This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft File: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft (raw, json) Hash identifier: AQVj2QciF+id1tm/hN/4Kq2t1TMABEJKcWBGWnpAFOA= Subject key identifier: 7F:3E:C9:D0:56:7E:C2:CD:70:79:22:90:0C:58:4B:03:DD:4B:9B:AF Authority key identifier: 0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED Certificate issuer: /CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Certificate serial: 019C41D8E94351F165A83B6014F90C785D3D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft Manifest number: 0940 Signing time: Mon 09 Feb 2026 10:01:00 +0000 Manifest this update: Mon 09 Feb 2026 10:01:00 +0000 Manifest next update: Tue 10 Feb 2026 10:01:00 +0000 Files and hashes: 1: Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl (hash: 4W2Lmap7QOILyd1pe70CUUZ0uoeKOjRByTYPDWwr0Zo=) 2: eIMZBtMcWMvFB1hL6z_nOfKcJpw.roa (hash: fpooL7KmV8Sp+0vA+7uC8WsK6RO/CGya0r0FndhdjC0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e9:43:51:f1:65:a8:3b:60:14:f9:0c:78:5d:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0d94ee63c70a733663bbc4b5b576de607e19ed Validity Not Before: Feb 9 10:01:00 2026 GMT Not After : Feb 10 10:01:00 2026 GMT Subject: CN=7f3ec9d0567ec2cd707922900c584b03dd4b9baf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:da:90:7c:f0:e3:24:1b:03:37:0a:21:8d:4a: 90:e0:a1:e2:f6:a2:9f:d8:b5:b3:7e:a2:ad:7a:71: cb:59:5a:04:00:20:9a:ab:f8:6a:24:b9:9b:e1:85: 6b:4e:93:e7:8c:e8:c0:f2:9b:0e:cd:e3:83:41:5e: 72:cc:60:7a:23:03:6b:73:bf:de:96:28:e0:5b:80: 3a:e3:01:b7:20:06:a3:70:36:27:c7:1c:5f:35:4b: 99:1f:0f:00:eb:d2:2f:d3:e8:96:e7:98:a8:d0:67: fd:05:c1:dd:a0:a5:8d:c0:f6:c8:b0:39:c3:ab:5a: ac:af:5a:a1:2b:5a:77:15:e3:cd:7c:8f:ed:da:f5: 93:51:e0:91:db:fe:10:f5:09:dc:1e:0d:17:68:ac: 36:e7:66:cd:52:fe:5b:4d:b2:24:47:a4:80:00:b5: 35:5f:d1:c1:39:c8:cd:cc:bb:dd:14:80:fc:0b:7d: 4f:19:3a:5f:0a:45:54:7e:e1:ee:fe:e8:41:0a:52: e9:d2:75:e1:a0:d7:ba:b2:8b:ee:6d:39:12:b5:53: c0:5e:d2:4a:8a:ff:25:e4:9a:2d:7d:f7:91:fc:9e: b0:c6:44:3b:13:1e:7e:5b:97:32:4b:3a:d3:b5:cc: bd:85:c2:43:93:37:7a:1e:9d:e8:53:9a:0b:6e:45: 6b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:3E:C9:D0:56:7E:C2:CD:70:79:22:90:0C:58:4B:03:DD:4B:9B:AF X509v3 Authority Key Identifier: keyid:0F:0D:94:EE:63:C7:0A:73:36:63:BB:C4:B5:B5:76:DE:60:7E:19:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/439ef6-6e39-44e8-8c9b-92d418e8d9a5/1/Dw2U7mPHCnM2Y7vEtbV23mB-Ge0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:91:28:bb:51:2e:9f:a8:36:48:f6:57:78:7c:b5:5b:6b:d7: b6:05:d0:c0:b2:ec:78:72:ba:e9:ab:24:5c:20:2d:f9:b7:27: 2c:db:ef:f9:23:a4:dd:e9:4a:44:b3:1d:04:cb:1c:33:6e:53: 27:eb:d3:03:65:6f:63:37:ec:e7:50:9c:46:46:81:41:08:1c: a3:f0:6e:52:a5:3d:14:2e:0b:c8:54:65:7a:62:33:c4:c8:80: 29:23:9c:4d:d4:8c:f3:c8:1a:51:94:75:ab:e4:73:6c:8b:53: 45:13:2b:3e:e2:85:31:4c:c1:2a:81:f3:b0:92:a1:13:21:9d: cd:84:05:54:b4:a5:d3:f9:f1:a9:a9:6e:ab:ac:ab:03:bd:f9: 67:1d:02:cc:01:f1:03:d4:43:60:f4:c4:3a:48:a3:97:ef:72: dc:55:19:1f:87:67:8e:02:c0:a0:b2:57:f3:82:29:5e:82:aa: 1d:1c:0d:36:6f:d4:75:ed:72:57:b1:01:23:df:01:36:60:ca: 4a:45:f9:e9:99:9f:37:1c:75:76:a7:44:97:fa:5e:cc:0a:78: cb:ac:b5:20:e1:7f:67:18:d1:0f:3c:48:5b:e9:16:f3:46:dc: f0:42:d6:fe:42:d7:bc:ec:a8:68:cc:71:e1:92:6e:3e:a3:58: a4:59:62:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OlDUfFlqDtgFPkMeF09MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGQ5NGVlNjNjNzBhNzMzNjYzYmJjNGI1YjU3NmRlNjA3 ZTE5ZWQwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD Eyg3ZjNlYzlkMDU2N2VjMmNkNzA3OTIyOTAwYzU4NGIwM2RkNGI5YmFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tqQfPDjJBsDNwohjUqQ4KHi9qKf 2LWzfqKtenHLWVoEACCaq/hqJLmb4YVrTpPnjOjA8psOzeODQV5yzGB6IwNrc7/e lijgW4A64wG3IAajcDYnxxxfNUuZHw8A69Iv0+iW55io0Gf9BcHdoKWNwPbIsDnD q1qsr1qhK1p3FePNfI/t2vWTUeCR2/4Q9QncHg0XaKw252bNUv5bTbIkR6SAALU1 X9HBOcjNzLvdFID8C31PGTpfCkVUfuHu/uhBClLp0nXhoNe6sovubTkStVPAXtJK iv8l5JotffeR/J6wxkQ7Ex5+W5cySzrTtcy9hcJDkzd6Hp3oU5oLbkVr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH8+ydBWfsLNcHkikAxYSwPdS5uvMB8GA1UdIwQY MBaAFA8NlO5jxwpzNmO7xLW1dt5gfhntMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWIt OTJkNDE4ZThkOWE1LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZC80MzllZjYtNmUzOS00NGU4LThjOWItOTJkNDE4ZThkOWE1 LzEvRHcyVTdtUEhDbk0yWTd2RXRiVjIzbUItR2UwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpEou1Eu n6g2SPZXeHy1W2vXtgXQwLLseHK66askXCAt+bcnLNvv+SOk3elKRLMdBMscM25T J+vTA2VvYzfs51CcRkaBQQgco/BuUqU9FC4LyFRlemIzxMiAKSOcTdSM88gaUZR1 q+RzbItTRRMrPuKFMUzBKoHzsJKhEyGdzYQFVLSl0/nxqaluq6yrA735Zx0CzAHx A9RDYPTEOkijl+9y3FUZH4dnjgLAoLJX84IpXoKqHRwNNm/Ude1yV7EBI98BNmDK SkX56ZmfNxx1dqdEl/pezAp4y6y1IOF/ZxjRDzxIW+kW80bc8ELW/kLXvOyoaMxx 4ZJuPqNYpFliMA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:59 2026 by rpki-client