This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft File: C2fboIcH_kC9AC6XrjCEhjKRXbg.mft (raw, json) Hash identifier: CAoZyGq+DL5h5NQd+oPpLFk0rXXY5pxmzIFndUIn734= Subject key identifier: 54:0D:2B:0B:6A:A1:C5:5F:7D:4A:9C:70:58:AB:60:8D:B8:80:42:8C Authority key identifier: 0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8 Certificate issuer: /CN=0b67dba08707fe40bd002e97ae30848632915db8 Certificate serial: 019C43595984E5E04D1C2513314EC408F192 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 17:00:54 +0000 Manifest this update: Mon 09 Feb 2026 17:00:54 +0000 Manifest next update: Tue 10 Feb 2026 17:00:54 +0000 Files and hashes: 1: C2fboIcH_kC9AC6XrjCEhjKRXbg.crl (hash: 5Jn9Zeleqgg5wUl13vQsRMWZAkgAD11VcIKQeqPliEk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:59:84:e5:e0:4d:1c:25:13:31:4e:c4:08:f1:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b67dba08707fe40bd002e97ae30848632915db8 Validity Not Before: Feb 9 17:00:54 2026 GMT Not After : Feb 10 17:00:54 2026 GMT Subject: CN=540d2b0b6aa1c55f7d4a9c7058ab608db880428c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d4:be:9b:3f:ef:c6:8b:60:81:d3:d3:79:f9: ac:7a:d2:d3:ed:4b:14:bc:fc:c4:bc:96:58:d1:8f: c0:33:3c:e1:61:5b:bc:13:a0:0d:c5:20:85:a4:4f: 50:5c:2b:05:45:18:44:53:14:32:e4:21:c1:96:5b: 27:a3:86:ed:5f:f1:50:e7:62:20:30:88:e1:68:92: c3:f2:ba:ae:30:78:78:21:4f:0e:da:1b:3d:5b:26: 60:c0:ae:75:f5:56:03:ba:7e:08:c7:4f:7d:17:6a: c2:44:f1:eb:39:d9:5a:09:4b:fb:a4:f0:4c:c6:f7: 40:c4:10:e5:f6:ed:5e:b4:67:90:b1:4a:d6:eb:d2: d5:06:2b:13:64:0d:bc:c1:c2:6e:35:7e:17:aa:b0: 07:b8:54:54:28:d1:19:4f:b6:14:6b:57:bc:c3:35: a3:fc:ee:a1:60:04:6b:d5:20:be:a5:86:48:04:19: 0a:86:99:75:13:4d:06:f8:12:51:7c:3b:34:b7:d3: 6f:e0:c1:86:a5:24:9b:6a:3d:95:4d:52:31:04:89: f8:68:0a:07:39:01:04:90:1f:b9:dd:e9:b1:cc:5d: 4e:cb:19:5a:6c:af:69:a7:c9:de:15:d6:47:cb:92: c1:0b:5f:90:bd:7f:55:67:2a:12:37:87:72:06:0b: a0:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:0D:2B:0B:6A:A1:C5:5F:7D:4A:9C:70:58:AB:60:8D:B8:80:42:8C X509v3 Authority Key Identifier: keyid:0B:67:DB:A0:87:07:FE:40:BD:00:2E:97:AE:30:84:86:32:91:5D:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C2fboIcH_kC9AC6XrjCEhjKRXbg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/d9ec67-9338-43cd-9d05-38a5c2a6554a/1/C2fboIcH_kC9AC6XrjCEhjKRXbg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:58:c3:7c:c6:cc:c0:c1:33:8c:c6:cc:fd:6f:7d:95:c6:86: c0:1c:22:e9:dd:16:5d:d1:61:e5:13:b3:e5:3a:f6:9e:31:b2: 84:80:7e:2f:a9:17:3d:c9:ff:9a:a5:95:1f:6a:89:0d:74:e7: d7:a2:a6:ab:67:d3:a2:59:e7:05:7b:be:54:f2:a1:5d:53:44: 85:4e:95:e2:c5:bc:0b:f1:80:9f:d7:36:37:d5:fe:0d:3c:30: fc:4b:2a:8f:a0:91:10:fa:22:cf:ae:98:d1:7b:ea:dc:e5:26: fe:70:b8:58:76:f4:cd:6b:26:74:ad:6f:38:64:4c:80:f7:ab: 54:c2:00:34:9f:4c:fe:25:4b:2f:74:d2:ee:56:45:0a:05:5a: c5:db:27:7d:e7:ad:4a:59:5a:84:4c:e9:1b:70:91:54:2d:bb: 67:19:54:73:74:a0:f4:37:f7:8a:d0:ec:d5:2a:ec:60:0f:78: 76:1e:b2:1d:4e:ed:2c:e7:97:fc:d8:b2:e8:e6:22:e4:b0:84: 31:63:72:58:90:26:04:d9:a0:6e:32:43:9f:16:1e:16:0e:0c: e0:4f:bc:56:c9:3f:32:df:39:8a:1d:ac:e1:e8:b3:ca:a8:56: 48:ef:81:16:ae:5c:7a:ad:49:10:e3:09:c1:bb:da:f4:c4:a7: 31:62:a0:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVmE5eBNHCUTMU7ECPGSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNjdkYmEwODcwN2ZlNDBiZDAwMmU5N2FlMzA4NDg2MzI5 MTVkYjgwHhcNMjYwMjA5MTcwMDU0WhcNMjYwMjEwMTcwMDU0WjAzMTEwLwYDVQQD Eyg1NDBkMmIwYjZhYTFjNTVmN2Q0YTljNzA1OGFiNjA4ZGI4ODA0MjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNS+mz/vxotggdPTefmsetLT7UsU vPzEvJZY0Y/AMzzhYVu8E6ANxSCFpE9QXCsFRRhEUxQy5CHBllsno4btX/FQ52Ig MIjhaJLD8rquMHh4IU8O2hs9WyZgwK519VYDun4Ix099F2rCRPHrOdlaCUv7pPBM xvdAxBDl9u1etGeQsUrW69LVBisTZA28wcJuNX4XqrAHuFRUKNEZT7YUa1e8wzWj /O6hYARr1SC+pYZIBBkKhpl1E00G+BJRfDs0t9Nv4MGGpSSbaj2VTVIxBIn4aAoH OQEEkB+53emxzF1OyxlabK9pp8neFdZHy5LBC1+QvX9VZyoSN4dyBgug2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQNKwtqocVffUqccFirYI24gEKMMB8GA1UdIwQY MBaAFAtn26CHB/5AvQAul64whIYykV24MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUt MzhhNWMyYTY1NTRhLzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9kOWVjNjctOTMzOC00M2NkLTlkMDUtMzhhNWMyYTY1NTRh LzEvQzJmYm9JY0hfa0M5QUM2WHJqQ0VoaktSWGJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGljDfMbM wMEzjMbM/W99lcaGwBwi6d0WXdFh5ROz5Tr2njGyhIB+L6kXPcn/mqWVH2qJDXTn 16Kmq2fTolnnBXu+VPKhXVNEhU6V4sW8C/GAn9c2N9X+DTww/Esqj6CREPoiz66Y 0Xvq3OUm/nC4WHb0zWsmdK1vOGRMgPerVMIANJ9M/iVLL3TS7lZFCgVaxdsnfeet SllahEzpG3CRVC27ZxlUc3Sg9Df3itDs1SrsYA94dh6yHU7tLOeX/Niy6OYi5LCE MWNyWJAmBNmgbjJDnxYeFg4M4E+8Vsk/Mt85ih2s4eizyqhWSO+BFq5ceq1JEOMJ wbva9MSnMWKgEg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:39 2026 by rpki-client