This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft File: X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft (raw, json) Hash identifier: XlFpG5kVTag1gviYiwKLx/bvFTyDg3W9fPhopngHyYw= Subject key identifier: BD:4C:34:6C:64:93:31:F3:C6:E6:CA:73:9C:F5:CC:6F:1E:F5:9E:B9 Authority key identifier: 5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F Certificate issuer: /CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Certificate serial: 019C43228FEC97D768A613820746CB319D35 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft Manifest number: 08BC Signing time: Mon 09 Feb 2026 16:01:04 +0000 Manifest this update: Mon 09 Feb 2026 16:01:04 +0000 Manifest next update: Tue 10 Feb 2026 16:01:04 +0000 Files and hashes: 1: X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl (hash: YLDfj4ggw6YtQMiu13/rgfwk8hwYv2fvrPjU+YMwIk8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:8f:ec:97:d7:68:a6:13:82:07:46:cb:31:9d:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5fe0be20e02ffc7354d5b2d33e0fe771519afd1f Validity Not Before: Feb 9 16:01:04 2026 GMT Not After : Feb 10 16:01:04 2026 GMT Subject: CN=bd4c346c649331f3c6e6ca739cf5cc6f1ef59eb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:99:39:a2:3d:5c:4b:c0:81:eb:9a:8c:9a: a9:4a:f6:3f:ee:9f:43:b6:e9:28:68:99:aa:5c:2f: cb:2e:17:74:45:63:12:5a:ab:2e:18:92:08:e7:73: 72:be:ef:91:6f:6c:3a:9c:53:1f:a8:09:f6:8e:20: 71:7f:24:f3:2d:94:0c:9b:5d:0b:7d:80:c2:bc:51: 2c:8b:02:6a:ed:e3:6d:ae:32:d5:ff:41:5c:81:15: ff:ef:72:3a:cd:fe:a4:2d:50:82:63:a5:c3:8f:28: 88:e0:62:93:42:9a:7d:88:54:37:09:bd:6a:e3:11: c5:0e:38:5f:36:cc:eb:b1:4a:a2:ec:bd:c0:e4:81: c3:ac:b1:58:47:1c:9a:ce:3e:bd:44:af:06:03:ed: ae:f5:dd:f2:a9:a7:79:97:1d:ab:f1:49:f7:7a:44: b0:34:6f:36:75:83:a8:ae:dd:37:c2:26:71:78:0e: 08:70:9e:3e:ec:23:c5:54:4e:dd:f1:a5:49:87:7f: 02:b3:c8:df:78:65:69:f8:e1:1f:90:02:e4:18:8b: 84:43:90:65:1c:92:a2:e7:6e:e7:b6:4b:ed:72:bd: 4c:d1:34:aa:0e:fd:11:c1:15:d0:64:3a:ed:f7:0b: b7:3f:46:f1:08:6a:38:fc:2f:70:72:20:fe:35:b1: 12:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4C:34:6C:64:93:31:F3:C6:E6:CA:73:9C:F5:CC:6F:1E:F5:9E:B9 X509v3 Authority Key Identifier: keyid:5F:E0:BE:20:E0:2F:FC:73:54:D5:B2:D3:3E:0F:E7:71:51:9A:FD:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-C-IOAv_HNU1bLTPg_ncVGa_R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/981b84-9ff0-48e9-ab21-9b6cbfb43246/1/X-C-IOAv_HNU1bLTPg_ncVGa_R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:a7:fc:ad:6f:76:f8:82:b4:ea:02:29:33:20:70:bb:58:f7: 09:35:45:54:eb:88:3c:44:07:ab:f7:43:1c:59:31:63:e7:0c: 26:7f:16:ec:ca:0c:e6:e8:f8:8e:80:be:96:59:59:d8:2f:cf: 22:bb:c4:e5:2e:56:af:7b:a2:34:41:75:27:ed:d1:55:5f:18: bf:c8:da:2d:d1:82:7c:49:1b:d7:69:f4:a3:74:4c:d8:b9:bd: fa:79:6c:e8:d9:1f:0c:11:87:74:71:18:eb:ae:e3:28:7e:f4: 2a:34:3e:1b:d1:77:02:e5:b4:4e:a1:46:47:df:59:b8:c6:be: 6c:f2:b9:c3:e0:da:98:7b:43:12:e6:84:8b:07:39:77:48:58: 0b:32:30:52:56:6b:a9:b6:a0:5c:a0:1a:87:aa:f9:a7:02:73: 62:05:ce:56:fd:f7:36:2b:13:03:f2:26:34:6b:b3:24:be:25: a5:c2:a1:c2:90:55:e5:44:a7:83:99:18:c4:b7:90:f3:d9:cd: be:b9:0e:5d:8b:cb:5d:f8:f4:38:b7:9e:e6:6b:bc:4e:37:c3: 65:a1:a0:83:27:26:03:58:29:fd:52:05:56:84:ba:ea:89:a6: f2:2e:d5:34:fb:0a:cc:18:47:18:52:f2:0c:ed:79:de:bc:87: cc:c8:d8:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIo/sl9dophOCB0bLMZ01MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVmZTBiZTIwZTAyZmZjNzM1NGQ1YjJkMzNlMGZlNzcxNTE5 YWZkMWYwHhcNMjYwMjA5MTYwMTA0WhcNMjYwMjEwMTYwMTA0WjAzMTEwLwYDVQQD EyhiZDRjMzQ2YzY0OTMzMWYzYzZlNmNhNzM5Y2Y1Y2M2ZjFlZjU5ZWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv++ZOaI9XEvAgeuajJqpSvY/7p9D tukoaJmqXC/LLhd0RWMSWqsuGJII53Nyvu+Rb2w6nFMfqAn2jiBxfyTzLZQMm10L fYDCvFEsiwJq7eNtrjLV/0FcgRX/73I6zf6kLVCCY6XDjyiI4GKTQpp9iFQ3Cb1q 4xHFDjhfNszrsUqi7L3A5IHDrLFYRxyazj69RK8GA+2u9d3yqad5lx2r8Un3ekSw NG82dYOort03wiZxeA4IcJ4+7CPFVE7d8aVJh38Cs8jfeGVp+OEfkALkGIuEQ5Bl HJKi527ntkvtcr1M0TSqDv0RwRXQZDrt9wu3P0bxCGo4/C9wciD+NbESjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1MNGxkkzHzxubKc5z1zG8e9Z65MB8GA1UdIwQY MBaAFF/gviDgL/xzVNWy0z4P53FRmv0fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEt OWI2Y2JmYjQzMjQ2LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS85ODFiODQtOWZmMC00OGU5LWFiMjEtOWI2Y2JmYjQzMjQ2 LzEvWC1DLUlPQXZfSE5VMWJMVFBnX25jVkdhX1I4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADKf8rW92 +IK06gIpMyBwu1j3CTVFVOuIPEQHq/dDHFkxY+cMJn8W7MoM5uj4joC+lllZ2C/P IrvE5S5Wr3uiNEF1J+3RVV8Yv8jaLdGCfEkb12n0o3RM2Lm9+nls6NkfDBGHdHEY 667jKH70KjQ+G9F3AuW0TqFGR99ZuMa+bPK5w+DamHtDEuaEiwc5d0hYCzIwUlZr qbagXKAah6r5pwJzYgXOVv33NisTA/ImNGuzJL4lpcKhwpBV5USng5kYxLeQ89nN vrkOXYvLXfj0OLee5mu8TjfDZaGggycmA1gp/VIFVoS66omm8i7VNPsKzBhHGFLy DO153ryHzMjY6g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:29 2026 by rpki-client