This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft File: 078oufsovtkGaqQRPLi-Bl7c9BI.mft (raw, json) Hash identifier: gwLTHgJhiM7Ejkqos5mZrg/GJGb0I51y73w3vqJ3AVw= Subject key identifier: EC:A6:95:F0:1F:F6:A9:E1:9F:02:97:27:83:6B:4C:74:4B:18:C4:28 Authority key identifier: D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12 Certificate issuer: /CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412 Certificate serial: 019C427D96ED66FCB0E2E9F3726BAE41493E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft Manifest number: 1298 Signing time: Mon 09 Feb 2026 13:00:52 +0000 Manifest this update: Mon 09 Feb 2026 13:00:52 +0000 Manifest next update: Tue 10 Feb 2026 13:00:52 +0000 Files and hashes: 1: 078oufsovtkGaqQRPLi-Bl7c9BI.crl (hash: m2GsqsFO+5jl/M7oerxs+PFIAsxQYSWxN8XypZc6Zg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:96:ed:66:fc:b0:e2:e9:f3:72:6b:ae:41:49:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3bf28b9fb28bed9066aa4113cb8be065edcf412 Validity Not Before: Feb 9 13:00:52 2026 GMT Not After : Feb 10 13:00:52 2026 GMT Subject: CN=eca695f01ff6a9e19f029727836b4c744b18c428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:83:61:cb:5a:b0:43:95:4a:ee:75:a2:ba:39: 1b:3f:86:c1:ce:df:fa:40:1b:53:31:70:fb:72:7c: 68:73:c7:7a:98:50:5d:ac:0c:3e:1a:0c:41:cf:2f: 50:ac:d5:1b:82:ed:50:eb:6f:89:7f:20:3e:a1:0d: ad:95:41:3e:fc:3f:35:d5:ca:16:5b:e1:4c:31:1b: ec:cb:29:19:a7:20:85:d5:90:61:45:ff:12:01:12: 6e:d6:85:70:d6:47:0c:0e:fd:66:be:0a:0c:b9:71: ee:49:e8:19:97:91:79:80:bd:ac:df:a8:b2:b1:5a: bd:f0:d6:5a:52:68:4c:50:7e:af:be:8e:c5:41:cb: ac:20:09:1b:54:19:31:fc:0d:56:e8:28:9a:69:02: bd:49:79:d2:cf:02:0f:bc:d9:8f:3a:53:59:7e:2f: 45:c2:1b:a5:5e:e5:a0:cb:ab:d3:6f:75:3c:b8:23: 66:d8:41:7d:cc:5a:2f:67:58:75:de:fb:66:83:95: f1:00:98:1c:0a:67:9c:5f:4f:6d:ef:a3:18:6b:88: d1:31:b6:66:c6:21:7f:83:76:68:85:17:0b:8c:36: 37:1c:fd:34:7f:7f:b2:d6:ec:1b:9f:ba:72:87:00: bb:6d:55:f4:c7:b0:a7:c0:d4:5b:4d:23:c0:30:73: 72:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A6:95:F0:1F:F6:A9:E1:9F:02:97:27:83:6B:4C:74:4B:18:C4:28 X509v3 Authority Key Identifier: keyid:D3:BF:28:B9:FB:28:BE:D9:06:6A:A4:11:3C:B8:BE:06:5E:DC:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/078oufsovtkGaqQRPLi-Bl7c9BI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/562811-c59c-4bab-b920-1804d202d46d/1/078oufsovtkGaqQRPLi-Bl7c9BI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c8:73:04:71:93:c8:89:22:50:1c:e2:bf:4c:ab:da:79:64: 75:65:10:5e:2a:2c:bf:03:f8:fb:d4:82:1c:ad:70:86:58:8d: fc:ef:01:0c:9b:cb:80:d0:93:9f:9c:b0:93:ef:e4:33:eb:58: fb:04:67:35:1b:b9:9a:21:4f:21:89:bc:ec:51:eb:20:31:0e: a6:0b:e4:de:77:2e:15:33:01:dd:17:82:72:d8:2d:13:e8:51: 31:11:bc:dd:a4:94:59:25:29:3e:62:94:d2:f1:f6:27:98:aa: 33:9d:03:4e:19:d0:84:f9:53:5c:de:84:5e:c1:90:09:7e:61: 5b:f5:58:a7:e4:66:58:e4:b4:ec:b3:19:8f:1f:f7:20:55:c3: 01:14:bf:47:39:63:b6:a9:f8:d4:c2:33:71:5b:a5:5f:2e:8f: fc:56:79:26:64:29:1c:d9:ed:54:a4:6f:aa:e6:f5:c0:6f:0c: c2:bc:08:76:14:34:1c:b4:31:da:c1:cb:17:fe:0b:af:b9:9f: b6:7c:6e:3b:ad:4a:52:cc:ca:2c:7d:24:46:fd:09:81:ef:9f: f4:1c:ae:45:ce:1b:f3:88:c6:8b:87:f3:a5:c1:d6:77:12:7a: 17:31:b7:d4:1d:a3:a1:a9:9f:18:e7:24:b1:ce:f3:1e:e9:fa: 19:18:2f:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZbtZvyw4unzcmuuQUk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzYmYyOGI5ZmIyOGJlZDkwNjZhYTQxMTNjYjhiZTA2NWVk Y2Y0MTIwHhcNMjYwMjA5MTMwMDUyWhcNMjYwMjEwMTMwMDUyWjAzMTEwLwYDVQQD EyhlY2E2OTVmMDFmZjZhOWUxOWYwMjk3Mjc4MzZiNGM3NDRiMThjNDI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2INhy1qwQ5VK7nWiujkbP4bBzt/6 QBtTMXD7cnxoc8d6mFBdrAw+GgxBzy9QrNUbgu1Q62+JfyA+oQ2tlUE+/D811coW W+FMMRvsyykZpyCF1ZBhRf8SARJu1oVw1kcMDv1mvgoMuXHuSegZl5F5gL2s36iy sVq98NZaUmhMUH6vvo7FQcusIAkbVBkx/A1W6CiaaQK9SXnSzwIPvNmPOlNZfi9F whulXuWgy6vTb3U8uCNm2EF9zFovZ1h13vtmg5XxAJgcCmecX09t76MYa4jRMbZm xiF/g3ZohRcLjDY3HP00f3+y1uwbn7pyhwC7bVX0x7CnwNRbTSPAMHNy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOymlfAf9qnhnwKXJ4NrTHRLGMQoMB8GA1UdIwQY MBaAFNO/KLn7KL7ZBmqkETy4vgZe3PQSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAt MTgwNGQyMDJkNDZkLzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi81NjI4MTEtYzU5Yy00YmFiLWI5MjAtMTgwNGQyMDJkNDZk LzEvMDc4b3Vmc292dGtHYXFRUlBMaS1CbDdjOUJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKchzBHGT yIkiUBziv0yr2nlkdWUQXiosvwP4+9SCHK1whliN/O8BDJvLgNCTn5ywk+/kM+tY +wRnNRu5miFPIYm87FHrIDEOpgvk3ncuFTMB3ReCctgtE+hRMRG83aSUWSUpPmKU 0vH2J5iqM50DThnQhPlTXN6EXsGQCX5hW/VYp+RmWOS07LMZjx/3IFXDARS/Rzlj tqn41MIzcVulXy6P/FZ5JmQpHNntVKRvqub1wG8MwrwIdhQ0HLQx2sHLF/4Lr7mf tnxuO61KUszKLH0kRv0Jge+f9ByuRc4b84jGi4fzpcHWdxJ6FzG31B2joamfGOck sc7zHun6GRgvug== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:38 2026 by rpki-client