This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft File: cDbgTlO505Z8-dQY54tgu60HWDE.mft (raw, json) Hash identifier: GZmeEYFHxwp6VN1UkhHiORCrNqX48t15Us78wD2FUkc= Subject key identifier: 67:7D:7B:47:B6:C0:04:2B:F2:3A:E6:DD:69:87:FC:2F:70:F4:84:3F Authority key identifier: 70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 Certificate issuer: /CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Certificate serial: 019C420FAB5D060E6626FCD3A559E88BEA29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft Manifest number: 03B3 Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: S00d78TItkDHq888CPL8snBiq8U.roa (hash: xbbWOfkY4EBmGgNTfua9nJ1QvCvgAkZPsqc/WKzPEio=) 2: cDbgTlO505Z8-dQY54tgu60HWDE.crl (hash: 2RNJZagxVnjeppK5osy0EPBEhPZImifbgcc4xk38eKI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:ab:5d:06:0e:66:26:fc:d3:a5:59:e8:8b:ea:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7036e04e53b9d3967cf9d418e78b60bbad075831 Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=677d7b47b6c0042bf23ae6dd6987fc2f70f4843f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:23:b7:f0:fd:53:74:f4:f2:e5:e0:af:79:b1: 77:1b:ba:4c:39:dd:00:e7:0a:91:9d:03:47:21:6c: 7b:31:ad:7a:2f:81:7c:6e:37:8b:bc:39:08:18:b1: 32:ad:69:bb:52:e3:51:ca:e8:4b:7d:71:37:df:f4: 94:3b:0b:f1:0a:88:13:e5:34:44:40:e0:71:aa:60: aa:1f:b5:92:0e:c3:f0:1b:0a:36:ff:17:fe:b6:55: 87:6e:00:a1:55:e0:42:d1:36:49:25:a8:8e:f6:33: e4:ff:8f:7b:14:cf:d1:13:8e:ac:f1:eb:18:78:fd: 57:1e:f8:02:6a:68:c9:a4:fe:ec:b6:39:1f:29:d3: e3:4e:5a:92:8d:69:52:74:01:80:eb:13:51:11:ad: 26:f7:5f:69:e1:e9:94:52:db:75:36:c1:44:aa:10: c7:86:92:eb:63:e0:83:ee:60:b0:d3:74:c1:4e:45: f0:de:02:c6:76:c0:f9:72:9a:8d:33:50:88:48:0c: 8b:84:08:a5:f0:30:8c:58:a6:ce:17:55:b7:c3:3f: 1d:cd:d4:5a:41:51:89:14:41:9f:c4:b2:3e:92:56: df:e5:06:16:27:a0:5a:1f:6e:c7:44:66:f0:01:39: f0:69:ad:41:62:ed:f2:a3:91:41:41:3d:64:30:b5: eb:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:7D:7B:47:B6:C0:04:2B:F2:3A:E6:DD:69:87:FC:2F:70:F4:84:3F X509v3 Authority Key Identifier: keyid:70:36:E0:4E:53:B9:D3:96:7C:F9:D4:18:E7:8B:60:BB:AD:07:58:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDbgTlO505Z8-dQY54tgu60HWDE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/8332cb-fd4b-49d9-b0a1-89def0082e2a/1/cDbgTlO505Z8-dQY54tgu60HWDE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:77:12:5b:17:5e:e7:7b:75:17:0d:24:65:da:02:87:14:8d: e8:f3:7f:4b:77:19:84:e9:48:8a:a9:b4:c7:39:04:52:c7:68: 6d:88:dd:48:83:22:9c:1c:6b:e4:75:d1:4d:aa:4a:d6:f6:90: c4:80:1b:0e:fd:e0:6c:d7:e1:7b:e2:ae:10:a6:1f:98:6d:ce: 86:11:f7:a6:b1:ed:ad:c9:53:34:8e:c2:26:b4:16:f2:79:71: d8:f3:69:75:55:82:b0:64:05:df:fb:34:89:56:82:21:14:c7: 32:dd:dc:a2:44:8a:27:96:2d:88:bb:75:58:4a:d9:c3:36:77: 05:fe:1a:09:bc:b7:83:2d:49:8c:82:59:01:08:b1:8c:b6:ad: 42:b7:3c:0a:e0:d9:d8:04:14:3c:bc:31:1e:d8:d2:5d:de:39: a2:39:68:96:48:3d:b0:69:de:2b:22:05:f4:27:51:e0:54:62: 5d:e8:2f:30:cc:47:9e:c4:5e:c7:25:cd:88:bf:68:1f:b4:71: f9:88:24:0a:33:5b:4f:e3:88:91:5b:f4:73:2f:28:a8:ca:70: 95:da:7e:61:dd:39:cb:2a:ee:12:80:63:f9:73:82:82:30:da: be:dd:5a:3f:1c:6e:8d:c0:44:5d:89:d3:65:7f:ab:94:0f:9c: da:10:cb:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6tdBg5mJvzTpVnoi+opMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwMzZlMDRlNTNiOWQzOTY3Y2Y5ZDQxOGU3OGI2MGJiYWQw NzU4MzEwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD Eyg2NzdkN2I0N2I2YzAwNDJiZjIzYWU2ZGQ2OTg3ZmMyZjcwZjQ4NDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyO38P1TdPTy5eCvebF3G7pMOd0A 5wqRnQNHIWx7Ma16L4F8bjeLvDkIGLEyrWm7UuNRyuhLfXE33/SUOwvxCogT5TRE QOBxqmCqH7WSDsPwGwo2/xf+tlWHbgChVeBC0TZJJaiO9jPk/497FM/RE46s8esY eP1XHvgCamjJpP7stjkfKdPjTlqSjWlSdAGA6xNREa0m919p4emUUtt1NsFEqhDH hpLrY+CD7mCw03TBTkXw3gLGdsD5cpqNM1CISAyLhAil8DCMWKbOF1W3wz8dzdRa QVGJFEGfxLI+klbf5QYWJ6BaH27HRGbwATnwaa1BYu3yo5FBQT1kMLXrCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGd9e0e2wAQr8jrm3WmH/C9w9IQ/MB8GA1UdIwQY MBaAFHA24E5TudOWfPnUGOeLYLutB1gxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEt ODlkZWYwMDgyZTJhLzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC84MzMyY2ItZmQ0Yi00OWQ5LWIwYTEtODlkZWYwMDgyZTJh LzEvY0RiZ1RsTzUwNVo4LWRRWTU0dGd1NjBIV0RFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEHcSWxde 53t1Fw0kZdoChxSN6PN/S3cZhOlIiqm0xzkEUsdobYjdSIMinBxr5HXRTapK1vaQ xIAbDv3gbNfhe+KuEKYfmG3OhhH3prHtrclTNI7CJrQW8nlx2PNpdVWCsGQF3/s0 iVaCIRTHMt3cokSKJ5YtiLt1WErZwzZ3Bf4aCby3gy1JjIJZAQixjLatQrc8CuDZ 2AQUPLwxHtjSXd45ojlolkg9sGneKyIF9CdR4FRiXegvMMxHnsRexyXNiL9oH7Rx +YgkCjNbT+OIkVv0cy8oqMpwldp+Yd05yyruEoBj+XOCgjDavt1aPxxujcBEXYnT ZX+rlA+c2hDLwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:10 2026 by rpki-client