This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft File: C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft (raw, json) Hash identifier: 41K5n77Axzhq60R2T4VJEmn3RAYhkk3jHLgy0P9aRkk= Subject key identifier: 28:E4:5C:54:C9:DB:53:80:15:CE:DA:CE:8E:3A:3C:10:DE:A0:71:6C Authority key identifier: 0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 Certificate issuer: /CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Certificate serial: 019C432270C294E37C1AFC585DD4C2026703 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft Manifest number: 179D Signing time: Mon 09 Feb 2026 16:00:56 +0000 Manifest this update: Mon 09 Feb 2026 16:00:56 +0000 Manifest next update: Tue 10 Feb 2026 16:00:56 +0000 Files and hashes: 1: C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl (hash: 0h0BbFhHClzLN2qs7skoIUwWsMRjg+HK5Suwm5+ndAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:70:c2:94:e3:7c:1a:fc:58:5d:d4:c2:02:67:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bbe92bb6603408acdf457bfec585c5b93d325d9 Validity Not Before: Feb 9 16:00:56 2026 GMT Not After : Feb 10 16:00:56 2026 GMT Subject: CN=28e45c54c9db538015cedace8e3a3c10dea0716c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:35:d7:c7:ff:83:53:3d:2f:1b:87:5c:77:8e: 51:f8:ff:87:2f:03:ad:2c:06:b1:68:63:6c:8c:03: 31:26:0d:33:1e:9c:f8:74:ef:f6:ca:9e:d0:a1:45: 27:e4:a1:5b:c5:0f:ff:fb:3e:14:b4:de:53:91:d0: 24:8d:52:86:8e:3a:74:9d:38:bd:07:d1:10:df:6a: 50:2c:7d:5b:85:c9:0f:ff:c8:e1:c4:28:fc:c1:92: 28:09:2d:59:a0:76:a8:cc:6b:ac:df:eb:0f:a5:e7: a0:cf:89:44:db:58:f3:4d:7f:17:3d:77:01:eb:07: ae:8c:1c:58:f0:16:bb:79:e6:a1:52:f9:29:0a:ed: 88:71:c4:4c:fa:aa:a5:dc:c6:a7:2f:fc:4c:67:d0: ad:7b:3b:9f:4d:f4:f2:d7:22:ae:ac:af:c2:f8:47: 7e:e4:2f:d7:2f:38:dc:b7:44:ba:7d:cd:35:4f:d1: 8f:42:cc:12:e0:63:5f:79:42:5b:53:af:4c:0b:81: c8:2b:3b:62:55:10:9d:c2:a4:4e:61:00:13:e7:50: 32:93:23:e6:ec:a8:e4:10:7e:b6:5e:2d:e4:8e:d0: 78:71:26:18:20:ba:25:8c:5c:b0:e9:9c:1b:12:6a: fe:f8:f9:da:0f:fd:13:f1:c2:93:87:a8:63:af:5a: 70:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:E4:5C:54:C9:DB:53:80:15:CE:DA:CE:8E:3A:3C:10:DE:A0:71:6C X509v3 Authority Key Identifier: keyid:0B:BE:92:BB:66:03:40:8A:CD:F4:57:BF:EC:58:5C:5B:93:D3:25:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C76Su2YDQIrN9Fe_7FhcW5PTJdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/fd6aa5-0cc3-40a1-9a2f-888363aa284c/1/C76Su2YDQIrN9Fe_7FhcW5PTJdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:6e:a4:a3:de:13:12:cb:bb:92:f4:50:36:14:f9:4e:b2:fb: 39:e6:ac:62:29:34:3f:fe:dd:71:f9:65:c4:f6:23:28:00:b0: 08:34:84:b3:f2:29:87:6f:ef:52:87:9c:4d:5c:c0:a9:18:34: 81:d2:69:7a:b7:12:2b:06:81:51:45:81:a9:13:74:b0:f1:2d: 2e:8c:90:97:78:eb:a0:c8:be:78:6c:53:55:c3:ff:95:fe:ac: 26:f2:0c:d5:d5:b0:ee:77:5d:10:2d:ee:be:6d:96:74:bb:69: e2:b9:d8:33:fc:30:e5:71:1c:47:bc:5c:a7:08:16:6c:6b:66: 11:b7:93:8e:ed:64:cb:88:ea:32:de:44:1b:0d:04:f3:b9:36: 72:4e:be:9a:b8:af:36:8a:15:d9:63:e9:fb:cc:78:82:da:1b: 0b:41:94:24:2b:46:7e:5c:c5:93:09:ae:b5:7b:98:b0:ad:0e: 3c:07:bf:07:67:43:2a:b6:6a:68:6b:eb:f4:bd:19:93:d7:66: 9b:61:02:5c:1b:4a:40:3d:27:6f:9c:10:d5:a9:cf:5c:86:ac: 30:0d:44:c9:3b:52:39:f1:41:86:11:b6:4c:84:d5:80:b6:52: c9:a4:4f:92:a1:1a:c4:e3:f6:c5:4e:68:c3:cc:7b:ee:cf:63: 62:2a:8c:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInDClON8GvxYXdTCAmcDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiYmU5MmJiNjYwMzQwOGFjZGY0NTdiZmVjNTg1YzViOTNk MzI1ZDkwHhcNMjYwMjA5MTYwMDU2WhcNMjYwMjEwMTYwMDU2WjAzMTEwLwYDVQQD EygyOGU0NWM1NGM5ZGI1MzgwMTVjZWRhY2U4ZTNhM2MxMGRlYTA3MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDXXx/+DUz0vG4dcd45R+P+HLwOt LAaxaGNsjAMxJg0zHpz4dO/2yp7QoUUn5KFbxQ//+z4UtN5TkdAkjVKGjjp0nTi9 B9EQ32pQLH1bhckP/8jhxCj8wZIoCS1ZoHaozGus3+sPpeegz4lE21jzTX8XPXcB 6weujBxY8Ba7eeahUvkpCu2IccRM+qql3ManL/xMZ9CtezufTfTy1yKurK/C+Ed+ 5C/XLzjct0S6fc01T9GPQswS4GNfeUJbU69MC4HIKztiVRCdwqROYQAT51AykyPm 7KjkEH62Xi3kjtB4cSYYILoljFyw6ZwbEmr++PnaD/0T8cKTh6hjr1pwfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCjkXFTJ21OAFc7azo46PBDeoHFsMB8GA1UdIwQY MBaAFAu+krtmA0CKzfRXv+xYXFuT0yXZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYt ODg4MzYzYWEyODRjLzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS9mZDZhYTUtMGNjMy00MGExLTlhMmYtODg4MzYzYWEyODRj LzEvQzc2U3UyWURRSXJOOUZlXzdGaGNXNVBUSmRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvW6ko94T Esu7kvRQNhT5TrL7OeasYik0P/7dcfllxPYjKACwCDSEs/Iph2/vUoecTVzAqRg0 gdJpercSKwaBUUWBqRN0sPEtLoyQl3jroMi+eGxTVcP/lf6sJvIM1dWw7nddEC3u vm2WdLtp4rnYM/ww5XEcR7xcpwgWbGtmEbeTju1ky4jqMt5EGw0E87k2ck6+mriv NooV2WPp+8x4gtobC0GUJCtGflzFkwmutXuYsK0OPAe/B2dDKrZqaGvr9L0Zk9dm m2ECXBtKQD0nb5wQ1anPXIasMA1EyTtSOfFBhhG2TITVgLZSyaRPkqEaxOP2xU5o w8x77s9jYiqMPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:39 2026 by rpki-client