This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft File: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft (raw, json) Hash identifier: tD+2aGG0gBesX99Nu0MiPF5T8POIPkG3lN3k95wvx9E= Subject key identifier: D7:16:F4:E7:02:F7:FF:00:D0:5A:CC:2D:DE:85:7E:DE:49:16:6D:60 Authority key identifier: 0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB Certificate issuer: /CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb Certificate serial: 019C44D9A629D95398639B3B2A2D9002C49E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft Manifest number: 0D1C Signing time: Tue 10 Feb 2026 00:00:40 +0000 Manifest this update: Tue 10 Feb 2026 00:00:40 +0000 Manifest next update: Wed 11 Feb 2026 00:00:40 +0000 Files and hashes: 1: D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl (hash: jMEBo6pE1vIugI6cMHz3KNc2NecKjx3SCxu0JLVcRg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:a6:29:d9:53:98:63:9b:3b:2a:2d:90:02:c4:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f49c49a75cf6e248c9b51c7054db2f8d9dcedcb Validity Not Before: Feb 10 00:00:40 2026 GMT Not After : Feb 11 00:00:40 2026 GMT Subject: CN=d716f4e702f7ff00d05acc2dde857ede49166d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e7:50:fa:9c:60:15:9b:37:87:e2:8a:95:27: b1:82:c0:22:82:53:78:44:65:90:ea:68:ea:b6:44: a5:e4:86:61:24:32:0e:d8:48:eb:de:d9:6f:20:d0: 50:e1:c3:d0:f8:47:76:51:ba:eb:50:78:c1:1b:a2: c8:0c:20:7a:74:21:bd:01:9c:3f:3c:1d:4d:87:98: a6:44:14:9d:a0:dd:1e:e8:33:a3:af:a9:62:59:c2: 1b:4b:70:ce:f7:0b:8e:c4:e4:74:f2:23:e8:c7:20: 1c:61:f8:ea:14:bd:6a:10:1b:7a:83:e3:a2:47:f1: f1:d8:91:7f:e8:4e:4c:36:2c:61:80:8a:ea:21:90: eb:3d:27:64:cc:db:25:54:89:92:3a:3d:d6:d1:d0: 7d:d0:87:8e:6a:6f:14:c0:c8:ce:44:3c:98:ed:ef: 4a:d1:a2:8d:12:98:ff:d6:7b:bf:aa:2e:50:65:7a: 09:a6:52:7f:57:20:67:cc:7d:ae:9b:1c:60:b5:bf: 73:b5:09:ab:0c:78:be:e1:f7:90:72:72:75:4b:16: f2:c6:54:8b:70:5e:f4:e1:46:c9:93:e6:35:26:ad: 03:31:05:06:58:cb:37:18:51:72:d7:b5:0b:3f:4e: d0:2f:02:4f:f0:8c:68:c4:eb:f1:36:ec:e2:75:93: 97:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:16:F4:E7:02:F7:FF:00:D0:5A:CC:2D:DE:85:7E:DE:49:16:6D:60 X509v3 Authority Key Identifier: keyid:0F:49:C4:9A:75:CF:6E:24:8C:9B:51:C7:05:4D:B2:F8:D9:DC:ED:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/cea161-cb5c-4e41-b836-d80077e12b5d/1/D0nEmnXPbiSMm1HHBU2y-Nnc7cs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:30:40:5a:02:5c:b3:ae:99:b9:92:1e:dd:f5:77:6d:d0:c5: 46:1b:c2:ff:3c:29:79:34:d7:73:d2:62:6a:58:a8:d8:d1:18: 65:96:8c:c6:4d:ea:4f:62:d9:df:bb:93:8c:6a:19:01:2b:7d: 27:98:c4:ef:41:37:5c:84:a8:2d:05:b7:a4:59:37:dd:41:45: fa:0a:8b:6f:fa:f2:23:20:aa:94:c3:bc:82:43:5b:d4:20:7d: b3:e4:ad:51:54:e7:0e:fd:ac:b1:ae:b0:c6:57:fb:3c:d8:39: 9f:be:1d:cd:07:13:5d:d1:fc:7b:3d:1e:97:50:28:10:fb:ca: 05:a3:04:49:20:a8:ca:90:7a:ad:83:79:7a:fc:72:9c:f6:5d: 4d:b6:d4:62:97:ca:a4:26:0a:d7:b1:1c:c8:1f:12:8f:73:22: 14:6d:2b:19:8a:9f:41:8a:d0:8b:f2:c8:1e:9f:6e:6a:2b:2d: 01:7c:1b:27:45:36:b8:c7:74:3f:0d:3e:68:76:79:a7:95:ad: 43:51:19:4b:32:00:c6:c7:ac:f3:dc:e4:af:61:06:58:5f:f9: 31:e0:15:51:89:19:d9:5f:ac:ed:5a:d1:da:cc:87:9c:46:2f: c4:ab:cf:38:cb:e8:fc:97:2c:65:d2:c1:1c:dc:0d:9a:73:5f: 9c:b2:13:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2aYp2VOYY5s7Ki2QAsSeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDljNDlhNzVjZjZlMjQ4YzliNTFjNzA1NGRiMmY4ZDlk Y2VkY2IwHhcNMjYwMjEwMDAwMDQwWhcNMjYwMjExMDAwMDQwWjAzMTEwLwYDVQQD EyhkNzE2ZjRlNzAyZjdmZjAwZDA1YWNjMmRkZTg1N2VkZTQ5MTY2ZDYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqudQ+pxgFZs3h+KKlSexgsAiglN4 RGWQ6mjqtkSl5IZhJDIO2Ejr3tlvINBQ4cPQ+Ed2UbrrUHjBG6LIDCB6dCG9AZw/ PB1Nh5imRBSdoN0e6DOjr6liWcIbS3DO9wuOxOR08iPoxyAcYfjqFL1qEBt6g+Oi R/Hx2JF/6E5MNixhgIrqIZDrPSdkzNslVImSOj3W0dB90IeOam8UwMjORDyY7e9K 0aKNEpj/1nu/qi5QZXoJplJ/VyBnzH2umxxgtb9ztQmrDHi+4feQcnJ1SxbyxlSL cF704UbJk+Y1Jq0DMQUGWMs3GFFy17ULP07QLwJP8IxoxOvxNuzidZOXvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcW9OcC9/8A0FrMLd6Fft5JFm1gMB8GA1UdIwQY MBaAFA9JxJp1z24kjJtRxwVNsvjZ3O3LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYt ZDgwMDc3ZTEyYjVkLzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS9jZWExNjEtY2I1Yy00ZTQxLWI4MzYtZDgwMDc3ZTEyYjVk LzEvRDBuRW1uWFBiaVNNbTFISEJVMnktTm5jN2NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDBAWgJc s66ZuZIe3fV3bdDFRhvC/zwpeTTXc9Jialio2NEYZZaMxk3qT2LZ37uTjGoZASt9 J5jE70E3XISoLQW3pFk33UFF+gqLb/ryIyCqlMO8gkNb1CB9s+StUVTnDv2ssa6w xlf7PNg5n74dzQcTXdH8ez0el1AoEPvKBaMESSCoypB6rYN5evxynPZdTbbUYpfK pCYK17EcyB8Sj3MiFG0rGYqfQYrQi/LIHp9uaistAXwbJ0U2uMd0Pw0+aHZ5p5Wt Q1EZSzIAxses89zkr2EGWF/5MeAVUYkZ2V+s7VrR2syHnEYvxKvPOMvo/JcsZdLB HNwNmnNfnLITpg== -----END CERTIFICATE-----Generated at Tue Feb 10 06:04:14 2026 by rpki-client