This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json) Hash identifier: ZMIiZGNkRk5wtLb3klxqg1tMhpY8ijugo+5r+Fe8AA8= Subject key identifier: 11:0C:70:0C:C9:BA:70:E3:37:45:02:38:25:A6:C6:9D:75:5B:88:A1 Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06 Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206 Certificate serial: 019C432256B3178FA8CE3479F4E433722CC5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: Sr7gPOM173GpTylEIx70vbQoMEv7vBydQYSAH6E14D0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:56:b3:17:8f:a8:ce:34:79:f4:e4:33:72:2c:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206 Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=110c700cc9ba70e33745023825a6c69d755b88a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:64:0d:ac:bd:f8:7d:fe:b7:40:49:ca:ba: 67:ad:f8:c9:d4:2e:99:7a:7e:34:ec:20:a0:cc:2b: 96:fa:70:ab:d7:aa:34:9b:76:ae:93:2e:c5:7f:05: 46:22:c5:f9:2b:2b:ea:91:6f:e8:84:47:e7:b1:30: 13:96:11:ac:ea:02:8c:15:74:a1:48:ee:73:58:b4: e2:5c:5a:91:ee:e9:46:18:35:73:2b:96:cb:fa:8d: b8:6f:79:af:2a:b0:01:83:aa:c2:cc:2c:f9:65:ce: 15:7b:07:84:cc:50:56:4a:20:c0:0a:64:02:eb:45: ce:19:93:dc:d6:7e:13:ab:72:c6:ed:1b:9d:fd:c2: 8c:88:14:16:d8:83:2d:07:9a:12:3a:45:62:78:41: a7:57:7b:54:55:7e:4c:17:83:79:0d:24:ab:41:25: 32:38:8c:b4:72:f9:22:3b:a7:21:6c:8b:ea:87:3d: 85:73:53:7a:c1:a3:e8:54:24:91:c4:9f:f6:04:f1: 34:05:71:16:f6:ea:e2:98:ed:d7:b9:1a:e8:8c:3d: 46:6a:b0:a2:39:ba:58:96:2e:43:61:18:d3:74:29: 56:74:27:9d:09:43:9e:20:65:fc:56:03:d5:2f:32: 9a:f5:f1:ad:20:7a:73:bd:5a:5d:db:bc:69:5e:fa: 32:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:0C:70:0C:C9:BA:70:E3:37:45:02:38:25:A6:C6:9D:75:5B:88:A1 X509v3 Authority Key Identifier: keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:ff:c7:90:3b:46:2a:5c:b1:b3:d1:24:82:09:b8:a2:f9:ca: 45:56:e5:f1:ae:b2:f7:49:6d:8f:81:cd:23:c7:1e:84:bb:d9: ef:a9:09:e3:7f:9b:63:17:3c:ef:f2:5b:c2:7d:2f:ac:2e:82: 4e:b7:c4:e9:7d:75:76:72:75:74:87:bd:8f:c2:f9:bc:08:8d: ee:4a:c7:96:6c:54:f1:90:06:ca:8f:ca:63:df:87:1f:9d:d2: b0:3f:b4:a0:ce:da:2b:51:81:e6:c8:62:93:45:a2:b2:8d:bb: 94:b2:d9:7b:e8:09:67:f1:a2:7e:09:3b:ce:76:f7:38:97:38: 90:e5:fe:82:01:ed:9b:70:81:41:6e:a8:36:19:d5:1c:8b:d3: 34:35:08:4b:60:da:14:07:64:47:35:04:53:83:94:ad:67:a9: 2b:93:e2:70:ac:ee:82:74:0c:1e:0c:a9:15:e1:0f:f1:e0:ae: 90:b9:53:56:d2:76:1d:7e:71:cd:39:7c:ce:fc:9e:62:0e:b7: 94:51:28:1b:ac:36:b4:f6:1c:eb:bc:af:f0:47:96:7f:56:be: 08:db:46:3e:3b:59:09:d4:f0:c2:5a:2a:d2:ae:e1:fa:0d:d4: 0e:48:a6:4b:98:0b:2e:82:45:c0:62:91:20:04:3d:2e:ea:2b: 38:c3:87:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlazF4+ozjR59OQzcizFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MDQ3MTYwNzUzMmE4YzdhZmQ2MGQ0ZjMxN2FhZGM0OTBl YmEyMDYwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD EygxMTBjNzAwY2M5YmE3MGUzMzc0NTAyMzgyNWE2YzY5ZDc1NWI4OGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrxkDay9+H3+t0BJyrpnrfjJ1C6Z en407CCgzCuW+nCr16o0m3auky7FfwVGIsX5KyvqkW/ohEfnsTATlhGs6gKMFXSh SO5zWLTiXFqR7ulGGDVzK5bL+o24b3mvKrABg6rCzCz5Zc4VeweEzFBWSiDACmQC 60XOGZPc1n4Tq3LG7Rud/cKMiBQW2IMtB5oSOkVieEGnV3tUVX5MF4N5DSSrQSUy OIy0cvkiO6chbIvqhz2Fc1N6waPoVCSRxJ/2BPE0BXEW9urimO3XuRrojD1GarCi ObpYli5DYRjTdClWdCedCUOeIGX8VgPVLzKa9fGtIHpzvVpd27xpXvoy1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEMcAzJunDjN0UCOCWmxp11W4ihMB8GA1UdIwQY MBaAFHUEcWB1MqjHr9YNTzF6rcSQ66IGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZmE2YTEtMWU0Yy00OWZmLWE0ODAt Mjc0MjMyZDY5NTA1LzEvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy9kZmE2YTEtMWU0Yy00OWZmLWE0ODAtMjc0MjMyZDY5NTA1 LzEvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQv/HkDtG Klyxs9Ekggm4ovnKRVbl8a6y90ltj4HNI8cehLvZ76kJ43+bYxc87/Jbwn0vrC6C TrfE6X11dnJ1dIe9j8L5vAiN7krHlmxU8ZAGyo/KY9+HH53SsD+0oM7aK1GB5shi k0Wiso27lLLZe+gJZ/Gifgk7znb3OJc4kOX+ggHtm3CBQW6oNhnVHIvTNDUIS2Da FAdkRzUEU4OUrWepK5PicKzugnQMHgypFeEP8eCukLlTVtJ2HX5xzTl8zvyeYg63 lFEoG6w2tPYc67yv8EeWf1a+CNtGPjtZCdTwwloq0q7h+g3UDkimS5gLLoJFwGKR IAQ9LuorOMOHCQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:43 2026 by rpki-client