This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft File: c2MktbTBPXYGw5LDdONbvmSiTlA.mft (raw, json) Hash identifier: lWHpar+649G1mN8G01lDo1Pd9fn6YX3LbUrRa5nJ7iI= Subject key identifier: 0B:48:F1:A0:90:0E:49:78:41:E1:01:BB:E8:C3:86:1D:84:DF:38:9C Authority key identifier: 73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 Certificate issuer: /CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Certificate serial: 019C432215195F85E53D8ACA1B60D3798959 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:32 +0000 Manifest this update: Mon 09 Feb 2026 16:00:32 +0000 Manifest next update: Tue 10 Feb 2026 16:00:32 +0000 Files and hashes: 1: c2MktbTBPXYGw5LDdONbvmSiTlA.crl (hash: sQmNKeLmj+GAKlEdGI+s4g7fiD3x8OHRN4qP2C3Qlk0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:15:19:5f:85:e5:3d:8a:ca:1b:60:d3:79:89:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=736324b5b4c13d7606c392c374e35bbe64a24e50 Validity Not Before: Feb 9 16:00:32 2026 GMT Not After : Feb 10 16:00:32 2026 GMT Subject: CN=0b48f1a0900e497841e101bbe8c3861d84df389c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fd:29:ea:48:2f:24:73:fa:f5:18:1b:3b:7e: a2:b7:2f:ef:50:c7:2e:33:e5:a6:ed:fc:f0:26:3b: 27:2c:b9:cb:eb:9e:07:46:04:7f:40:c8:b2:12:9f: 39:15:43:bd:5e:0b:1c:e7:16:eb:0e:7c:14:00:f9: ed:a0:90:47:3b:78:79:10:18:e4:86:b6:b3:f2:e5: c9:72:80:cd:ad:16:97:e5:16:ea:83:d5:a5:c0:d7: e3:42:df:65:6a:c2:ba:ef:40:48:3c:98:aa:18:69: 8e:2d:e2:b3:43:5e:7c:90:27:76:03:82:ea:a0:b1: 9b:ee:4c:58:54:e3:e4:6b:99:bc:4b:11:5b:2d:e2: d9:f2:5c:ad:43:99:24:0c:a5:52:ba:86:78:88:19: c1:ad:27:d1:0e:af:cf:8c:d1:9b:db:9a:c6:19:7f: bf:c8:99:2f:33:43:0a:d3:51:66:33:57:b9:a0:01: 83:2c:40:76:1f:d4:c7:9d:19:b9:0b:fe:49:46:09: 97:40:88:bb:d9:fb:ad:a3:93:a6:3b:7e:6a:da:82: c8:0f:59:ae:e9:d4:c5:a4:a4:24:d6:d4:7c:a4:f4: 88:0d:cb:19:5c:d8:23:42:b0:10:60:6d:29:23:43: da:56:86:2e:27:99:b1:e4:3f:ab:ec:11:40:23:db: e2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:48:F1:A0:90:0E:49:78:41:E1:01:BB:E8:C3:86:1D:84:DF:38:9C X509v3 Authority Key Identifier: keyid:73:63:24:B5:B4:C1:3D:76:06:C3:92:C3:74:E3:5B:BE:64:A2:4E:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2MktbTBPXYGw5LDdONbvmSiTlA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fab3b1-09e2-4e82-95a6-eae8a3057159/1/c2MktbTBPXYGw5LDdONbvmSiTlA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:35:80:44:4e:97:a8:40:ee:3c:1f:8b:f5:44:40:1a:42:e0: b1:e0:c9:d5:5c:46:b5:99:8e:f5:09:62:5d:0a:3c:75:9f:e3: 55:b8:15:46:a7:c1:23:25:9d:2c:76:01:0e:56:c7:d7:0e:a6: f1:6c:d6:b5:35:34:6f:ea:a3:c8:f6:8d:dc:36:cd:0f:3b:10: 72:10:b4:5d:a6:73:02:d2:87:25:c2:82:d1:8b:98:fb:4e:82: cb:cc:d3:4e:ce:5b:cc:1a:62:45:22:98:c1:d0:c4:f2:78:3d: af:7b:09:8c:7d:5e:c9:ae:6e:34:33:79:56:65:7b:30:2c:dc: ec:1c:95:e7:ad:07:b3:d9:56:38:46:15:f0:83:21:a2:9c:e2: 1e:06:5b:16:0b:8e:fa:cf:fe:84:23:1f:67:5b:14:77:a0:05: 0a:5f:15:ed:65:6b:de:c1:dc:76:8b:9c:70:cc:5b:56:d2:66: 23:d7:e8:b3:e9:7a:b8:c3:f2:ed:00:17:a8:d6:ab:ea:2a:f1: 97:0a:3c:09:fe:cb:86:a0:6f:c2:61:a8:d3:9d:b9:d2:e4:1f: 1f:d5:b0:b6:5a:ca:0b:3a:1c:de:39:08:ee:52:d4:cd:f8:19: 06:2e:ef:36:b3:50:79:9c:e4:fa:b5:1e:79:80:85:e4:bd:31: 03:f9:0e:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhUZX4XlPYrKG2DTeYlZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDczNjMyNGI1YjRjMTNkNzYwNmMzOTJjMzc0ZTM1YmJlNjRh MjRlNTAwHhcNMjYwMjA5MTYwMDMyWhcNMjYwMjEwMTYwMDMyWjAzMTEwLwYDVQQD EygwYjQ4ZjFhMDkwMGU0OTc4NDFlMTAxYmJlOGMzODYxZDg0ZGYzODljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP0p6kgvJHP69RgbO36ity/vUMcu M+Wm7fzwJjsnLLnL654HRgR/QMiyEp85FUO9Xgsc5xbrDnwUAPntoJBHO3h5EBjk hraz8uXJcoDNrRaX5Rbqg9WlwNfjQt9lasK670BIPJiqGGmOLeKzQ158kCd2A4Lq oLGb7kxYVOPka5m8SxFbLeLZ8lytQ5kkDKVSuoZ4iBnBrSfRDq/PjNGb25rGGX+/ yJkvM0MK01FmM1e5oAGDLEB2H9THnRm5C/5JRgmXQIi72futo5OmO35q2oLID1mu 6dTFpKQk1tR8pPSIDcsZXNgjQrAQYG0pI0PaVoYuJ5mx5D+r7BFAI9viMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAtI8aCQDkl4QeEBu+jDhh2E3zicMB8GA1UdIwQY MBaAFHNjJLW0wT12BsOSw3TjW75kok5QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYt ZWFlOGEzMDU3MTU5LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9mYWIzYjEtMDllMi00ZTgyLTk1YTYtZWFlOGEzMDU3MTU5 LzEvYzJNa3RiVEJQWFlHdzVMRGRPTmJ2bVNpVGxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfTWARE6X qEDuPB+L9URAGkLgseDJ1VxGtZmO9QliXQo8dZ/jVbgVRqfBIyWdLHYBDlbH1w6m 8WzWtTU0b+qjyPaN3DbNDzsQchC0XaZzAtKHJcKC0YuY+06Cy8zTTs5bzBpiRSKY wdDE8ng9r3sJjH1eya5uNDN5VmV7MCzc7ByV560Hs9lWOEYV8IMhopziHgZbFguO +s/+hCMfZ1sUd6AFCl8V7WVr3sHcdouccMxbVtJmI9fos+l6uMPy7QAXqNar6irx lwo8Cf7LhqBvwmGo05250uQfH9WwtlrKCzoc3jkI7lLUzfgZBi7vNrNQeZzk+rUe eYCF5L0xA/kO5w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:18:08 2026 by rpki-client