This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft File: 29weM6UtreAbUtkXC8KbjCjZi2w.mft (raw, json) Hash identifier: F+dbicsed5H50Lsr/Qh+w9Xw1ErFoEwaOHjMcLIM1S0= Subject key identifier: 35:C3:F8:40:F2:31:AD:6E:50:2D:D3:D5:2E:99:4F:72:00:54:41:3D Authority key identifier: DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C Certificate issuer: /CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Certificate serial: 019C420FB252B47041D3A40B6A9DFA575104 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft Manifest number: 028B Signing time: Mon 09 Feb 2026 11:00:50 +0000 Manifest this update: Mon 09 Feb 2026 11:00:50 +0000 Manifest next update: Tue 10 Feb 2026 11:00:50 +0000 Files and hashes: 1: 0XpSx_PqBsgWn7gAIHU3QZlrH3g.roa (hash: Eviyd5MC3TSKuaGr7W9HYIt5jchGDmF2CLXeiWnw2P0=) 2: 29weM6UtreAbUtkXC8KbjCjZi2w.crl (hash: oorXhqUrpxiZCc0uJF/kXNHCeU6EVDP1pSsZwZF7MNA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b2:52:b4:70:41:d3:a4:0b:6a:9d:fa:57:51:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbdc1e33a52dade01b52d9170bc29b8c28d98b6c Validity Not Before: Feb 9 11:00:50 2026 GMT Not After : Feb 10 11:00:50 2026 GMT Subject: CN=35c3f840f231ad6e502dd3d52e994f720054413d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:dd:1f:a1:28:bb:80:61:39:60:e4:d7:71:ce: b3:86:44:fa:ed:53:c7:57:c2:e0:27:d8:b0:c8:8b: 20:2e:d0:5e:c8:de:69:8a:39:28:cb:cb:2b:b9:d2: 8a:d2:58:86:08:6a:9e:bd:de:9f:e0:86:ea:40:aa: 19:49:35:4d:87:ea:da:07:f6:a1:d5:c1:74:3d:40: 0b:f6:14:13:11:ae:49:61:4d:71:b0:4f:69:43:0e: 50:6e:86:73:75:8f:99:9d:e3:db:72:0e:3e:4e:7e: b9:aa:21:b0:9c:7d:0c:68:9f:36:b1:35:e8:b5:d6: 47:a7:93:ca:ea:9a:68:27:ba:03:e8:26:90:62:2a: f8:05:df:d0:3f:23:9a:1b:26:04:1c:bf:d4:0c:09: dd:03:e8:07:f0:0e:04:af:6f:28:f5:dd:75:fa:2e: a7:12:fe:b5:6f:39:f0:59:e1:e9:7a:5e:10:93:2c: 5f:b5:b4:f4:f4:a9:54:81:e5:73:d8:85:d0:a5:5b: 83:ff:af:72:4c:47:79:ef:42:3e:be:2b:2a:51:2d: ba:06:e6:94:69:ce:ad:e9:5e:10:57:06:73:5a:66: 1c:55:34:69:47:9f:87:b3:8d:45:de:a8:66:22:fc: 61:cf:6c:db:b1:3c:b8:fe:82:54:b4:fc:61:07:70: e7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C3:F8:40:F2:31:AD:6E:50:2D:D3:D5:2E:99:4F:72:00:54:41:3D X509v3 Authority Key Identifier: keyid:DB:DC:1E:33:A5:2D:AD:E0:1B:52:D9:17:0B:C2:9B:8C:28:D9:8B:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29weM6UtreAbUtkXC8KbjCjZi2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/d49f1c-c945-47c4-bddc-eeccc20a8d21/1/29weM6UtreAbUtkXC8KbjCjZi2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:04:12:df:df:da:00:19:ae:58:3f:78:2f:39:53:67:6b:1a: 9f:fa:b7:e8:06:58:c2:50:86:24:5b:f9:fa:05:73:e9:f5:21: ac:a3:c1:d4:8b:fe:47:ab:b2:53:e0:a5:db:46:15:fd:d5:c8: 0f:77:b3:c0:71:e2:b0:cf:ee:21:dd:ac:06:6d:af:da:6d:62: 81:cd:25:f4:9e:7a:3a:4f:b5:79:97:33:a4:85:8e:23:35:e1: 5d:04:33:86:07:53:9f:46:e3:91:6a:de:bc:9c:40:b5:59:4d: 08:f6:61:e0:95:79:98:aa:bd:54:af:c9:2a:d8:ea:4f:3f:20: 7e:95:fb:76:bc:57:dd:20:45:a4:bc:f4:f6:38:3e:76:86:d8: 7f:4f:cd:d9:be:65:bc:0f:2f:6b:e1:c1:7b:c1:b4:b2:25:bd: 49:9d:a5:ab:c3:df:44:2b:37:d3:5e:bd:b7:c9:be:95:32:e2: 4c:da:2f:bf:0c:28:d4:02:44:07:c9:a8:5a:f1:48:fc:be:25: 12:00:76:94:b0:08:27:62:23:9d:25:29:36:8d:f6:3f:74:14: 3c:02:66:e6:26:9a:9d:23:13:31:ca:a1:32:c8:fb:18:bc:bd: f7:34:7c:5a:3a:73:b7:26:be:4c:98:c4:e0:72:2d:97:c3:ee: da:b0:ee:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7JStHBB06QLap36V1EEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZGMxZTMzYTUyZGFkZTAxYjUyZDkxNzBiYzI5YjhjMjhk OThiNmMwHhcNMjYwMjA5MTEwMDUwWhcNMjYwMjEwMTEwMDUwWjAzMTEwLwYDVQQD EygzNWMzZjg0MGYyMzFhZDZlNTAyZGQzZDUyZTk5NGY3MjAwNTQ0MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiN0foSi7gGE5YOTXcc6zhkT67VPH V8LgJ9iwyIsgLtBeyN5pijkoy8srudKK0liGCGqevd6f4IbqQKoZSTVNh+raB/ah 1cF0PUAL9hQTEa5JYU1xsE9pQw5QboZzdY+ZnePbcg4+Tn65qiGwnH0MaJ82sTXo tdZHp5PK6ppoJ7oD6CaQYir4Bd/QPyOaGyYEHL/UDAndA+gH8A4Er28o9d11+i6n Ev61bznwWeHpel4QkyxftbT09KlUgeVz2IXQpVuD/69yTEd570I+visqUS26BuaU ac6t6V4QVwZzWmYcVTRpR5+Hs41F3qhmIvxhz2zbsTy4/oJUtPxhB3DnVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDXD+EDyMa1uUC3T1S6ZT3IAVEE9MB8GA1UdIwQY MBaAFNvcHjOlLa3gG1LZFwvCm4wo2YtsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMt ZWVjY2MyMGE4ZDIxLzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9kNDlmMWMtYzk0NS00N2M0LWJkZGMtZWVjY2MyMGE4ZDIx LzEvMjl3ZU02VXRyZUFiVXRrWEM4S2JqQ2paaTJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagQS39/a ABmuWD94LzlTZ2san/q36AZYwlCGJFv5+gVz6fUhrKPB1Iv+R6uyU+Cl20YV/dXI D3ezwHHisM/uId2sBm2v2m1igc0l9J56Ok+1eZczpIWOIzXhXQQzhgdTn0bjkWre vJxAtVlNCPZh4JV5mKq9VK/JKtjqTz8gfpX7drxX3SBFpLz09jg+dobYf0/N2b5l vA8va+HBe8G0siW9SZ2lq8PfRCs30169t8m+lTLiTNovvwwo1AJEB8moWvFI/L4l EgB2lLAIJ2IjnSUpNo32P3QUPAJm5iaanSMTMcqhMsj7GLy99zR8Wjpztya+TJjE 4HItl8Pu2rDucg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:33 2026 by rpki-client