This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft File: DODA1zCB11KRa-O25sCofDD35BQ.mft (raw, json) Hash identifier: R/NVkhV+9Vhvz+ZmWF9dcsoxjG+EOL0Oz6Lw1IjAKbM= Subject key identifier: 49:54:51:BF:72:10:DF:6C:5D:8C:4E:26:C3:78:A4:3A:E2:EB:67:43 Authority key identifier: 0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14 Certificate issuer: /CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414 Certificate serial: 019C1BA6E137FF679452DA2EBC70710DA1CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft Manifest number: 06 Signing time: Mon 02 Feb 2026 00:00:47 +0000 Manifest this update: Mon 02 Feb 2026 00:00:47 +0000 Manifest next update: Tue 03 Feb 2026 00:00:47 +0000 Files and hashes: 1: DODA1zCB11KRa-O25sCofDD35BQ.crl (hash: nkXSaRpM9HPyv0NYkvfCoLNHHGOCCsfZBZKpBgQWb8Y=) 2: qkHSX9O62Gr3u5B_jqKGtT64dTs.asa (hash: q1ZwzuiDpgbVTD+461wBId3rL4sPAeAJlh+4P2xSgtc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:a6:e1:37:ff:67:94:52:da:2e:bc:70:71:0d:a1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ce0c0d73081d752916be3b6e6c0a87c30f7e414 Validity Not Before: Feb 2 00:00:47 2026 GMT Not After : Feb 3 00:00:47 2026 GMT Subject: CN=495451bf7210df6c5d8c4e26c378a43ae2eb6743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:dc:34:ed:49:03:af:51:6b:09:5c:83:28:b3: 93:16:66:5e:e3:68:b4:bc:39:50:20:60:40:9f:f3: 3b:76:50:ae:da:ab:0f:c3:ba:cf:59:e3:30:d9:c6: 1d:4c:25:5a:1c:f8:cb:53:1f:7f:cc:fb:2f:46:50: 2e:cd:7b:88:c9:27:28:b1:eb:91:62:ae:c2:08:f3: bb:d6:6e:9c:e3:9e:b5:e9:5d:53:cd:0e:45:a6:1f: 77:57:ac:5c:cf:cd:ca:c2:a6:39:ec:28:61:ee:08: 7b:9d:f2:cc:d5:ef:4f:10:2e:7d:1f:21:ce:24:68: d4:63:00:01:35:8f:dd:6c:36:a9:f4:ab:81:e3:57: c9:c5:d9:3c:fb:5a:e3:fa:cd:a8:6b:cd:83:4c:8f: dc:40:eb:cc:3a:11:50:e6:c5:03:6d:fa:03:1e:a4: 27:c4:9e:02:fe:65:bd:75:39:77:c3:0c:81:94:7f: 72:1c:14:14:76:eb:7e:35:78:d7:f5:21:f0:f9:9b: 0b:51:49:d8:2e:b2:6b:1a:b0:ee:c3:2e:e2:cf:d4: 4c:af:55:ba:75:19:48:ed:a3:88:cd:c0:ca:e9:1b: a6:4e:44:25:84:6e:fe:a6:18:f0:14:76:f4:d5:70: a7:1a:21:62:a6:65:da:3d:d6:15:f4:17:6a:f5:44: df:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:54:51:BF:72:10:DF:6C:5D:8C:4E:26:C3:78:A4:3A:E2:EB:67:43 X509v3 Authority Key Identifier: keyid:0C:E0:C0:D7:30:81:D7:52:91:6B:E3:B6:E6:C0:A8:7C:30:F7:E4:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DODA1zCB11KRa-O25sCofDD35BQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/ae134a-20b2-4de8-8ee9-feb8427cfe21/1/DODA1zCB11KRa-O25sCofDD35BQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b2:9f:07:04:7a:41:c2:00:5b:cf:58:a1:07:3a:d6:e0:55: 5d:e7:ed:3c:32:7a:bc:8c:37:05:02:5a:cb:a6:a5:41:56:b7: 66:c9:69:f8:be:47:59:5e:5d:4a:aa:7f:c0:2b:10:f2:21:ca: 18:e2:8a:8f:73:32:b6:8f:45:e6:b9:83:9d:e8:b8:30:44:28: d2:dc:58:fb:2b:a4:ce:b5:92:bb:86:db:e1:7c:cb:b4:b3:29: 9c:75:f8:05:50:bd:7d:dd:4c:fb:68:f8:2d:83:0e:1e:9c:ac: 6b:48:ce:5f:63:7f:86:d9:9c:20:8a:f0:fc:6d:7d:64:05:7c: 31:f2:ea:fc:ee:62:a3:2e:57:cc:ae:6d:14:81:02:ff:45:d0: 7e:34:bf:dd:c8:29:8f:dc:d1:1f:ff:d8:0b:04:d5:44:b4:3c: 93:aa:1d:30:7f:98:15:10:41:1e:1d:df:cd:e9:a2:09:9f:23: fe:56:86:8d:3c:0f:88:57:61:b6:4f:6a:06:e1:01:e9:32:b1: 3d:db:a6:f7:29:ab:b6:7e:14:95:4f:9b:12:00:cc:98:f3:ae: a4:2e:d2:41:dc:c3:07:cb:9e:71:4a:3e:a9:12:c4:0a:31:8c: f0:93:9b:c0:c1:8c:89:14:6d:b4:75:54:cb:04:75:4f:79:92: bb:9d:04:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbpuE3/2eUUtouvHBxDaHOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZTBjMGQ3MzA4MWQ3NTI5MTZiZTNiNmU2YzBhODdjMzBm N2U0MTQwHhcNMjYwMjAyMDAwMDQ3WhcNMjYwMjAzMDAwMDQ3WjAzMTEwLwYDVQQD Eyg0OTU0NTFiZjcyMTBkZjZjNWQ4YzRlMjZjMzc4YTQzYWUyZWI2NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtw07UkDr1FrCVyDKLOTFmZe42i0 vDlQIGBAn/M7dlCu2qsPw7rPWeMw2cYdTCVaHPjLUx9/zPsvRlAuzXuIyScoseuR Yq7CCPO71m6c45616V1TzQ5Fph93V6xcz83KwqY57Chh7gh7nfLM1e9PEC59HyHO JGjUYwABNY/dbDap9KuB41fJxdk8+1rj+s2oa82DTI/cQOvMOhFQ5sUDbfoDHqQn xJ4C/mW9dTl3wwyBlH9yHBQUdut+NXjX9SHw+ZsLUUnYLrJrGrDuwy7iz9RMr1W6 dRlI7aOIzcDK6RumTkQlhG7+phjwFHb01XCnGiFipmXaPdYV9Bdq9UTfBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFElUUb9yEN9sXYxOJsN4pDri62dDMB8GA1UdIwQY MBaAFAzgwNcwgddSkWvjtubAqHww9+QUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTkt ZmViODQyN2NmZTIxLzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy9hZTEzNGEtMjBiMi00ZGU4LThlZTktZmViODQyN2NmZTIx LzEvRE9EQTF6Q0IxMUtSYS1PMjVzQ29mREQzNUJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLKfBwR6 QcIAW89YoQc61uBVXeftPDJ6vIw3BQJay6alQVa3Zslp+L5HWV5dSqp/wCsQ8iHK GOKKj3Myto9F5rmDnei4MEQo0txY+yukzrWSu4bb4XzLtLMpnHX4BVC9fd1M+2j4 LYMOHpysa0jOX2N/htmcIIrw/G19ZAV8MfLq/O5ioy5XzK5tFIEC/0XQfjS/3cgp j9zRH//YCwTVRLQ8k6odMH+YFRBBHh3fzemiCZ8j/laGjTwPiFdhtk9qBuEB6TKx Pdum9ymrtn4UlU+bEgDMmPOupC7SQdzDB8uecUo+qRLECjGM8JObwMGMiRRttHVU ywR1T3mSu50EoQ== -----END CERTIFICATE-----Generated at Mon Feb 2 08:07:56 2026 by rpki-client