This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft File: C_08lbYJJ6X2i5lee5eeZoA8EO0.mft (raw, json) Hash identifier: NdL1+wMEgexBYjxGnSRXAVXaXOPl/KAUuV8GWHxDexA= Subject key identifier: E1:28:AB:50:92:75:71:6D:0B:E6:44:AE:CA:A4:2F:35:80:9B:50:4F Authority key identifier: 0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED Certificate issuer: /CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed Certificate serial: 019C4322592EF1C9ED082CDD4D8BEEB59FB0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft Manifest number: 0BE9 Signing time: Mon 09 Feb 2026 16:00:50 +0000 Manifest this update: Mon 09 Feb 2026 16:00:50 +0000 Manifest next update: Tue 10 Feb 2026 16:00:50 +0000 Files and hashes: 1: C_08lbYJJ6X2i5lee5eeZoA8EO0.crl (hash: 9AuauScsnB0A0MRH3uV/tkKtjiL2ediQMVE1cs75u9A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:59:2e:f1:c9:ed:08:2c:dd:4d:8b:ee:b5:9f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bfd3c95b60927a5f68b995e7b979e66803c10ed Validity Not Before: Feb 9 16:00:50 2026 GMT Not After : Feb 10 16:00:50 2026 GMT Subject: CN=e128ab509275716d0be644aecaa42f35809b504f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3c:11:c1:ea:43:e3:ca:f9:c6:7c:0a:a2:31: 9a:04:0e:fc:44:f3:9f:10:31:cc:50:3c:dd:84:53: dd:75:dc:a8:21:cf:7a:2e:26:ad:f3:6f:8f:cd:9d: bb:93:ca:96:30:48:79:c8:c5:d9:71:7d:82:19:bd: 7e:d5:dc:28:53:7a:10:e8:e0:9a:1f:08:50:87:73: c9:75:f2:99:96:2e:c9:d0:d7:5d:cb:30:9e:02:af: bf:f9:c4:a2:bb:4c:78:c4:36:f8:b3:14:17:65:27: 55:fd:41:39:ac:7e:ce:c7:2a:0a:c2:f4:01:02:b0: f9:9a:7d:3b:10:8c:db:7e:c8:42:4f:51:ea:36:ae: a7:0b:21:87:93:06:b3:35:30:1b:c5:4b:25:71:dc: 8d:e4:c3:26:9f:b9:12:e4:b3:3b:94:13:b0:68:37: 52:97:0c:f7:ea:32:0c:e4:b3:29:61:db:6c:4d:2d: 91:26:73:c5:f3:7c:69:3e:76:78:37:03:e5:40:27: 5c:c4:10:81:e8:a2:2a:55:a9:a3:40:e8:b6:82:8f: 22:b7:a7:89:a3:89:2b:39:57:eb:ff:12:fd:13:b5: 8f:e1:88:91:fa:05:4c:9a:4b:53:68:06:71:69:87: 8d:29:6d:36:1f:68:74:54:bf:a6:c7:1d:89:f2:c6: 24:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:28:AB:50:92:75:71:6D:0B:E6:44:AE:CA:A4:2F:35:80:9B:50:4F X509v3 Authority Key Identifier: keyid:0B:FD:3C:95:B6:09:27:A5:F6:8B:99:5E:7B:97:9E:66:80:3C:10:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_08lbYJJ6X2i5lee5eeZoA8EO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/feb8f9-f728-4d05-b24a-a8514aa5d08d/1/C_08lbYJJ6X2i5lee5eeZoA8EO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:d2:4c:27:00:6e:99:20:86:25:5c:9b:9b:bb:f6:06:b1:30: 08:11:bc:aa:14:5a:00:c0:5f:89:51:af:13:ef:75:bf:95:84: 3f:59:22:23:e4:ec:9f:75:5d:df:a3:c6:d1:c3:c2:37:45:a9: c4:4e:b7:12:95:07:0e:df:47:fd:39:7b:ba:86:b6:df:96:3b: 92:c4:eb:82:de:db:7d:39:52:12:ba:8a:27:bb:13:59:b0:92: 6e:b9:51:7a:c6:ff:b1:f6:b5:95:54:56:3a:b7:ae:02:45:d0: 55:17:34:62:0b:66:21:be:ef:ae:03:c8:6f:9b:ea:29:1d:bc: 83:f9:41:a1:7a:73:0d:53:bc:ea:06:ee:4e:fe:99:23:10:00: 7a:2d:b5:0c:be:b4:05:a4:a8:e3:47:a4:6f:20:b9:35:32:f4: ac:b9:59:a0:52:72:8b:ee:a2:00:dc:c6:f2:eb:9d:82:24:12: 8c:ca:d5:d9:fd:02:c5:36:dc:6b:d3:1c:86:ca:56:8f:47:c3: a4:22:df:dd:5f:41:41:95:f3:b1:0f:d4:2d:a5:9a:cc:70:e7: e8:8a:60:4e:79:42:87:bc:b4:56:f7:ad:43:e5:31:7a:4c:1d: 36:c8:96:f5:c0:c9:ee:8a:98:58:cd:d0:44:70:00:94:db:d8: 7b:1c:e8:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlku8cntCCzdTYvutZ+wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiZmQzYzk1YjYwOTI3YTVmNjhiOTk1ZTdiOTc5ZTY2ODAz YzEwZWQwHhcNMjYwMjA5MTYwMDUwWhcNMjYwMjEwMTYwMDUwWjAzMTEwLwYDVQQD EyhlMTI4YWI1MDkyNzU3MTZkMGJlNjQ0YWVjYWE0MmYzNTgwOWI1MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DwRwepD48r5xnwKojGaBA78RPOf EDHMUDzdhFPdddyoIc96Liat82+PzZ27k8qWMEh5yMXZcX2CGb1+1dwoU3oQ6OCa HwhQh3PJdfKZli7J0NddyzCeAq+/+cSiu0x4xDb4sxQXZSdV/UE5rH7OxyoKwvQB ArD5mn07EIzbfshCT1HqNq6nCyGHkwazNTAbxUslcdyN5MMmn7kS5LM7lBOwaDdS lwz36jIM5LMpYdtsTS2RJnPF83xpPnZ4NwPlQCdcxBCB6KIqVamjQOi2go8it6eJ o4krOVfr/xL9E7WP4YiR+gVMmktTaAZxaYeNKW02H2h0VL+mxx2J8sYkwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEoq1CSdXFtC+ZErsqkLzWAm1BPMB8GA1UdIwQY MBaAFAv9PJW2CSel9ouZXnuXnmaAPBDtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9mZWI4ZjktZjcyOC00ZDA1LWIyNGEt YTg1MTRhYTVkMDhkLzEvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9mZWI4ZjktZjcyOC00ZDA1LWIyNGEtYTg1MTRhYTVkMDhk LzEvQ18wOGxiWUpKNlgyaTVsZWU1ZWVab0E4RU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhdJMJwBu mSCGJVybm7v2BrEwCBG8qhRaAMBfiVGvE+91v5WEP1kiI+Tsn3Vd36PG0cPCN0Wp xE63EpUHDt9H/Tl7uoa235Y7ksTrgt7bfTlSErqKJ7sTWbCSbrlResb/sfa1lVRW OreuAkXQVRc0YgtmIb7vrgPIb5vqKR28g/lBoXpzDVO86gbuTv6ZIxAAei21DL60 BaSo40ekbyC5NTL0rLlZoFJyi+6iANzG8uudgiQSjMrV2f0CxTbca9MchspWj0fD pCLf3V9BQZXzsQ/ULaWazHDn6IpgTnlCh7y0VvetQ+UxekwdNsiW9cDJ7oqYWM3Q RHAAlNvYexzoxg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:48 2026 by rpki-client