This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft File: dxvOKaNsveiYrABwfblRQ_hqeSI.mft (raw, json) Hash identifier: /h/Ss3mKCha7ZIv/69Brmw8nIh0/jwrZRzVGEbr9jOI= Subject key identifier: F1:14:1A:BE:FF:52:6B:0D:9E:F5:CD:6E:F6:93:EA:AE:C3:6A:A9:32 Authority key identifier: 77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 Certificate issuer: /CN=771bce29a36cbde898ac00707db95143f86a7922 Certificate serial: 019C41A1612F652A59EB39F7C6C824A47112 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft Manifest number: 0FEE Signing time: Mon 09 Feb 2026 09:00:20 +0000 Manifest this update: Mon 09 Feb 2026 09:00:20 +0000 Manifest next update: Tue 10 Feb 2026 09:00:20 +0000 Files and hashes: 1: dxvOKaNsveiYrABwfblRQ_hqeSI.crl (hash: iRReIEKYrT2aQ45A9+qn90oxNMRcOmewtNm+EVoYvIo=) 2: qZ8aQgjdabGbDv-i6H620T5YhwY.roa (hash: UdXrLbOlQenxMN6hG/0L/eJWuifEwthlbNrK+9DhFyc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:61:2f:65:2a:59:eb:39:f7:c6:c8:24:a4:71:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771bce29a36cbde898ac00707db95143f86a7922 Validity Not Before: Feb 9 09:00:20 2026 GMT Not After : Feb 10 09:00:20 2026 GMT Subject: CN=f1141abeff526b0d9ef5cd6ef693eaaec36aa932 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a3:8a:80:5a:12:76:ba:e3:99:f9:73:00:98: 6e:cb:3a:e0:dd:a4:14:89:ba:a1:12:af:53:e0:ed: 4d:cf:6d:56:7a:87:3e:a3:9e:7a:60:17:88:16:d2: f2:2b:48:4c:37:9c:9d:63:25:49:74:2a:2f:4b:e1: 3f:ae:42:4b:3b:db:1f:4b:2e:bc:47:6d:eb:51:ca: 14:12:34:20:41:93:bd:d9:b3:f7:b6:7e:2a:13:9f: 39:f6:ce:0c:2c:d1:e7:ce:71:0c:a7:8e:5c:3c:5a: 49:7c:e1:c3:6c:3a:37:38:a6:99:12:3c:b2:28:65: c5:46:b2:67:c8:93:7d:fc:8a:84:e9:c9:02:a4:5e: 3e:4c:e6:bd:ce:02:d5:4f:c0:38:fc:8d:2c:3b:9f: 7b:a9:e5:24:bf:44:71:7f:ef:41:48:45:58:9e:70: 85:28:9a:03:bd:a2:ed:bf:df:0f:8c:f0:2e:4e:82: f8:26:ca:ad:06:e1:71:a5:b9:ec:fa:4d:b5:08:cc: 2c:2e:d8:8e:81:c0:f6:a9:1a:46:c4:3d:bb:42:cc: 46:c1:57:09:6c:f7:62:11:6f:69:f4:8a:71:b4:df: 45:f1:44:2d:dd:14:85:26:46:6f:07:d9:90:18:24: 4c:ce:07:14:d8:b8:10:b2:44:a7:d0:b6:5d:cb:2a: 00:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:14:1A:BE:FF:52:6B:0D:9E:F5:CD:6E:F6:93:EA:AE:C3:6A:A9:32 X509v3 Authority Key Identifier: keyid:77:1B:CE:29:A3:6C:BD:E8:98:AC:00:70:7D:B9:51:43:F8:6A:79:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxvOKaNsveiYrABwfblRQ_hqeSI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/35/dd6ea7-bdb8-47c3-964f-2af9178382fb/1/dxvOKaNsveiYrABwfblRQ_hqeSI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:59:82:29:e8:ac:a3:1a:d2:03:6c:26:3c:54:c3:96:3b:cc: be:d2:b9:f5:a7:dc:6f:dc:98:72:1a:e5:0f:28:bd:e4:74:68: 20:6c:d7:db:b7:ce:13:47:e8:e7:8c:c4:54:6a:82:74:15:87: a3:f4:c5:c5:42:0d:c5:fd:bd:73:72:c1:7b:38:4c:45:a0:38: 4f:88:da:9c:b0:7d:a0:a2:6e:5d:75:cb:8d:5d:ea:68:cc:cc: 50:1a:2e:b5:e5:e5:54:c7:96:43:51:f5:b8:4d:8b:6e:8e:85: 85:2d:23:d6:02:cb:36:41:58:b7:93:18:bc:bf:30:5b:c8:02: 59:51:b3:79:18:a1:31:01:d5:24:f1:1f:28:fc:9c:f6:e5:17: 04:99:cb:5e:2b:bb:b5:88:cc:69:8c:d0:1e:68:2d:d8:40:2c: e8:35:cf:8a:6b:5f:4a:c8:dc:11:7b:25:9f:3b:2f:63:77:4d: 39:10:78:c6:3e:cf:c9:ab:6a:9a:32:64:c6:c5:c6:5f:29:0b: 52:2a:8e:72:50:f9:fa:69:ea:b3:36:e6:e4:6b:4e:3c:02:65: 7a:17:75:55:66:a1:34:f1:88:ff:bb:39:ab:12:f9:bb:f3:40: a6:31:42:cb:fa:8f:7b:8e:fb:74:23:58:eb:82:47:b3:5f:75: f4:76:ec:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoWEvZSpZ6zn3xsgkpHESMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWJjZTI5YTM2Y2JkZTg5OGFjMDA3MDdkYjk1MTQzZjg2 YTc5MjIwHhcNMjYwMjA5MDkwMDIwWhcNMjYwMjEwMDkwMDIwWjAzMTEwLwYDVQQD EyhmMTE0MWFiZWZmNTI2YjBkOWVmNWNkNmVmNjkzZWFhZWMzNmFhOTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6OKgFoSdrrjmflzAJhuyzrg3aQU ibqhEq9T4O1Nz21Weoc+o556YBeIFtLyK0hMN5ydYyVJdCovS+E/rkJLO9sfSy68 R23rUcoUEjQgQZO92bP3tn4qE5859s4MLNHnznEMp45cPFpJfOHDbDo3OKaZEjyy KGXFRrJnyJN9/IqE6ckCpF4+TOa9zgLVT8A4/I0sO597qeUkv0Rxf+9BSEVYnnCF KJoDvaLtv98PjPAuToL4JsqtBuFxpbns+k21CMwsLtiOgcD2qRpGxD27QsxGwVcJ bPdiEW9p9IpxtN9F8UQt3RSFJkZvB9mQGCRMzgcU2LgQskSn0LZdyyoA1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEUGr7/UmsNnvXNbvaT6q7DaqkyMB8GA1UdIwQY MBaAFHcbzimjbL3omKwAcH25UUP4ankiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYt MmFmOTE3ODM4MmZiLzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNS9kZDZlYTctYmRiOC00N2MzLTk2NGYtMmFmOTE3ODM4MmZi LzEvZHh2T0thTnN2ZWlZckFCd2ZibFJRX2hxZVNJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVmCKeis oxrSA2wmPFTDljvMvtK59afcb9yYchrlDyi95HRoIGzX27fOE0fo54zEVGqCdBWH o/TFxUINxf29c3LBezhMRaA4T4janLB9oKJuXXXLjV3qaMzMUBouteXlVMeWQ1H1 uE2Lbo6FhS0j1gLLNkFYt5MYvL8wW8gCWVGzeRihMQHVJPEfKPyc9uUXBJnLXiu7 tYjMaYzQHmgt2EAs6DXPimtfSsjcEXslnzsvY3dNORB4xj7PyatqmjJkxsXGXykL UiqOclD5+mnqszbm5GtOPAJlehd1VWahNPGI/7s5qxL5u/NApjFCy/qPe477dCNY 64JHs1919HbsRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:02 2026 by rpki-client