This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft File: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft (raw, json) Hash identifier: QGtHks7gNQ/TjQ3spj4PNnIZxQ7a6j5yNQyNdmXdMzk= Subject key identifier: BE:3D:40:E2:CC:6F:3F:68:C9:C9:63:FD:0F:C1:B4:43:8C:CE:C9:FA Authority key identifier: 77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96 Certificate issuer: /CN=772f8e257843732ec5ed0f61a13acabee6090a96 Certificate serial: 019C4390A240D0828C45DBE93A7828962E10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:01:17 +0000 Manifest this update: Mon 09 Feb 2026 18:01:17 +0000 Manifest next update: Tue 10 Feb 2026 18:01:17 +0000 Files and hashes: 1: dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl (hash: aki5k5LRibAT1UJ0WqXYFAoVVOI+GovmYA3EirnKwXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a2:40:d0:82:8c:45:db:e9:3a:78:28:96:2e:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=772f8e257843732ec5ed0f61a13acabee6090a96 Validity Not Before: Feb 9 18:01:17 2026 GMT Not After : Feb 10 18:01:17 2026 GMT Subject: CN=be3d40e2cc6f3f68c9c963fd0fc1b4438ccec9fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:57:97:cd:47:be:40:d9:54:b3:85:86:3e: fa:51:2b:67:ca:bf:04:b6:69:e0:63:2f:96:26:74: 79:dc:f4:c7:a8:e9:87:01:6c:32:01:49:ae:66:3c: df:eb:e2:88:39:5c:b6:3b:40:bb:4e:d7:3e:a8:52: a5:48:e8:f6:bb:4c:c2:70:96:7b:64:ec:ad:b9:a8: 36:cc:5d:62:32:96:fe:02:ac:4c:9b:b9:c4:71:8f: 72:09:12:fb:98:b8:24:f6:c5:e5:9a:e4:51:e9:43: 3d:4a:c0:41:c9:a0:1d:0a:f9:57:59:43:ec:54:76: 68:32:66:ac:b1:ad:e6:c4:f2:d1:a3:13:0d:f7:da: d7:ab:64:3e:b3:87:cf:1d:62:d9:f6:07:25:d2:11: 2f:d0:a1:ea:a2:b9:5a:d7:ad:45:ac:e5:21:9c:e2: c9:de:fa:d9:fb:ce:69:7e:68:f4:f3:ac:af:a7:1c: 48:6b:c6:85:cc:8f:63:3e:97:d8:80:9a:3f:23:26: b6:8a:34:23:6c:47:4f:db:3b:0f:1a:c0:06:ec:8a: a4:cc:3e:73:cc:56:2f:02:d4:ba:97:6c:da:21:be: 85:7c:ef:7e:73:47:7f:5d:69:24:3b:25:0f:e3:82: 2c:67:28:5e:af:66:54:bf:52:35:91:ab:6a:62:8b: 94:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3D:40:E2:CC:6F:3F:68:C9:C9:63:FD:0F:C1:B4:43:8C:CE:C9:FA X509v3 Authority Key Identifier: keyid:77:2F:8E:25:78:43:73:2E:C5:ED:0F:61:A1:3A:CA:BE:E6:09:0A:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f74111-5413-4048-9ab9-96cac787582b/1/dy-OJXhDcy7F7Q9hoTrKvuYJCpY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:40:51:5a:f5:3c:74:1e:6a:35:73:65:8c:57:20:23:82:74: ea:c3:74:c5:79:39:ea:67:df:a1:1c:03:07:37:eb:a3:7e:02: 9c:bd:0c:75:0e:d8:77:d5:32:28:3a:e1:7c:68:10:f0:58:e3: 47:99:a4:d7:10:f4:b6:95:c9:60:ef:5f:29:bf:4c:bb:91:63: e7:11:40:cb:a3:d9:30:a5:d4:e1:9d:19:6b:b2:72:8b:9e:1f: d8:74:ad:e4:6b:a5:99:99:be:11:c1:f3:df:e6:0d:d8:72:d1: 04:bc:4e:c3:22:c8:02:6b:73:b8:4f:01:a4:89:63:58:8d:80: ab:c1:72:6d:39:4d:a3:85:9c:3b:c2:e4:f7:df:fe:0d:8a:ba: f8:53:bd:3c:50:2a:17:b3:37:3b:c8:ea:f5:7a:7f:21:75:64: f9:6d:9b:3d:d4:4d:33:c3:dd:b9:74:23:1a:f4:90:61:81:e2: 00:f9:ff:72:30:c4:14:c6:9c:45:28:9f:84:ef:ac:0b:9e:9a: 14:af:f8:48:a8:36:8a:81:1b:e0:dd:fc:41:73:dc:c0:c4:77: 2d:0a:e7:57:34:72:07:50:31:cc:21:8a:fa:f0:04:17:44:4c: 9f:fd:1d:2c:12:34:99:42:ab:7f:c6:c9:c6:29:fe:60:ed:18: 06:a5:75:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKJA0IKMRdvpOngoli4QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MmY4ZTI1Nzg0MzczMmVjNWVkMGY2MWExM2FjYWJlZTYw OTBhOTYwHhcNMjYwMjA5MTgwMTE3WhcNMjYwMjEwMTgwMTE3WjAzMTEwLwYDVQQD EyhiZTNkNDBlMmNjNmYzZjY4YzljOTYzZmQwZmMxYjQ0MzhjY2VjOWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunhXl81HvkDZVLOFhj76UStnyr8E tmngYy+WJnR53PTHqOmHAWwyAUmuZjzf6+KIOVy2O0C7Ttc+qFKlSOj2u0zCcJZ7 ZOytuag2zF1iMpb+AqxMm7nEcY9yCRL7mLgk9sXlmuRR6UM9SsBByaAdCvlXWUPs VHZoMmassa3mxPLRoxMN99rXq2Q+s4fPHWLZ9gcl0hEv0KHqorla161FrOUhnOLJ 3vrZ+85pfmj086yvpxxIa8aFzI9jPpfYgJo/Iya2ijQjbEdP2zsPGsAG7IqkzD5z zFYvAtS6l2zaIb6FfO9+c0d/XWkkOyUP44IsZyher2ZUv1I1katqYouURQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL49QOLMbz9oyclj/Q/BtEOMzsn6MB8GA1UdIwQY MBaAFHcvjiV4Q3Muxe0PYaE6yr7mCQqWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjkt OTZjYWM3ODc1ODJiLzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9mNzQxMTEtNTQxMy00MDQ4LTlhYjktOTZjYWM3ODc1ODJi LzEvZHktT0pYaERjeTdGN1E5aG9Uckt2dVlKQ3BZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEBRWvU8 dB5qNXNljFcgI4J06sN0xXk56mffoRwDBzfro34CnL0MdQ7Yd9UyKDrhfGgQ8Fjj R5mk1xD0tpXJYO9fKb9Mu5Fj5xFAy6PZMKXU4Z0Za7Jyi54f2HSt5GulmZm+EcHz 3+YN2HLRBLxOwyLIAmtzuE8BpIljWI2Aq8FybTlNo4WcO8Lk99/+DYq6+FO9PFAq F7M3O8jq9Xp/IXVk+W2bPdRNM8PduXQjGvSQYYHiAPn/cjDEFMacRSifhO+sC56a FK/4SKg2ioEb4N38QXPcwMR3LQrnVzRyB1AxzCGK+vAEF0RMn/0dLBI0mUKrf8bJ xin+YO0YBqV1tw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:04 2026 by rpki-client