This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft File: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft (raw, json) Hash identifier: rxkZCZJmlYMYh2OP24/urrpEoHmlipa2sDE2GhXTiOs= Subject key identifier: AF:6E:72:E5:6C:F0:A0:7B:A6:BF:C9:C6:27:27:DE:DC:F3:93:9D:E0 Authority key identifier: 74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 Certificate issuer: /CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Certificate serial: 019C43907BEC72633297F87CB5E7D55B08A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft Manifest number: 077F Signing time: Mon 09 Feb 2026 18:01:08 +0000 Manifest this update: Mon 09 Feb 2026 18:01:08 +0000 Manifest next update: Tue 10 Feb 2026 18:01:08 +0000 Files and hashes: 1: dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl (hash: ADtqWTpPsbr8tDdoCMZh1XgjcDH15bso9Smi8XguzGc=) 2: fe3bi-doKDNu4dmU6DR8DAdVKZc.roa (hash: OoARVSCOyCQLc2Hu8VCrhllOD8R6T0zZ8zONXrdJeEI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:7b:ec:72:63:32:97:f8:7c:b5:e7:d5:5b:08:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742488f0d9b4b171a2e2f0fa559b43f9a5b32e26 Validity Not Before: Feb 9 18:01:08 2026 GMT Not After : Feb 10 18:01:08 2026 GMT Subject: CN=af6e72e56cf0a07ba6bfc9c62727dedcf3939de0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:64:95:8b:fd:80:3a:66:2f:72:35:aa:65: b2:59:a4:be:6a:1b:db:28:68:f5:2e:84:dd:03:97: fb:c6:44:86:27:f4:66:2c:59:4b:67:cb:f8:bf:c5: 2b:65:43:89:66:ff:e7:22:ff:fd:9e:e6:d5:c1:bd: a4:6c:e3:65:5b:e9:bd:59:d1:6f:c9:f6:7e:ad:ab: 2a:1b:4e:01:38:1f:b5:e3:e1:a9:f6:b5:0e:1e:dc: cf:20:7d:4d:5c:6e:b4:b2:11:87:8c:33:eb:e0:73: e8:8d:ef:39:c1:82:3d:77:ec:03:28:7b:93:5f:d2: 02:84:56:4f:43:31:1e:b5:fe:87:79:2d:bb:7a:d4: c8:8b:c7:f2:1c:c9:ac:1e:34:af:76:68:4c:bb:e2: 5c:2f:c5:eb:7f:9c:8f:49:8e:92:a6:1f:c8:bf:18: 69:e1:23:25:e2:5b:a7:be:21:e7:59:cc:47:75:10: 9f:01:27:26:5a:fb:89:31:f4:4e:b7:20:c9:a5:51: 8c:7f:a0:12:11:e8:e8:05:8a:02:42:34:15:ff:ae: 97:83:67:95:c7:84:d9:ec:e0:fa:b1:d0:53:ab:ca: 21:c6:78:bd:5b:65:91:fe:f5:16:06:65:a2:71:74: 97:02:e3:a3:66:1d:40:66:52:1b:e1:03:95:9f:b8: a7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:6E:72:E5:6C:F0:A0:7B:A6:BF:C9:C6:27:27:DE:DC:F3:93:9D:E0 X509v3 Authority Key Identifier: keyid:74:24:88:F0:D9:B4:B1:71:A2:E2:F0:FA:55:9B:43:F9:A5:B3:2E:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/bc4c23-f7ce-42f1-8819-f2bbfba71a28/1/dCSI8Nm0sXGi4vD6VZtD-aWzLiY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ad:f0:99:b4:81:47:b6:24:45:47:7b:51:e7:aa:6c:52:00: d3:0e:2f:b3:2f:e8:96:a1:61:41:bf:6b:9f:b8:06:dd:aa:63: aa:bb:6e:84:c7:c8:54:e9:e9:c9:77:57:a9:d1:cb:31:a0:b7: 9e:b1:e5:35:f9:02:3b:d5:29:81:31:89:05:ad:9c:c7:d7:ef: a3:b1:02:bc:46:74:fd:4c:9c:91:1d:25:c6:3d:80:67:28:1f: 24:50:a6:5f:d4:83:40:ae:ae:33:ce:c1:c1:e3:d9:e1:b6:9f: fe:ed:b8:7b:08:7c:6c:21:a0:32:74:ab:08:d3:a9:55:fc:3c: 01:fe:d6:c1:6b:80:78:57:e8:64:d0:24:ad:d6:5a:ea:4d:d4: 8c:4c:b7:34:3a:36:b1:38:7b:c1:92:e1:5b:82:73:bf:17:fb: ee:75:6d:38:1a:ed:22:ee:ca:7f:97:04:77:24:c9:4e:fc:65: 01:09:d7:8c:35:1b:ac:c0:5a:7c:1e:1c:9e:92:4a:14:b7:29: ca:aa:e7:6b:49:fa:51:2b:66:93:06:78:b7:7e:2a:da:b2:59: 3d:22:20:97:40:34:81:df:67:84:c9:93:92:77:6b:98:53:1e: a6:04:81:1c:de:09:91:28:7a:95:54:95:5d:57:f0:da:a4:24: e4:27:f7:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHvscmMyl/h8tefVWwihMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjQ4OGYwZDliNGIxNzFhMmUyZjBmYTU1OWI0M2Y5YTVi MzJlMjYwHhcNMjYwMjA5MTgwMTA4WhcNMjYwMjEwMTgwMTA4WjAzMTEwLwYDVQQD EyhhZjZlNzJlNTZjZjBhMDdiYTZiZmM5YzYyNzI3ZGVkY2YzOTM5ZGUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsohklYv9gDpmL3I1qmWyWaS+ahvb KGj1LoTdA5f7xkSGJ/RmLFlLZ8v4v8UrZUOJZv/nIv/9nubVwb2kbONlW+m9WdFv yfZ+rasqG04BOB+14+Gp9rUOHtzPIH1NXG60shGHjDPr4HPoje85wYI9d+wDKHuT X9IChFZPQzEetf6HeS27etTIi8fyHMmsHjSvdmhMu+JcL8Xrf5yPSY6Sph/Ivxhp 4SMl4lunviHnWcxHdRCfAScmWvuJMfROtyDJpVGMf6ASEejoBYoCQjQV/66Xg2eV x4TZ7OD6sdBTq8ohxni9W2WR/vUWBmWicXSXAuOjZh1AZlIb4QOVn7in8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK9ucuVs8KB7pr/Jxicn3tzzk53gMB8GA1UdIwQY MBaAFHQkiPDZtLFxouLw+lWbQ/mlsy4mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTkt ZjJiYmZiYTcxYTI4LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9iYzRjMjMtZjdjZS00MmYxLTg4MTktZjJiYmZiYTcxYTI4 LzEvZENTSThObTBzWEdpNHZENlZadEQtYVd6TGlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAma3wmbSB R7YkRUd7UeeqbFIA0w4vsy/olqFhQb9rn7gG3apjqrtuhMfIVOnpyXdXqdHLMaC3 nrHlNfkCO9UpgTGJBa2cx9fvo7ECvEZ0/UyckR0lxj2AZygfJFCmX9SDQK6uM87B wePZ4baf/u24ewh8bCGgMnSrCNOpVfw8Af7WwWuAeFfoZNAkrdZa6k3UjEy3NDo2 sTh7wZLhW4Jzvxf77nVtOBrtIu7Kf5cEdyTJTvxlAQnXjDUbrMBafB4cnpJKFLcp yqrna0n6UStmkwZ4t34q2rJZPSIgl0A0gd9nhMmTkndrmFMepgSBHN4JkSh6lVSV XVfw2qQk5Cf3bw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:55 2026 by rpki-client