This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json) Hash identifier: 9zHYyg1xtT0VSTvj3T0th62mgHFt2JtyCQDiIdtst30= Subject key identifier: 15:0A:73:BC:FF:AA:B0:A9:15:5B:DE:DB:29:9A:16:51:90:91:35:C2 Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a Certificate serial: 019C413390C3327C65FE87C8BFA232A0D0E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft Manifest number: 11BE Signing time: Mon 09 Feb 2026 07:00:24 +0000 Manifest this update: Mon 09 Feb 2026 07:00:24 +0000 Manifest next update: Tue 10 Feb 2026 07:00:24 +0000 Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: 9l2BAsYe0feYs7sDJ6Z+oiPMyNXrQFRtv/yQKehXeGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:90:c3:32:7c:65:fe:87:c8:bf:a2:32:a0:d0:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a Validity Not Before: Feb 9 07:00:24 2026 GMT Not After : Feb 10 07:00:24 2026 GMT Subject: CN=150a73bcffaab0a9155bdedb299a1651909135c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:24:c8:78:40:78:d2:69:d0:94:7d:ce:14:16: 4a:67:f0:eb:69:d9:c8:36:41:41:87:2a:88:57:06: 94:ce:07:e0:89:59:0f:70:c3:fe:19:36:ea:ce:b3: d7:59:cf:34:3d:84:15:94:95:94:37:00:ff:59:12: ab:8c:06:f9:80:8d:75:b6:eb:c7:f8:ad:ce:e0:e2: 57:30:37:9d:16:b3:02:1c:d9:0a:99:1a:19:e2:81: 43:57:94:30:a9:bd:d5:c9:a1:a9:25:b0:12:ae:ea: 6e:fb:90:3a:5e:5a:58:60:b5:3d:20:5c:08:e7:df: 64:67:47:da:1e:be:fa:50:b5:c5:06:62:d3:00:f7: fa:dd:7e:8b:fb:94:00:f1:7a:a2:7f:0a:00:3f:8b: c8:8b:88:81:81:80:02:09:2c:e3:c4:3f:4c:42:31: ae:f0:6d:90:dd:f6:c4:86:c1:23:99:d0:df:e4:03: 3f:ca:43:6a:21:5c:8c:3d:7d:c5:36:68:4b:e8:bb: f7:93:01:3f:3e:86:60:88:48:a0:f0:70:de:df:26: 27:89:3f:03:a9:e7:32:0b:6e:59:65:be:98:23:a5: 74:fc:21:c6:68:7d:92:06:51:22:b7:27:f6:dd:a7: 61:11:c3:58:94:71:7f:fb:65:f8:88:b0:37:b7:11: 78:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:0A:73:BC:FF:AA:B0:A9:15:5B:DE:DB:29:9A:16:51:90:91:35:C2 X509v3 Authority Key Identifier: keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:b6:6d:b5:0e:5f:90:a6:55:e7:fb:8d:2b:43:59:be:17:0e: f9:41:7b:9d:f6:25:37:e5:7c:68:27:95:a5:1e:67:9d:cc:e8: 4a:70:8f:45:bd:45:71:e8:d2:17:7a:ab:c5:15:8d:d4:c6:05: 6a:05:17:db:94:98:2b:b6:e6:43:e9:95:7a:16:74:79:57:db: 13:7e:1a:88:dd:95:87:b1:78:45:96:c9:47:ed:da:12:92:9d: 55:09:ef:e1:99:fa:8f:60:c1:a8:44:da:2c:92:dc:42:1f:26: dc:85:d3:c9:a0:aa:41:13:48:d4:d4:6a:9a:4e:68:9b:b1:f0: e3:75:ae:3d:53:a0:6c:f4:3f:30:15:de:e2:db:83:03:6d:7b: 67:31:82:a2:83:ab:53:c6:98:cd:93:77:2a:90:fa:97:5f:c9: fd:36:a9:67:68:e0:dc:e7:81:5f:b3:e9:55:27:a6:18:ec:be: 00:c3:f8:57:6a:2e:23:87:a2:df:ea:c2:b2:b0:68:7e:55:10: 5d:cc:87:3f:a0:07:b8:77:ad:d4:65:bf:ef:35:35:2b:76:21: a3:8d:4c:35:fe:0f:a4:2a:51:5f:ac:4e:66:6f:1d:00:03:e3: ea:12:d3:49:da:ba:2c:a0:77:7a:3c:4d:82:7f:b4:4f:aa:dc: de:80:19:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM5DDMnxl/ofIv6IyoNDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx N2I4NGEwHhcNMjYwMjA5MDcwMDI0WhcNMjYwMjEwMDcwMDI0WjAzMTEwLwYDVQQD EygxNTBhNzNiY2ZmYWFiMGE5MTU1YmRlZGIyOTlhMTY1MTkwOTEzNWMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyTIeEB40mnQlH3OFBZKZ/DradnI NkFBhyqIVwaUzgfgiVkPcMP+GTbqzrPXWc80PYQVlJWUNwD/WRKrjAb5gI11tuvH +K3O4OJXMDedFrMCHNkKmRoZ4oFDV5Qwqb3VyaGpJbASrupu+5A6XlpYYLU9IFwI 599kZ0faHr76ULXFBmLTAPf63X6L+5QA8XqifwoAP4vIi4iBgYACCSzjxD9MQjGu 8G2Q3fbEhsEjmdDf5AM/ykNqIVyMPX3FNmhL6Lv3kwE/PoZgiEig8HDe3yYniT8D qecyC25ZZb6YI6V0/CHGaH2SBlEityf23adhEcNYlHF/+2X4iLA3txF4xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBUKc7z/qrCpFVve2ymaFlGQkTXCMB8GA1UdIwQY MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0 LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbZttQ5f kKZV5/uNK0NZvhcO+UF7nfYlN+V8aCeVpR5nnczoSnCPRb1FcejSF3qrxRWN1MYF agUX25SYK7bmQ+mVehZ0eVfbE34aiN2Vh7F4RZbJR+3aEpKdVQnv4Zn6j2DBqETa LJLcQh8m3IXTyaCqQRNI1NRqmk5om7Hw43WuPVOgbPQ/MBXe4tuDA217ZzGCooOr U8aYzZN3KpD6l1/J/TapZ2jg3OeBX7PpVSemGOy+AMP4V2ouI4ei3+rCsrBoflUQ XcyHP6AHuHet1GW/7zU1K3Yho41MNf4PpCpRX6xOZm8dAAPj6hLTSdq6LKB3ejxN gn+0T6rc3oAZig== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:44 2026 by rpki-client