This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft File: dE3LcujLR4z8SyWusfA7QGJmN1w.mft (raw, json) Hash identifier: QmYNSK1uSm8VhcBEUGFYj7AkAg/M87DGx8zdIMlwULM= Subject key identifier: 07:49:A8:A3:D4:C2:BB:89:52:90:5C:A4:B2:53:8C:0E:9F:A8:7B:B0 Authority key identifier: 74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C Certificate issuer: /CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Certificate serial: 019C43900E2FAA32CE8BA30E5DBCFC73DB8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft Manifest number: 0C5E Signing time: Mon 09 Feb 2026 18:00:40 +0000 Manifest this update: Mon 09 Feb 2026 18:00:40 +0000 Manifest next update: Tue 10 Feb 2026 18:00:40 +0000 Files and hashes: 1: dE3LcujLR4z8SyWusfA7QGJmN1w.crl (hash: 3xsT5s8IcmN5iKcbTI59ca/pZHkSmg/y/g1muje6GHU=) 2: tCljQdoQCYAGdZbsiUMFE-XsaJE.roa (hash: 00v6c7Mm0TodzD2o33hMR8x5qaiYr+lOoZwclNiSZ/E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:0e:2f:aa:32:ce:8b:a3:0e:5d:bc:fc:73:db:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=744dcb72e8cb478cfc4b25aeb1f03b406266375c Validity Not Before: Feb 9 18:00:40 2026 GMT Not After : Feb 10 18:00:40 2026 GMT Subject: CN=0749a8a3d4c2bb8952905ca4b2538c0e9fa87bb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:17:d6:66:fc:c4:e0:73:6b:16:17:02:4f:9d: d0:8a:c8:d5:43:bf:1a:c3:f1:d6:3c:15:f7:67:71: 9a:50:8e:4f:30:59:71:3b:c0:9d:2c:6f:90:43:4d: db:53:c8:5a:22:33:2d:3e:ec:ba:a8:9a:16:a9:73: e9:ca:68:dd:fd:32:ed:0b:fb:60:41:d5:7b:5d:26: a6:ba:0d:4d:02:9e:bb:b5:f4:3d:6c:58:f4:16:06: e8:fd:85:df:47:ce:8b:6e:15:1a:0b:2f:f2:61:cc: 63:06:cc:d2:3c:57:e7:92:38:04:94:85:d1:84:86: 63:f4:85:75:2f:38:6f:ff:00:96:55:df:ac:83:82: 40:2d:8e:5c:ca:9d:17:6e:84:5a:8c:c0:3c:4e:7c: 9a:38:21:5e:51:6b:3a:87:68:a2:e5:9b:a6:dd:e8: 2c:a7:3b:4a:a9:01:7e:6a:3c:9a:d1:80:ba:f3:40: 1a:fe:ba:d2:10:ce:d9:44:27:19:c3:f2:e6:87:14: 39:63:16:f8:6e:61:6e:d1:c9:a5:e5:6b:28:50:18: 38:56:fa:4e:ea:26:1f:35:4b:63:77:83:bd:cb:1c: d0:29:5a:4b:e9:2d:c2:21:a6:2c:78:29:5f:ef:36: 8e:06:de:a1:45:54:8a:c0:48:04:fc:da:e8:f6:01: 84:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:49:A8:A3:D4:C2:BB:89:52:90:5C:A4:B2:53:8C:0E:9F:A8:7B:B0 X509v3 Authority Key Identifier: keyid:74:4D:CB:72:E8:CB:47:8C:FC:4B:25:AE:B1:F0:3B:40:62:66:37:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dE3LcujLR4z8SyWusfA7QGJmN1w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5e1be9-e4ea-4c84-a8b7-d0d476f41fd6/1/dE3LcujLR4z8SyWusfA7QGJmN1w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:81:cb:ca:16:f3:f6:03:f7:cb:9f:f0:21:ef:7e:da:73:83: 65:1c:a0:c1:1b:fc:4a:18:1c:46:f7:e2:ec:64:ff:81:26:6d: 56:5b:bd:5d:97:e3:d5:63:a2:17:a7:e0:6d:03:89:f7:5f:8d: 1c:34:27:f8:70:c5:d4:25:6e:b9:2b:36:0d:7f:2b:2b:48:e3: 3b:ac:e3:bd:65:bc:5b:5d:1c:85:9e:d7:ed:1f:15:67:97:58: 77:59:3e:c9:f8:e4:0e:2c:5e:53:8f:c2:6e:71:73:88:2b:a6: 54:08:ce:b6:fc:9c:08:33:9e:4c:56:9f:aa:c3:12:1d:a3:1b: 08:2c:44:f0:b3:33:c1:fe:d2:5a:1e:0f:18:19:13:36:fd:61: 4f:24:94:6e:69:06:95:3a:a4:6c:4d:49:0e:75:15:fc:a0:e6: 30:a6:fd:0f:a1:2b:25:46:ab:1a:e8:01:e8:e4:04:26:2f:38: 0a:c4:da:04:a4:4c:ba:9b:4a:12:e0:df:7a:46:3b:9c:47:7d: 36:c7:05:8b:4f:38:99:66:dd:8b:0e:e1:f3:38:e4:e4:a5:27: 93:84:59:13:ab:17:4d:83:a2:fb:9b:62:82:de:1d:e7:e4:d3: 95:46:1d:4d:75:d7:99:65:99:66:9a:b9:0e:e1:f0:18:44:a4: ee:72:04:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkA4vqjLOi6MOXbz8c9uMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NGRjYjcyZThjYjQ3OGNmYzRiMjVhZWIxZjAzYjQwNjI2 NjM3NWMwHhcNMjYwMjA5MTgwMDQwWhcNMjYwMjEwMTgwMDQwWjAzMTEwLwYDVQQD EygwNzQ5YThhM2Q0YzJiYjg5NTI5MDVjYTRiMjUzOGMwZTlmYTg3YmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBfWZvzE4HNrFhcCT53QisjVQ78a w/HWPBX3Z3GaUI5PMFlxO8CdLG+QQ03bU8haIjMtPuy6qJoWqXPpymjd/TLtC/tg QdV7XSamug1NAp67tfQ9bFj0Fgbo/YXfR86LbhUaCy/yYcxjBszSPFfnkjgElIXR hIZj9IV1Lzhv/wCWVd+sg4JALY5cyp0XboRajMA8TnyaOCFeUWs6h2ii5Zum3egs pztKqQF+ajya0YC680Aa/rrSEM7ZRCcZw/LmhxQ5Yxb4bmFu0cml5WsoUBg4VvpO 6iYfNUtjd4O9yxzQKVpL6S3CIaYseClf7zaOBt6hRVSKwEgE/Nro9gGEAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAdJqKPUwruJUpBcpLJTjA6fqHuwMB8GA1UdIwQY MBaAFHRNy3Loy0eM/EslrrHwO0BiZjdcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4Yjct ZDBkNDc2ZjQxZmQ2LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81ZTFiZTktZTRlYS00Yzg0LWE4YjctZDBkNDc2ZjQxZmQ2 LzEvZEUzTGN1akxSNHo4U3lXdXNmQTdRR0ptTjF3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADIHLyhbz 9gP3y5/wIe9+2nODZRygwRv8ShgcRvfi7GT/gSZtVlu9XZfj1WOiF6fgbQOJ91+N HDQn+HDF1CVuuSs2DX8rK0jjO6zjvWW8W10chZ7X7R8VZ5dYd1k+yfjkDixeU4/C bnFziCumVAjOtvycCDOeTFafqsMSHaMbCCxE8LMzwf7SWh4PGBkTNv1hTySUbmkG lTqkbE1JDnUV/KDmMKb9D6ErJUarGugB6OQEJi84CsTaBKRMuptKEuDfekY7nEd9 NscFi084mWbdiw7h8zjk5KUnk4RZE6sXTYOi+5tigt4d5+TTlUYdTXXXmWWZZpq5 DuHwGESk7nIEeA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:17 2026 by rpki-client