This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft File: D-cy5rJJCT55oaUHy82BlvAYF_o.mft (raw, json) Hash identifier: E3fi5US0AbWca/CyQ5kdvL5t0sy1RDTohS6ta+dLuoE= Subject key identifier: 1D:F0:B2:AE:E3:02:45:27:F3:F5:09:1A:A0:A7:72:A7:EF:DE:D5:2D Authority key identifier: 0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA Certificate issuer: /CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Certificate serial: 019C4246BDF9265DBC30348E7128EB726B99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft Manifest number: 12A7 Signing time: Mon 09 Feb 2026 12:00:58 +0000 Manifest this update: Mon 09 Feb 2026 12:00:58 +0000 Manifest next update: Tue 10 Feb 2026 12:00:58 +0000 Files and hashes: 1: D-cy5rJJCT55oaUHy82BlvAYF_o.crl (hash: Nn58ERN2cuhB24LdfoUulCJfDZ/o+3fzs1bUGvsSCGE=) 2: KRcQChyIkdk17z-o88DTXwkNu_Y.roa (hash: k4ZBkPTraQNZ31kK5NnaOy56WVAVKO/c8Q/xt3FDIoM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:bd:f9:26:5d:bc:30:34:8e:71:28:eb:72:6b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fe732e6b249093e79a1a507cbcd8196f01817fa Validity Not Before: Feb 9 12:00:58 2026 GMT Not After : Feb 10 12:00:58 2026 GMT Subject: CN=1df0b2aee3024527f3f5091aa0a772a7efded52d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:01:f1:7b:38:db:d7:01:ae:83:e1:dd:e5:69: 4a:48:6e:64:7e:3d:96:ba:80:dd:25:50:d6:68:c6: d6:a4:be:41:09:9d:93:93:57:cf:0d:3a:ba:35:11: 5d:07:4c:8e:90:0f:07:db:69:bc:5b:78:a4:23:9d: b0:1a:87:db:90:d2:5f:f0:ec:37:36:a0:c6:80:c8: 35:fc:10:ab:67:1f:c2:83:c2:0e:98:f4:2e:c4:78: 18:54:5b:81:6e:13:c9:3a:bf:cd:b3:14:99:f5:37: 1d:85:09:aa:2d:99:9f:44:e1:1a:ea:5b:50:69:68: 26:fc:30:d0:0a:51:06:27:66:0f:73:e7:6e:03:97: 16:0a:f6:34:52:0e:49:45:12:04:63:9b:a1:c2:24: d3:4b:78:37:0f:44:c0:0f:c2:0e:e3:4b:ed:b3:fd: b1:dc:7d:eb:06:98:44:4c:2f:40:f7:6c:e1:62:f1: 32:99:82:4a:c5:10:cd:c5:9b:75:01:01:96:03:2c: 5e:9a:cd:ef:31:7a:ba:16:eb:c4:96:af:01:7d:fa: 89:3f:02:49:9d:ca:69:ea:e7:1a:cc:29:1e:ec:69: 5c:f1:f8:0f:e3:74:e2:1b:85:81:a4:ec:51:11:cf: 4c:12:ed:43:db:11:03:c7:74:b0:37:f1:9b:34:6e: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F0:B2:AE:E3:02:45:27:F3:F5:09:1A:A0:A7:72:A7:EF:DE:D5:2D X509v3 Authority Key Identifier: keyid:0F:E7:32:E6:B2:49:09:3E:79:A1:A5:07:CB:CD:81:96:F0:18:17:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-cy5rJJCT55oaUHy82BlvAYF_o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/08a9de-c88d-4a45-958e-a277898293b9/1/D-cy5rJJCT55oaUHy82BlvAYF_o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6d:82:a3:9e:ab:26:6d:26:16:f8:fa:52:1a:24:76:a7:af: d7:73:22:41:f1:da:de:4d:70:1b:f1:58:6a:89:b4:96:5a:fe: a9:29:1a:49:f5:23:96:29:5d:50:39:c6:d1:be:27:24:0f:93: 9f:f1:cd:99:2c:3e:b4:74:5b:a4:88:a5:9c:e6:22:7a:1e:1a: fb:9e:8c:f0:a2:2e:10:6c:83:ee:e4:3d:1d:3a:73:e4:f5:a7: ca:5d:8d:60:77:2e:a0:2d:49:56:ed:d9:df:ef:89:9b:67:71: ab:fc:5f:1f:92:d0:d2:43:85:f6:76:24:51:8f:f7:e4:cb:e3: 61:0b:0e:ed:16:45:07:16:9f:f0:f3:b1:b1:fb:ca:79:59:64: 62:c6:60:10:01:b5:58:9d:93:eb:c6:76:35:16:7e:6b:db:af: 1b:44:ed:e5:14:16:ad:14:c2:d1:cd:ac:33:8a:e1:6d:7b:1b: ed:b7:b0:16:5c:de:c0:b0:47:c0:19:8d:50:13:d8:74:07:4f: 52:6e:18:33:bb:d0:9c:ca:a3:03:5c:8f:d0:83:48:ba:0e:08: 32:b3:f7:a1:10:b3:00:a6:0e:71:cd:8b:69:a4:19:20:57:3c: 7a:f8:d4:de:76:c8:25:33:06:61:0c:a2:b3:fa:1e:05:08:5b: 93:59:02:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRr35Jl28MDSOcSjrcmuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZTczMmU2YjI0OTA5M2U3OWExYTUwN2NiY2Q4MTk2ZjAx ODE3ZmEwHhcNMjYwMjA5MTIwMDU4WhcNMjYwMjEwMTIwMDU4WjAzMTEwLwYDVQQD EygxZGYwYjJhZWUzMDI0NTI3ZjNmNTA5MWFhMGE3NzJhN2VmZGVkNTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwHxezjb1wGug+Hd5WlKSG5kfj2W uoDdJVDWaMbWpL5BCZ2Tk1fPDTq6NRFdB0yOkA8H22m8W3ikI52wGofbkNJf8Ow3 NqDGgMg1/BCrZx/Cg8IOmPQuxHgYVFuBbhPJOr/NsxSZ9TcdhQmqLZmfROEa6ltQ aWgm/DDQClEGJ2YPc+duA5cWCvY0Ug5JRRIEY5uhwiTTS3g3D0TAD8IO40vts/2x 3H3rBphETC9A92zhYvEymYJKxRDNxZt1AQGWAyxems3vMXq6FuvElq8BffqJPwJJ ncpp6ucazCke7Glc8fgP43TiG4WBpOxREc9MEu1D2xEDx3SwN/GbNG6miQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3wsq7jAkUn8/UJGqCncqfv3tUtMB8GA1UdIwQY MBaAFA/nMuaySQk+eaGlB8vNgZbwGBf6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUt YTI3Nzg5ODI5M2I5LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8wOGE5ZGUtYzg4ZC00YTQ1LTk1OGUtYTI3Nzg5ODI5M2I5 LzEvRC1jeTVySkpDVDU1b2FVSHk4MkJsdkFZRl9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC22Co56r Jm0mFvj6Uhokdqev13MiQfHa3k1wG/FYaom0llr+qSkaSfUjlildUDnG0b4nJA+T n/HNmSw+tHRbpIilnOYieh4a+56M8KIuEGyD7uQ9HTpz5PWnyl2NYHcuoC1JVu3Z 3++Jm2dxq/xfH5LQ0kOF9nYkUY/35MvjYQsO7RZFBxaf8POxsfvKeVlkYsZgEAG1 WJ2T68Z2NRZ+a9uvG0Tt5RQWrRTC0c2sM4rhbXsb7bewFlzewLBHwBmNUBPYdAdP Um4YM7vQnMqjA1yP0INIug4IMrP3oRCzAKYOcc2LaaQZIFc8evjU3nbIJTMGYQyi s/oeBQhbk1kCGg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:50 2026 by rpki-client