This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft File: cbbQ4ActDKspv6hzfeKlPlFBgnY.mft (raw, json) Hash identifier: k4ivWnYA6DFO3h4q8QDQn3+Gqt0hHY4VnphrXX9D+gA= Subject key identifier: 73:42:0C:45:D0:89:EC:17:43:B7:21:0A:32:9E:11:19:4D:14:6B:02 Authority key identifier: 71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 Certificate issuer: /CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Certificate serial: 019C420FD0670F6B6846990268B116148DC9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft Manifest number: 0895 Signing time: Mon 09 Feb 2026 11:00:58 +0000 Manifest this update: Mon 09 Feb 2026 11:00:58 +0000 Manifest next update: Tue 10 Feb 2026 11:00:58 +0000 Files and hashes: 1: cbbQ4ActDKspv6hzfeKlPlFBgnY.crl (hash: 0LCfrCyBVKTH4wJA+QWPjgI6+RomE1hmhs6yqQpb8Wo=) 2: kfnmSPKrH-6BqSjW12refMM0IqY.roa (hash: y3GnA/PSIzdl79UwPAzwe/9AX+kGDMEKsM5rTgc0El0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:d0:67:0f:6b:68:46:99:02:68:b1:16:14:8d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71b6d0e0072d0cab29bfa8737de2a53e51418276 Validity Not Before: Feb 9 11:00:58 2026 GMT Not After : Feb 10 11:00:58 2026 GMT Subject: CN=73420c45d089ec1743b7210a329e11194d146b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:b2:a3:17:20:58:8c:d5:2a:51:c1:bb:c9: 1c:73:ed:ca:e3:f1:f9:9c:c5:ab:25:d1:38:6e:b0: 9c:49:f6:ed:d5:ce:52:a7:e5:cd:4e:60:bb:a4:04: d2:4e:16:54:04:58:f0:71:ba:94:eb:d1:72:62:de: bc:09:cd:16:2b:7f:b1:bc:f0:4a:9f:7e:91:f9:f2: 0f:b9:19:17:60:b5:a2:12:d4:d0:bc:f0:ef:93:f3: 3b:91:a6:58:59:a9:83:3d:b5:99:37:6a:e8:07:54: bb:bc:1a:dd:db:18:98:c1:89:3b:a6:3a:62:e7:02: 6c:64:f4:3d:a2:a6:7e:b9:b2:63:b7:ce:80:d3:1f: 59:1a:9c:6d:e8:10:ed:b9:89:bc:ed:7e:aa:ab:03: 8b:7e:1b:cd:5a:b5:f4:06:e2:38:c2:65:5a:2a:07: 70:93:13:4a:8a:b0:59:e4:70:09:9f:35:66:cf:89: 3d:3b:3c:f2:d1:e5:4f:dc:5b:d1:d2:6d:b6:3a:42: b1:e6:19:59:8d:48:76:7e:7f:17:c0:ff:01:cf:75: 1a:7a:b3:de:74:ab:00:86:e7:e4:f5:8c:67:48:cf: 68:20:b9:69:2a:51:66:87:10:a4:d9:88:f1:7f:4b: 66:63:49:45:ef:c9:cd:ad:cd:b3:38:a4:46:6e:d6: 30:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:42:0C:45:D0:89:EC:17:43:B7:21:0A:32:9E:11:19:4D:14:6B:02 X509v3 Authority Key Identifier: keyid:71:B6:D0:E0:07:2D:0C:AB:29:BF:A8:73:7D:E2:A5:3E:51:41:82:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cbbQ4ActDKspv6hzfeKlPlFBgnY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/0c3554-ccad-4698-bf9f-b1fcf3896999/1/cbbQ4ActDKspv6hzfeKlPlFBgnY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ba:6b:d9:2d:50:27:b2:c1:51:c8:1d:bb:45:c5:08:f7:8c: 83:f8:f4:f1:7b:fd:03:d9:66:c7:0a:6c:f6:45:22:61:7c:f0: 1e:ed:f8:c2:1c:90:0d:ba:ec:c0:de:f9:fc:70:93:f7:47:23: a9:4a:6c:6c:c5:46:21:4d:b1:5a:b9:c2:52:ab:e6:30:3c:00: 44:72:d0:55:be:8d:a1:8f:c1:b5:8d:82:d0:7c:17:25:06:cb: 47:ab:e8:a8:37:26:49:d2:24:a9:e0:26:1d:bd:28:97:cd:17: 13:f3:65:e1:16:68:11:e0:78:5d:55:8d:e1:1d:f1:33:cc:77: 95:18:1d:bc:ea:54:55:c1:ca:0a:24:9d:a8:e4:85:97:f8:b7: 03:f4:b6:f9:a8:6e:49:1c:11:31:d1:dd:7a:49:ff:3a:8a:95: 77:ef:46:13:cb:0a:1c:a5:9a:d7:ae:f1:0b:2c:55:59:62:54: d4:1f:7c:f2:a6:da:81:ef:78:75:b8:7c:11:b4:24:35:c7:3b: 92:f3:19:53:36:3c:0f:24:d0:65:53:0d:1e:0c:f6:02:c8:eb: e9:49:14:e4:7d:2f:5a:59:a0:21:68:88:c3:56:59:67:85:35: b2:fc:47:80:a2:50:f4:24:06:00:b1:11:5d:58:7f:1b:b0:3b: ac:ba:fe:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD9BnD2toRpkCaLEWFI3JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYjZkMGUwMDcyZDBjYWIyOWJmYTg3MzdkZTJhNTNlNTE0 MTgyNzYwHhcNMjYwMjA5MTEwMDU4WhcNMjYwMjEwMTEwMDU4WjAzMTEwLwYDVQQD Eyg3MzQyMGM0NWQwODllYzE3NDNiNzIxMGEzMjllMTExOTRkMTQ2YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs2yoxcgWIzVKlHBu8kcc+3K4/H5 nMWrJdE4brCcSfbt1c5Sp+XNTmC7pATSThZUBFjwcbqU69FyYt68Cc0WK3+xvPBK n36R+fIPuRkXYLWiEtTQvPDvk/M7kaZYWamDPbWZN2roB1S7vBrd2xiYwYk7pjpi 5wJsZPQ9oqZ+ubJjt86A0x9ZGpxt6BDtuYm87X6qqwOLfhvNWrX0BuI4wmVaKgdw kxNKirBZ5HAJnzVmz4k9Ozzy0eVP3FvR0m22OkKx5hlZjUh2fn8XwP8Bz3UaerPe dKsAhufk9YxnSM9oILlpKlFmhxCk2Yjxf0tmY0lF78nNrc2zOKRGbtYwPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNCDEXQiewXQ7chCjKeERlNFGsCMB8GA1UdIwQY MBaAFHG20OAHLQyrKb+oc33ipT5RQYJ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYt YjFmY2YzODk2OTk5LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni8wYzM1NTQtY2NhZC00Njk4LWJmOWYtYjFmY2YzODk2OTk5 LzEvY2JiUTRBY3RES3NwdjZoemZlS2xQbEZCZ25ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdbpr2S1Q J7LBUcgdu0XFCPeMg/j08Xv9A9lmxwps9kUiYXzwHu34whyQDbrswN75/HCT90cj qUpsbMVGIU2xWrnCUqvmMDwARHLQVb6NoY/BtY2C0HwXJQbLR6voqDcmSdIkqeAm Hb0ol80XE/Nl4RZoEeB4XVWN4R3xM8x3lRgdvOpUVcHKCiSdqOSFl/i3A/S2+ahu SRwRMdHdekn/OoqVd+9GE8sKHKWa167xCyxVWWJU1B988qbage94dbh8EbQkNcc7 kvMZUzY8DyTQZVMNHgz2Asjr6UkU5H0vWlmgIWiIw1ZZZ4U1svxHgKJQ9CQGALER XVh/G7A7rLr+Ig== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:48 2026 by rpki-client