This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json) Hash identifier: uyF1psRapcJi31kalYENG3YsyURmXdYgQbmLN5alESc= Subject key identifier: D1:82:69:45:0D:EC:58:DC:B4:CE:7A:9F:1E:60:8A:57:0F:BA:D6:E0 Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0 Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0 Certificate serial: 019C438FD4CA55D0505BBBC7353B860115A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft Manifest number: 14BE Signing time: Mon 09 Feb 2026 18:00:25 +0000 Manifest this update: Mon 09 Feb 2026 18:00:25 +0000 Manifest next update: Tue 10 Feb 2026 18:00:25 +0000 Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: wsadlWv2lmdfBYTimLL6gpm6quIB1B0htVDrYZb/KQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:d4:ca:55:d0:50:5b:bb:c7:35:3b:86:01:15:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0 Validity Not Before: Feb 9 18:00:25 2026 GMT Not After : Feb 10 18:00:25 2026 GMT Subject: CN=d18269450dec58dcb4ce7a9f1e608a570fbad6e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:70:22:fa:3d:e8:65:6f:e8:73:2a:d9:bf:7c: ef:af:40:aa:44:9a:03:a6:08:f9:39:b3:d3:df:f6: 01:31:f5:84:63:74:55:7a:54:5b:98:f3:87:c4:ad: fb:81:af:7d:ea:15:d8:6c:65:c2:a2:9a:61:03:83: bb:80:64:41:4d:b1:9c:d2:ab:49:58:03:97:ce:89: c9:2c:00:9c:32:03:8d:81:4d:4a:77:34:e3:16:67: 72:3b:b9:47:c7:df:98:70:64:d9:a4:99:5c:44:6e: 61:df:88:22:27:fc:58:6a:1c:1e:ca:65:d3:7b:5c: a3:7d:5f:dc:57:73:2f:45:3c:40:81:96:61:a1:bf: da:65:e6:ee:d7:40:67:34:30:c3:b9:a8:d7:0a:8f: b1:5b:60:7e:58:e2:c4:34:00:c1:c5:93:85:d3:35: 0f:a0:3f:4e:96:0f:3b:5a:08:a3:a9:95:c3:93:5a: 93:4f:55:4e:a4:f1:7e:50:65:d5:dc:fe:9b:1c:e7: 83:26:6a:a7:ee:96:4a:d4:27:8b:84:11:4f:74:78: 50:11:eb:86:33:d3:b9:51:a4:a6:a8:d7:46:94:28: 15:a0:6f:c9:d4:85:c4:18:e7:51:a5:79:8d:c1:1b: da:83:b0:b6:37:7d:b9:05:0a:22:e5:5a:33:db:a0: aa:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:69:45:0D:EC:58:DC:B4:CE:7A:9F:1E:60:8A:57:0F:BA:D6:E0 X509v3 Authority Key Identifier: keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:df:e9:16:c6:33:e9:9f:35:6e:24:22:5a:f8:01:6b:d7:1d: 2b:4b:d4:b3:f0:32:9b:9b:90:98:2c:0a:21:19:d5:66:2f:52: 9a:de:74:35:18:7d:f1:1c:b5:38:a8:b4:ff:a0:15:d5:d6:57: 8e:6b:e6:5c:fe:3b:06:e7:d9:a2:b6:68:07:55:23:6d:81:7f: a4:33:5e:2a:e3:2a:4e:81:ff:3f:80:84:a2:67:a9:02:df:5c: d5:db:9a:eb:53:f2:84:ac:33:32:47:be:f7:85:30:e7:a7:7f: ab:e5:d5:b2:72:48:dc:14:bc:14:b1:2c:01:86:fa:b5:d9:52: 25:8d:21:88:0e:c0:e6:99:1e:0b:13:f9:b6:4c:53:a1:b1:14: 87:f8:53:5e:1d:34:4d:b3:da:db:db:df:74:5b:5a:00:00:15: 60:1e:1b:77:fa:de:a5:48:29:83:56:07:fc:85:4f:14:59:64: 7b:62:2e:15:40:40:55:25:71:6b:e1:f7:6c:b2:ae:6c:c8:03: 35:27:bd:bb:58:b7:d3:41:de:16:56:aa:16:bb:94:67:55:35: 39:a7:70:8d:88:8b:61:5a:12:86:9c:e9:96:92:56:53:58:96: 83:4e:0d:75:b5:99:0f:2a:4f:b9:54:74:fc:89:21:a1:40:64: 48:42:ea:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj9TKVdBQW7vHNTuGARWiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy NzkxYjAwHhcNMjYwMjA5MTgwMDI1WhcNMjYwMjEwMTgwMDI1WjAzMTEwLwYDVQQD EyhkMTgyNjk0NTBkZWM1OGRjYjRjZTdhOWYxZTYwOGE1NzBmYmFkNmUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXAi+j3oZW/ocyrZv3zvr0CqRJoD pgj5ObPT3/YBMfWEY3RVelRbmPOHxK37ga996hXYbGXCopphA4O7gGRBTbGc0qtJ WAOXzonJLACcMgONgU1KdzTjFmdyO7lHx9+YcGTZpJlcRG5h34giJ/xYahweymXT e1yjfV/cV3MvRTxAgZZhob/aZebu10BnNDDDuajXCo+xW2B+WOLENADBxZOF0zUP oD9Olg87WgijqZXDk1qTT1VOpPF+UGXV3P6bHOeDJmqn7pZK1CeLhBFPdHhQEeuG M9O5UaSmqNdGlCgVoG/J1IXEGOdRpXmNwRvag7C2N325BQoi5Voz26Cq2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGCaUUN7FjctM56nx5gilcPutbgMB8GA1UdIwQY MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEN/pFsYz 6Z81biQiWvgBa9cdK0vUs/Aym5uQmCwKIRnVZi9Smt50NRh98Ry1OKi0/6AV1dZX jmvmXP47BufZorZoB1UjbYF/pDNeKuMqToH/P4CEomepAt9c1dua61PyhKwzMke+ 94Uw56d/q+XVsnJI3BS8FLEsAYb6tdlSJY0hiA7A5pkeCxP5tkxTobEUh/hTXh00 TbPa29vfdFtaAAAVYB4bd/repUgpg1YH/IVPFFlke2IuFUBAVSVxa+H3bLKubMgD NSe9u1i300HeFlaqFruUZ1U1OadwjYiLYVoShpzplpJWU1iWg04NdbWZDypPuVR0 /IkhoUBkSELqfw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:35 2026 by rpki-client