This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft File: c1AO60fC8TVxh2oZZjU3-LY2qA8.mft (raw, json) Hash identifier: F/H0JAbNKGjrd0zBBmVB6P9jBg2YjXG28M46ffYoq+k= Subject key identifier: A5:AA:90:9E:B3:17:63:64:39:B0:98:45:AF:1B:43:C0:89:25:6E:9E Authority key identifier: 73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F Certificate issuer: /CN=73500eeb47c2f13571876a19663537f8b636a80f Certificate serial: 019C4246621E3FCF1A207ABFABF04DAEF232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft Manifest number: 0496 Signing time: Mon 09 Feb 2026 12:00:34 +0000 Manifest this update: Mon 09 Feb 2026 12:00:34 +0000 Manifest next update: Tue 10 Feb 2026 12:00:34 +0000 Files and hashes: 1: c1AO60fC8TVxh2oZZjU3-LY2qA8.crl (hash: FyTpOfGFHDgOnbQRb/9UWxIFjSH6F2ScFddbg6gPAWI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:62:1e:3f:cf:1a:20:7a:bf:ab:f0:4d:ae:f2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73500eeb47c2f13571876a19663537f8b636a80f Validity Not Before: Feb 9 12:00:34 2026 GMT Not After : Feb 10 12:00:34 2026 GMT Subject: CN=a5aa909eb317636439b09845af1b43c089256e9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:65:5a:4a:ff:9f:be:ce:db:00:bf:94:1f: d9:b1:b2:e0:95:d9:96:18:cb:28:57:e5:88:6d:b3: 52:eb:57:61:26:10:8b:67:0d:63:25:0d:94:d3:a5: 97:ff:3f:85:19:5d:da:25:66:a5:14:75:49:66:8e: 3c:08:cc:64:68:78:0f:81:2a:ec:27:00:b0:39:2b: 79:92:01:0b:80:58:36:ad:83:ce:e2:74:e0:11:a1: 6d:90:38:a8:a6:4e:8b:0a:91:29:81:f9:ba:6f:8b: 55:26:b9:f2:a2:cd:88:a2:46:2e:bb:6b:89:d4:3b: 72:a4:1b:cf:26:2a:e7:12:ce:db:4a:51:c4:61:f3: 14:0e:c2:d8:72:b7:01:7e:cc:5e:04:9b:37:c6:a9: f6:3c:55:4c:a8:ba:c0:1f:37:d9:bc:02:b4:5c:ae: 6f:84:51:31:bf:16:1d:94:c2:a2:64:49:65:12:57: 7a:e1:18:75:29:dc:c6:d8:28:f4:28:c0:7a:7e:e2: b9:d2:40:ab:00:64:41:e0:88:d4:01:4f:06:33:76: 6b:64:4d:21:25:8f:f9:e8:00:3f:ff:5a:16:ea:f0: f3:9a:99:58:5c:34:4a:3d:11:a7:de:25:44:19:29: 75:26:4a:39:30:02:01:b3:8c:87:aa:12:93:f7:54: e6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AA:90:9E:B3:17:63:64:39:B0:98:45:AF:1B:43:C0:89:25:6E:9E X509v3 Authority Key Identifier: keyid:73:50:0E:EB:47:C2:F1:35:71:87:6A:19:66:35:37:F8:B6:36:A8:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1AO60fC8TVxh2oZZjU3-LY2qA8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/c08abb-4586-4254-9e20-c0781ca8091c/1/c1AO60fC8TVxh2oZZjU3-LY2qA8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:88:fd:d5:49:3a:3d:fe:1a:43:6d:db:06:93:16:69:d3:1e: 00:0e:fa:e4:c7:65:77:35:b1:8c:c6:78:f7:ee:65:d2:82:1a: d3:9f:4c:32:00:bb:b2:75:7c:02:1f:cb:3b:e5:a1:23:4e:3d: 4d:80:98:21:b2:d3:f9:40:5c:21:03:3f:72:52:41:3b:f0:3d: 3f:87:8c:61:cd:5b:d3:89:ea:4a:71:62:f6:6c:bc:92:5f:6d: 8f:b9:03:8b:c1:98:60:d9:78:ef:fa:04:94:78:ce:ec:60:b6: b5:18:64:9b:36:41:90:45:42:a3:81:d1:b6:01:9a:27:91:c8: 37:e2:2e:e8:d1:f6:03:e4:5a:47:49:e1:8d:a0:e8:54:5b:c0: 9c:3d:7c:19:f7:0f:48:b7:74:74:1f:b0:f3:62:66:8d:f0:21: 2e:fc:a0:de:cc:37:9a:b3:1b:20:aa:47:a5:a8:dd:e9:eb:01: 26:cf:3d:f6:b7:f4:77:f6:af:c2:7e:00:76:e2:5d:ac:34:5f: b9:82:f7:62:88:f9:54:02:8c:19:85:ba:5a:d7:a1:bd:97:6d: 4e:72:cb:c2:86:1f:3a:b0:5f:3a:a5:ce:c0:6b:1e:a1:7e:53: 73:48:17:98:c3:01:5c:ed:c1:d5:f1:41:34:e1:d3:aa:15:06: a9:78:58:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmIeP88aIHq/q/BNrvIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNTAwZWViNDdjMmYxMzU3MTg3NmExOTY2MzUzN2Y4YjYz NmE4MGYwHhcNMjYwMjA5MTIwMDM0WhcNMjYwMjEwMTIwMDM0WjAzMTEwLwYDVQQD EyhhNWFhOTA5ZWIzMTc2MzY0MzliMDk4NDVhZjFiNDNjMDg5MjU2ZTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoplWkr/n77O2wC/lB/ZsbLgldmW GMsoV+WIbbNS61dhJhCLZw1jJQ2U06WX/z+FGV3aJWalFHVJZo48CMxkaHgPgSrs JwCwOSt5kgELgFg2rYPO4nTgEaFtkDiopk6LCpEpgfm6b4tVJrnyos2IokYuu2uJ 1DtypBvPJirnEs7bSlHEYfMUDsLYcrcBfsxeBJs3xqn2PFVMqLrAHzfZvAK0XK5v hFExvxYdlMKiZEllEld64Rh1KdzG2Cj0KMB6fuK50kCrAGRB4IjUAU8GM3ZrZE0h JY/56AA//1oW6vDzmplYXDRKPRGn3iVEGSl1Jko5MAIBs4yHqhKT91TmWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWqkJ6zF2NkObCYRa8bQ8CJJW6eMB8GA1UdIwQY MBaAFHNQDutHwvE1cYdqGWY1N/i2NqgPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAt YzA3ODFjYTgwOTFjLzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9jMDhhYmItNDU4Ni00MjU0LTllMjAtYzA3ODFjYTgwOTFj LzEvYzFBTzYwZkM4VFZ4aDJvWlpqVTMtTFkycUE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzIj91Uk6 Pf4aQ23bBpMWadMeAA765MdldzWxjMZ49+5l0oIa059MMgC7snV8Ah/LO+WhI049 TYCYIbLT+UBcIQM/clJBO/A9P4eMYc1b04nqSnFi9my8kl9tj7kDi8GYYNl47/oE lHjO7GC2tRhkmzZBkEVCo4HRtgGaJ5HIN+Iu6NH2A+RaR0nhjaDoVFvAnD18GfcP SLd0dB+w82JmjfAhLvyg3sw3mrMbIKpHpajd6esBJs899rf0d/avwn4AduJdrDRf uYL3Yoj5VAKMGYW6WtehvZdtTnLLwoYfOrBfOqXOwGseoX5Tc0gXmMMBXO3B1fFB NOHTqhUGqXhYLA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:26 2026 by rpki-client