This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft File: dbzo8Ite_ESvr41wY-GulRglFCs.mft (raw, json) Hash identifier: 1Zyl314NMHSAbi/LnjBudP7h1185YBlBxp4B8rUkJRY= Subject key identifier: 2A:00:34:59:8A:B5:FD:0A:16:97:4F:1D:7E:E5:61:DD:71:BC:56:DD Authority key identifier: 75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B Certificate issuer: /CN=75bce8f08b5efc44afaf8d7063e1ae951825142b Certificate serial: 019C42B4861AB38289F7554D2BFACD3EF2CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 14:00:52 +0000 Manifest this update: Mon 09 Feb 2026 14:00:52 +0000 Manifest next update: Tue 10 Feb 2026 14:00:52 +0000 Files and hashes: 1: dbzo8Ite_ESvr41wY-GulRglFCs.crl (hash: O3pTEir05994JIn94ukdqZ0gvygJ433OeOf7K7LQYAc=) 2: lyF2q1wLFWmF4Bje0J65OKCZKw4.roa (hash: nUHyFMygTv/krY1cfqzTeSySMum5LGIyQeqthF8Cr4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:86:1a:b3:82:89:f7:55:4d:2b:fa:cd:3e:f2:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75bce8f08b5efc44afaf8d7063e1ae951825142b Validity Not Before: Feb 9 14:00:52 2026 GMT Not After : Feb 10 14:00:52 2026 GMT Subject: CN=2a0034598ab5fd0a16974f1d7ee561dd71bc56dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b6:78:ef:1b:dd:9a:8e:37:ba:12:c2:4a:36: f2:18:e9:db:16:ec:c1:a7:85:2d:7c:75:c8:1c:28: 94:74:26:ba:08:63:f5:f5:32:d0:85:ad:18:c9:35: 73:c2:9b:3b:d8:ce:39:0a:32:54:75:9e:d5:d1:58: 77:c2:e8:f4:15:19:af:5d:b1:c8:de:c8:82:ff:12: e7:b6:c4:c2:6c:b2:11:d6:cb:ad:19:b9:13:5a:aa: cf:a6:1f:4b:64:f5:46:33:17:00:1d:35:d8:01:3c: 9d:87:5d:cb:82:3b:ac:9a:22:06:d7:1f:4f:55:c0: 57:0d:2f:0c:6d:b0:60:c4:19:0d:73:47:1d:55:d2: ad:11:0a:6f:a4:14:24:4c:98:d7:2a:ed:a8:ea:5d: e6:91:b0:c2:d8:20:6c:88:b7:7e:fb:c1:0d:3e:76: 7c:c5:be:ef:96:da:42:44:ee:4d:f2:a3:08:e9:ea: e8:a2:9f:f0:2f:ac:3a:39:cd:14:ed:be:2d:b2:6b: 9d:2d:78:1f:cc:3a:59:17:ec:4d:f6:93:75:74:79: ce:92:40:fc:3b:63:45:2d:9b:3f:f8:38:8a:34:33: 7b:d5:96:d0:59:8b:d1:a8:0a:bc:18:06:10:40:4e: 71:a4:38:91:9c:b7:3d:73:fd:9f:91:1b:52:ac:47: 8f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:00:34:59:8A:B5:FD:0A:16:97:4F:1D:7E:E5:61:DD:71:BC:56:DD X509v3 Authority Key Identifier: keyid:75:BC:E8:F0:8B:5E:FC:44:AF:AF:8D:70:63:E1:AE:95:18:25:14:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbzo8Ite_ESvr41wY-GulRglFCs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3a3e9d-6d7f-4923-afef-136c9ffcb82c/1/dbzo8Ite_ESvr41wY-GulRglFCs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:45:dc:b3:ed:ce:80:d4:01:db:d7:33:6a:f6:90:11:5f:d2: 2f:48:2e:ed:8f:2d:6e:02:ed:97:2c:19:6a:b1:d8:c8:dc:a1: 6d:95:08:77:96:96:c0:3e:3f:32:6c:a1:26:ab:ab:b3:79:a7: 55:b0:36:2f:ce:ff:de:67:d1:42:bb:50:11:c6:cf:da:1b:15: 75:c1:fc:85:a4:2a:3b:ca:3a:a7:ac:50:7f:62:b2:29:6f:43: 3e:05:3a:2c:f3:50:e4:31:9d:ad:83:bb:e1:78:91:38:d5:55: a3:0b:2c:b7:c6:57:d7:65:1c:a4:3b:0e:d9:35:40:e7:e7:07: 76:a1:fe:bd:4f:11:91:59:d8:62:f0:11:00:57:82:68:8e:cd: c8:23:52:d3:3c:03:02:ce:a5:87:09:25:c3:6b:56:58:b0:40: c9:8d:dc:ae:9d:78:1d:f2:9a:bf:5f:18:03:c0:89:32:83:6e: 89:c4:5b:66:47:fc:86:39:4b:7a:9d:77:d6:6e:2c:c8:8f:fe: ed:af:0d:90:c3:af:3e:18:a4:96:13:b2:42:ae:e2:74:8d:eb: 58:90:aa:58:ed:67:1b:ad:d3:d2:10:9f:71:7f:c2:4f:0c:d1: 10:22:14:b8:ae:bb:59:6e:d2:2d:3f:25:e3:0d:af:45:05:6e: 0d:37:64:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIYas4KJ91VNK/rNPvLNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YmNlOGYwOGI1ZWZjNDRhZmFmOGQ3MDYzZTFhZTk1MTgy NTE0MmIwHhcNMjYwMjA5MTQwMDUyWhcNMjYwMjEwMTQwMDUyWjAzMTEwLwYDVQQD EygyYTAwMzQ1OThhYjVmZDBhMTY5NzRmMWQ3ZWU1NjFkZDcxYmM1NmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrZ47xvdmo43uhLCSjbyGOnbFuzB p4UtfHXIHCiUdCa6CGP19TLQha0YyTVzwps72M45CjJUdZ7V0Vh3wuj0FRmvXbHI 3siC/xLntsTCbLIR1sutGbkTWqrPph9LZPVGMxcAHTXYATydh13LgjusmiIG1x9P VcBXDS8MbbBgxBkNc0cdVdKtEQpvpBQkTJjXKu2o6l3mkbDC2CBsiLd++8ENPnZ8 xb7vltpCRO5N8qMI6eroop/wL6w6Oc0U7b4tsmudLXgfzDpZF+xN9pN1dHnOkkD8 O2NFLZs/+DiKNDN71ZbQWYvRqAq8GAYQQE5xpDiRnLc9c/2fkRtSrEePtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCoANFmKtf0KFpdPHX7lYd1xvFbdMB8GA1UdIwQY MBaAFHW86PCLXvxEr6+NcGPhrpUYJRQrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYt MTM2YzlmZmNiODJjLzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8zYTNlOWQtNmQ3Zi00OTIzLWFmZWYtMTM2YzlmZmNiODJj LzEvZGJ6bzhJdGVfRVN2cjQxd1ktR3VsUmdsRkNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApUXcs+3O gNQB29czavaQEV/SL0gu7Y8tbgLtlywZarHYyNyhbZUId5aWwD4/MmyhJqurs3mn VbA2L87/3mfRQrtQEcbP2hsVdcH8haQqO8o6p6xQf2KyKW9DPgU6LPNQ5DGdrYO7 4XiRONVVowsst8ZX12UcpDsO2TVA5+cHdqH+vU8RkVnYYvARAFeCaI7NyCNS0zwD As6lhwklw2tWWLBAyY3crp14HfKav18YA8CJMoNuicRbZkf8hjlLep131m4syI/+ 7a8NkMOvPhiklhOyQq7idI3rWJCqWO1nG63T0hCfcX/CTwzRECIUuK67WW7SLT8l 4w2vRQVuDTdknA== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:17 2026 by rpki-client