This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json) Hash identifier: RzScBV4LaTQgbojlJCHiaIx/pr1/RZJHcySowTwf9Jk= Subject key identifier: 10:97:9D:EE:1F:FB:73:A4:9C:C7:B6:1E:7C:E1:99:E8:12:3A:5D:8F Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Certificate serial: 019C42EB61397EE709A0C500B9BB43231092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 15:00:47 +0000 Manifest this update: Mon 09 Feb 2026 15:00:47 +0000 Manifest next update: Tue 10 Feb 2026 15:00:47 +0000 Files and hashes: 1: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: YLzw+9W/PAcsVPuWu0bXTV7Z7lz1zi4Mnz1zM1y0sE0=) 2: LINYNse5gTnQTaGpDC4P2orwLNw.roa (hash: jwdJGzlRoAppijnlgLmKSEl5CMBxNzYsYm+HHhXiWR0=) 3: Wu-LPUMqwocBNlt5ypkyRQ-BcG8.roa (hash: udr6u/rjNC9kwCUZ4fpiUpE5gr+CoJtYznz4JyS606g=) 4: dpzibW71BafVtewDmI9jnKwB0PE.roa (hash: Lb6hcW86Ys7t4OSo9igJpzp6AC9QU/RfmTo/e1nf/rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:61:39:7e:e7:09:a0:c5:00:b9:bb:43:23:10:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8 Validity Not Before: Feb 9 15:00:47 2026 GMT Not After : Feb 10 15:00:47 2026 GMT Subject: CN=10979dee1ffb73a49cc7b61e7ce199e8123a5d8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6b:1c:85:eb:ff:6a:83:ec:1f:c7:e7:c1:69: e2:15:f6:58:15:fc:db:e5:81:99:e0:cb:34:89:32: 27:a8:49:49:2d:c0:18:b3:ae:93:b9:1a:3b:39:96: ec:1d:20:1a:32:5b:f4:9b:ff:5d:c2:24:e0:6b:0f: f8:16:fd:f2:d2:7a:05:b0:80:67:92:c5:ab:03:74: 4b:7f:0c:2e:c4:e5:c0:d1:e2:51:15:95:7d:6e:87: 17:26:d6:05:d4:95:9f:ff:a3:17:a7:b7:d6:1b:8a: aa:e5:df:a7:9e:83:93:e8:ec:cf:3e:fb:24:cc:80: 14:f6:40:46:9b:26:43:16:34:11:c8:83:c1:1d:3c: f7:0f:18:63:a0:f4:40:44:06:4d:31:bc:dc:4d:cf: ac:73:b2:76:ed:66:7f:42:e6:e7:54:83:ec:70:10: 91:e5:af:c1:a2:66:d3:af:b8:7d:80:ea:9f:14:0a: de:c3:31:a3:81:c2:bc:97:52:6c:7c:9e:c0:b5:f0: 63:18:ae:5a:78:33:eb:6f:c6:1f:47:c5:99:0d:33: a5:7a:a8:63:7e:93:4c:05:c8:0e:8e:78:af:69:82: e5:35:f3:df:ed:b2:15:2b:ee:a3:66:38:c7:77:9c: fa:20:77:5e:c5:23:73:db:a4:e9:b7:a7:2f:47:b0: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:97:9D:EE:1F:FB:73:A4:9C:C7:B6:1E:7C:E1:99:E8:12:3A:5D:8F X509v3 Authority Key Identifier: keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:64:71:45:df:69:d4:fa:54:50:9b:7b:55:d0:53:27:27:8b: 3c:16:cf:5f:9c:f7:c4:9c:0a:7c:f6:e2:7f:1f:ef:50:73:81: dd:4f:a3:a7:88:5d:45:9e:00:8b:7a:f6:44:ea:71:01:18:93: ac:f6:a7:a3:77:61:ba:92:97:3a:ea:00:02:f9:ad:6f:de:2b: c0:9c:00:23:79:b3:ae:f6:76:e1:7b:d2:f3:f7:50:67:f0:ae: f0:e1:ad:8f:cc:64:c4:7d:ec:68:0b:39:56:cc:77:ac:20:24: be:83:13:d8:1b:8d:7f:23:95:68:8a:00:c0:f9:e6:0d:78:86: 0f:91:d3:e4:6e:34:7c:6c:81:23:52:64:7c:ea:6d:77:38:68: 54:e1:6d:ca:32:56:11:74:22:8b:70:6e:0d:66:b8:1a:d9:48: 56:6a:ae:17:d5:69:33:46:77:b3:c8:9b:d3:0f:9d:f1:d5:ec: 59:20:25:31:2c:cb:49:05:30:ea:f1:8e:e2:ae:5b:75:98:d8: f3:b4:bc:44:b9:2f:d0:c5:47:9e:64:02:c5:0b:94:0b:e7:64: 6a:fd:20:58:c1:21:61:3c:ec:75:ed:ea:0c:b6:71:7a:76:2b: 65:d7:c8:38:2b:53:e8:b7:ff:5a:25:5e:a7:1b:be:3e:5c:ae: 75:28:78:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62E5fucJoMUAubtDIxCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNTdjYjNhMWU1M2U3NjI5ZWUzYjlmMjY3MmQ0NTcxZWY4 NWQyYzgwHhcNMjYwMjA5MTUwMDQ3WhcNMjYwMjEwMTUwMDQ3WjAzMTEwLwYDVQQD EygxMDk3OWRlZTFmZmI3M2E0OWNjN2I2MWU3Y2UxOTllODEyM2E1ZDhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42schev/aoPsH8fnwWniFfZYFfzb 5YGZ4Ms0iTInqElJLcAYs66TuRo7OZbsHSAaMlv0m/9dwiTgaw/4Fv3y0noFsIBn ksWrA3RLfwwuxOXA0eJRFZV9bocXJtYF1JWf/6MXp7fWG4qq5d+nnoOT6OzPPvsk zIAU9kBGmyZDFjQRyIPBHTz3DxhjoPRARAZNMbzcTc+sc7J27WZ/QubnVIPscBCR 5a/BombTr7h9gOqfFArewzGjgcK8l1JsfJ7AtfBjGK5aeDPrb8YfR8WZDTOleqhj fpNMBcgOjnivaYLlNfPf7bIVK+6jZjjHd5z6IHdexSNz26Tpt6cvR7BsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBCXne4f+3OknMe2HnzhmegSOl2PMB8GA1UdIwQY MBaAFAxXyzoeU+dinuO58mctRXHvhdLIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMt Y2Y3MjMyZGRlYmVjLzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZS82YzFlMDEtMTU5NS00N2IwLTllMDMtY2Y3MjMyZGRlYmVj LzEvREZmTE9oNVQ1MktlNDdueVp5MUZjZS1GMHNnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmRxRd9p 1PpUUJt7VdBTJyeLPBbPX5z3xJwKfPbifx/vUHOB3U+jp4hdRZ4Ai3r2ROpxARiT rPano3dhupKXOuoAAvmtb94rwJwAI3mzrvZ24XvS8/dQZ/Cu8OGtj8xkxH3saAs5 Vsx3rCAkvoMT2BuNfyOVaIoAwPnmDXiGD5HT5G40fGyBI1JkfOptdzhoVOFtyjJW EXQii3BuDWa4GtlIVmquF9VpM0Z3s8ib0w+d8dXsWSAlMSzLSQUw6vGO4q5bdZjY 87S8RLkv0MVHnmQCxQuUC+dkav0gWMEhYTzsde3qDLZxenYrZdfIOCtT6Lf/WiVe pxu+PlyudSh4RQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:53 2026 by rpki-client