This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft File: DUt01InEknijADmUrJf9QH1yNuU.mft (raw, json) Hash identifier: yh6w95e3as33itnA15E89huY0phzvOwuoKtFAXK1J0k= Subject key identifier: CE:8D:22:B3:B3:02:B3:EB:CC:80:35:34:49:5F:9F:23:5B:81:35:E1 Authority key identifier: 0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 Certificate issuer: /CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Certificate serial: 019C427D531A76BDA53952ADA281DCE2DD99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft Manifest number: 1817 Signing time: Mon 09 Feb 2026 13:00:35 +0000 Manifest this update: Mon 09 Feb 2026 13:00:35 +0000 Manifest next update: Tue 10 Feb 2026 13:00:35 +0000 Files and hashes: 1: DUt01InEknijADmUrJf9QH1yNuU.crl (hash: Q68RYlmsHnQDAvg60jZs2lWicwbf73B9tujDTuCOIks=) 2: Z99ngPTLOUTyTSdHuL5UZwAD6NY.roa (hash: DZi9rhCzp49WwA1zBtpD/yG3bRcqi0eJ3S0hss0FXos=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:53:1a:76:bd:a5:39:52:ad:a2:81:dc:e2:dd:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d4b74d489c49278a3003994ac97fd407d7236e5 Validity Not Before: Feb 9 13:00:35 2026 GMT Not After : Feb 10 13:00:35 2026 GMT Subject: CN=ce8d22b3b302b3ebcc803534495f9f235b8135e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:5c:10:8c:5b:a8:c0:95:29:9a:40:d4:ce:1f: 74:5b:39:ad:c2:b2:18:4b:4d:0b:6d:9d:e7:58:8c: 4c:74:f5:86:1d:de:0c:14:0e:ba:77:89:98:a1:bc: 9f:fc:25:3b:40:e0:20:38:fd:bb:2f:63:26:d5:3d: 91:f3:ef:95:83:81:d1:34:ff:16:b1:53:67:14:fd: 07:67:0c:ef:c0:f7:99:9a:33:88:b7:f9:69:5d:49: 1f:02:79:a0:4e:50:f6:7e:0a:39:79:4c:6b:53:bf: 43:55:cc:12:eb:03:b5:d5:05:c6:4a:e3:65:6a:e1: f7:3c:90:a8:04:5a:e0:e4:fc:65:39:95:7c:16:9c: ea:f9:ff:df:73:5b:09:f5:4a:72:58:9c:56:a5:9b: 03:98:5b:d1:90:e9:ab:e3:1e:55:45:0f:2f:92:b7: e0:cd:33:71:07:ef:0c:c9:5b:ae:cd:f0:ae:ed:0d: 08:b9:8f:5f:bc:be:1a:0e:c9:40:23:8b:4b:82:b5: 5d:b3:4b:35:56:7d:85:0a:ce:4a:a1:39:a7:b6:52: 20:3c:fd:3a:c5:8b:c6:be:f5:88:9d:4f:4c:64:dc: 4e:a0:d0:98:c7:52:a8:15:42:d3:a5:c2:67:73:ca: 95:4d:f8:6e:c9:cf:00:d9:20:49:32:64:a1:d8:ea: b1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:8D:22:B3:B3:02:B3:EB:CC:80:35:34:49:5F:9F:23:5B:81:35:E1 X509v3 Authority Key Identifier: keyid:0D:4B:74:D4:89:C4:92:78:A3:00:39:94:AC:97:FD:40:7D:72:36:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DUt01InEknijADmUrJf9QH1yNuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/b69633-c031-4d25-9e0e-65640f1c179a/1/DUt01InEknijADmUrJf9QH1yNuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:4e:f7:0a:2c:4f:3d:6f:11:64:63:99:b5:db:73:64:61:3b: de:d9:86:6c:54:eb:8c:a2:bb:6c:e1:07:5c:0f:97:8b:01:05: c0:ec:fb:69:38:56:e0:3f:04:0e:6a:06:97:c1:1c:2c:3a:89: 88:a7:b5:83:ef:0d:b3:c0:dc:8f:95:5b:e8:e3:16:4a:8f:65: 91:f4:fa:c5:5c:a8:94:a4:69:86:77:72:a3:6a:c9:f1:25:dd: 5d:62:06:1a:be:8e:61:ee:07:5d:e6:9b:99:2d:02:f2:bb:29: b3:18:bf:07:9e:82:61:99:52:4e:23:7c:d0:9e:d6:7b:42:29: 94:d7:15:5c:ad:85:4b:6e:3c:d7:2c:3d:ae:78:29:89:68:4f: e2:fc:e4:66:a4:93:00:8a:ac:0d:64:76:eb:7b:73:ce:81:7a: dd:69:09:9b:b2:28:49:fa:80:9c:cd:15:5c:49:74:fd:64:c5: c7:42:92:33:19:c6:9e:d3:af:a1:54:44:81:ad:ce:9b:5d:9b: 53:da:b5:1f:4a:73:3c:4f:35:92:ab:24:23:f3:2e:fc:e5:81: 7c:1d:f0:50:d6:f5:3a:84:1d:14:09:63:48:fd:b7:69:2c:a7: 3a:9a:3f:8d:16:30:db:72:94:69:3c:a4:87:85:17:57:14:2c: 6a:cf:57:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVMadr2lOVKtooHc4t2ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNGI3NGQ0ODljNDkyNzhhMzAwMzk5NGFjOTdmZDQwN2Q3 MjM2ZTUwHhcNMjYwMjA5MTMwMDM1WhcNMjYwMjEwMTMwMDM1WjAzMTEwLwYDVQQD EyhjZThkMjJiM2IzMDJiM2ViY2M4MDM1MzQ0OTVmOWYyMzViODEzNWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3lwQjFuowJUpmkDUzh90WzmtwrIY S00LbZ3nWIxMdPWGHd4MFA66d4mYobyf/CU7QOAgOP27L2Mm1T2R8++Vg4HRNP8W sVNnFP0HZwzvwPeZmjOIt/lpXUkfAnmgTlD2fgo5eUxrU79DVcwS6wO11QXGSuNl auH3PJCoBFrg5PxlOZV8Fpzq+f/fc1sJ9UpyWJxWpZsDmFvRkOmr4x5VRQ8vkrfg zTNxB+8MyVuuzfCu7Q0IuY9fvL4aDslAI4tLgrVds0s1Vn2FCs5KoTmntlIgPP06 xYvGvvWInU9MZNxOoNCYx1KoFULTpcJnc8qVTfhuyc8A2SBJMmSh2OqxTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM6NIrOzArPrzIA1NElfnyNbgTXhMB8GA1UdIwQY MBaAFA1LdNSJxJJ4owA5lKyX/UB9cjblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUt NjU2NDBmMWMxNzlhLzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9iNjk2MzMtYzAzMS00ZDI1LTllMGUtNjU2NDBmMWMxNzlh LzEvRFV0MDFJbkVrbmlqQURtVXJKZjlRSDF5TnVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkU73CixP PW8RZGOZtdtzZGE73tmGbFTrjKK7bOEHXA+XiwEFwOz7aThW4D8EDmoGl8EcLDqJ iKe1g+8Ns8Dcj5Vb6OMWSo9lkfT6xVyolKRphndyo2rJ8SXdXWIGGr6OYe4HXeab mS0C8rspsxi/B56CYZlSTiN80J7We0IplNcVXK2FS2481yw9rngpiWhP4vzkZqST AIqsDWR263tzzoF63WkJm7IoSfqAnM0VXEl0/WTFx0KSMxnGntOvoVREga3Om12b U9q1H0pzPE81kqskI/Mu/OWBfB3wUNb1OoQdFAljSP23aSynOpo/jRYw23KUaTyk h4UXVxQsas9XPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:09 2026 by rpki-client