This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft File: 0BDueLvUh9OdecsZgIXphPcCogg.mft (raw, json) Hash identifier: rmefpKieT0x2QrBPSXiViaX9MaNawRF9tUCCQlMax20= Subject key identifier: 33:A9:B5:97:66:DF:2B:FF:10:09:31:65:50:4B:C5:EC:06:69:D9:98 Authority key identifier: D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08 Certificate issuer: /CN=d010ee78bbd487d39d79cb198085e984f702a208 Certificate serial: 019C43903164CF8AF2C289C4DA0AB7D1CADA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft Manifest number: 0B03 Signing time: Mon 09 Feb 2026 18:00:49 +0000 Manifest this update: Mon 09 Feb 2026 18:00:49 +0000 Manifest next update: Tue 10 Feb 2026 18:00:49 +0000 Files and hashes: 1: 0BDueLvUh9OdecsZgIXphPcCogg.crl (hash: tPg84X/pozOASd8BI+ZUSlP4p3Tkd4L9ImdUCR7mtiw=) 2: i61qYgJt7XASGajQVn7m5dP7IZQ.roa (hash: qGulv8eW7fr9lnRNaCMKhFZd/KxMM/VrsV3Shc1gsjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:31:64:cf:8a:f2:c2:89:c4:da:0a:b7:d1:ca:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d010ee78bbd487d39d79cb198085e984f702a208 Validity Not Before: Feb 9 18:00:49 2026 GMT Not After : Feb 10 18:00:49 2026 GMT Subject: CN=33a9b59766df2bff10093165504bc5ec0669d998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:44:fd:10:e2:34:98:b1:0c:51:b1:1f:df:08: 0c:53:c9:8b:79:e4:bd:a2:ba:ea:97:bd:98:99:30: f7:68:2e:59:01:6c:03:ce:68:b6:69:9d:59:e9:f2: ef:c5:20:35:cf:2d:09:c5:f0:40:f0:59:74:30:d4: 0d:66:4a:b7:b4:8d:0f:5b:af:1b:7a:e0:f7:0a:46: c9:c6:70:f1:81:8e:52:59:e0:c5:40:1e:86:6b:07: 91:ce:15:20:93:7c:a7:9d:d3:88:3a:ce:6f:80:77: a8:f0:af:f5:88:72:36:9b:e8:50:61:2f:d2:ce:8f: 08:79:11:89:73:ec:60:fb:88:d3:1e:62:22:99:5d: 2b:83:18:da:73:ff:83:f8:ef:04:d3:e5:76:f5:be: 83:dd:4b:56:04:cb:d3:8a:b1:82:10:7e:27:ee:2e: 7a:0b:98:09:61:af:6d:03:6c:52:d5:90:0a:5f:8f: 9c:1b:9c:a0:a4:5f:46:d6:0a:40:d1:96:5b:c2:17: aa:c1:eb:44:e7:da:18:14:a8:77:3c:ad:60:48:40: 78:c4:55:86:ec:0e:ca:1a:4d:aa:30:13:ce:05:00: 95:93:f7:cb:3a:13:8e:ec:af:bc:91:5d:37:26:4c: 82:18:29:23:29:31:6a:bb:02:cb:dc:63:c0:9f:2f: 68:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A9:B5:97:66:DF:2B:FF:10:09:31:65:50:4B:C5:EC:06:69:D9:98 X509v3 Authority Key Identifier: keyid:D0:10:EE:78:BB:D4:87:D3:9D:79:CB:19:80:85:E9:84:F7:02:A2:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0BDueLvUh9OdecsZgIXphPcCogg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/0ad46e-e8ff-42a9-98c5-d78f6172b155/1/0BDueLvUh9OdecsZgIXphPcCogg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:c6:09:74:97:8b:81:af:9d:1e:a7:0d:b1:3d:40:cb:a0:27: a0:00:77:56:5c:4d:77:36:33:9f:7f:ad:d4:9f:d6:44:93:6e: 77:70:e4:66:39:e4:c8:a7:13:e9:d8:80:3f:e1:59:0e:f9:f6: bd:af:52:47:82:2e:d5:5e:a3:66:8d:e5:47:62:41:52:3a:9c: 0a:3c:57:ee:1b:4a:1c:8a:48:20:ca:24:35:96:aa:64:69:25: 2f:52:90:d0:8c:34:ae:4e:e2:ce:58:0c:76:12:48:88:a3:d5: 31:b5:8b:44:1d:95:8d:ce:0c:ce:55:23:7d:51:dd:3c:1c:a7: f5:a0:46:6d:b6:64:11:b6:ec:de:a7:ca:ac:98:b1:a8:cb:cb: 7f:6c:21:ef:61:88:f5:7b:59:06:3b:1f:fc:9d:81:c8:2d:7f: 07:ff:0a:bb:78:2e:02:1f:6f:d0:43:80:0d:a9:77:c2:08:77: 79:95:97:94:b3:74:92:06:17:ed:ff:95:f3:6d:84:49:78:31: 65:13:13:29:20:1a:ca:96:19:10:fa:99:dd:70:0e:20:41:3a: d8:d0:80:5d:05:3f:0b:73:a4:aa:f0:12:18:dd:32:93:4b:b3: 0d:ec:dc:16:0f:37:d1:6a:01:32:b5:9a:09:0d:b5:91:39:f4: 8e:6e:6b:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDFkz4rywonE2gq30craMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMTBlZTc4YmJkNDg3ZDM5ZDc5Y2IxOTgwODVlOTg0Zjcw MmEyMDgwHhcNMjYwMjA5MTgwMDQ5WhcNMjYwMjEwMTgwMDQ5WjAzMTEwLwYDVQQD EygzM2E5YjU5NzY2ZGYyYmZmMTAwOTMxNjU1MDRiYzVlYzA2NjlkOTk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kT9EOI0mLEMUbEf3wgMU8mLeeS9 orrql72YmTD3aC5ZAWwDzmi2aZ1Z6fLvxSA1zy0JxfBA8Fl0MNQNZkq3tI0PW68b euD3CkbJxnDxgY5SWeDFQB6GaweRzhUgk3ynndOIOs5vgHeo8K/1iHI2m+hQYS/S zo8IeRGJc+xg+4jTHmIimV0rgxjac/+D+O8E0+V29b6D3UtWBMvTirGCEH4n7i56 C5gJYa9tA2xS1ZAKX4+cG5ygpF9G1gpA0ZZbwheqwetE59oYFKh3PK1gSEB4xFWG 7A7KGk2qMBPOBQCVk/fLOhOO7K+8kV03JkyCGCkjKTFquwLL3GPAny9omwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOptZdm3yv/EAkxZVBLxewGadmYMB8GA1UdIwQY MBaAFNAQ7ni71IfTnXnLGYCF6YT3AqIIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUt ZDc4ZjYxNzJiMTU1LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC8wYWQ0NmUtZThmZi00MmE5LTk4YzUtZDc4ZjYxNzJiMTU1 LzEvMEJEdWVMdlVoOU9kZWNzWmdJWHBoUGNDb2dnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEcYJdJeL ga+dHqcNsT1Ay6AnoAB3VlxNdzYzn3+t1J/WRJNud3DkZjnkyKcT6diAP+FZDvn2 va9SR4Iu1V6jZo3lR2JBUjqcCjxX7htKHIpIIMokNZaqZGklL1KQ0Iw0rk7izlgM dhJIiKPVMbWLRB2Vjc4MzlUjfVHdPByn9aBGbbZkEbbs3qfKrJixqMvLf2wh72GI 9XtZBjsf/J2ByC1/B/8Ku3guAh9v0EOADal3wgh3eZWXlLN0kgYX7f+V822ESXgx ZRMTKSAaypYZEPqZ3XAOIEE62NCAXQU/C3OkqvASGN0yk0uzDezcFg830WoBMrWa CQ21kTn0jm5r+w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:35 2026 by rpki-client