This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft File: D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft (raw, json) Hash identifier: 1hh50YjT8exd+pEPpJzDlorh3b/2Uc3feghOIh0NDoE= Subject key identifier: C4:04:CB:1A:8E:D8:DC:67:5A:DA:97:B6:0A:89:DD:D1:69:D0:47:AF Authority key identifier: 0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA Certificate issuer: /CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda Certificate serial: 019C41A17F5785ED4DC96E1BEF4903433BCA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft Manifest number: 091B Signing time: Mon 09 Feb 2026 09:00:28 +0000 Manifest this update: Mon 09 Feb 2026 09:00:28 +0000 Manifest next update: Tue 10 Feb 2026 09:00:28 +0000 Files and hashes: 1: D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl (hash: Nmp/ffW77FZ/2fdypjO1pGs00YJOr0DYDym18She/mc=) 2: bbfdsDcnJI7l8XYTq2CjZ7GXkac.roa (hash: Zz0UmtBUzv4omIdkS3mEovbafENQWuqBsJq69kjW+GU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:7f:57:85:ed:4d:c9:6e:1b:ef:49:03:43:3b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ff2bbcd1c2d8d7adf741d704d9dc64b9e614fda Validity Not Before: Feb 9 09:00:28 2026 GMT Not After : Feb 10 09:00:28 2026 GMT Subject: CN=c404cb1a8ed8dc675ada97b60a89ddd169d047af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:1e:d7:bf:33:21:fb:b7:9c:d7:3d:4a:8d:15: 5c:62:c9:78:31:54:0c:10:5e:43:51:4d:67:b9:68: 19:de:19:af:89:bd:c8:5c:d7:f9:86:04:9c:77:83: 96:a1:54:84:00:d4:0b:9c:dd:4b:02:bd:b9:91:4d: 3d:af:33:02:5c:cc:64:c4:e2:8e:04:91:e0:ec:b3: 39:8e:2a:29:90:f2:db:ef:d3:90:cb:2d:99:00:ce: 95:a9:60:d4:c0:36:43:9f:18:17:67:8b:76:e7:a4: 8b:4b:10:09:02:7c:13:ce:6e:59:0c:34:af:92:15: f5:c4:69:35:43:c5:c2:33:03:45:e4:d9:6a:c2:1c: 75:1b:97:5b:7c:73:22:8f:65:03:83:49:64:77:d2: fd:c9:f8:db:48:97:14:1c:86:c2:25:e5:ad:bd:da: 17:0f:80:ac:cb:43:89:af:4c:72:1e:33:15:9b:af: cb:37:6d:be:d9:23:a8:6d:ae:7a:f4:e6:93:3f:95: 94:e8:f5:df:3f:81:f4:23:1f:c4:a0:98:db:29:92: 70:81:13:dc:e6:8c:af:15:1e:d2:2a:96:ff:3a:a4: f5:4b:12:b0:03:60:e8:e5:78:62:f4:b6:7e:8e:f7: d5:17:0e:99:2a:bb:21:00:e8:26:ba:a1:f2:5e:37: 0d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:04:CB:1A:8E:D8:DC:67:5A:DA:97:B6:0A:89:DD:D1:69:D0:47:AF X509v3 Authority Key Identifier: keyid:0F:F2:BB:CD:1C:2D:8D:7A:DF:74:1D:70:4D:9D:C6:4B:9E:61:4F:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_K7zRwtjXrfdB1wTZ3GS55hT9o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/D_K7zRwtjXrfdB1wTZ3GS55hT9o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e4:7a:ed:df:d5:6e:a7:ce:65:d7:3b:2d:86:3c:00:b3:09: 76:7d:de:c8:36:f4:bd:fa:3a:80:24:27:d7:c0:29:c9:a9:ae: 5a:26:e3:d0:41:2b:83:a0:17:25:a4:dc:b1:92:b5:41:ed:f0: ec:0c:c9:f8:4d:3e:94:c2:b8:56:6a:89:56:d3:84:d9:73:7e: 91:77:ed:26:20:bd:7d:99:b0:48:d0:19:fa:3a:78:02:53:0d: dd:01:d7:c7:7a:94:7a:bc:4e:0c:4e:d1:92:d9:72:08:6b:02: 88:04:73:7a:4b:8b:bc:bf:1f:9f:f2:6c:9e:09:e4:d8:fd:8f: a8:dc:ca:c5:41:77:e6:bc:d3:49:cc:a8:84:b5:73:a4:49:09: fd:67:ea:a8:b3:ac:7d:0b:c0:81:82:ba:e7:e7:bf:0b:e3:eb: 6d:36:db:72:c1:e4:13:45:fb:32:1c:96:6e:f8:84:62:d9:c8: bd:82:4b:b8:dd:d8:3c:3a:66:9a:a9:dc:2a:cc:d9:42:7e:f5: 15:41:f2:60:0c:27:b8:e4:bf:e6:09:4e:07:ce:a6:b0:95:cf: 11:bc:f9:35:fb:90:35:76:3d:fe:a1:6e:8d:3d:48:bc:3a:39: 27:ba:2e:eb:7f:e3:14:3c:58:d6:9a:1e:1c:c6:90:7c:06:b2: 77:d1:56:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoX9Xhe1NyW4b70kDQzvKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmZjJiYmNkMWMyZDhkN2FkZjc0MWQ3MDRkOWRjNjRiOWU2 MTRmZGEwHhcNMjYwMjA5MDkwMDI4WhcNMjYwMjEwMDkwMDI4WjAzMTEwLwYDVQQD EyhjNDA0Y2IxYThlZDhkYzY3NWFkYTk3YjYwYTg5ZGRkMTY5ZDA0N2FmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApB7XvzMh+7ec1z1KjRVcYsl4MVQM EF5DUU1nuWgZ3hmvib3IXNf5hgScd4OWoVSEANQLnN1LAr25kU09rzMCXMxkxOKO BJHg7LM5jiopkPLb79OQyy2ZAM6VqWDUwDZDnxgXZ4t256SLSxAJAnwTzm5ZDDSv khX1xGk1Q8XCMwNF5Nlqwhx1G5dbfHMij2UDg0lkd9L9yfjbSJcUHIbCJeWtvdoX D4Csy0OJr0xyHjMVm6/LN22+2SOoba569OaTP5WU6PXfP4H0Ix/EoJjbKZJwgRPc 5oyvFR7SKpb/OqT1SxKwA2Do5Xhi9LZ+jvfVFw6ZKrshAOgmuqHyXjcNCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMQEyxqO2NxnWtqXtgqJ3dFp0EevMB8GA1UdIwQY MBaAFA/yu80cLY1633QdcE2dxkueYU/aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt NmFiMDU1NjhhZGUyLzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy LzEvRF9LN3pSd3RqWHJmZEIxd1RaM0dTNTVoVDlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOR67d/V bqfOZdc7LYY8ALMJdn3eyDb0vfo6gCQn18ApyamuWibj0EErg6AXJaTcsZK1Qe3w 7AzJ+E0+lMK4VmqJVtOE2XN+kXftJiC9fZmwSNAZ+jp4AlMN3QHXx3qUerxODE7R ktlyCGsCiARzekuLvL8fn/Jsngnk2P2PqNzKxUF35rzTScyohLVzpEkJ/WfqqLOs fQvAgYK65+e/C+PrbTbbcsHkE0X7MhyWbviEYtnIvYJLuN3YPDpmmqncKszZQn71 FUHyYAwnuOS/5glOB86msJXPEbz5NfuQNXY9/qFujT1IvDo5J7ou63/jFDxY1poe HMaQfAayd9FWqw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:46 2026 by rpki-client