This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft File: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft (raw, json) Hash identifier: 18h+bE/EGiWSH4s9XVoSCRa+uiAGT3AYf68nJNwpG6k= Subject key identifier: C9:17:3C:90:D4:85:53:72:38:7C:50:81:3F:06:5C:F2:0E:BA:CA:64 Authority key identifier: 0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 Certificate issuer: /CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Certificate serial: 019C42EB7293ADC8900E5232C60655FDA6F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 15:00:52 +0000 Manifest this update: Mon 09 Feb 2026 15:00:52 +0000 Manifest next update: Tue 10 Feb 2026 15:00:52 +0000 Files and hashes: 1: Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl (hash: 5zul1v7elvtaGuVmXdHHHElTjwqeyH8E0vAhlD/d2Nc=) 2: xOh8rPz0fCu_Rdtl4qREsx0riTQ.roa (hash: 51BbJDIoI2b7sQWeISHrMYtf3JjGMl3uwds3WWJ64wc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:72:93:ad:c8:90:0e:52:32:c6:06:55:fd:a6:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dcda5d060ba9366bb4325828b57033bef18e3c0 Validity Not Before: Feb 9 15:00:52 2026 GMT Not After : Feb 10 15:00:52 2026 GMT Subject: CN=c9173c90d4855372387c50813f065cf20ebaca64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b1:de:43:70:51:e9:56:2f:85:13:3d:75:e4: 49:8d:fd:80:ea:cd:09:05:9c:d5:8e:10:4c:59:6b: 68:f0:9b:79:60:04:4c:71:94:23:d8:f8:ef:7d:07: bd:cf:34:c9:72:61:24:d7:e2:c8:77:34:94:30:c5: da:26:3f:73:10:f1:32:85:1e:93:71:33:92:18:b0: 48:de:99:90:ef:5b:6b:f5:de:03:6d:e5:43:ff:38: 57:9e:cb:de:90:34:8f:b2:ee:87:a7:f9:1e:75:09: 9a:89:8b:71:9a:3a:70:55:a0:96:0e:b0:15:49:d4: ad:2c:2e:13:aa:68:fb:48:4c:d7:58:76:c6:92:0f: 19:ae:76:5e:0c:1c:bb:02:93:89:f2:9f:80:74:6c: 6c:cf:56:34:f2:4b:8a:21:26:a3:bf:37:f4:92:d4: c7:19:0e:14:ac:f0:c7:f0:81:7a:13:df:d2:85:03: b8:d4:f1:e3:5c:ce:f7:1d:41:fe:81:8f:8b:9f:dc: b8:08:ab:73:f2:4f:6b:4b:fe:33:6b:01:83:70:54: a8:86:11:aa:4f:05:a0:7e:de:70:74:63:e5:6d:05: b5:a3:b3:e6:10:69:a5:98:26:20:25:6d:63:ec:42: cf:70:26:43:b5:21:5d:92:90:71:5e:b3:62:b8:c4: 49:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:17:3C:90:D4:85:53:72:38:7C:50:81:3F:06:5C:F2:0E:BA:CA:64 X509v3 Authority Key Identifier: keyid:0D:CD:A5:D0:60:BA:93:66:BB:43:25:82:8B:57:03:3B:EF:18:E3:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/e16001-6525-404b-9b49-a57b1b392205/1/Dc2l0GC6k2a7QyWCi1cDO-8Y48A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:a7:49:ae:cd:fb:b2:66:6d:c5:1b:ee:62:f3:24:22:04:23: ba:48:f5:67:bc:9f:c9:25:24:40:1d:00:ab:df:61:79:ea:5b: a9:4b:62:1d:8b:18:bc:93:7a:f4:91:1e:28:7f:e5:c7:7f:0b: e4:08:63:d3:e9:71:ba:45:a0:bd:62:03:37:96:3f:bc:34:dd: fa:06:51:5b:b7:1c:7c:9c:af:f3:1f:90:e0:16:46:2a:3d:fb: fa:b8:da:96:44:14:f4:f2:0c:28:64:6a:38:fe:7b:bc:cd:9a: fe:ba:67:5d:c3:ab:b7:0b:0d:f1:25:bb:ee:16:52:91:b7:44: de:99:90:c4:e1:ab:8e:1d:25:4c:14:1a:77:06:7a:a6:7d:73: 5b:69:35:78:7a:47:d4:8b:f5:6f:60:4e:b7:00:5e:11:44:86: db:74:ed:b8:b4:06:f5:84:7e:ad:55:71:c2:e9:83:aa:18:71: a9:a8:61:f7:5e:80:2f:bb:d2:a7:9a:e7:cb:39:00:24:b9:c4: 14:55:4f:73:16:b7:04:93:da:09:23:d6:20:d9:fd:70:12:15: 51:48:43:a5:39:d4:43:b2:d7:54:40:9a:fc:8e:b0:8b:36:e7: d1:ec:58:c3:0b:e0:60:a9:d2:c8:0b:8e:47:66:e4:2b:17:51: a2:f3:cc:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63KTrciQDlIyxgZV/abxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkY2RhNWQwNjBiYTkzNjZiYjQzMjU4MjhiNTcwMzNiZWYx OGUzYzAwHhcNMjYwMjA5MTUwMDUyWhcNMjYwMjEwMTUwMDUyWjAzMTEwLwYDVQQD EyhjOTE3M2M5MGQ0ODU1MzcyMzg3YzUwODEzZjA2NWNmMjBlYmFjYTY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrHeQ3BR6VYvhRM9deRJjf2A6s0J BZzVjhBMWWto8Jt5YARMcZQj2PjvfQe9zzTJcmEk1+LIdzSUMMXaJj9zEPEyhR6T cTOSGLBI3pmQ71tr9d4DbeVD/zhXnsvekDSPsu6Hp/kedQmaiYtxmjpwVaCWDrAV SdStLC4Tqmj7SEzXWHbGkg8ZrnZeDBy7ApOJ8p+AdGxsz1Y08kuKISajvzf0ktTH GQ4UrPDH8IF6E9/ShQO41PHjXM73HUH+gY+Ln9y4CKtz8k9rS/4zawGDcFSohhGq TwWgft5wdGPlbQW1o7PmEGmlmCYgJW1j7ELPcCZDtSFdkpBxXrNiuMRJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMkXPJDUhVNyOHxQgT8GXPIOuspkMB8GA1UdIwQY MBaAFA3NpdBgupNmu0MlgotXAzvvGOPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDkt YTU3YjFiMzkyMjA1LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi9lMTYwMDEtNjUyNS00MDRiLTliNDktYTU3YjFiMzkyMjA1 LzEvRGMybDBHQzZrMmE3UXlXQ2kxY0RPLThZNDhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6dJrs37 smZtxRvuYvMkIgQjukj1Z7yfySUkQB0Aq99heepbqUtiHYsYvJN69JEeKH/lx38L 5Ahj0+lxukWgvWIDN5Y/vDTd+gZRW7ccfJyv8x+Q4BZGKj37+rjalkQU9PIMKGRq OP57vM2a/rpnXcOrtwsN8SW77hZSkbdE3pmQxOGrjh0lTBQadwZ6pn1zW2k1eHpH 1Iv1b2BOtwBeEUSG23TtuLQG9YR+rVVxwumDqhhxqahh916AL7vSp5rnyzkAJLnE FFVPcxa3BJPaCSPWINn9cBIVUUhDpTnUQ7LXVECa/I6wizbn0exYwwvgYKnSyAuO R2bkKxdRovPM3w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:03 2026 by rpki-client