This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft File: DcHMqlhPs5FOeS_VOQ47otMDM4w.mft (raw, json) Hash identifier: QsTe8LITbcfj3O1tlLdzGHUGDC+A68LsiUVlP/ryutE= Subject key identifier: B5:E0:3F:90:87:67:7D:E4:AC:5D:67:41:42:84:79:AF:E6:C5:F8:B9 Authority key identifier: 0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C Certificate issuer: /CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c Certificate serial: 019C427D9F082C704A1BA24D6D5EFB2B97E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft Manifest number: 11D5 Signing time: Mon 09 Feb 2026 13:00:54 +0000 Manifest this update: Mon 09 Feb 2026 13:00:54 +0000 Manifest next update: Tue 10 Feb 2026 13:00:54 +0000 Files and hashes: 1: DcHMqlhPs5FOeS_VOQ47otMDM4w.crl (hash: S/YdEzgctgrVTkDPqTDVLLNYQl18H3r+7heXX0puM4E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:9f:08:2c:70:4a:1b:a2:4d:6d:5e:fb:2b:97:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc1ccaa584fb3914e792fd5390e3ba2d303338c Validity Not Before: Feb 9 13:00:54 2026 GMT Not After : Feb 10 13:00:54 2026 GMT Subject: CN=b5e03f9087677de4ac5d6741428479afe6c5f8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:5f:19:3f:50:89:79:4e:1d:3f:c2:c7:31:10: ae:a1:e0:ed:eb:2c:7b:1e:b5:20:64:17:02:e2:25: c3:c9:bf:7b:28:34:a3:7e:ba:ae:4c:f5:c2:7c:ca: 0a:f5:b0:50:bb:5c:0b:9e:9d:ce:0f:3a:51:cd:a8: af:77:8b:1e:e0:b9:c4:79:de:d9:79:1e:88:c8:3b: ba:37:7e:92:97:a0:fc:0c:c0:91:c5:da:7a:39:1f: f7:1e:15:6f:f4:fc:f4:f2:93:09:b3:93:5e:ba:73: 58:22:d1:39:03:00:5c:a8:74:bd:ce:85:cc:17:e9: 26:7a:0a:d8:b5:1a:bb:cd:e7:57:28:70:16:e6:ee: 51:02:64:d2:61:5d:cd:d0:1c:c9:8a:1d:08:f4:ea: d7:17:e2:4f:1d:58:e2:71:72:1c:5a:18:ed:bf:f9: 70:16:08:96:79:32:d3:69:f9:8d:be:40:fe:25:9f: 2e:2a:85:22:35:da:19:3b:de:73:54:ce:61:fc:3e: a0:7b:c6:a9:a0:72:c1:fa:9c:df:3b:cc:be:06:4e: 13:32:90:7e:36:3e:31:f3:dd:e4:b0:ab:08:6f:36: 85:b2:1f:a9:c6:3b:0b:14:e4:a2:cf:d2:a3:06:f4: 13:3d:b0:8a:e7:e1:ba:0e:24:64:46:50:a5:e9:99: c4:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:E0:3F:90:87:67:7D:E4:AC:5D:67:41:42:84:79:AF:E6:C5:F8:B9 X509v3 Authority Key Identifier: keyid:0D:C1:CC:AA:58:4F:B3:91:4E:79:2F:D5:39:0E:3B:A2:D3:03:33:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcHMqlhPs5FOeS_VOQ47otMDM4w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/23da1c-435c-4c83-a295-bf85cd25427e/1/DcHMqlhPs5FOeS_VOQ47otMDM4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5a:84:f4:7d:0e:85:f3:4f:93:45:5a:9a:63:37:fd:a2:b2: 86:1b:9a:45:83:0f:a5:81:df:9b:ef:59:e6:df:d7:7f:ad:d2: 2c:fa:dd:00:92:e0:4f:1a:3b:8e:18:2d:a8:bf:79:a4:53:6d: c3:05:58:55:89:8e:3a:a6:3e:a3:99:02:95:b8:62:7e:02:02: 65:b8:dd:b7:a1:6e:42:d9:e1:31:5e:fe:ad:53:69:05:d0:8d: aa:af:a7:79:e9:d2:7c:1e:5c:33:97:1c:b2:d1:cb:fc:39:1a: 20:3a:2d:83:72:2b:13:e5:6d:d6:38:27:a9:e3:99:b1:0d:84: ba:86:7d:0c:b5:b6:04:00:7a:70:f7:f6:0a:3d:de:90:01:1d: 41:10:8b:bf:87:45:c4:2f:c2:be:52:e8:23:33:f0:cb:8d:6d: ab:76:f0:d8:d6:94:5a:18:7c:b6:59:7d:42:a1:77:3d:b5:f1: 48:19:e4:1b:89:69:ab:36:1c:f9:d2:0d:ab:e2:33:3c:12:c8: ee:cd:ba:86:55:f5:28:fc:e4:1c:ca:d4:1f:46:64:5e:8f:f7: c9:09:cb:47:4f:40:f3:18:41:b8:78:10:c8:73:9e:80:2f:9f: a1:3c:62:a0:f5:1f:e5:f6:15:16:ac:47:ba:6a:60:b7:06:85: 3f:37:c2:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZ8ILHBKG6JNbV77K5fpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzFjY2FhNTg0ZmIzOTE0ZTc5MmZkNTM5MGUzYmEyZDMw MzMzOGMwHhcNMjYwMjA5MTMwMDU0WhcNMjYwMjEwMTMwMDU0WjAzMTEwLwYDVQQD EyhiNWUwM2Y5MDg3Njc3ZGU0YWM1ZDY3NDE0Mjg0NzlhZmU2YzVmOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V8ZP1CJeU4dP8LHMRCuoeDt6yx7 HrUgZBcC4iXDyb97KDSjfrquTPXCfMoK9bBQu1wLnp3ODzpRzaivd4se4LnEed7Z eR6IyDu6N36Sl6D8DMCRxdp6OR/3HhVv9Pz08pMJs5NeunNYItE5AwBcqHS9zoXM F+kmegrYtRq7zedXKHAW5u5RAmTSYV3N0BzJih0I9OrXF+JPHVjicXIcWhjtv/lw FgiWeTLTafmNvkD+JZ8uKoUiNdoZO95zVM5h/D6ge8apoHLB+pzfO8y+Bk4TMpB+ Nj4x893ksKsIbzaFsh+pxjsLFOSiz9KjBvQTPbCK5+G6DiRkRlCl6ZnEOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLXgP5CHZ33krF1nQUKEea/mxfi5MB8GA1UdIwQY MBaAFA3BzKpYT7ORTnkv1TkOO6LTAzOMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUt YmY4NWNkMjU0MjdlLzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yM2RhMWMtNDM1Yy00YzgzLWEyOTUtYmY4NWNkMjU0Mjdl LzEvRGNITXFsaFBzNUZPZVNfVk9RNDdvdE1ETTR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXFqE9H0O hfNPk0VammM3/aKyhhuaRYMPpYHfm+9Z5t/Xf63SLPrdAJLgTxo7jhgtqL95pFNt wwVYVYmOOqY+o5kClbhifgICZbjdt6FuQtnhMV7+rVNpBdCNqq+neenSfB5cM5cc stHL/DkaIDotg3IrE+Vt1jgnqeOZsQ2EuoZ9DLW2BAB6cPf2Cj3ekAEdQRCLv4dF xC/CvlLoIzPwy41tq3bw2NaUWhh8tll9QqF3PbXxSBnkG4lpqzYc+dINq+IzPBLI 7s26hlX1KPzkHMrUH0ZkXo/3yQnLR09A8xhBuHgQyHOegC+foTxioPUf5fYVFqxH umpgtwaFPzfCVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:24 2026 by rpki-client