This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft File: C1XbSaXB_JAcoahcjSXxPxhuL_o.mft (raw, json) Hash identifier: mvY4P+nvCoAWvPEaLNdGTOlgzuH0njK1ohQ+zQOvtLM= Subject key identifier: 71:7F:F7:8C:AB:D2:B8:88:93:E5:B5:DE:B9:4D:09:8E:43:ED:75:10 Authority key identifier: 0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA Certificate issuer: /CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa Certificate serial: 019C41A21CCBE87CD49AAF0C692289A544B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 09:01:09 +0000 Manifest this update: Mon 09 Feb 2026 09:01:09 +0000 Manifest next update: Tue 10 Feb 2026 09:01:09 +0000 Files and hashes: 1: C1XbSaXB_JAcoahcjSXxPxhuL_o.crl (hash: Xdg4ar0Ma69lXqplh4KA4PRzZSZ27S+YmtVDgxnQwtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:1c:cb:e8:7c:d4:9a:af:0c:69:22:89:a5:44:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b55db49a5c1fc901ca1a85c8d25f13f186e2ffa Validity Not Before: Feb 9 09:01:09 2026 GMT Not After : Feb 10 09:01:09 2026 GMT Subject: CN=717ff78cabd2b88893e5b5deb94d098e43ed7510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:45:66:f1:7f:82:dd:cb:72:ea:60:4c:14:9e: 9b:39:14:34:04:49:9e:4e:20:b5:6c:db:4d:29:19: b0:e1:39:0d:de:b8:58:24:dd:ab:0b:88:82:65:8e: 7d:ca:c5:30:c1:b5:35:e7:60:50:db:61:51:ea:db: 96:aa:96:ac:3b:b8:b1:2a:a7:65:f9:ea:dd:81:ac: 79:d0:aa:35:91:01:ef:5f:97:49:36:82:b4:1d:97: c7:fe:91:2f:28:95:68:69:8f:e0:eb:fd:8a:ca:c2: 8d:85:79:1a:52:ec:31:03:9c:a0:e0:1a:7f:32:1c: 41:21:c7:b8:af:1f:1b:70:c2:85:93:9c:0a:19:fd: e1:b7:31:2c:19:17:ee:49:c7:8f:80:13:34:f6:6a: ea:88:be:61:c4:19:b2:ce:e6:89:2b:73:4e:d2:c1: 6d:3b:5b:de:54:8e:41:fe:72:b4:30:e4:a0:cd:87: 0f:fa:85:ca:c5:85:f3:45:f1:c6:b1:30:05:b7:30: 9a:2f:12:4d:0e:9a:73:b0:37:61:a8:48:e3:e5:36: 59:bd:d5:d7:f7:5f:4f:e6:54:fe:b7:f7:3b:7e:df: 47:67:92:92:89:09:18:d5:0b:55:9b:65:ba:c2:94: 21:e8:f0:3c:24:ce:7e:97:d9:1f:85:78:2e:6b:fa: e7:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7F:F7:8C:AB:D2:B8:88:93:E5:B5:DE:B9:4D:09:8E:43:ED:75:10 X509v3 Authority Key Identifier: keyid:0B:55:DB:49:A5:C1:FC:90:1C:A1:A8:5C:8D:25:F1:3F:18:6E:2F:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1XbSaXB_JAcoahcjSXxPxhuL_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/523988-5a00-40a6-b044-a27e74f75d26/1/C1XbSaXB_JAcoahcjSXxPxhuL_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:30:ed:a6:51:c8:0d:11:60:35:d7:0f:19:ce:c3:cb:09:53: 5c:f9:be:bf:a1:15:06:18:ad:15:3b:11:03:c4:41:2b:47:e4: c7:bf:ed:aa:86:9b:b3:f4:60:d1:af:02:25:b9:3f:aa:59:45: dc:2d:a1:d3:c6:b5:fc:31:68:31:5d:de:4d:5c:7a:69:7b:54: ca:69:e4:2f:b7:03:68:28:02:5f:1a:3a:0f:b3:f9:0a:2f:c4: fd:a7:91:56:c9:87:b0:c4:b4:0a:1c:7e:0b:2f:4f:08:f4:d1: 39:9a:b6:81:48:fe:be:15:a8:89:38:87:90:71:f6:a6:fc:7d: 48:ac:f9:f9:cf:05:4e:df:67:b3:81:12:e1:a7:e2:f6:94:a8: af:fd:67:24:64:02:7a:d7:b0:18:86:2e:b4:5b:2a:64:d2:f7: c4:e1:10:24:68:5d:5b:e2:8f:68:40:de:8b:5c:99:db:b5:f5: 8a:9d:1f:a3:0a:40:ce:0e:7a:c9:f9:90:56:02:68:c1:c5:74: 2f:c6:57:c7:4f:6c:3f:88:2b:01:01:89:ff:4e:60:ca:68:b6: d5:24:e4:27:8c:44:2f:85:1a:d5:97:e5:58:b4:d1:d8:7d:a6: a2:2e:30:49:3e:a4:51:a3:f1:a7:2f:4d:41:fd:a1:0e:25:cf: 70:9b:b5:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohzL6HzUmq8MaSKJpUS0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTVkYjQ5YTVjMWZjOTAxY2ExYTg1YzhkMjVmMTNmMTg2 ZTJmZmEwHhcNMjYwMjA5MDkwMTA5WhcNMjYwMjEwMDkwMTA5WjAzMTEwLwYDVQQD Eyg3MTdmZjc4Y2FiZDJiODg4OTNlNWI1ZGViOTRkMDk4ZTQzZWQ3NTEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUVm8X+C3cty6mBMFJ6bORQ0BEme TiC1bNtNKRmw4TkN3rhYJN2rC4iCZY59ysUwwbU152BQ22FR6tuWqpasO7ixKqdl +erdgax50Ko1kQHvX5dJNoK0HZfH/pEvKJVoaY/g6/2KysKNhXkaUuwxA5yg4Bp/ MhxBIce4rx8bcMKFk5wKGf3htzEsGRfuScePgBM09mrqiL5hxBmyzuaJK3NO0sFt O1veVI5B/nK0MOSgzYcP+oXKxYXzRfHGsTAFtzCaLxJNDppzsDdhqEjj5TZZvdXX 919P5lT+t/c7ft9HZ5KSiQkY1QtVm2W6wpQh6PA8JM5+l9kfhXgua/rnvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHF/94yr0riIk+W13rlNCY5D7XUQMB8GA1UdIwQY MBaAFAtV20mlwfyQHKGoXI0l8T8Ybi/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81MjM5ODgtNWEwMC00MGE2LWIwNDQt YTI3ZTc0Zjc1ZDI2LzEvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC81MjM5ODgtNWEwMC00MGE2LWIwNDQtYTI3ZTc0Zjc1ZDI2 LzEvQzFYYlNhWEJfSkFjb2FoY2pTWHhQeGh1TF9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABzDtplHI DRFgNdcPGc7DywlTXPm+v6EVBhitFTsRA8RBK0fkx7/tqoabs/Rg0a8CJbk/qllF 3C2h08a1/DFoMV3eTVx6aXtUymnkL7cDaCgCXxo6D7P5Ci/E/aeRVsmHsMS0Chx+ Cy9PCPTROZq2gUj+vhWoiTiHkHH2pvx9SKz5+c8FTt9ns4ES4afi9pSor/1nJGQC etewGIYutFsqZNL3xOEQJGhdW+KPaEDei1yZ27X1ip0fowpAzg56yfmQVgJowcV0 L8ZXx09sP4grAQGJ/05gymi21STkJ4xEL4Ua1ZflWLTR2H2moi4wST6kUaPxpy9N Qf2hDiXPcJu12w== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:43 2026 by rpki-client