This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft File: CarRexBndeSE9h67XsEEwnwYfkg.mft (raw, json) Hash identifier: 9IF6TK7x1yTtRusVVMasHHZgHAeCodDz6Hf84Lcjaj4= Subject key identifier: 00:83:9B:8C:B6:C6:C0:C4:67:B7:4C:6C:D9:D9:20:C8:30:02:79:C8 Authority key identifier: 09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 Certificate issuer: /CN=09aad17b106775e484f61ebb5ec104c27c187e48 Certificate serial: 019C41D89D99A859B57BCB48814DE96262CF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft Manifest number: 1121 Signing time: Mon 09 Feb 2026 10:00:40 +0000 Manifest this update: Mon 09 Feb 2026 10:00:40 +0000 Manifest next update: Tue 10 Feb 2026 10:00:40 +0000 Files and hashes: 1: CarRexBndeSE9h67XsEEwnwYfkg.crl (hash: I74hQykAZHgxqPKLOMxFs6U33nx70C6c40GRIrFOX1I=) 2: Rzs2HXQzTLrDqDj9LP1oWAbKMGw.roa (hash: OG2fkvNtGY/HMomh9VL9hQ1Vbd5noSl5aNza/Xw2mXc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:9d:99:a8:59:b5:7b:cb:48:81:4d:e9:62:62:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09aad17b106775e484f61ebb5ec104c27c187e48 Validity Not Before: Feb 9 10:00:40 2026 GMT Not After : Feb 10 10:00:40 2026 GMT Subject: CN=00839b8cb6c6c0c467b74c6cd9d920c8300279c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:c7:9a:9f:2e:67:99:af:88:76:c0:28:f6:4f: 6b:78:b7:7b:bc:ed:d3:14:44:1a:ee:da:ef:2b:26: fd:96:aa:c8:cb:14:3b:39:d1:c8:e6:24:6e:34:c7: 25:d8:cf:10:eb:9a:1b:91:f7:ca:c2:44:a5:ac:7e: ef:b1:74:1e:3b:90:07:32:d3:3d:f1:03:20:73:2f: ed:79:7e:42:56:d3:eb:54:10:88:64:de:cc:1d:a9: b5:31:99:30:3f:90:b3:77:8a:70:a7:cb:c3:11:7e: 6c:ed:68:b5:39:6b:bb:7f:0f:a9:a9:a4:b7:38:48: 99:87:dc:97:d7:07:e7:4e:81:26:09:1f:74:df:80: ff:3e:5c:04:04:00:f3:b2:5b:3f:86:33:10:5b:c4: b0:f6:1e:bc:f5:1f:ce:70:d9:45:e5:f5:88:c4:b0: 76:f0:87:73:58:18:0e:9b:8f:a4:fa:70:64:b7:ac: e3:49:e0:ca:96:d0:69:35:fb:bc:f6:50:c9:5e:ec: 92:4a:4d:0e:3b:67:c0:51:7d:8a:e7:18:e1:3e:a2: bc:c7:dd:8a:fd:8e:3f:3f:9e:f4:51:42:8c:cf:37: 34:bd:40:eb:7d:d8:46:d0:4f:22:74:a2:26:0f:bb: a3:78:48:0b:30:43:1e:a2:9c:7b:af:c9:f3:c7:bc: 09:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:83:9B:8C:B6:C6:C0:C4:67:B7:4C:6C:D9:D9:20:C8:30:02:79:C8 X509v3 Authority Key Identifier: keyid:09:AA:D1:7B:10:67:75:E4:84:F6:1E:BB:5E:C1:04:C2:7C:18:7E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CarRexBndeSE9h67XsEEwnwYfkg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/82fb1d-f4f4-436a-a993-b4a1700f2172/1/CarRexBndeSE9h67XsEEwnwYfkg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:72:c3:ae:58:b4:47:2c:a2:02:6a:5e:12:72:2a:66:8c:0a: 7b:d9:18:71:59:4c:33:f0:d2:04:79:f4:87:b6:72:0a:b6:cc: 2b:25:4f:4e:43:35:68:98:89:ea:10:3a:47:21:22:9e:a5:71: e8:27:85:4f:ff:46:98:92:29:6b:bd:ea:40:26:f3:7d:8d:00: c7:c5:5d:15:d2:88:e1:6e:a7:16:ef:2b:04:cc:ac:65:83:1a: dd:70:68:5f:27:54:85:04:ae:81:21:3d:41:72:1d:5b:ff:68: a0:a1:90:80:ae:24:1b:ab:ac:40:d5:34:35:5c:67:6a:bf:3c: ab:93:55:cb:02:bd:1e:12:b0:ec:05:e9:18:2c:b9:43:c2:26: 23:4f:fb:11:be:97:22:76:d7:23:f5:90:bc:0e:44:20:2b:12: 09:38:43:d1:59:01:3a:79:47:0b:76:7e:af:fe:4d:92:36:ff: 3a:e8:9c:3a:30:53:25:17:d9:ce:da:fe:f1:dc:62:50:cc:e8: b8:ce:09:49:51:cf:54:72:dc:5b:f0:57:47:28:17:71:db:88: ca:d5:59:87:59:db:c5:06:45:bd:04:57:16:c3:a3:5d:ea:e7: bf:78:b6:a3:51:11:77:94:c0:19:6a:4e:7e:11:6e:20:26:ce: e9:e3:16:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2J2ZqFm1e8tIgU3pYmLPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5YWFkMTdiMTA2Nzc1ZTQ4NGY2MWViYjVlYzEwNGMyN2Mx ODdlNDgwHhcNMjYwMjA5MTAwMDQwWhcNMjYwMjEwMTAwMDQwWjAzMTEwLwYDVQQD EygwMDgzOWI4Y2I2YzZjMGM0NjdiNzRjNmNkOWQ5MjBjODMwMDI3OWM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+seany5nma+IdsAo9k9reLd7vO3T FEQa7trvKyb9lqrIyxQ7OdHI5iRuNMcl2M8Q65obkffKwkSlrH7vsXQeO5AHMtM9 8QMgcy/teX5CVtPrVBCIZN7MHam1MZkwP5Czd4pwp8vDEX5s7Wi1OWu7fw+pqaS3 OEiZh9yX1wfnToEmCR9034D/PlwEBADzsls/hjMQW8Sw9h689R/OcNlF5fWIxLB2 8IdzWBgOm4+k+nBkt6zjSeDKltBpNfu89lDJXuySSk0OO2fAUX2K5xjhPqK8x92K /Y4/P570UUKMzzc0vUDrfdhG0E8idKImD7ujeEgLMEMeopx7r8nzx7wJ+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACDm4y2xsDEZ7dMbNnZIMgwAnnIMB8GA1UdIwQY MBaAFAmq0XsQZ3XkhPYeu17BBMJ8GH5IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMt YjRhMTcwMGYyMTcyLzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS84MmZiMWQtZjRmNC00MzZhLWE5OTMtYjRhMTcwMGYyMTcy LzEvQ2FyUmV4Qm5kZVNFOWg2N1hzRUV3bndZZmtnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHLDrli0 RyyiAmpeEnIqZowKe9kYcVlMM/DSBHn0h7ZyCrbMKyVPTkM1aJiJ6hA6RyEinqVx 6CeFT/9GmJIpa73qQCbzfY0Ax8VdFdKI4W6nFu8rBMysZYMa3XBoXydUhQSugSE9 QXIdW/9ooKGQgK4kG6usQNU0NVxnar88q5NVywK9HhKw7AXpGCy5Q8ImI0/7Eb6X InbXI/WQvA5EICsSCThD0VkBOnlHC3Z+r/5Nkjb/OuicOjBTJRfZztr+8dxiUMzo uM4JSVHPVHLcW/BXRygXcduIytVZh1nbxQZFvQRXFsOjXernv3i2o1ERd5TAGWpO fhFuICbO6eMWXw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:29 2026 by rpki-client