This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft File: dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft (raw, json) Hash identifier: 6SrYsLXDG06bZXHlX6Im64HGTwT7zymB638pgIA8xBY= Subject key identifier: E7:EE:4B:09:30:FF:E4:D4:AE:E7:07:A5:9F:E6:58:F4:0F:27:1D:9E Authority key identifier: 74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94 Certificate issuer: /CN=7422f985cb34a03c7c5581642c6d6eb432c83e94 Certificate serial: 019C439064155315DBBF696AAEEBCF1E15F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft Manifest number: 0FE7 Signing time: Mon 09 Feb 2026 18:01:02 +0000 Manifest this update: Mon 09 Feb 2026 18:01:02 +0000 Manifest next update: Tue 10 Feb 2026 18:01:02 +0000 Files and hashes: 1: dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl (hash: OyFDamAunYv5Yd+UVNfrmsvPNqi24lSxqBwvJisz7RI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:64:15:53:15:db:bf:69:6a:ae:eb:cf:1e:15:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7422f985cb34a03c7c5581642c6d6eb432c83e94 Validity Not Before: Feb 9 18:01:02 2026 GMT Not After : Feb 10 18:01:02 2026 GMT Subject: CN=e7ee4b0930ffe4d4aee707a59fe658f40f271d9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:fc:2f:0f:ce:d7:92:00:69:e2:47:22:52:f6: 83:25:8a:fc:94:2f:b5:89:03:a9:4d:3a:cd:91:5b: 0a:6c:e9:30:f9:70:a0:0b:3f:79:3d:3e:b5:54:27: 3d:4b:11:03:8b:f6:0a:39:5c:62:2d:67:69:c0:77: a5:22:49:ad:b9:1e:9e:ed:f0:09:b0:3c:41:43:d3: 30:ee:08:c5:1c:fb:17:b1:1d:a5:c2:93:d8:13:b7: b9:df:01:58:1f:f8:d0:98:5d:3c:f4:8f:fe:ee:21: 2d:8a:4e:11:85:05:38:15:cd:5b:b1:07:fc:5e:66: 11:20:60:06:53:e0:de:77:f6:ea:9f:e0:08:b0:53: 36:0a:07:ed:5e:16:0f:26:37:b1:a3:c6:5d:5b:38: 10:4b:82:7d:a3:cd:0b:0e:16:84:ef:7d:fc:13:76: e3:af:84:eb:97:6a:f5:69:d9:69:9f:04:9f:4e:7e: 0c:02:0e:6d:b0:4a:b5:23:a3:1b:07:a0:75:b0:99: 4e:ee:ab:22:c0:fb:c1:f1:c1:c4:c7:92:37:c4:36: 71:1c:e7:7a:5a:04:9d:4c:00:b6:7d:b2:34:eb:b0: 52:8f:41:1d:89:65:c4:c0:6d:1d:77:ea:fc:c5:f8: a1:20:c2:4d:b8:2c:d1:4a:fa:da:89:12:c3:65:c2: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:EE:4B:09:30:FF:E4:D4:AE:E7:07:A5:9F:E6:58:F4:0F:27:1D:9E X509v3 Authority Key Identifier: keyid:74:22:F9:85:CB:34:A0:3C:7C:55:81:64:2C:6D:6E:B4:32:C8:3E:94 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dCL5hcs0oDx8VYFkLG1utDLIPpQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c49ec2-37da-41a9-96fb-5141fa39080a/1/dCL5hcs0oDx8VYFkLG1utDLIPpQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:8a:24:0a:22:72:86:b7:ef:da:ec:0a:87:1c:25:a4:53:65: 91:e6:dd:4b:6a:b3:11:72:6c:b0:3c:05:78:05:4e:3d:54:4c: ce:4e:1a:cf:14:d2:3e:fd:b5:82:26:61:bd:15:17:a9:b0:9e: 9d:b0:89:3e:28:da:41:1f:dd:ee:18:71:72:26:2e:93:1e:e1: df:09:79:1f:e2:2c:75:af:c2:e0:12:7e:98:a3:4c:9e:ae:d9: a0:c8:cb:38:80:a3:3a:91:df:e6:05:51:17:50:4b:fb:2e:d9: 78:af:9e:b7:fc:c7:54:fe:54:4a:99:f1:b0:6c:33:cc:3c:f0: 49:c0:1b:f6:c7:cb:7d:38:78:df:f2:e8:c8:00:56:08:1c:dd: 81:08:40:ec:68:ad:50:6d:8a:96:34:b7:1d:4d:19:d7:4d:5c: 8e:76:44:8b:c6:5e:7b:ef:ff:21:6b:04:d3:92:1a:c8:fd:48: 4b:c4:7b:2a:af:0d:76:b7:e7:02:b8:56:7f:46:f7:7b:e4:12: 50:b8:d1:50:88:0f:a8:89:8d:27:bf:fd:36:ec:90:19:d3:0c: ed:08:47:ae:ce:cf:07:81:e0:aa:07:c2:51:ae:d0:24:01:f7: bd:a4:00:ce:37:44:3d:b2:dc:b0:3f:a8:9f:23:1a:0b:a0:7f: 39:43:2e:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGQVUxXbv2lqruvPHhX2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MjJmOTg1Y2IzNGEwM2M3YzU1ODE2NDJjNmQ2ZWI0MzJj ODNlOTQwHhcNMjYwMjA5MTgwMTAyWhcNMjYwMjEwMTgwMTAyWjAzMTEwLwYDVQQD EyhlN2VlNGIwOTMwZmZlNGQ0YWVlNzA3YTU5ZmU2NThmNDBmMjcxZDllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/wvD87XkgBp4kciUvaDJYr8lC+1 iQOpTTrNkVsKbOkw+XCgCz95PT61VCc9SxEDi/YKOVxiLWdpwHelIkmtuR6e7fAJ sDxBQ9Mw7gjFHPsXsR2lwpPYE7e53wFYH/jQmF089I/+7iEtik4RhQU4Fc1bsQf8 XmYRIGAGU+Ded/bqn+AIsFM2CgftXhYPJjexo8ZdWzgQS4J9o80LDhaE7338E3bj r4Trl2r1adlpnwSfTn4MAg5tsEq1I6MbB6B1sJlO7qsiwPvB8cHEx5I3xDZxHOd6 WgSdTAC2fbI067BSj0EdiWXEwG0dd+r8xfihIMJNuCzRSvraiRLDZcL/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfuSwkw/+TUrucHpZ/mWPQPJx2eMB8GA1UdIwQY MBaAFHQi+YXLNKA8fFWBZCxtbrQyyD6UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmIt NTE0MWZhMzkwODBhLzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9jNDllYzItMzdkYS00MWE5LTk2ZmItNTE0MWZhMzkwODBh LzEvZENMNWhjczBvRHg4VllGa0xHMXV0RExJUHBRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJYokCiJy hrfv2uwKhxwlpFNlkebdS2qzEXJssDwFeAVOPVRMzk4azxTSPv21giZhvRUXqbCe nbCJPijaQR/d7hhxciYukx7h3wl5H+Isda/C4BJ+mKNMnq7ZoMjLOICjOpHf5gVR F1BL+y7ZeK+et/zHVP5USpnxsGwzzDzwScAb9sfLfTh43/LoyABWCBzdgQhA7Git UG2KljS3HU0Z101cjnZEi8Zee+//IWsE05IayP1IS8R7Kq8NdrfnArhWf0b3e+QS ULjRUIgPqImNJ7/9NuyQGdMM7QhHrs7PB4HgqgfCUa7QJAH3vaQAzjdEPbLcsD+o nyMaC6B/OUMu2Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:43:55 2026 by rpki-client