60:5e:c4:b6:7f:9d:c5:a1:3c: db:6e:e7:9b:fb:41:d8:b2:6f:9e:d9:29:94:2f:95: a9:b9:38:20:b5:22:21:3d:63:96:8e:24:7c:fc:c1: d2:15:52:66:2e:68:a9:8b:50:bd:9d:bd:b9:f4:9d: 2c:33:c5:c3:ec:34:68:52:e1:74:8c:4c:93:a4:c5: b9:ce:29:de:8a:c5:e9:b0:bf:17:bf:88:f3:e3:48: 46:32:32:ea:44:e0:fc:9f:54:a7:c5:29:44:e8:41: 9e:b9:4c:d8:51:3e:db:51:ea:d3:c2:f3:bc:ff:cf: c7:05:25:a9:7e:8e:2b:4b:b5:cb:e5:c2:37:be:62: c4:aa:9a:12:34:38:4a:33:94:2f:1b:55:d0:b3:af: 52:fc:90:ff:ac:c5:d2:6b:33:a5:8b:53:f3:2c:ab: 15:bc:b4:46:19:0d:ee:de:c1:15:e5:12:43:3c:f8: 61:e5:33:24:86:5f:86:da:56:d4:49:b4:a4:b6:5f: a4:97:33:f2:ce:0a:a3:68:3c:ab:80:ab:9a:fb:c0: 9a:60:12:9b:58:14:46:df:cf:4e:2e:20:59:c4:5e: 3e:37:ff:16:57:2c:ef:97:b1:3c:ea:3f:d9:aa:36: 0f:87:4d:47:d9:3b:23:50:42:f3:bd:b4:5f:65:9e: e5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:69:51:17:07:6E:B8:1F:81:99:85:0D:9C:CA:96:5A:85:E6:12:06 X509v3 Authority Key Identifier: keyid:0A:85:D3:79:72:6C:8F:C0:96:D2:7E:88:FD:A1:17:B3:B2:65:4E:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoXTeXJsj8CW0n6I_aEXs7JlTlk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d560-253b-4fe1-9c9d-5e92f4755904/1/CoXTeXJsj8CW0n6I_aEXs7JlTlk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:41:a8:8f:3e:73:18:43:68:10:0c:9b:8f:f3:6e:fc:2e: cb:6a:61:72:95:0e:90:a8:c2:99:70:a4:26:23:69:ec:fc:3c: 1f:88:cf:e8:cd:5a:07:35:65:cc:63:2f:55:14:f5:73:ad:3f: 10:b0:22:96:2a:6e:47:29:46:f0:94:aa:56:33:76:71:e7:94: b2:ed:2e:a3:8d:e5:c9:f9:7a:7d:b1:ea:93:a7:f2:cb:3d:f9: 45:95:9b:91:2d:07:40:5f:5e:d8:d9:de:58:a0:dc:b7:70:98: 73:e2:7b:1c:20:eb:50:56:2d:19:8f:78:22:0c:a0:0a:e1:c1: ef:9c:d4:af:29:6a:db:7a:22:03:ba:9e:33:89:b8:e9:4f:d2: c7:e1:98:5b:ef:95:0c:48:5d:e5:4c:05:46:01:d3:5a:d5:c0: 96:c6:33:07:1a:9a:7a:f3:74:aa:84:d4:b6:bc:14:64:e8:99: fd:4c:48:71:9c:a1:2f:41:45:d2:fb:da:18:19:17:fb:f4:f9: d4:c7:9b:3b:7e:3e:51:13:2b:bc:88:5c:6c:b1:af:26:25:c1: 47:63:7e:00:6f:08:b7:6c:24:58:cb:61:0b:ab:00:bf:75:ee: 60:14:71:8e:00:57:28:6b:99:de:af:30:c7:2a:34:00:68:d3: a8:92:d3:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOB7rE0bVgIL2rynLLvCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODVkMzc5NzI2YzhmYzA5NmQyN2U4OGZkYTExN2IzYjI2 NTRlNTkwHhcNMjYwMjA5MTcwMDIzWhcNMjYwMjEwMTcwMDIzWjAzMTEwLwYDVQQD Eyg5ODY5NTExNzA3NmViODFmODE5OTg1MGQ5Y2NhOTY1YTg1ZTYxMjA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87KYKAZgXsS2f53FoTzbbueb+0HY sm+e2SmUL5WpuTggtSIhPWOWjiR8/MHSFVJmLmipi1C9nb259J0sM8XD7DRoUuF0 jEyTpMW5zineisXpsL8Xv4jz40hGMjLqROD8n1SnxSlE6EGeuUzYUT7bUerTwvO8 /8/HBSWpfo4rS7XL5cI3vmLEqpoSNDhKM5QvG1XQs69S/JD/rMXSazOli1PzLKsV vLRGGQ3u3sEV5RJDPPhh5TMkhl+G2lbUSbSktl+klzPyzgqjaDyrgKua+8CaYBKb WBRG389OLiBZxF4+N/8WVyzvl7E86j/ZqjYPh01H2TsjUELzvbRfZZ7lXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJhpURcHbrgfgZmFDZzKllqF5hIGMB8GA1UdIwQY MBaAFAqF03lybI/AltJ+iP2hF7OyZU5ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQt NWU5MmY0NzU1OTA0LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8yM2Q1NjAtMjUzYi00ZmUxLTljOWQtNWU5MmY0NzU1OTA0 LzEvQ29YVGVYSnNqOENXMG42SV9hRVhzN0psVGxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADt9BqI8+ cxhDaBAMm4/zbvwuy2phcpUOkKjCmXCkJiNp7Pw8H4jP6M1aBzVlzGMvVRT1c60/ ELAilipuRylG8JSqVjN2ceeUsu0uo43lyfl6fbHqk6fyyz35RZWbkS0HQF9e2Nne WKDct3CYc+J7HCDrUFYtGY94IgygCuHB75zUrylq23oiA7qeM4m46U/Sx+GYW++V DEhd5UwFRgHTWtXAlsYzBxqaevN0qoTUtrwUZOiZ/UxIcZyhL0FF0vvaGBkX+/T5 1MebO34+URMrvIhcbLGvJiXBR2N+AG8It2wkWMthC6sAv3XuYBRxjgBXKGuZ3q8w xyo0AGjTqJLTqg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:47:05 2026 by rpki-client