This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft File: 1DySR0_tODyV-izNg9YU9X5WPYI.mft (raw, json) Hash identifier: gCsBjEXJngMVVxyEugLFfy2qRlgyAg0ZOuI2J9pBs44= Subject key identifier: 84:B7:15:17:BA:1C:EE:0B:74:C7:29:01:FD:0C:23:A2:66:B5:6F:FC Authority key identifier: D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 Certificate issuer: /CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Certificate serial: 019C424647D97A4EEBDAEB2DBC1677EA5059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:27 +0000 Manifest this update: Mon 09 Feb 2026 12:00:27 +0000 Manifest next update: Tue 10 Feb 2026 12:00:27 +0000 Files and hashes: 1: 1DySR0_tODyV-izNg9YU9X5WPYI.crl (hash: eYnZjlHDJJ+WWhgI3JmrBsBmKq+wnLcc1o6g5kRRa9g=) 2: ZtLevkUDeSsHUXqGG47X0OZSfDw.roa (hash: 1v1351MYA0xtMfbN9thfHMsePTGwzyiZtU+ILH4KvII=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:47:d9:7a:4e:eb:da:eb:2d:bc:16:77:ea:50:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d43c92474fed383c95fa2ccd83d614f57e563d82 Validity Not Before: Feb 9 12:00:27 2026 GMT Not After : Feb 10 12:00:27 2026 GMT Subject: CN=84b71517ba1cee0b74c72901fd0c23a266b56ffc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:c6:29:82:4a:e6:42:9c:64:db:c7:83:42: 5f:8d:5a:f5:8e:a3:91:9a:b6:bf:22:b8:34:00:fc: f0:fe:56:af:0d:f4:81:b7:f3:b7:79:8e:a0:75:da: b7:ab:0a:c6:94:d0:1d:ff:d9:c6:12:d3:fb:4b:df: 8b:3c:57:f9:3a:fa:2a:96:8d:20:c7:65:e9:ab:5b: f9:08:7a:55:19:98:79:d0:65:83:8c:46:e9:8a:57: 45:52:8d:03:1f:0e:f2:1a:61:2f:df:a4:1b:a3:9f: 36:cf:8d:d4:1d:a8:11:73:9f:66:94:f6:57:cf:33: fe:4f:70:77:fe:28:1a:bb:a0:31:7c:7c:93:07:8a: 08:2f:85:f3:57:e7:41:85:db:be:e4:41:c1:76:1b: b8:95:1c:9f:11:df:87:f2:7b:61:d5:9a:bd:d1:74: 5c:ff:5d:a1:dd:d2:22:35:da:c9:d9:3a:6f:c9:b5: 8c:53:fc:8c:44:c3:e4:58:dd:89:2d:69:9b:4c:8f: 7a:3e:c4:b6:36:fc:eb:b5:c2:7b:0b:37:e1:b4:d0: 31:4f:ca:3d:22:aa:0e:de:7f:12:71:01:5b:1a:e1: 9d:e9:c8:b3:f8:a8:98:f7:b7:ec:e3:40:c1:9a:5d: 26:4d:9e:34:3c:29:ce:d4:c2:e0:7b:69:b3:dc:8f: cb:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B7:15:17:BA:1C:EE:0B:74:C7:29:01:FD:0C:23:A2:66:B5:6F:FC X509v3 Authority Key Identifier: keyid:D4:3C:92:47:4F:ED:38:3C:95:FA:2C:CD:83:D6:14:F5:7E:56:3D:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DySR0_tODyV-izNg9YU9X5WPYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/841f3a-ab83-4dd9-b183-6b06c176bd5a/1/1DySR0_tODyV-izNg9YU9X5WPYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:c6:07:95:e4:41:ec:d8:dd:8f:d8:3e:69:42:c3:55:6c:3c: 6d:f0:ac:fa:b1:23:9a:92:9c:b1:39:05:81:1e:50:52:66:80: 25:43:e3:50:22:85:4d:79:ae:7c:b7:e3:ac:87:8a:dd:2b:e8: 17:f3:bc:ab:0b:fa:02:b7:70:96:f0:4f:c7:e8:6c:0b:91:7d: f4:1a:29:f6:b8:16:d6:86:cf:ae:a0:3c:5e:a8:5d:5c:54:7e: df:22:28:28:10:88:cc:5b:e8:76:b8:2d:f8:6b:07:f0:d5:c0: 57:2c:e2:7c:2b:1a:46:a8:9b:14:14:9a:1c:14:cb:22:22:20: d6:b8:77:0b:0f:8f:e3:c9:e9:26:5d:20:7e:f7:48:3d:bf:3c: 9d:0d:56:71:a9:fd:9a:ae:f2:70:22:7c:51:b1:c5:d3:3d:2e: 94:fe:da:85:2d:dd:ab:37:20:86:1e:1c:09:e6:11:02:93:09: fd:d7:2e:c6:ba:09:62:6b:20:09:0e:5f:ae:8c:9a:f1:42:84: a1:a9:84:ad:f4:84:f0:d3:df:e1:57:50:64:48:f4:b2:e9:03: 28:fd:4c:6f:e3:ce:e9:1a:ed:2a:a1:e0:53:d7:c5:e3:92:9c: 5f:e6:04:2a:5e:da:f7:96:a2:a3:59:32:4c:10:a6:46:1d:9c: dd:93:16:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkfZek7r2ustvBZ36lBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0M2M5MjQ3NGZlZDM4M2M5NWZhMmNjZDgzZDYxNGY1N2U1 NjNkODIwHhcNMjYwMjA5MTIwMDI3WhcNMjYwMjEwMTIwMDI3WjAzMTEwLwYDVQQD Eyg4NGI3MTUxN2JhMWNlZTBiNzRjNzI5MDFmZDBjMjNhMjY2YjU2ZmZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnPGKYJK5kKcZNvHg0JfjVr1jqOR mra/Irg0APzw/lavDfSBt/O3eY6gddq3qwrGlNAd/9nGEtP7S9+LPFf5Ovoqlo0g x2Xpq1v5CHpVGZh50GWDjEbpildFUo0DHw7yGmEv36Qbo582z43UHagRc59mlPZX zzP+T3B3/igau6AxfHyTB4oIL4XzV+dBhdu+5EHBdhu4lRyfEd+H8nth1Zq90XRc /12h3dIiNdrJ2TpvybWMU/yMRMPkWN2JLWmbTI96PsS2NvzrtcJ7CzfhtNAxT8o9 IqoO3n8ScQFbGuGd6ciz+KiY97fs40DBml0mTZ40PCnO1MLge2mz3I/LSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS3FRe6HO4LdMcpAf0MI6JmtW/8MB8GA1UdIwQY MBaAFNQ8kkdP7Tg8lfoszYPWFPV+Vj2CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMt NmIwNmMxNzZiZDVhLzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS84NDFmM2EtYWI4My00ZGQ5LWIxODMtNmIwNmMxNzZiZDVh LzEvMUR5U1IwX3RPRHlWLWl6Tmc5WVU5WDVXUFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcYHleRB 7Njdj9g+aULDVWw8bfCs+rEjmpKcsTkFgR5QUmaAJUPjUCKFTXmufLfjrIeK3Svo F/O8qwv6ArdwlvBPx+hsC5F99Bop9rgW1obPrqA8XqhdXFR+3yIoKBCIzFvodrgt +GsH8NXAVyzifCsaRqibFBSaHBTLIiIg1rh3Cw+P48npJl0gfvdIPb88nQ1Wcan9 mq7ycCJ8UbHF0z0ulP7ahS3dqzcghh4cCeYRApMJ/dcuxroJYmsgCQ5froya8UKE oamErfSE8NPf4VdQZEj0sukDKP1Mb+PO6RrtKqHgU9fF45KcX+YEKl7a95aio1ky TBCmRh2c3ZMWrQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:33 2026 by rpki-client