This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft File: Df9Jns244Vczu3EQlZlZrA4WYAg.mft (raw, json) Hash identifier: 3iIdxhJ0/EIB60e8pwByF8xT2qGppqsLzatesBYu5qc= Subject key identifier: 8D:0C:A2:45:E0:D9:9D:5C:52:24:49:D0:DD:6E:B1:7A:11:54:AD:72 Authority key identifier: 0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 Certificate issuer: /CN=0dff499ecdb8e15733bb7110959959ac0e166008 Certificate serial: 019C427DF9EB439DD728CF04A1BBD4F5648A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft Manifest number: 0F87 Signing time: Mon 09 Feb 2026 13:01:18 +0000 Manifest this update: Mon 09 Feb 2026 13:01:18 +0000 Manifest next update: Tue 10 Feb 2026 13:01:18 +0000 Files and hashes: 1: Df9Jns244Vczu3EQlZlZrA4WYAg.crl (hash: BnrHlS3bCfq0i0q8azMilOcpNElFDl7SCI8iqcQoTn4=) 2: mssfFR-jvVEjXWitmlgUfKmk1ic.roa (hash: w30uwAMWbY93oGllAg088gC96/ylOV2F4klPStV+KUE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:f9:eb:43:9d:d7:28:cf:04:a1:bb:d4:f5:64:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dff499ecdb8e15733bb7110959959ac0e166008 Validity Not Before: Feb 9 13:01:18 2026 GMT Not After : Feb 10 13:01:18 2026 GMT Subject: CN=8d0ca245e0d99d5c522449d0dd6eb17a1154ad72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:be:fc:06:e1:08:0d:dd:29:48:63:06:46:bc: c5:66:5f:ad:41:cb:86:4d:7e:ed:b6:e1:17:51:57: 8e:fc:55:cc:f9:82:97:c6:e2:3c:98:25:cb:12:8b: 26:e3:90:18:ed:b7:b0:21:82:70:37:e1:ff:91:78: 57:86:d2:6d:9c:83:57:bf:00:a9:86:70:a7:8e:a2: ce:0f:14:00:ea:52:8d:6f:ce:ea:5a:2c:01:df:7a: 07:47:4d:67:fb:7b:2e:c2:82:06:86:56:52:44:7e: 5d:3a:00:35:1e:4b:a0:db:64:86:38:81:99:5a:4a: 39:03:e7:4e:c0:8f:4f:9f:ea:ad:36:a1:31:89:e9: c4:88:4c:8e:a0:55:b2:f4:a0:52:ba:74:31:8e:50: 81:68:65:5e:86:4c:42:bc:d6:b8:fa:e1:4f:2a:8c: a3:9e:a8:1e:4e:47:0a:89:fb:f1:9b:e0:75:e2:4f: 66:e7:29:6d:e3:85:0b:d8:d1:eb:85:88:09:49:cd: c4:4e:2c:81:04:c6:96:2d:74:8c:62:71:a6:91:3f: b2:a1:ee:84:90:34:1a:c1:5b:d9:23:53:7c:05:e6: d4:99:b2:b9:5e:a0:d0:61:6b:c1:7a:a8:b9:b8:5c: d3:aa:90:bb:ba:50:2b:62:76:d7:01:cf:47:74:86: e3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:0C:A2:45:E0:D9:9D:5C:52:24:49:D0:DD:6E:B1:7A:11:54:AD:72 X509v3 Authority Key Identifier: keyid:0D:FF:49:9E:CD:B8:E1:57:33:BB:71:10:95:99:59:AC:0E:16:60:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df9Jns244Vczu3EQlZlZrA4WYAg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/596120-b25d-4279-8ea1-6f7c0ec91d8a/1/Df9Jns244Vczu3EQlZlZrA4WYAg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fa:e7:f9:99:86:92:b6:2e:2e:73:2d:fa:ee:11:2b:df:53: a1:e4:74:4d:0c:b9:bc:a2:b6:66:32:af:5f:15:1b:23:02:54: 02:71:93:30:8f:d2:65:57:07:e9:2b:ef:1c:96:e3:34:a8:5f: 79:f8:64:fd:9a:19:d5:90:ac:fe:4b:e3:f8:0d:1c:65:08:a0: 5d:06:cc:e7:eb:f4:56:3d:1f:96:8d:ad:24:a2:b3:51:b4:c1: 9b:7e:33:10:d2:29:c7:97:79:c8:66:f8:99:19:45:81:2f:32: 1d:8f:3e:37:fd:3a:cc:db:d8:d6:55:ca:c1:83:cc:18:38:6a: 9f:48:10:e2:62:72:d4:6e:3f:92:fd:47:e1:37:51:88:8d:a1: d7:bf:70:73:0f:35:83:e4:11:f1:7f:aa:15:b2:29:7e:bc:43: 7c:d1:6b:7e:b7:cc:56:31:7c:f3:81:99:bb:60:a8:db:74:a8: 12:57:e0:e6:ee:56:14:0e:a7:00:ed:dc:1d:71:c8:e3:e5:dc: 06:78:08:ca:cd:29:2f:32:54:a5:6f:19:95:af:8e:70:9e:f8: 5c:c3:82:ab:3b:85:14:c0:18:a7:73:4f:87:24:b7:11:b7:10: 7f:cc:ec:90:1f:f2:4e:aa:bd:ec:f3:89:a4:cd:f7:1a:79:d2: dc:b6:5a:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffnrQ53XKM8EobvU9WSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmY0OTllY2RiOGUxNTczM2JiNzExMDk1OTk1OWFjMGUx NjYwMDgwHhcNMjYwMjA5MTMwMTE4WhcNMjYwMjEwMTMwMTE4WjAzMTEwLwYDVQQD Eyg4ZDBjYTI0NWUwZDk5ZDVjNTIyNDQ5ZDBkZDZlYjE3YTExNTRhZDcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL78BuEIDd0pSGMGRrzFZl+tQcuG TX7ttuEXUVeO/FXM+YKXxuI8mCXLEosm45AY7bewIYJwN+H/kXhXhtJtnINXvwCp hnCnjqLODxQA6lKNb87qWiwB33oHR01n+3suwoIGhlZSRH5dOgA1Hkug22SGOIGZ Wko5A+dOwI9Pn+qtNqExienEiEyOoFWy9KBSunQxjlCBaGVehkxCvNa4+uFPKoyj nqgeTkcKifvxm+B14k9m5ylt44UL2NHrhYgJSc3ETiyBBMaWLXSMYnGmkT+yoe6E kDQawVvZI1N8BebUmbK5XqDQYWvBeqi5uFzTqpC7ulArYnbXAc9HdIbjLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI0MokXg2Z1cUiRJ0N1usXoRVK1yMB8GA1UdIwQY MBaAFA3/SZ7NuOFXM7txEJWZWawOFmAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEt NmY3YzBlYzkxZDhhLzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi81OTYxMjAtYjI1ZC00Mjc5LThlYTEtNmY3YzBlYzkxZDhh LzEvRGY5Sm5zMjQ0VmN6dTNFUWxabFpyQTRXWUFnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvrn+ZmG krYuLnMt+u4RK99ToeR0TQy5vKK2ZjKvXxUbIwJUAnGTMI/SZVcH6SvvHJbjNKhf efhk/ZoZ1ZCs/kvj+A0cZQigXQbM5+v0Vj0flo2tJKKzUbTBm34zENIpx5d5yGb4 mRlFgS8yHY8+N/06zNvY1lXKwYPMGDhqn0gQ4mJy1G4/kv1H4TdRiI2h179wcw81 g+QR8X+qFbIpfrxDfNFrfrfMVjF884GZu2Co23SoElfg5u5WFA6nAO3cHXHI4+Xc BngIys0pLzJUpW8Zla+OcJ74XMOCqzuFFMAYp3NPhyS3EbcQf8zskB/yTqq97POJ pM33GnnS3LZaRw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:12 2026 by rpki-client