This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft File: C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft (raw, json) Hash identifier: IfEJr5oNiyIyZleeK+W47wKzmwaulrkZr6vIncYG0M4= Subject key identifier: 97:F9:98:4D:33:4D:D0:05:32:AE:7D:58:DA:64:08:98:BB:F3:A8:B6 Authority key identifier: 0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8 Certificate issuer: /CN=0be6d52874a0c8edbea9c81c420676b614ea29c8 Certificate serial: 019C4434A6D93AC2749BC0FCA2ECB2C529FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft Manifest number: 0C25 Signing time: Mon 09 Feb 2026 21:00:27 +0000 Manifest this update: Mon 09 Feb 2026 21:00:27 +0000 Manifest next update: Tue 10 Feb 2026 21:00:27 +0000 Files and hashes: 1: C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl (hash: XcIX6fP9e2nBVyJMBH/sSfGM/OiokBkHeAuBcVpIEEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:a6:d9:3a:c2:74:9b:c0:fc:a2:ec:b2:c5:29:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0be6d52874a0c8edbea9c81c420676b614ea29c8 Validity Not Before: Feb 9 21:00:27 2026 GMT Not After : Feb 10 21:00:27 2026 GMT Subject: CN=97f9984d334dd00532ae7d58da640898bbf3a8b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:62:96:20:c4:8c:6c:54:c4:d6:7f:b1:ff:d3: 14:db:76:4f:c3:e4:c4:8e:b9:8a:fa:8c:ad:a3:11: 6e:0c:3a:69:4e:7e:c9:0b:10:8f:fa:9e:10:4d:9d: 1b:00:60:6c:da:8a:93:e8:3b:8f:1b:d9:b9:45:ef: 17:2a:5a:61:8f:1a:bf:16:b4:f4:c2:3d:ff:bc:f7: 00:c9:ee:e7:18:74:01:3a:99:b9:07:d9:3d:7e:d9: a1:21:1c:be:f6:df:e5:c3:32:38:9a:3e:cd:52:32: 21:1c:de:c0:f6:49:a1:d3:e6:ad:3f:85:a4:12:ec: 05:09:23:b8:ea:c3:72:58:fb:00:f4:99:40:7c:a0: 6e:91:72:4a:89:43:b8:55:f8:13:bb:6a:71:d3:0d: 2b:94:01:60:6a:14:5f:13:b5:32:c5:bb:c7:a5:3f: b8:2a:5a:64:90:fe:97:30:40:2f:35:be:94:9b:45: ba:5b:08:80:a5:af:54:af:ed:5e:f3:28:5f:93:08: 32:92:bc:9b:6b:36:23:d2:8e:28:94:63:a5:1d:3e: 57:c2:5f:3a:4c:2a:79:90:f0:b4:c5:82:16:1c:9c: 84:73:da:8a:88:da:d3:3b:59:4d:f6:1a:22:c3:8a: bd:be:77:6c:b6:ae:05:b1:00:a9:6e:e7:56:6e:00: 26:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F9:98:4D:33:4D:D0:05:32:AE:7D:58:DA:64:08:98:BB:F3:A8:B6 X509v3 Authority Key Identifier: keyid:0B:E6:D5:28:74:A0:C8:ED:BE:A9:C8:1C:42:06:76:B6:14:EA:29:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C-bVKHSgyO2-qcgcQgZ2thTqKcg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2df6af-edc3-498e-a5fd-09303e418e7d/1/C-bVKHSgyO2-qcgcQgZ2thTqKcg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:cb:c8:42:53:ea:77:aa:53:b7:f2:72:9e:3e:9a:c2:21:3f: 78:7b:fe:ed:d2:1a:fd:2b:2d:37:ca:0c:d3:3f:19:73:5b:95: e6:98:da:8b:c5:8d:d8:e0:a5:23:f8:bb:49:00:c4:13:e1:8d: 1a:90:24:65:e9:ec:17:ce:41:1b:37:77:25:d6:24:20:2f:36: eb:d6:31:7e:4f:e8:1c:c7:ce:dc:1e:df:c8:dc:97:36:6a:62: 18:77:45:ad:16:d3:64:ef:93:f0:9e:7c:d0:f9:22:67:38:16: ad:33:82:9a:8d:f4:66:e1:ab:c4:a1:57:c8:2b:66:22:ad:8b: 05:9f:59:ef:03:b3:f0:c1:7f:35:98:de:88:37:3f:28:d5:4c: 73:5a:52:63:5c:a3:57:d7:b0:88:eb:63:e3:06:86:c2:ac:f7: 07:23:4a:ef:a3:54:e1:e2:a9:bc:0f:09:d7:7b:c2:c9:c1:6c: 89:ed:b9:58:b8:ad:21:08:3e:59:15:6f:b7:84:eb:9a:47:06: c9:1a:5d:b5:6a:e2:a7:a7:5c:d0:fd:0c:d5:03:79:00:32:95: 05:45:65:34:97:c2:4c:a2:2e:60:ad:e7:dd:73:b6:7c:48:95: 8a:8b:72:ac:10:d7:5e:1b:18:87:dd:cc:f6:67:b5:eb:32:c4: 4b:cf:a8:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENKbZOsJ0m8D8ouyyxSn+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZTZkNTI4NzRhMGM4ZWRiZWE5YzgxYzQyMDY3NmI2MTRl YTI5YzgwHhcNMjYwMjA5MjEwMDI3WhcNMjYwMjEwMjEwMDI3WjAzMTEwLwYDVQQD Eyg5N2Y5OTg0ZDMzNGRkMDA1MzJhZTdkNThkYTY0MDg5OGJiZjNhOGI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5GKWIMSMbFTE1n+x/9MU23ZPw+TE jrmK+oytoxFuDDppTn7JCxCP+p4QTZ0bAGBs2oqT6DuPG9m5Re8XKlphjxq/FrT0 wj3/vPcAye7nGHQBOpm5B9k9ftmhIRy+9t/lwzI4mj7NUjIhHN7A9kmh0+atP4Wk EuwFCSO46sNyWPsA9JlAfKBukXJKiUO4VfgTu2px0w0rlAFgahRfE7UyxbvHpT+4 KlpkkP6XMEAvNb6Um0W6WwiApa9Ur+1e8yhfkwgykrybazYj0o4olGOlHT5Xwl86 TCp5kPC0xYIWHJyEc9qKiNrTO1lN9hoiw4q9vndstq4FsQCpbudWbgAmqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf5mE0zTdAFMq59WNpkCJi786i2MB8GA1UdIwQY MBaAFAvm1Sh0oMjtvqnIHEIGdrYU6inIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQt MDkzMDNlNDE4ZTdkLzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni8yZGY2YWYtZWRjMy00OThlLWE1ZmQtMDkzMDNlNDE4ZTdk LzEvQy1iVktIU2d5TzItcWNnY1FnWjJ0aFRxS2NnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV8vIQlPq d6pTt/Jynj6awiE/eHv+7dIa/SstN8oM0z8Zc1uV5pjai8WN2OClI/i7SQDEE+GN GpAkZensF85BGzd3JdYkIC8269Yxfk/oHMfO3B7fyNyXNmpiGHdFrRbTZO+T8J58 0PkiZzgWrTOCmo30ZuGrxKFXyCtmIq2LBZ9Z7wOz8MF/NZjeiDc/KNVMc1pSY1yj V9ewiOtj4waGwqz3ByNK76NU4eKpvA8J13vCycFsie25WLitIQg+WRVvt4TrmkcG yRpdtWrip6dc0P0M1QN5ADKVBUVlNJfCTKIuYK3n3XO2fEiViotyrBDXXhsYh93M 9me16zLES8+o/Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:45 2026 by rpki-client