This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft File: 0jbg4txaKEOOMOv9HWpqlNs9HEA.mft (raw, json) Hash identifier: FDFf9zLkECLUSNxpuuGhQV2ay/qvp1BcT9SS4gf8MlQ= Subject key identifier: CE:BD:57:10:CA:C9:50:8A:84:BA:86:09:4D:19:8E:9F:A3:E5:A5:CD Authority key identifier: D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40 Certificate issuer: /CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40 Certificate serial: 019C432203C5898BE3076F7B774A8EF6512F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft Manifest number: 128A Signing time: Mon 09 Feb 2026 16:00:28 +0000 Manifest this update: Mon 09 Feb 2026 16:00:28 +0000 Manifest next update: Tue 10 Feb 2026 16:00:28 +0000 Files and hashes: 1: 0jbg4txaKEOOMOv9HWpqlNs9HEA.crl (hash: /Loca+VTwQHyqIWIWk9T9kk9WQDamTC+KEi9RTLMzLk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:03:c5:89:8b:e3:07:6f:7b:77:4a:8e:f6:51:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d236e0e2dc5a28438e30ebfd1d6a6a94db3d1c40 Validity Not Before: Feb 9 16:00:28 2026 GMT Not After : Feb 10 16:00:28 2026 GMT Subject: CN=cebd5710cac9508a84ba86094d198e9fa3e5a5cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:79:24:ea:4b:87:1c:0c:66:b5:03:ba:03:73: eb:a0:4c:16:27:e0:e3:4c:2d:63:61:d3:3c:4c:88: 3a:11:75:35:5b:5e:c9:01:23:7a:32:8b:3a:10:17: 59:72:c3:34:b1:83:b8:d8:8a:ba:e2:a9:31:69:de: 9c:ba:61:36:5e:f2:64:47:be:26:2d:19:43:f6:83: ad:73:f7:95:16:3d:a5:8b:a1:19:b9:fd:0a:62:50: 15:0a:05:d0:f1:06:5f:50:3b:59:13:85:3a:e4:0a: 61:4d:ca:06:fc:ac:56:4c:6d:54:df:84:69:47:53: 3d:4b:cc:41:0a:e2:d0:5a:07:27:4e:ee:ea:ac:9c: d7:ea:6e:7f:60:2e:ae:bc:0c:21:3c:43:72:e4:26: fd:36:9d:a5:1a:25:67:43:e3:16:73:c2:97:68:57: 61:fe:67:10:5c:37:06:2a:d1:e3:6b:9f:e5:f6:3c: 5b:a0:4a:99:de:13:85:72:c1:bb:1e:ea:78:24:3e: 0c:33:9e:c8:b3:3c:bc:97:32:be:38:4f:42:b3:ce: 8a:23:ad:1b:f1:b3:9c:ed:06:6c:8e:b3:ad:00:52: c2:c4:a1:d2:3e:9e:62:27:37:11:02:65:79:fa:ac: a2:42:dc:85:0c:3a:7d:09:69:2a:55:19:bb:5b:ba: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:57:10:CA:C9:50:8A:84:BA:86:09:4D:19:8E:9F:A3:E5:A5:CD X509v3 Authority Key Identifier: keyid:D2:36:E0:E2:DC:5A:28:43:8E:30:EB:FD:1D:6A:6A:94:DB:3D:1C:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0jbg4txaKEOOMOv9HWpqlNs9HEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/716a23-b594-49e9-8959-9d432f128a25/1/0jbg4txaKEOOMOv9HWpqlNs9HEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:98:98:0a:e9:87:6b:15:28:25:5e:4b:92:65:40:2c:e7:42: 13:03:3f:d8:e2:46:3f:8a:09:db:85:af:c6:1d:4a:68:55:db: 27:34:64:90:f7:24:a9:bc:67:5a:27:14:13:e3:49:c6:e3:62: d1:d9:f8:65:f7:43:62:49:24:a8:9e:c4:e6:c2:5d:bb:4c:bc: 67:4f:30:22:c5:18:a4:34:9b:a3:15:ba:79:18:9a:7f:02:a0: df:ec:78:0a:83:03:8c:83:96:1d:d5:e6:9b:bc:63:80:d9:cc: 1d:a6:48:db:73:ec:b6:c1:76:89:ef:e2:b5:7f:3d:01:9d:02: 89:6e:94:f1:c3:41:f1:49:e3:0b:e8:31:0f:e0:16:db:a3:1d: 9f:b4:4a:d6:4d:56:75:77:46:2f:4f:13:42:72:73:0d:58:3b: 67:50:2d:d5:46:b4:4c:43:cc:ae:9c:6f:5a:82:38:d8:39:83: bd:fb:81:2d:2b:f2:2a:46:49:f4:c2:49:1b:f7:20:ed:35:9c: c6:56:05:d0:bb:b7:14:da:ae:4e:ae:1b:7b:69:90:1c:75:cc: e4:b5:78:3a:02:53:b3:08:66:91:c2:27:65:b8:6d:65:0c:c2: d6:71:1f:cb:05:71:42:c7:05:79:46:8c:a2:40:8f:17:3a:0f: 71:c8:3f:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgPFiYvjB297d0qO9lEvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMzZlMGUyZGM1YTI4NDM4ZTMwZWJmZDFkNmE2YTk0ZGIz ZDFjNDAwHhcNMjYwMjA5MTYwMDI4WhcNMjYwMjEwMTYwMDI4WjAzMTEwLwYDVQQD EyhjZWJkNTcxMGNhYzk1MDhhODRiYTg2MDk0ZDE5OGU5ZmEzZTVhNWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnkk6kuHHAxmtQO6A3ProEwWJ+Dj TC1jYdM8TIg6EXU1W17JASN6Mos6EBdZcsM0sYO42Iq64qkxad6cumE2XvJkR74m LRlD9oOtc/eVFj2li6EZuf0KYlAVCgXQ8QZfUDtZE4U65AphTcoG/KxWTG1U34Rp R1M9S8xBCuLQWgcnTu7qrJzX6m5/YC6uvAwhPENy5Cb9Np2lGiVnQ+MWc8KXaFdh /mcQXDcGKtHja5/l9jxboEqZ3hOFcsG7Hup4JD4MM57Iszy8lzK+OE9Cs86KI60b 8bOc7QZsjrOtAFLCxKHSPp5iJzcRAmV5+qyiQtyFDDp9CWkqVRm7W7qovwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM69VxDKyVCKhLqGCU0Zjp+j5aXNMB8GA1UdIwQY MBaAFNI24OLcWihDjjDr/R1qapTbPRxAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTkt OWQ0MzJmMTI4YTI1LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83MTZhMjMtYjU5NC00OWU5LTg5NTktOWQ0MzJmMTI4YTI1 LzEvMGpiZzR0eGFLRU9PTU92OUhXcHFsTnM5SEVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPZiYCumH axUoJV5LkmVALOdCEwM/2OJGP4oJ24Wvxh1KaFXbJzRkkPckqbxnWicUE+NJxuNi 0dn4ZfdDYkkkqJ7E5sJdu0y8Z08wIsUYpDSboxW6eRiafwKg3+x4CoMDjIOWHdXm m7xjgNnMHaZI23PstsF2ie/itX89AZ0CiW6U8cNB8UnjC+gxD+AW26Mdn7RK1k1W dXdGL08TQnJzDVg7Z1At1Ua0TEPMrpxvWoI42DmDvfuBLSvyKkZJ9MJJG/cg7TWc xlYF0Lu3FNquTq4be2mQHHXM5LV4OgJTswhmkcInZbhtZQzC1nEfywVxQscFeUaM okCPFzoPccg/lw== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:09 2026 by rpki-client