This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft File: DsOtX_ZbjctHYinxLUV9d2GguXw.mft (raw, json) Hash identifier: pQuLZ+fI51uJuN+UUYyOezEmDJdrPXCFpp/w+RBu3gM= Subject key identifier: 84:BF:A6:D4:01:4F:53:6B:34:99:F3:FF:02:10:B1:A7:B5:0F:6F:34 Authority key identifier: 0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C Certificate issuer: /CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c Certificate serial: 019C40FD33D150197D22DDF962C11199B9DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 06:01:01 +0000 Manifest this update: Mon 09 Feb 2026 06:01:01 +0000 Manifest next update: Tue 10 Feb 2026 06:01:01 +0000 Files and hashes: 1: DsOtX_ZbjctHYinxLUV9d2GguXw.crl (hash: +TQ4P1A4G0xSiOuzmNDw1Tm0tmFeph6MbiDBmphE+MA=) 2: VlzsZ1PFQOTs36PjSGKBzlD3rSw.roa (hash: 4VzF1H3InRaJEQ+Xwuec7V2q6Bp/Tl6b+CZcBzvOx0I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:33:d1:50:19:7d:22:dd:f9:62:c1:11:99:b9:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec3ad5ff65b8dcb476229f12d457d7761a0b97c Validity Not Before: Feb 9 06:01:01 2026 GMT Not After : Feb 10 06:01:01 2026 GMT Subject: CN=84bfa6d4014f536b3499f3ff0210b1a7b50f6f34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:c2:07:13:a1:5a:22:af:1a:fb:01:63:a1:3c: 36:21:e5:81:dc:cc:c2:1d:08:63:f3:83:77:74:06: f9:b5:aa:78:ce:97:8b:b0:0d:4c:65:c4:ad:e2:44: 44:96:5f:86:d5:aa:92:dc:00:48:cc:e9:40:0b:f0: 62:bc:46:3d:16:3c:bc:cb:ad:37:8d:a5:f7:94:af: bb:9e:fd:89:e4:64:f4:46:cc:49:e1:a8:c9:e7:9b: ad:68:94:25:b7:1f:11:aa:dd:f2:ef:34:38:28:7b: 38:da:91:ad:8a:c5:f4:ca:70:b7:e9:13:5b:30:c6: c9:5d:53:b6:55:3d:8a:73:5c:0e:13:84:de:b9:29: 4c:6c:96:e5:9b:54:df:5b:cf:b8:cb:b9:26:57:ab: d0:f2:e1:a3:61:12:0d:51:6a:37:16:76:ba:8c:65: 1b:51:ab:97:eb:0e:8e:40:c9:b3:2b:f8:a2:93:93: 3b:b0:e5:80:13:f0:cb:2d:3d:b1:d3:5c:46:b7:0c: af:60:22:70:42:b0:7e:d7:ee:f7:e9:c2:e1:91:f7: dd:94:d4:2d:a9:52:f6:08:1e:e1:9c:da:e7:3a:c6: 70:eb:05:67:5f:12:08:fa:ac:7f:10:18:88:d4:60: 5b:8f:15:2e:4e:b6:80:47:79:22:89:9e:1e:20:d8: 2e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BF:A6:D4:01:4F:53:6B:34:99:F3:FF:02:10:B1:A7:B5:0F:6F:34 X509v3 Authority Key Identifier: keyid:0E:C3:AD:5F:F6:5B:8D:CB:47:62:29:F1:2D:45:7D:77:61:A0:B9:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DsOtX_ZbjctHYinxLUV9d2GguXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/589a15-9c52-4a1b-8d32-b8aab3323524/1/DsOtX_ZbjctHYinxLUV9d2GguXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:53:34:2e:ad:28:dc:5d:2a:96:0f:33:7f:62:b9:52:74:74: f5:ab:db:7a:4d:3f:00:f1:91:18:4c:a5:66:ae:68:79:3d:5a: b4:9b:4a:a1:61:84:47:c7:68:b5:c2:d3:20:c8:15:02:c3:b5: de:60:5c:b5:8a:68:0f:da:3c:33:18:b5:3d:a8:f4:c5:d5:96: bf:1b:c8:83:5b:a1:b8:ab:cb:64:b0:0b:f6:55:cb:6e:99:59: 76:80:e7:4c:05:e0:f6:60:68:e9:02:b0:d4:92:b9:8f:91:6f: 55:37:b7:b4:8f:7e:c0:1b:92:6c:40:4b:18:dc:74:29:a8:2a: f1:03:e7:56:ad:be:7e:44:70:9d:99:ec:03:8e:62:ef:df:23: 96:17:d6:c6:d0:c9:5e:8c:0f:6f:20:83:b5:49:52:9b:c1:54: b4:0f:3a:e0:a6:e1:ec:bc:61:00:e3:24:d0:79:84:a0:79:ae: 46:af:4b:06:95:22:28:62:1d:a8:46:57:b4:36:15:ba:c3:77: f5:a4:8d:17:1b:6c:aa:06:f8:46:c8:9e:b0:b1:a5:89:75:33: fb:fb:58:cb:86:37:6a:45:15:12:bd:7b:03:14:14:dd:ae:fc: 2b:39:58:82:4d:b2:a3:d2:2e:88:40:bf:54:83:de:d2:5a:0f: 77:29:db:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/TPRUBl9It35YsERmbndMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYzNhZDVmZjY1YjhkY2I0NzYyMjlmMTJkNDU3ZDc3NjFh MGI5N2MwHhcNMjYwMjA5MDYwMTAxWhcNMjYwMjEwMDYwMTAxWjAzMTEwLwYDVQQD Eyg4NGJmYTZkNDAxNGY1MzZiMzQ5OWYzZmYwMjEwYjFhN2I1MGY2ZjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsIHE6FaIq8a+wFjoTw2IeWB3MzC HQhj84N3dAb5tap4zpeLsA1MZcSt4kREll+G1aqS3ABIzOlAC/BivEY9Fjy8y603 jaX3lK+7nv2J5GT0RsxJ4ajJ55utaJQltx8Rqt3y7zQ4KHs42pGtisX0ynC36RNb MMbJXVO2VT2Kc1wOE4TeuSlMbJblm1TfW8+4y7kmV6vQ8uGjYRINUWo3Fna6jGUb UauX6w6OQMmzK/iik5M7sOWAE/DLLT2x01xGtwyvYCJwQrB+1+736cLhkffdlNQt qVL2CB7hnNrnOsZw6wVnXxII+qx/EBiI1GBbjxUuTraAR3kiiZ4eINguNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIS/ptQBT1NrNJnz/wIQsae1D280MB8GA1UdIwQY MBaAFA7DrV/2W43LR2Ip8S1FfXdhoLl8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzIt YjhhYWIzMzIzNTI0LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy81ODlhMTUtOWM1Mi00YTFiLThkMzItYjhhYWIzMzIzNTI0 LzEvRHNPdFhfWmJqY3RIWWlueExVVjlkMkdndVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1M0Lq0o 3F0qlg8zf2K5UnR09avbek0/APGRGEylZq5oeT1atJtKoWGER8dotcLTIMgVAsO1 3mBctYpoD9o8Mxi1Paj0xdWWvxvIg1uhuKvLZLAL9lXLbplZdoDnTAXg9mBo6QKw 1JK5j5FvVTe3tI9+wBuSbEBLGNx0Kagq8QPnVq2+fkRwnZnsA45i798jlhfWxtDJ XowPbyCDtUlSm8FUtA864Kbh7LxhAOMk0HmEoHmuRq9LBpUiKGIdqEZXtDYVusN3 9aSNFxtsqgb4RsiesLGliXUz+/tYy4Y3akUVEr17AxQU3a78KzlYgk2yo9IuiEC/ VIPe0loPdynbXQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:51 2026 by rpki-client