This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft File: DDVXITpnJSgrJKaFMI6c-EEHrH0.mft (raw, json) Hash identifier: 2nZDDc+pWYZSKu2GvBHjxMGVsCEsUICWJ2QAQBoveQ4= Subject key identifier: AB:47:AC:3C:02:C1:86:36:A6:BC:3A:C0:0E:F0:59:21:D6:31:6C:B5 Authority key identifier: 0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D Certificate issuer: /CN=0c3557213a6725282b24a685308e9cf84107ac7d Certificate serial: 019C438FF97085C686C10102727E573D2D84 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft Manifest number: 0E25 Signing time: Mon 09 Feb 2026 18:00:34 +0000 Manifest this update: Mon 09 Feb 2026 18:00:34 +0000 Manifest next update: Tue 10 Feb 2026 18:00:34 +0000 Files and hashes: 1: 3JUz-hq99DA3h49ngZi9cq7SaR4.roa (hash: zVymLUNjhCd9Q8uV3U+v5PPuuKn77ETfb//eDnHr8ck=) 2: DDVXITpnJSgrJKaFMI6c-EEHrH0.crl (hash: q4TCC61MAHlSwOzhk2HveiEpvECXen9a6GQMqKhzQgc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f9:70:85:c6:86:c1:01:02:72:7e:57:3d:2d:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c3557213a6725282b24a685308e9cf84107ac7d Validity Not Before: Feb 9 18:00:34 2026 GMT Not After : Feb 10 18:00:34 2026 GMT Subject: CN=ab47ac3c02c18636a6bc3ac00ef05921d6316cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:66:30:e2:41:11:19:58:eb:95:43:41:6e:0b: 04:27:5a:95:cc:00:c0:d6:20:7c:7c:0e:fa:0d:b8: 8b:e2:09:ba:30:d1:8f:fc:41:d8:34:7d:9e:ce:b0: f8:0a:dc:18:7c:16:7b:b6:af:06:77:0d:d2:c8:ca: bb:5b:ea:50:6c:f1:83:04:5d:70:fb:01:45:8c:1e: 18:fb:f4:72:d4:be:29:ed:6e:29:7d:67:af:f3:9a: 93:8c:60:68:39:14:d5:2d:47:cb:14:e9:ee:39:c6: 23:81:8a:9c:63:73:76:bb:34:ab:0b:7a:13:a2:23: 2c:d1:d6:cc:f6:9d:99:bc:a0:9c:36:61:9f:a0:90: b5:94:5e:43:ec:a6:e5:80:23:4b:09:21:3b:ca:11: b7:e1:d1:c5:39:d8:42:98:e9:1e:a9:04:49:22:36: 73:44:db:ec:ec:13:ca:e5:1b:9a:9e:18:49:c2:52: ee:a2:80:73:e8:a1:c2:96:05:59:b7:03:14:37:50: ff:8f:11:d8:50:1d:65:a9:88:55:e4:55:3a:28:d8: 1a:ee:57:61:7b:f9:59:74:7a:53:b2:27:a9:2d:db: 4b:e9:be:86:1d:2a:42:c5:71:4c:2f:a1:53:b5:a0: 88:f2:10:f8:64:97:80:09:19:1e:71:e4:d6:b6:c1: 1b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:47:AC:3C:02:C1:86:36:A6:BC:3A:C0:0E:F0:59:21:D6:31:6C:B5 X509v3 Authority Key Identifier: keyid:0C:35:57:21:3A:67:25:28:2B:24:A6:85:30:8E:9C:F8:41:07:AC:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDVXITpnJSgrJKaFMI6c-EEHrH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a600cf-8238-4471-a1b7-f6ed83e78ef5/1/DDVXITpnJSgrJKaFMI6c-EEHrH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:14:01:bd:f7:b5:ac:e6:3a:a3:b1:96:bc:dc:bb:0b:e4:42: 1c:ab:7d:df:08:01:f4:f1:50:35:7f:4e:ee:50:b3:ca:9d:72: e5:13:e8:1d:d1:dc:6b:8e:fc:88:41:a8:86:2c:48:35:c4:9f: bc:47:67:83:64:48:5c:10:8e:f2:8c:1a:db:72:23:b5:33:a2: ce:d1:b1:6b:0c:33:65:f8:f3:b4:0a:22:d2:2f:62:34:46:46: b7:e2:98:00:5a:a7:b9:18:7c:67:a9:8e:4a:9a:28:a7:81:18: 6d:72:85:58:d8:1f:a0:af:88:71:bc:05:f8:c8:d8:57:44:6b: 8c:ee:7c:6c:6d:45:fd:cc:0a:bb:6c:3f:36:dc:32:03:62:41: 08:53:be:f9:b5:f8:fe:08:e2:28:43:92:bd:aa:2e:40:54:fd: be:e0:d6:22:e4:2c:0e:76:da:56:69:1b:ef:29:e5:bf:c9:84: c1:ee:3c:63:f4:6d:6a:d6:d6:68:4b:23:01:78:3c:5d:f0:60: dd:2b:5c:46:86:18:58:d5:13:e3:28:b7:ab:ea:f1:ad:f8:1e: 48:15:2d:30:8c:8a:41:98:16:7d:16:e8:d6:3f:d7:00:ae:37: f5:71:4e:2f:8f:13:be:68:52:5d:c4:ff:cb:d3:3f:5d:7f:9b: 7c:64:33:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/lwhcaGwQECcn5XPS2EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMzU1NzIxM2E2NzI1MjgyYjI0YTY4NTMwOGU5Y2Y4NDEw N2FjN2QwHhcNMjYwMjA5MTgwMDM0WhcNMjYwMjEwMTgwMDM0WjAzMTEwLwYDVQQD EyhhYjQ3YWMzYzAyYzE4NjM2YTZiYzNhYzAwZWYwNTkyMWQ2MzE2Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmYw4kERGVjrlUNBbgsEJ1qVzADA 1iB8fA76DbiL4gm6MNGP/EHYNH2ezrD4CtwYfBZ7tq8Gdw3SyMq7W+pQbPGDBF1w +wFFjB4Y+/Ry1L4p7W4pfWev85qTjGBoORTVLUfLFOnuOcYjgYqcY3N2uzSrC3oT oiMs0dbM9p2ZvKCcNmGfoJC1lF5D7KblgCNLCSE7yhG34dHFOdhCmOkeqQRJIjZz RNvs7BPK5RuanhhJwlLuooBz6KHClgVZtwMUN1D/jxHYUB1lqYhV5FU6KNga7ldh e/lZdHpTsiepLdtL6b6GHSpCxXFML6FTtaCI8hD4ZJeACRkeceTWtsEbKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKtHrDwCwYY2prw6wA7wWSHWMWy1MB8GA1UdIwQY MBaAFAw1VyE6ZyUoKySmhTCOnPhBB6x9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjct ZjZlZDgzZTc4ZWY1LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi9hNjAwY2YtODIzOC00NDcxLWExYjctZjZlZDgzZTc4ZWY1 LzEvRERWWElUcG5KU2dySkthRk1JNmMtRUVIckgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhhQBvfe1 rOY6o7GWvNy7C+RCHKt93wgB9PFQNX9O7lCzyp1y5RPoHdHca478iEGohixINcSf vEdng2RIXBCO8owa23IjtTOiztGxawwzZfjztAoi0i9iNEZGt+KYAFqnuRh8Z6mO Spoop4EYbXKFWNgfoK+IcbwF+MjYV0RrjO58bG1F/cwKu2w/NtwyA2JBCFO++bX4 /gjiKEOSvaouQFT9vuDWIuQsDnbaVmkb7ynlv8mEwe48Y/RtatbWaEsjAXg8XfBg 3StcRoYYWNUT4yi3q+rxrfgeSBUtMIyKQZgWfRbo1j/XAK439XFOL48TvmhSXcT/ y9M/XX+bfGQzfA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:14 2026 by rpki-client