This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json) Hash identifier: QEkTNic19n7nsr3aGFkcjcBSFx8cC3nE8PBJGu56RJ8= Subject key identifier: A1:37:E1:D5:98:55:79:BF:98:E3:B3:40:CB:6E:2C:51:B3:5C:8A:7C Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76 Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976 Certificate serial: 019C439080074478810551B74F17EABC2C17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft Manifest number: 138F Signing time: Mon 09 Feb 2026 18:01:09 +0000 Manifest this update: Mon 09 Feb 2026 18:01:09 +0000 Manifest next update: Tue 10 Feb 2026 18:01:09 +0000 Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: LIt5OlPKoQj659gavQJePzq4qN37IY2YrYJCwvLVwPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:80:07:44:78:81:05:51:b7:4f:17:ea:bc:2c:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976 Validity Not Before: Feb 9 18:01:09 2026 GMT Not After : Feb 10 18:01:09 2026 GMT Subject: CN=a137e1d5985579bf98e3b340cb6e2c51b35c8a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:da:10:e3:41:84:10:7d:50:84:dc:b4:64:1d: b4:90:31:0a:c4:53:1f:d1:9d:e8:b7:37:51:14:8c: 8e:70:95:2f:fc:e4:53:80:ed:8d:11:f8:50:8c:3f: 31:74:94:e9:bf:ab:82:84:c2:40:a5:f9:db:5f:5c: d4:0f:45:03:13:26:ef:52:90:00:ea:ad:ae:df:39: aa:04:74:c3:a4:23:c9:c0:a7:8b:15:58:9d:3f:1d: 96:a9:6a:02:a6:6d:26:41:b1:93:d3:3b:79:01:68: 08:b5:33:ed:12:cc:4b:04:d6:a8:bc:36:84:4c:51: e1:58:04:29:1a:a9:bc:83:14:86:90:9f:f5:84:5a: 53:0e:ba:14:85:d9:d4:87:e6:d9:90:c3:27:b1:47: 40:e3:5d:49:94:65:9e:ac:49:d0:b3:2d:fd:d5:6a: 41:43:f5:42:99:cf:68:7e:99:52:4a:9c:11:72:7d: d7:35:32:76:42:50:f3:b4:9b:66:d1:f5:a2:bb:10: f3:7f:a9:b7:9e:bd:96:e2:11:43:37:5e:a4:08:b2: 0b:91:e7:3f:7a:57:6a:df:82:9a:44:00:0c:24:6d: 0b:10:79:bb:c2:bc:d8:0f:80:9e:b3:45:e4:68:99: e5:0e:04:e7:aa:dc:6a:4b:32:25:3e:a7:a5:f6:de: dc:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:37:E1:D5:98:55:79:BF:98:E3:B3:40:CB:6E:2C:51:B3:5C:8A:7C X509v3 Authority Key Identifier: keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:a9:7d:aa:07:c8:dc:33:1d:db:fb:e8:8e:ef:28:60:fc:a9: 9a:3f:a4:75:1f:60:1d:81:a5:83:b5:48:6a:a2:f4:c0:14:f0: 92:70:89:dc:0d:61:0f:fa:63:d0:fe:df:9a:27:a3:5d:89:d6: af:c7:88:95:2c:f9:fd:d7:c8:a4:fc:d4:df:96:20:44:44:cb: 03:1d:72:6f:99:0e:e0:d8:e1:79:24:ea:3b:44:0e:47:47:b0: 76:d1:89:c0:1b:45:9b:70:45:1d:50:a4:f9:d0:a4:74:dc:1b: ac:ed:82:50:6b:15:c2:fe:31:a4:6d:33:6c:56:cc:79:a4:22: c9:d5:48:19:a8:9b:93:a6:2d:0f:3c:80:23:3f:b8:dd:9a:5b: 3a:48:f0:ce:ab:01:da:7e:be:1c:bb:cd:04:44:dd:d6:00:29: 4c:b3:ab:37:38:d4:91:77:95:33:dc:49:d9:0d:ba:9d:a4:a6: e8:92:9c:e3:4b:14:d8:b9:4a:8d:2f:dc:0e:a3:f5:a9:6b:71: 62:d3:3e:20:ec:b3:7e:c0:c1:8c:4f:a4:e1:51:e1:99:b3:fb: 93:7f:b0:ee:ca:7b:8e:86:0f:8c:a1:cb:7b:26:7b:43:54:0c: 2b:c2:80:84:60:b7:1a:1c:48:7d:69:c2:5d:9c:91:47:5b:8d: 3e:03:e5:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkIAHRHiBBVG3TxfqvCwXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjMmEwOTA0NDVmYTM5Y2Q2ZmZlMGZjZjQ0YTE0NDA3OTI0 OTg5NzYwHhcNMjYwMjA5MTgwMTA5WhcNMjYwMjEwMTgwMTA5WjAzMTEwLwYDVQQD EyhhMTM3ZTFkNTk4NTU3OWJmOThlM2IzNDBjYjZlMmM1MWIzNWM4YTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNoQ40GEEH1QhNy0ZB20kDEKxFMf 0Z3otzdRFIyOcJUv/ORTgO2NEfhQjD8xdJTpv6uChMJApfnbX1zUD0UDEybvUpAA 6q2u3zmqBHTDpCPJwKeLFVidPx2WqWoCpm0mQbGT0zt5AWgItTPtEsxLBNaovDaE TFHhWAQpGqm8gxSGkJ/1hFpTDroUhdnUh+bZkMMnsUdA411JlGWerEnQsy391WpB Q/VCmc9ofplSSpwRcn3XNTJ2QlDztJtm0fWiuxDzf6m3nr2W4hFDN16kCLILkec/ eldq34KaRAAMJG0LEHm7wrzYD4Ces0XkaJnlDgTnqtxqSzIlPqel9t7cJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKE34dWYVXm/mOOzQMtuLFGzXIp8MB8GA1UdIwQY MBaAFPwqCQRF+jnNb/4Pz0ShRAeSSYl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWIt MzU4OGQ3OTBiYTA3LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWItMzU4OGQ3OTBiYTA3 LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXal9qgfI 3DMd2/voju8oYPypmj+kdR9gHYGlg7VIaqL0wBTwknCJ3A1hD/pj0P7fmiejXYnW r8eIlSz5/dfIpPzU35YgRETLAx1yb5kO4NjheSTqO0QOR0ewdtGJwBtFm3BFHVCk +dCkdNwbrO2CUGsVwv4xpG0zbFbMeaQiydVIGaibk6YtDzyAIz+43ZpbOkjwzqsB 2n6+HLvNBETd1gApTLOrNzjUkXeVM9xJ2Q26naSm6JKc40sU2LlKjS/cDqP1qWtx YtM+IOyzfsDBjE+k4VHhmbP7k3+w7sp7joYPjKHLeyZ7Q1QMK8KAhGC3GhxIfWnC XZyRR1uNPgPlng== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:56 2026 by rpki-client