This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft File: DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft (raw, json) Hash identifier: jzKWfm3nnjXSzAgcuS48dEZgayCjv5Jz99Xe8uITUiM= Subject key identifier: 86:E4:DD:C4:E2:00:CC:EC:CD:C5:BF:C3:E5:37:38:5D:A9:A0:BE:32 Authority key identifier: 0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52 Certificate issuer: /CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752 Certificate serial: 019C413399A38474CB0957FE43FD47C3D38A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft Manifest number: 05F0 Signing time: Mon 09 Feb 2026 07:00:26 +0000 Manifest this update: Mon 09 Feb 2026 07:00:26 +0000 Manifest next update: Tue 10 Feb 2026 07:00:26 +0000 Files and hashes: 1: DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl (hash: 7EX3UK1cfImwEBJ/ufKlXNnHaW7JJYTeSZzu3XAiIlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:99:a3:84:74:cb:09:57:fe:43:fd:47:c3:d3:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ed951b43ab971fd92eb63ec26a5b226ed13c752 Validity Not Before: Feb 9 07:00:26 2026 GMT Not After : Feb 10 07:00:26 2026 GMT Subject: CN=86e4ddc4e200cceccdc5bfc3e537385da9a0be32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:23:77:98:94:fe:63:65:c1:e0:2e:0a:58:e4: 0d:4b:e4:61:17:41:08:82:92:69:9b:72:93:43:1c: 65:ed:e2:ea:de:f4:24:a1:31:39:44:63:24:00:5b: b2:6e:6b:f6:21:06:bc:8e:42:3b:bf:a2:8e:3f:04: b4:a7:ab:bc:73:08:d8:ac:87:eb:b3:82:72:80:b3: 4e:79:94:fe:35:95:91:25:ab:43:a5:42:bd:c9:97: 04:1b:8d:cb:ca:2e:b1:d2:ef:f6:2e:38:57:97:aa: 7c:9c:36:cc:21:4a:e8:90:ee:cf:31:ba:fb:69:02: 3e:e7:9a:88:73:ba:0b:05:65:7c:f3:ba:0f:57:e3: 2d:d5:c2:fd:9c:38:0e:ec:6c:d6:34:4e:cb:d0:0f: 5e:66:81:33:c9:4c:20:2f:e0:e6:27:54:f9:5e:4d: 8c:6e:eb:52:b2:3d:7d:69:76:e1:db:43:08:68:7c: b4:eb:13:4e:93:d3:b0:9d:99:63:00:b6:dc:25:0f: 05:58:65:81:35:08:4e:e8:9c:23:db:2c:f7:76:84: 14:77:99:b3:c8:8c:a7:cf:6b:bb:97:39:5f:23:53: 94:ef:43:20:2f:01:32:3a:8f:e7:f8:62:ab:99:3f: 2d:df:41:1d:1f:f8:92:65:6c:d4:7d:4e:df:31:f6: 2c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:E4:DD:C4:E2:00:CC:EC:CD:C5:BF:C3:E5:37:38:5D:A9:A0:BE:32 X509v3 Authority Key Identifier: keyid:0E:D9:51:B4:3A:B9:71:FD:92:EB:63:EC:26:A5:B2:26:ED:13:C7:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtlRtDq5cf2S62PsJqWyJu0Tx1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fb147f-04ee-48f0-807d-fe3db5253eb0/1/DtlRtDq5cf2S62PsJqWyJu0Tx1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:da:45:03:4c:07:a1:0f:95:fb:d5:13:a0:45:a6:22:25:f1: 08:c7:5e:4a:a0:5d:eb:f9:9c:bb:fb:a0:c5:a9:79:31:7e:c9: 35:33:bb:38:90:26:12:64:97:d2:00:11:e0:2e:f6:87:42:93: 5c:1e:42:89:77:81:d4:c8:ba:f3:01:28:47:ef:be:23:7c:2a: 32:b0:ce:28:c4:9f:4b:e6:81:d3:a7:00:bd:db:95:8f:87:13: 7e:b4:27:da:a9:6d:23:dd:d5:df:fa:4f:af:da:9c:6d:10:b8: 5c:87:d0:df:37:cd:8a:fb:5b:31:5a:b8:ea:b5:a9:57:7c:21: b6:cb:a2:59:d6:6c:11:2e:16:a8:bf:d8:b7:5c:02:24:04:38: 6d:2c:b6:dd:83:57:12:2d:b1:e1:c8:a6:de:b0:67:78:83:a4: 4c:42:a2:0e:2d:6e:d8:78:1d:fb:c9:d5:1e:97:5b:34:52:95: 54:d6:d0:59:13:82:c4:37:5a:9a:e5:f6:be:a2:d2:1b:6d:de: a4:f8:aa:0a:61:d6:87:58:c5:57:fb:f0:3f:43:8f:4f:5b:92: d3:ff:88:1f:ad:56:ce:f3:41:ee:43:a9:8f:58:38:85:b2:28: c7:b9:66:9a:aa:0c:ac:a8:06:31:1e:63:b8:88:bc:4c:75:a9: be:2a:57:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM5mjhHTLCVf+Q/1Hw9OKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZDk1MWI0M2FiOTcxZmQ5MmViNjNlYzI2YTViMjI2ZWQx M2M3NTIwHhcNMjYwMjA5MDcwMDI2WhcNMjYwMjEwMDcwMDI2WjAzMTEwLwYDVQQD Eyg4NmU0ZGRjNGUyMDBjY2VjY2RjNWJmYzNlNTM3Mzg1ZGE5YTBiZTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxSN3mJT+Y2XB4C4KWOQNS+RhF0EI gpJpm3KTQxxl7eLq3vQkoTE5RGMkAFuybmv2IQa8jkI7v6KOPwS0p6u8cwjYrIfr s4JygLNOeZT+NZWRJatDpUK9yZcEG43Lyi6x0u/2LjhXl6p8nDbMIUrokO7PMbr7 aQI+55qIc7oLBWV887oPV+Mt1cL9nDgO7GzWNE7L0A9eZoEzyUwgL+DmJ1T5Xk2M butSsj19aXbh20MIaHy06xNOk9OwnZljALbcJQ8FWGWBNQhO6Jwj2yz3doQUd5mz yIynz2u7lzlfI1OU70MgLwEyOo/n+GKrmT8t30EdH/iSZWzUfU7fMfYsMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIbk3cTiAMzszcW/w+U3OF2poL4yMB8GA1UdIwQY MBaAFA7ZUbQ6uXH9kutj7CalsibtE8dSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2Qt ZmUzZGI1MjUzZWIwLzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC9mYjE0N2YtMDRlZS00OGYwLTgwN2QtZmUzZGI1MjUzZWIw LzEvRHRsUnREcTVjZjJTNjJQc0pxV3lKdTBUeDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMdpFA0wH oQ+V+9UToEWmIiXxCMdeSqBd6/mcu/ugxal5MX7JNTO7OJAmEmSX0gAR4C72h0KT XB5CiXeB1Mi68wEoR+++I3wqMrDOKMSfS+aB06cAvduVj4cTfrQn2qltI93V3/pP r9qcbRC4XIfQ3zfNivtbMVq46rWpV3whtsuiWdZsES4WqL/Yt1wCJAQ4bSy23YNX Ei2x4cim3rBneIOkTEKiDi1u2Hgd+8nVHpdbNFKVVNbQWROCxDdamuX2vqLSG23e pPiqCmHWh1jFV/vwP0OPT1uS0/+IH61WzvNB7kOpj1g4hbIox7lmmqoMrKgGMR5j uIi8THWpvipXLA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:38 2026 by rpki-client