This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft File: DVX6KmKDfbmv5EI-TBGelJmyG0M.mft (raw, json) Hash identifier: 53azbBD7xOJcpEAaMCmPJnrzjTwBfewDKjNTXEE1AuE= Subject key identifier: B4:23:9A:89:85:46:DB:DA:9A:FC:BD:38:8A:51:A4:81:EB:08:4B:B7 Authority key identifier: 0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 Certificate issuer: /CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Certificate serial: 019C416ACE9C8522B84AEC60A232BAEA9D6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft Manifest number: 097A Signing time: Mon 09 Feb 2026 08:00:44 +0000 Manifest this update: Mon 09 Feb 2026 08:00:44 +0000 Manifest next update: Tue 10 Feb 2026 08:00:44 +0000 Files and hashes: 1: DVX6KmKDfbmv5EI-TBGelJmyG0M.crl (hash: V07XE8GjGhWfeXjFm1qFVWXRsZsqezXPXDmZ5poSBug=) 2: HIeW7jOEPndBeoT23uEj81ZTZBg.roa (hash: JJnVSxNA1ixWdqqkWmZ7PhO+qpLJouZei+s+CRfBSYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:ce:9c:85:22:b8:4a:ec:60:a2:32:ba:ea:9d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d55fa2a62837db9afe4423e4c119e9499b21b43 Validity Not Before: Feb 9 08:00:44 2026 GMT Not After : Feb 10 08:00:44 2026 GMT Subject: CN=b4239a898546dbda9afcbd388a51a481eb084bb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:8d:b6:47:c7:1f:3c:a3:d2:d1:c7:28:c3: c1:84:91:36:4b:cc:1b:5c:72:01:be:2a:ed:90:fb: 18:b2:e1:34:75:28:92:c9:f1:a3:4e:86:86:ad:52: 43:e2:da:de:07:ea:22:f0:66:fd:e3:e4:20:ae:df: 87:79:6e:15:2a:70:c2:97:29:19:8a:c0:9e:1f:01: 3c:5c:9d:b3:a9:07:3d:c4:ca:22:d4:74:34:a7:9e: 6c:81:49:ab:cb:ef:8b:95:54:9b:ff:44:b4:9a:ae: ac:7a:e4:49:5e:3e:aa:f9:5f:39:6b:fb:47:3d:76: bf:8e:c8:5c:c9:3f:26:7a:e8:77:55:0d:40:11:6e: c2:28:b8:48:85:f5:e1:a1:0f:bf:81:1f:e5:ca:bc: 4e:9d:b7:69:6c:76:ac:98:47:34:92:ac:79:a2:4c: b5:41:27:04:76:36:a1:44:d9:c3:d7:fb:70:f0:ce: d1:8a:b7:ed:96:03:2e:ec:37:a1:dd:f8:fe:bb:98: ff:82:b7:1e:d1:79:c9:52:f4:bd:17:7e:f2:be:eb: 1a:81:9e:ca:d3:0d:ab:63:5b:e1:08:4c:16:fc:ce: 2e:c9:4a:05:bc:9f:35:6f:5c:43:50:96:91:f3:b3: 21:e8:db:ad:0f:7b:f3:e8:99:7e:6d:cf:18:a6:6f: 33:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:23:9A:89:85:46:DB:DA:9A:FC:BD:38:8A:51:A4:81:EB:08:4B:B7 X509v3 Authority Key Identifier: keyid:0D:55:FA:2A:62:83:7D:B9:AF:E4:42:3E:4C:11:9E:94:99:B2:1B:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DVX6KmKDfbmv5EI-TBGelJmyG0M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e699a3-4d37-491a-b463-ef36a321749a/1/DVX6KmKDfbmv5EI-TBGelJmyG0M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:7f:c4:18:bc:a7:b2:d0:81:42:79:c8:e5:f1:e8:a5:06:69: 73:fc:9b:92:3e:d5:b8:9f:f1:90:57:6b:7c:6d:d6:c1:ba:fd: 26:a6:99:e3:0a:df:46:e1:c8:2e:25:4f:1b:47:40:72:8e:e2: 2a:3c:0c:8c:92:b0:b0:d5:15:32:25:59:bc:39:93:52:26:b4: 2c:fb:cd:a7:98:60:7b:72:ab:17:d4:8e:03:f9:ed:6f:2c:6f: b2:c5:aa:8a:7b:61:7e:35:51:51:ba:f5:a6:83:c9:98:ee:22: 92:ff:d2:e2:ca:22:32:aa:04:b4:02:e5:c4:ce:d5:72:71:92: 28:52:d5:f2:42:d6:67:32:1a:30:09:b3:6c:c4:cf:18:f7:3c: 8c:0e:d7:f3:67:07:ad:d5:ef:68:06:c2:3d:fb:65:86:69:a2: e9:57:45:47:6e:8c:a0:54:47:48:39:dc:3b:55:86:e0:49:fc: a1:b9:2b:1a:d6:81:cb:da:08:f6:6d:7b:73:ed:32:f8:58:51: 5a:a4:26:6b:37:5f:81:0f:4a:72:6d:4d:f1:a7:e4:01:9c:25: 45:05:97:90:0f:3a:40:9f:56:6f:c1:1c:ec:7d:7f:15:bb:64: 09:9f:3b:90:7b:8b:36:29:f1:7b:81:f5:8f:fa:81:28:5e:3d: 26:28:7e:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBas6chSK4SuxgojK66p1sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNTVmYTJhNjI4MzdkYjlhZmU0NDIzZTRjMTE5ZTk0OTli MjFiNDMwHhcNMjYwMjA5MDgwMDQ0WhcNMjYwMjEwMDgwMDQ0WjAzMTEwLwYDVQQD EyhiNDIzOWE4OTg1NDZkYmRhOWFmY2JkMzg4YTUxYTQ4MWViMDg0YmI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xaNtkfHHzyj0tHHKMPBhJE2S8wb XHIBvirtkPsYsuE0dSiSyfGjToaGrVJD4treB+oi8Gb94+Qgrt+HeW4VKnDClykZ isCeHwE8XJ2zqQc9xMoi1HQ0p55sgUmry++LlVSb/0S0mq6seuRJXj6q+V85a/tH PXa/jshcyT8meuh3VQ1AEW7CKLhIhfXhoQ+/gR/lyrxOnbdpbHasmEc0kqx5oky1 QScEdjahRNnD1/tw8M7RirftlgMu7Deh3fj+u5j/grce0XnJUvS9F37yvusagZ7K 0w2rY1vhCEwW/M4uyUoFvJ81b1xDUJaR87Mh6NutD3vz6Jl+bc8Ypm8zeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLQjmomFRtvamvy9OIpRpIHrCEu3MB8GA1UdIwQY MBaAFA1V+ipig325r+RCPkwRnpSZshtDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMt ZWYzNmEzMjE3NDlhLzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC9lNjk5YTMtNGQzNy00OTFhLWI0NjMtZWYzNmEzMjE3NDlh LzEvRFZYNkttS0RmYm12NUVJLVRCR2VsSm15RzBNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfn/EGLyn stCBQnnI5fHopQZpc/ybkj7VuJ/xkFdrfG3Wwbr9JqaZ4wrfRuHILiVPG0dAco7i KjwMjJKwsNUVMiVZvDmTUia0LPvNp5hge3KrF9SOA/ntbyxvssWqinthfjVRUbr1 poPJmO4ikv/S4soiMqoEtALlxM7VcnGSKFLV8kLWZzIaMAmzbMTPGPc8jA7X82cH rdXvaAbCPftlhmmi6VdFR26MoFRHSDncO1WG4En8obkrGtaBy9oI9m17c+0y+FhR WqQmazdfgQ9Kcm1N8afkAZwlRQWXkA86QJ9Wb8Ec7H1/FbtkCZ87kHuLNinxe4H1 j/qBKF49Jih+iA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:43 2026 by rpki-client