This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft File: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft (raw, json) Hash identifier: XoqxSz+4m/G9Ga5wAHhprEuQoOPQdC/FMa6PNjajn5o= Subject key identifier: E9:78:38:C3:77:BF:DE:6C:A5:BF:9F:8F:B2:99:DF:B2:E5:A1:88:2F Authority key identifier: 75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94 Certificate issuer: /CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94 Certificate serial: 019C420FB134BFCF7607C5B5976EB9348262 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft Manifest number: 0624 Signing time: Mon 09 Feb 2026 11:00:50 +0000 Manifest this update: Mon 09 Feb 2026 11:00:50 +0000 Manifest next update: Tue 10 Feb 2026 11:00:50 +0000 Files and hashes: 1: dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl (hash: nd8jMd+8Rw9ApfWJvfhddxh0Mb8nU2hj84Y8eVsQJ1I=) 2: q19_s0i5IT2dybooIUZ7ijzcNXc.roa (hash: mA9ozpHHNX60WKdi28wKCibVutGMEXZy4W8BO6NWgto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b1:34:bf:cf:76:07:c5:b5:97:6e:b9:34:82:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7518c2273ad74364649bcb2e2d34fb707f5d5b94 Validity Not Before: Feb 9 11:00:50 2026 GMT Not After : Feb 10 11:00:50 2026 GMT Subject: CN=e97838c377bfde6ca5bf9f8fb299dfb2e5a1882f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:90:e5:e1:e8:0b:3f:da:6b:92:33:4c:7f:c2: 1c:0d:fc:07:5d:69:f4:05:92:af:42:c2:48:78:59: bb:b7:f8:e1:ae:eb:77:87:49:60:cd:c6:60:fa:d4: 4b:d3:ca:e4:bd:26:73:67:d2:fb:0b:00:d6:bf:ab: 4e:ad:b0:99:3e:b2:de:fd:78:fe:24:40:7c:03:80: 4c:13:a4:8b:b9:4a:81:75:c5:5e:50:bc:d4:87:f5: dc:1c:ce:6a:43:87:2e:24:e2:08:ae:46:70:cb:91: 04:90:19:b3:86:11:78:0e:35:b3:83:b5:6a:5e:dd: 86:c2:8a:76:51:45:6b:fc:5c:7e:9d:2a:d5:27:83: dd:8d:ab:de:b4:fc:5e:f3:c3:dc:c8:73:29:98:2c: e7:8d:84:4f:ee:c3:7d:d2:e3:18:51:b5:43:b2:08: 79:82:55:80:a8:a9:06:89:df:6c:bf:6c:8e:84:63: 5a:67:10:12:10:c9:a3:75:47:48:6e:14:87:10:44: 46:89:2f:ed:20:ea:67:6b:89:7a:f7:e1:b2:32:46: 01:54:d0:f6:9d:4b:2a:e7:b5:34:24:87:32:3f:b0: 1b:92:03:ab:94:de:41:aa:22:9b:70:6b:4b:ba:37: 4f:b0:85:11:eb:51:35:68:c0:05:a0:fd:79:b3:0c: fa:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:78:38:C3:77:BF:DE:6C:A5:BF:9F:8F:B2:99:DF:B2:E5:A1:88:2F X509v3 Authority Key Identifier: keyid:75:18:C2:27:3A:D7:43:64:64:9B:CB:2E:2D:34:FB:70:7F:5D:5B:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4cca48-3189-4491-aede-d3d30ebc36ac/1/dRjCJzrXQ2Rkm8suLTT7cH9dW5Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:c7:88:fd:b9:3a:62:87:b5:9b:cb:b5:4a:15:59:85:56:95: 3c:91:aa:bd:bb:b5:ba:ee:f5:1d:56:60:81:e7:29:d5:29:0b: 8c:35:af:ad:38:df:e5:01:d7:3b:0b:98:38:12:49:ea:95:da: 04:f6:86:dc:af:ad:8b:f1:1f:c5:3e:48:b4:42:73:58:59:c9: 0b:56:e4:61:fa:bb:90:0b:22:11:39:91:8a:d0:e4:a2:2d:13: 94:43:eb:5f:82:92:8a:23:c8:1e:be:40:a1:e1:06:0a:54:a3: d3:9f:cd:b0:25:c5:83:fd:94:2f:a5:8d:c3:4a:31:69:d6:d4: fc:92:a8:17:ac:37:95:a7:60:65:36:c5:ea:6f:80:04:01:73: dc:78:57:1e:0f:72:a4:9b:36:81:ef:cf:de:e1:db:43:f0:2b: 5d:25:67:c3:19:88:da:81:af:97:c4:dc:ee:75:85:2c:0d:08: 13:94:33:ba:d3:cf:1f:f8:1f:01:af:2c:32:1a:a1:27:9d:03: 6e:8b:c1:1a:cd:23:d3:4b:97:46:fc:84:62:1f:61:3d:7c:71: a7:cf:41:ac:32:f4:94:a5:af:e4:1c:90:ea:18:56:fc:49:58: bc:b9:d2:f2:db:25:6e:cc:bc:86:95:e2:6e:bb:1c:99:d6:4c: 77:f7:22:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7E0v892B8W1l265NIJiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MThjMjI3M2FkNzQzNjQ2NDliY2IyZTJkMzRmYjcwN2Y1 ZDViOTQwHhcNMjYwMjA5MTEwMDUwWhcNMjYwMjEwMTEwMDUwWjAzMTEwLwYDVQQD EyhlOTc4MzhjMzc3YmZkZTZjYTViZjlmOGZiMjk5ZGZiMmU1YTE4ODJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJDl4egLP9prkjNMf8IcDfwHXWn0 BZKvQsJIeFm7t/jhrut3h0lgzcZg+tRL08rkvSZzZ9L7CwDWv6tOrbCZPrLe/Xj+ JEB8A4BME6SLuUqBdcVeULzUh/XcHM5qQ4cuJOIIrkZwy5EEkBmzhhF4DjWzg7Vq Xt2Gwop2UUVr/Fx+nSrVJ4PdjavetPxe88PcyHMpmCznjYRP7sN90uMYUbVDsgh5 glWAqKkGid9sv2yOhGNaZxASEMmjdUdIbhSHEERGiS/tIOpna4l69+GyMkYBVND2 nUsq57U0JIcyP7AbkgOrlN5BqiKbcGtLujdPsIUR61E1aMAFoP15swz6/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOl4OMN3v95spb+fj7KZ37LloYgvMB8GA1UdIwQY MBaAFHUYwic610NkZJvLLi00+3B/XVuUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUt ZDNkMzBlYmMzNmFjLzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy80Y2NhNDgtMzE4OS00NDkxLWFlZGUtZDNkMzBlYmMzNmFj LzEvZFJqQ0p6clhRMlJrbThzdUxUVDdjSDlkVzVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF8eI/bk6 Yoe1m8u1ShVZhVaVPJGqvbu1uu71HVZggecp1SkLjDWvrTjf5QHXOwuYOBJJ6pXa BPaG3K+ti/EfxT5ItEJzWFnJC1bkYfq7kAsiETmRitDkoi0TlEPrX4KSiiPIHr5A oeEGClSj05/NsCXFg/2UL6WNw0oxadbU/JKoF6w3ladgZTbF6m+ABAFz3HhXHg9y pJs2ge/P3uHbQ/ArXSVnwxmI2oGvl8Tc7nWFLA0IE5QzutPPH/gfAa8sMhqhJ50D bovBGs0j00uXRvyEYh9hPXxxp89BrDL0lKWv5ByQ6hhW/ElYvLnS8tslbsy8hpXi brscmdZMd/ciiQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:54 2026 by rpki-client