This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft File: dq0qu3PflryxsdG42Z019bn9mCg.mft (raw, json) Hash identifier: at41bfZj3QE3MsqOPzGHEDHish7ewF43xDCAcVZGcmQ= Subject key identifier: AE:38:8A:0E:13:67:CF:98:9C:49:6B:D9:0F:78:DE:6B:EE:9E:91:3A Authority key identifier: 76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 Certificate issuer: /CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Certificate serial: 019C420F7F37150688C6D81A8FD06F085352 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft Manifest number: 09BC Signing time: Mon 09 Feb 2026 11:00:37 +0000 Manifest this update: Mon 09 Feb 2026 11:00:37 +0000 Manifest next update: Tue 10 Feb 2026 11:00:37 +0000 Files and hashes: 1: HBiP4paC0MlxmT9TqUdXSCFpVek.roa (hash: 5/zIGY+6xQLGjEfA2psYBflaTdU36mi9/74Ob0mM/kg=) 2: dq0qu3PflryxsdG42Z019bn9mCg.crl (hash: A4R7XG5dFKtlmIFmNx7zV5Wtdpn+0VnyBodCBkvyRIk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:7f:37:15:06:88:c6:d8:1a:8f:d0:6f:08:53:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76ad2abb73df96bcb1b1d1b8d99d35f5b9fd9828 Validity Not Before: Feb 9 11:00:37 2026 GMT Not After : Feb 10 11:00:37 2026 GMT Subject: CN=ae388a0e1367cf989c496bd90f78de6bee9e913a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:26:f0:0b:e8:63:8a:89:39:91:28:03:de:39: e9:02:46:34:4a:9e:5b:6a:bd:7f:f3:2f:3a:ea:9c: 51:dc:30:90:d5:b4:3a:36:45:64:1e:90:c6:e5:4a: 1d:fd:9b:8a:14:ed:aa:88:d9:6f:80:14:42:e7:a6: 58:c1:ef:e9:d4:d3:5c:7c:88:f1:e0:a5:40:71:f9: 1d:52:4c:e5:d7:c3:b0:44:9c:1a:d7:79:71:7c:d0: 63:6e:b1:f8:93:dc:db:53:de:a7:43:21:79:d7:30: bd:72:69:f7:85:33:5b:b6:b8:64:46:60:c3:7b:88: 52:ff:7d:59:1d:65:03:ea:17:80:a9:d3:f4:c0:48: 8e:c7:c8:00:54:10:bf:c7:bf:86:d8:c0:99:e2:98: 76:df:9a:27:28:85:d5:eb:f3:ca:bd:c7:41:22:ca: 30:98:7a:f3:f2:5e:ce:d9:fd:0b:b1:1b:82:91:02: ca:b4:b5:6b:e6:f7:ac:cc:35:6b:1f:e1:b8:8c:dd: af:15:c2:d5:98:e5:34:28:9d:b1:9a:88:52:77:80: e5:22:cf:66:24:d0:48:7c:aa:6c:2a:0c:8f:a5:8c: 5c:3b:f9:db:a1:92:70:f2:65:1d:db:d8:28:9a:e9: b1:b3:6e:19:9d:5f:4c:03:3b:f1:97:80:33:6b:82: a6:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:38:8A:0E:13:67:CF:98:9C:49:6B:D9:0F:78:DE:6B:EE:9E:91:3A X509v3 Authority Key Identifier: keyid:76:AD:2A:BB:73:DF:96:BC:B1:B1:D1:B8:D9:9D:35:F5:B9:FD:98:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dq0qu3PflryxsdG42Z019bn9mCg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/3cdd92-724a-4fd8-a5f8-370b3a87bf98/1/dq0qu3PflryxsdG42Z019bn9mCg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:16:6f:a7:0e:63:43:78:32:24:4f:0a:48:c0:e5:2d:1a:6f: 51:0d:28:0a:53:a6:71:71:a9:8c:80:cd:44:49:db:19:fe:3e: d8:e3:79:8f:07:df:05:d8:e1:e0:c2:83:d9:51:2b:c5:7d:f0: 20:7c:2e:1c:7b:d8:4a:96:92:2b:36:f1:de:d3:33:67:7c:e8: ad:ee:6d:9b:eb:fc:db:ba:41:c4:41:3e:4e:57:b9:cd:10:f1: 42:de:92:65:9c:21:ba:19:c3:dd:9d:3a:5f:9b:63:f0:b0:a8: 93:c3:60:3c:e9:0d:33:6b:21:58:e9:15:db:73:bc:a4:80:42: 98:bd:e2:ef:f5:fd:f8:7f:0a:9d:de:1c:ad:36:d2:96:d3:5f: 96:f0:1e:7d:b8:f4:57:94:53:83:b1:34:c8:7d:99:13:c3:0e: b1:d9:a5:5e:77:b0:f1:49:2d:15:2f:4c:db:fb:96:f4:3e:f9: 0b:29:b1:f6:1b:10:4d:97:ad:fe:72:cf:c0:7a:94:8e:ca:50: f2:bf:c6:87:48:0e:59:72:18:b8:e8:86:da:63:26:98:eb:8a: 9b:4c:ba:b7:d5:46:8a:7f:73:21:37:c7:2b:36:05:c3:cb:9d: 03:21:73:d6:a2:9f:06:72:da:7b:5a:c7:23:09:44:4b:c3:67: 3f:75:a8:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD383FQaIxtgaj9BvCFNSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YWQyYWJiNzNkZjk2YmNiMWIxZDFiOGQ5OWQzNWY1Yjlm ZDk4MjgwHhcNMjYwMjA5MTEwMDM3WhcNMjYwMjEwMTEwMDM3WjAzMTEwLwYDVQQD EyhhZTM4OGEwZTEzNjdjZjk4OWM0OTZiZDkwZjc4ZGU2YmVlOWU5MTNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CbwC+hjiok5kSgD3jnpAkY0Sp5b ar1/8y866pxR3DCQ1bQ6NkVkHpDG5Uod/ZuKFO2qiNlvgBRC56ZYwe/p1NNcfIjx 4KVAcfkdUkzl18OwRJwa13lxfNBjbrH4k9zbU96nQyF51zC9cmn3hTNbtrhkRmDD e4hS/31ZHWUD6heAqdP0wEiOx8gAVBC/x7+G2MCZ4ph235onKIXV6/PKvcdBIsow mHrz8l7O2f0LsRuCkQLKtLVr5veszDVrH+G4jN2vFcLVmOU0KJ2xmohSd4DlIs9m JNBIfKpsKgyPpYxcO/nboZJw8mUd29gomumxs24ZnV9MAzvxl4Aza4Km7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK44ig4TZ8+YnElr2Q943mvunpE6MB8GA1UdIwQY MBaAFHatKrtz35a8sbHRuNmdNfW5/ZgoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1Zjgt MzcwYjNhODdiZjk4LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi8zY2RkOTItNzI0YS00ZmQ4LWE1ZjgtMzcwYjNhODdiZjk4 LzEvZHEwcXUzUGZscnl4c2RHNDJaMDE5Ym45bUNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnRZvpw5j Q3gyJE8KSMDlLRpvUQ0oClOmcXGpjIDNREnbGf4+2ON5jwffBdjh4MKD2VErxX3w IHwuHHvYSpaSKzbx3tMzZ3zore5tm+v827pBxEE+Tle5zRDxQt6SZZwhuhnD3Z06 X5tj8LCok8NgPOkNM2shWOkV23O8pIBCmL3i7/X9+H8Knd4crTbSltNflvAefbj0 V5RTg7E0yH2ZE8MOsdmlXnew8UktFS9M2/uW9D75Cymx9hsQTZet/nLPwHqUjspQ 8r/Gh0gOWXIYuOiG2mMmmOuKm0y6t9VGin9zITfHKzYFw8udAyFz1qKfBnLae1rH IwlES8NnP3WoZQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:52 2026 by rpki-client