This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft File: dWQXildKJgm7bv8cxSG0U9dch9w.mft (raw, json) Hash identifier: qY2HQNBloh1uXFpOleVhNtnnSocod6TPyOxLdXfocU8= Subject key identifier: D4:15:5F:5C:7C:1A:5D:39:9D:A7:91:0A:62:15:0F:7C:7F:42:55:81 Authority key identifier: 75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC Certificate issuer: /CN=7564178a574a2609bb6eff1cc521b453d75c87dc Certificate serial: 019C4322EA606FBA1A6ED59739C0C92290ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft Manifest number: 0F70 Signing time: Mon 09 Feb 2026 16:01:27 +0000 Manifest this update: Mon 09 Feb 2026 16:01:27 +0000 Manifest next update: Tue 10 Feb 2026 16:01:27 +0000 Files and hashes: 1: dWQXildKJgm7bv8cxSG0U9dch9w.crl (hash: ycjVgND/JPi20g55R4o2KHLoSqjy+q/XlkaC3vNr5cI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ea:60:6f:ba:1a:6e:d5:97:39:c0:c9:22:90:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7564178a574a2609bb6eff1cc521b453d75c87dc Validity Not Before: Feb 9 16:01:27 2026 GMT Not After : Feb 10 16:01:27 2026 GMT Subject: CN=d4155f5c7c1a5d399da7910a62150f7c7f425581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:61:b7:20:9f:9c:5b:f4:20:e8:7c:19:21:cf: d8:a7:8c:29:ad:4a:a0:3e:24:05:37:80:26:f5:c0: 91:f2:a9:cf:19:59:57:65:e9:41:b9:c0:e9:a5:bb: e9:0a:8c:ee:dc:c0:b9:eb:be:d0:d2:bb:7f:de:80: 87:a0:6a:62:94:9f:dd:1a:32:ac:10:f3:f0:59:5e: 81:33:62:03:d1:44:c5:c8:6c:86:28:40:52:82:e0: a3:72:4a:c0:ea:c3:e7:28:e6:f2:a8:b7:be:2c:4f: c0:02:1b:f3:01:93:e6:0c:10:33:54:a4:6b:d0:a6: eb:03:03:bd:cb:b1:95:e4:aa:41:2e:cd:99:9f:77: 63:9c:3f:3f:4d:3c:44:15:63:71:04:d3:7b:f7:ab: 7a:b6:b5:6e:cc:e9:72:45:d5:a1:70:5b:55:04:18: c6:99:ab:ab:b3:4d:70:a0:25:9c:f1:8d:56:f8:a1: 26:55:ed:63:bf:b1:13:f7:60:19:61:3f:dc:9c:40: f8:38:9f:bf:f9:77:d7:4a:6e:a9:70:61:28:6d:ee: 0b:19:01:50:08:ac:77:d9:16:8e:45:a6:53:cd:32: 96:34:23:fd:8b:20:a1:c9:06:83:fd:d0:7b:ef:c9: 77:83:7b:b3:8d:00:cc:a0:fa:b9:37:ea:07:2d:dd: 55:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:15:5F:5C:7C:1A:5D:39:9D:A7:91:0A:62:15:0F:7C:7F:42:55:81 X509v3 Authority Key Identifier: keyid:75:64:17:8A:57:4A:26:09:BB:6E:FF:1C:C5:21:B4:53:D7:5C:87:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWQXildKJgm7bv8cxSG0U9dch9w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/0cc875-610f-4add-a719-3caaf905cfc6/1/dWQXildKJgm7bv8cxSG0U9dch9w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:0d:f3:5f:7d:eb:bb:f9:8a:e1:48:c5:0f:ad:4c:09:14:8b: f9:d2:69:32:fe:d1:aa:07:ed:b3:79:3f:19:50:64:56:ad:ae: f0:c0:b1:27:e4:87:78:19:8d:24:2c:23:7b:b0:ed:af:3e:b9: be:c5:aa:88:09:7d:01:d9:d8:dd:7c:fb:f1:7f:35:b0:8b:e4: 88:dd:a4:b7:7c:e8:a6:88:9d:e4:64:d6:34:12:a8:c4:b8:ec: 2b:a7:d3:87:90:15:1f:33:49:e9:be:17:73:6f:bd:fc:86:f5: 31:a7:67:bc:ed:6e:49:1a:9f:4f:ad:b1:93:7d:72:f2:39:2b: 1d:fe:02:c0:dc:fc:7e:95:67:bd:a9:72:4d:cb:9a:1b:12:1a: 67:c4:73:b5:0d:90:40:21:b4:06:f5:56:d7:61:8f:70:49:df: ea:38:37:3f:eb:5b:9d:59:e2:b2:e8:2b:46:4d:f8:44:06:91: 13:24:0b:c8:71:7b:47:9f:56:67:73:14:5d:f6:0b:8b:61:b6: 3c:f9:97:3a:51:9e:e6:01:b6:9d:73:7f:41:72:a9:da:04:21: ae:4f:0c:65:c0:da:2c:70:d3:ae:f4:92:19:14:e8:5d:fa:8f: 86:2b:e2:6d:7d:7a:f4:41:9c:07:63:41:9c:80:95:b6:10:ab: 94:75:d9:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIupgb7oabtWXOcDJIpDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjQxNzhhNTc0YTI2MDliYjZlZmYxY2M1MjFiNDUzZDc1 Yzg3ZGMwHhcNMjYwMjA5MTYwMTI3WhcNMjYwMjEwMTYwMTI3WjAzMTEwLwYDVQQD EyhkNDE1NWY1YzdjMWE1ZDM5OWRhNzkxMGE2MjE1MGY3YzdmNDI1NTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmG3IJ+cW/Qg6HwZIc/Yp4wprUqg PiQFN4Am9cCR8qnPGVlXZelBucDppbvpCozu3MC5677Q0rt/3oCHoGpilJ/dGjKs EPPwWV6BM2ID0UTFyGyGKEBSguCjckrA6sPnKObyqLe+LE/AAhvzAZPmDBAzVKRr 0KbrAwO9y7GV5KpBLs2Zn3djnD8/TTxEFWNxBNN796t6trVuzOlyRdWhcFtVBBjG maurs01woCWc8Y1W+KEmVe1jv7ET92AZYT/cnED4OJ+/+XfXSm6pcGEobe4LGQFQ CKx32RaORaZTzTKWNCP9iyChyQaD/dB778l3g3uzjQDMoPq5N+oHLd1VmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQVX1x8Gl05naeRCmIVD3x/QlWBMB8GA1UdIwQY MBaAFHVkF4pXSiYJu27/HMUhtFPXXIfcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTkt M2NhYWY5MDVjZmM2LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wY2M4NzUtNjEwZi00YWRkLWE3MTktM2NhYWY5MDVjZmM2 LzEvZFdRWGlsZEtKZ203YnY4Y3hTRzBVOWRjaDl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsg3zX33r u/mK4UjFD61MCRSL+dJpMv7Rqgfts3k/GVBkVq2u8MCxJ+SHeBmNJCwje7Dtrz65 vsWqiAl9AdnY3Xz78X81sIvkiN2kt3zopoid5GTWNBKoxLjsK6fTh5AVHzNJ6b4X c2+9/Ib1MadnvO1uSRqfT62xk31y8jkrHf4CwNz8fpVnvalyTcuaGxIaZ8RztQ2Q QCG0BvVW12GPcEnf6jg3P+tbnVnisugrRk34RAaREyQLyHF7R59WZ3MUXfYLi2G2 PPmXOlGe5gG2nXN/QXKp2gQhrk8MZcDaLHDTrvSSGRToXfqPhivibX169EGcB2NB nICVthCrlHXZog== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:46 2026 by rpki-client