This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft File: dIZPUCPsYmPvnxb5AYf18oBh0RU.mft (raw, json) Hash identifier: VOv29JT3odZ6Cjdp9W6xU4dvHFiHPXkRyMJrRpb6miE= Subject key identifier: A6:03:AD:16:D7:55:F1:9F:05:12:E6:9E:CC:03:83:73:A9:93:00:0A Authority key identifier: 74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 Certificate issuer: /CN=74864f5023ec6263ef9f16f90187f5f28061d115 Certificate serial: 019C424634B22928E11A5EBEF8F60FC8D35E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft Manifest number: 0DFD Signing time: Mon 09 Feb 2026 12:00:23 +0000 Manifest this update: Mon 09 Feb 2026 12:00:23 +0000 Manifest next update: Tue 10 Feb 2026 12:00:23 +0000 Files and hashes: 1: Tk-54jiMCl3pRob8Ol0GyqafcTo.roa (hash: ogGPBYJpK3ICA3MgJGI7aFtZAb3lcTgOcAes1dNC4Q8=) 2: dIZPUCPsYmPvnxb5AYf18oBh0RU.crl (hash: jiUagmDey5hRPF3SOsXzRJYnabWw1ot/a8VHv2UZFmg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:34:b2:29:28:e1:1a:5e:be:f8:f6:0f:c8:d3:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74864f5023ec6263ef9f16f90187f5f28061d115 Validity Not Before: Feb 9 12:00:23 2026 GMT Not After : Feb 10 12:00:23 2026 GMT Subject: CN=a603ad16d755f19f0512e69ecc038373a993000a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:64:18:b8:cd:8b:bc:2d:1c:8e:15:46:cd:57: e8:1b:92:ee:49:19:3d:b7:86:f8:f6:53:78:c0:de: 27:be:b3:60:db:80:2e:a1:10:58:29:d9:56:2c:af: e7:29:ab:64:ce:48:92:b4:ea:75:5f:f0:09:1b:22: 5a:cd:07:c1:d1:7c:4a:ae:f7:88:0f:61:c8:6f:a3: 31:78:27:95:a1:61:4c:b0:a2:76:f3:fb:5e:5d:87: 95:62:39:2d:d4:f2:5f:80:67:2b:1c:4e:b6:f1:64: fc:65:7c:39:ff:67:fa:a3:64:8e:d7:0f:03:a7:b9: 3a:68:4e:a5:af:e7:79:ea:68:cb:5b:15:ea:ef:b5: a1:bc:13:00:8c:56:a5:c2:e7:63:bb:be:dc:97:17: 8f:54:b3:90:95:bf:53:c1:4c:e2:34:36:f9:5e:1f: 5d:96:2a:ca:88:d1:ff:0f:4f:47:e4:fb:71:72:f4: 32:aa:cf:c1:a0:f5:0a:de:6d:fd:86:ce:f5:ee:65: 2f:40:21:cf:d4:c2:fa:cb:b5:ea:73:3a:2f:23:a2: cb:e9:12:c3:12:8b:10:51:eb:f0:c9:6a:17:8e:8d: e2:0d:37:ac:c4:74:1d:39:a4:b4:fd:7c:98:1b:a6: 56:d1:5a:9c:14:05:61:76:fb:f4:8d:b8:75:ca:e1: ff:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:03:AD:16:D7:55:F1:9F:05:12:E6:9E:CC:03:83:73:A9:93:00:0A X509v3 Authority Key Identifier: keyid:74:86:4F:50:23:EC:62:63:EF:9F:16:F9:01:87:F5:F2:80:61:D1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIZPUCPsYmPvnxb5AYf18oBh0RU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0ca4df-2e06-4406-9688-78f02805c709/1/dIZPUCPsYmPvnxb5AYf18oBh0RU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:50:c8:f4:36:e4:83:91:10:ff:10:57:84:fd:b9:47:42:3e: ea:97:3d:6a:af:10:b2:59:18:79:46:eb:d9:28:29:13:5b:16: f0:9b:01:01:05:5f:6f:ab:69:ca:8a:e9:df:53:b8:20:80:2f: a4:c5:24:5c:26:9d:b8:53:cc:9d:7e:7f:1b:2e:b3:79:07:92: 1c:06:8e:04:d7:97:86:01:d8:7e:1c:1f:2b:ae:bd:a9:74:eb: fe:2c:4d:18:28:7b:23:42:b2:e2:41:87:1a:83:cd:be:b6:77: 84:5b:0f:c9:a6:4a:70:86:ef:01:fc:9c:5e:4a:86:62:1a:13: 00:7b:78:67:69:dd:f4:93:90:f3:18:b7:ba:0d:d6:e4:2b:b6: ac:f1:a0:db:b5:02:1b:f3:40:f6:01:bd:ad:f2:63:5f:19:7e: b1:a0:90:11:e8:95:16:6d:ba:14:52:48:4c:90:d9:17:e4:09: 45:a1:f6:68:cd:e7:3c:48:fb:b1:54:f0:f9:a6:d3:0a:5b:11: 80:60:f7:af:9d:57:2d:fc:4d:75:23:61:af:17:e1:82:3b:85: 47:b9:4a:3f:8d:de:34:f8:25:2a:15:90:89:ef:28:0c:d8:c7: b4:9a:1e:53:79:b5:d7:61:34:c0:5a:a8:e4:a8:9f:51:61:0a: 20:4e:d1:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRjSyKSjhGl6++PYPyNNeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ODY0ZjUwMjNlYzYyNjNlZjlmMTZmOTAxODdmNWYyODA2 MWQxMTUwHhcNMjYwMjA5MTIwMDIzWhcNMjYwMjEwMTIwMDIzWjAzMTEwLwYDVQQD EyhhNjAzYWQxNmQ3NTVmMTlmMDUxMmU2OWVjYzAzODM3M2E5OTMwMDBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0WQYuM2LvC0cjhVGzVfoG5LuSRk9 t4b49lN4wN4nvrNg24AuoRBYKdlWLK/nKatkzkiStOp1X/AJGyJazQfB0XxKrveI D2HIb6MxeCeVoWFMsKJ28/teXYeVYjkt1PJfgGcrHE628WT8ZXw5/2f6o2SO1w8D p7k6aE6lr+d56mjLWxXq77WhvBMAjFalwudju77clxePVLOQlb9TwUziNDb5Xh9d lirKiNH/D09H5PtxcvQyqs/BoPUK3m39hs717mUvQCHP1ML6y7XqczovI6LL6RLD EosQUevwyWoXjo3iDTesxHQdOaS0/XyYG6ZW0VqcFAVhdvv0jbh1yuH/yQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKYDrRbXVfGfBRLmnswDg3OpkwAKMB8GA1UdIwQY MBaAFHSGT1Aj7GJj758W+QGH9fKAYdEVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgt NzhmMDI4MDVjNzA5LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS8wY2E0ZGYtMmUwNi00NDA2LTk2ODgtNzhmMDI4MDVjNzA5 LzEvZElaUFVDUHNZbVB2bnhiNUFZZjE4b0JoMFJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGlDI9Dbk g5EQ/xBXhP25R0I+6pc9aq8QslkYeUbr2SgpE1sW8JsBAQVfb6tpyorp31O4IIAv pMUkXCaduFPMnX5/Gy6zeQeSHAaOBNeXhgHYfhwfK669qXTr/ixNGCh7I0Ky4kGH GoPNvrZ3hFsPyaZKcIbvAfycXkqGYhoTAHt4Z2nd9JOQ8xi3ug3W5Cu2rPGg27UC G/NA9gG9rfJjXxl+saCQEeiVFm26FFJITJDZF+QJRaH2aM3nPEj7sVTw+abTClsR gGD3r51XLfxNdSNhrxfhgjuFR7lKP43eNPglKhWQie8oDNjHtJoeU3m112E0wFqo 5KifUWEKIE7Rmg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:57 2026 by rpki-client