This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json) Hash identifier: 07qbQf/nM5Z5q+6SnAzjPWd/LXdz5/m4Ua7AmMLOZes= Subject key identifier: B9:9D:67:8C:A1:60:F7:61:0F:D7:69:80:89:45:E7:EC:56:3D:33:6A Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0 Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0 Certificate serial: 019C43C6E69164771E69896706D75506C0C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 19:00:34 +0000 Manifest this update: Mon 09 Feb 2026 19:00:34 +0000 Manifest next update: Tue 10 Feb 2026 19:00:34 +0000 Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: DJhTbD6shJqSvZjqq9QEI9nrxXUQMQ3GBafNQjtxNms=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:e6:91:64:77:1e:69:89:67:06:d7:55:06:c0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0 Validity Not Before: Feb 9 19:00:34 2026 GMT Not After : Feb 10 19:00:34 2026 GMT Subject: CN=b99d678ca160f7610fd769808945e7ec563d336a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b5:74:df:1c:d6:50:15:d3:f6:87:f3:55:3e: ff:38:08:43:54:7d:ed:b5:cf:6c:fe:30:5a:ec:41: 85:12:82:04:eb:80:ba:6b:c2:7e:94:26:2e:9b:92: 24:3f:49:47:53:3e:f3:a4:2f:f2:cf:24:6b:a6:a5: 36:f2:4a:33:e1:8b:83:75:2d:64:5a:08:40:5e:ca: 28:3a:ab:b9:db:cd:14:89:dc:8d:5d:4d:75:68:92: 5c:8e:3e:ca:01:19:66:ef:5e:01:88:25:67:3f:d8: c9:ce:72:57:27:3b:d7:2c:db:5a:45:cb:5b:b9:af: 5a:04:e7:63:7b:5c:9b:a8:66:97:b8:0b:06:c3:47: 08:78:5f:47:96:4d:41:f3:6b:15:57:d8:ae:ac:f0: 6b:13:16:e5:0b:53:5a:b3:6d:ec:71:ba:df:dd:07: 09:29:44:f5:6d:a9:4d:15:d8:a1:c6:2c:30:14:c3: 4d:5e:b4:93:fc:bb:dd:77:14:95:95:85:a7:64:19: 36:ec:b8:9a:f6:09:9f:e2:9b:7f:dc:67:5d:60:b1: aa:ef:64:50:2e:b4:2a:02:70:c2:a5:64:75:12:02: 2e:45:4a:ea:9e:4b:d5:ff:26:41:85:97:c1:0d:8f: fa:ec:c0:e6:43:f4:27:a8:8e:53:92:7b:04:0e:d3: 4a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:9D:67:8C:A1:60:F7:61:0F:D7:69:80:89:45:E7:EC:56:3D:33:6A X509v3 Authority Key Identifier: keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:9c:5c:b9:f7:e7:93:9c:cf:68:b0:47:11:9f:8b:a9:58:f4: cb:55:32:28:04:36:8b:ba:b5:74:4e:bd:72:41:99:87:98:a6: 37:21:ac:3d:b4:72:1e:62:7c:41:2a:4c:99:a7:97:fb:15:ee: d8:fc:f2:cb:56:c0:c4:8f:a2:56:57:12:a2:83:09:c5:c0:b5: b2:5e:7e:b1:ec:f2:ea:c6:c4:8a:f0:f9:1c:52:0f:a1:68:4a: 83:24:bf:f5:30:c5:74:1c:20:e9:48:10:a6:77:89:21:ae:dd: 6b:77:4b:68:6d:e1:1e:c3:77:1d:ca:88:73:4a:0f:30:90:86: eb:a4:e0:eb:93:cc:fc:14:80:0a:cc:84:6c:03:d3:e4:22:74: 37:4f:a7:a1:aa:62:6e:6f:33:fe:12:ea:b1:24:84:e9:a5:0f: 79:b3:07:5e:36:40:37:7c:23:ed:08:34:61:77:e4:2c:21:32: 0e:99:57:36:f3:ab:e3:17:0b:4e:7f:d5:3e:3f:06:90:9b:2d: a1:86:0a:91:d6:63:49:b2:1e:ca:aa:af:73:78:d1:6b:a6:95: 03:6d:ce:5f:08:44:69:d3:4f:b9:8a:f4:ed:ec:d0:10:a6:d7: 3d:fe:25:4c:1b:c6:f1:10:6a:e9:92:18:f1:23:e4:27:c1:03: c8:bb:8f:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxuaRZHceaYlnBtdVBsDDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMWExODE2ZGQzNjhiNzdjZjMyYmQyMWE5ZTBiYWQ1ZGY2 Y2RmZjAwHhcNMjYwMjA5MTkwMDM0WhcNMjYwMjEwMTkwMDM0WjAzMTEwLwYDVQQD EyhiOTlkNjc4Y2ExNjBmNzYxMGZkNzY5ODA4OTQ1ZTdlYzU2M2QzMzZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrV03xzWUBXT9ofzVT7/OAhDVH3t tc9s/jBa7EGFEoIE64C6a8J+lCYum5IkP0lHUz7zpC/yzyRrpqU28koz4YuDdS1k WghAXsooOqu5280UidyNXU11aJJcjj7KARlm714BiCVnP9jJznJXJzvXLNtaRctb ua9aBOdje1ybqGaXuAsGw0cIeF9Hlk1B82sVV9iurPBrExblC1Nas23scbrf3QcJ KUT1balNFdihxiwwFMNNXrST/LvddxSVlYWnZBk27Lia9gmf4pt/3GddYLGq72RQ LrQqAnDCpWR1EgIuRUrqnkvV/yZBhZfBDY/67MDmQ/QnqI5TknsEDtNKSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLmdZ4yhYPdhD9dpgIlF5+xWPTNqMB8GA1UdIwQY MBaAFA8aGBbdNot3zzK9IangutXfbN/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEt NzIzMTE0NmQxNTZmLzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEtNzIzMTE0NmQxNTZm LzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5pxcuffn k5zPaLBHEZ+LqVj0y1UyKAQ2i7q1dE69ckGZh5imNyGsPbRyHmJ8QSpMmaeX+xXu 2Pzyy1bAxI+iVlcSooMJxcC1sl5+sezy6sbEivD5HFIPoWhKgyS/9TDFdBwg6UgQ pneJIa7da3dLaG3hHsN3HcqIc0oPMJCG66Tg65PM/BSACsyEbAPT5CJ0N0+noapi bm8z/hLqsSSE6aUPebMHXjZAN3wj7Qg0YXfkLCEyDplXNvOr4xcLTn/VPj8GkJst oYYKkdZjSbIeyqqvc3jRa6aVA23OXwhEadNPuYr07ezQEKbXPf4lTBvG8RBq6ZIY 8SPkJ8EDyLuPpQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:51:13 2026 by rpki-client