This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft File: DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft (raw, json) Hash identifier: zFi1ue9Vb2tAFyHkaqWAp07kLPjMy8IpaJRvXYYsaM8= Subject key identifier: 9C:C3:45:59:EA:2E:8A:8F:D1:39:4C:D9:B4:1A:4E:13:95:14:EB:C7 Authority key identifier: 0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB Certificate issuer: /CN=0c053554c818674cd546b799dd44785a564c56cb Certificate serial: 019C4322BD651F63D3B9DD224CAC245302FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft Manifest number: 0D9B Signing time: Mon 09 Feb 2026 16:01:15 +0000 Manifest this update: Mon 09 Feb 2026 16:01:15 +0000 Manifest next update: Tue 10 Feb 2026 16:01:15 +0000 Files and hashes: 1: DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl (hash: xrmBLfC7VT6A+AM0yx0bVs9vWra/hBpd1pg+ngMRhLE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:bd:65:1f:63:d3:b9:dd:22:4c:ac:24:53:02:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c053554c818674cd546b799dd44785a564c56cb Validity Not Before: Feb 9 16:01:15 2026 GMT Not After : Feb 10 16:01:15 2026 GMT Subject: CN=9cc34559ea2e8a8fd1394cd9b41a4e139514ebc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:99:6a:5f:bf:2c:d1:c8:a2:58:cb:30:40:62: 90:a3:f4:2f:9f:dd:ec:3c:d0:8d:ec:21:16:24:7f: 58:22:9a:0b:a3:6e:df:e6:9d:4b:db:d8:6c:38:19: 9f:c7:48:14:80:a0:9d:c0:09:df:70:c2:1c:32:7a: 3d:af:5c:4f:5d:3c:40:72:94:66:54:22:b6:69:79: b5:ce:6c:aa:87:79:42:ea:61:ba:c0:10:a2:9f:7b: 1b:df:f0:28:15:2c:08:59:f5:bc:d0:0c:c0:13:dd: 92:d9:0c:22:35:e1:85:f0:26:cf:50:d5:a6:5d:82: 8e:26:4c:69:a4:56:17:d1:db:49:2e:9e:cf:0f:34: 87:ce:36:2f:18:fb:97:88:25:f0:cc:4d:e2:c0:a3: 6c:84:73:09:5a:9e:ea:95:8a:71:b5:36:ec:b1:e3: 99:bd:1c:99:0c:be:14:39:c1:e7:3e:18:85:ea:ac: 7c:81:74:83:a3:bb:1d:cd:c8:f9:6a:4b:f0:07:93: 82:ff:77:db:3a:92:ea:9e:62:b9:cf:f1:fc:0e:a1: aa:78:98:20:29:76:14:89:e4:d6:5c:18:3b:65:bd: c4:01:91:2a:91:c6:04:f7:cf:9b:01:2a:df:97:d7: f2:d0:18:18:28:2c:95:fb:92:6c:7b:04:12:55:9e: f5:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C3:45:59:EA:2E:8A:8F:D1:39:4C:D9:B4:1A:4E:13:95:14:EB:C7 X509v3 Authority Key Identifier: keyid:0C:05:35:54:C8:18:67:4C:D5:46:B7:99:DD:44:78:5A:56:4C:56:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAU1VMgYZ0zVRreZ3UR4WlZMVss.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/460f8a-6c39-4622-b40a-bf9c79149462/1/DAU1VMgYZ0zVRreZ3UR4WlZMVss.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:38:9c:33:4d:46:74:4c:11:f0:82:86:a3:72:e6:30:c2:aa: c5:4e:ff:ad:e7:1a:18:6d:b6:15:f3:a5:96:ce:57:d7:06:7a: c3:e8:15:a8:73:4e:7b:84:c7:40:eb:18:01:af:0e:bf:20:af: b4:29:87:c2:9e:13:67:19:59:3e:d8:e8:bd:3f:84:e0:fa:4a: cf:b0:da:fe:33:d2:60:01:1e:7e:b4:10:c8:b9:fa:ae:e3:80: 68:31:46:a1:af:bb:67:e6:e2:c2:0f:81:60:e3:2d:c3:a6:9f: 3c:8c:b7:40:c0:c5:fb:ae:2b:b4:3e:7c:e2:75:af:60:01:a8: 16:4c:93:5e:f4:77:2a:4e:91:49:f0:64:86:18:6d:22:a8:83: dc:3f:b9:69:2c:2a:51:a2:18:14:f8:04:dd:09:c9:ac:0a:7a: 51:d2:25:c4:a6:53:5a:b6:3a:e2:65:3f:59:b8:33:12:37:f3: 5f:d4:7b:48:59:f5:0a:1d:7d:b5:78:fb:d5:f3:7c:8e:3c:2c: b1:c0:62:1a:46:67:23:94:2d:7d:38:13:bd:b8:d4:aa:a2:8c: a6:22:42:a7:50:1e:3c:13:75:1b:39:af:94:d0:02:de:de:00: e3:05:dc:2d:57:c7:37:ed:d0:ae:d3:4e:a5:96:4f:3c:f4:2e: dc:4b:b0:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIr1lH2PTud0iTKwkUwL8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMDUzNTU0YzgxODY3NGNkNTQ2Yjc5OWRkNDQ3ODVhNTY0 YzU2Y2IwHhcNMjYwMjA5MTYwMTE1WhcNMjYwMjEwMTYwMTE1WjAzMTEwLwYDVQQD Eyg5Y2MzNDU1OWVhMmU4YThmZDEzOTRjZDliNDFhNGUxMzk1MTRlYmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJlqX78s0ciiWMswQGKQo/Qvn93s PNCN7CEWJH9YIpoLo27f5p1L29hsOBmfx0gUgKCdwAnfcMIcMno9r1xPXTxAcpRm VCK2aXm1zmyqh3lC6mG6wBCin3sb3/AoFSwIWfW80AzAE92S2QwiNeGF8CbPUNWm XYKOJkxppFYX0dtJLp7PDzSHzjYvGPuXiCXwzE3iwKNshHMJWp7qlYpxtTbsseOZ vRyZDL4UOcHnPhiF6qx8gXSDo7sdzcj5akvwB5OC/3fbOpLqnmK5z/H8DqGqeJgg KXYUieTWXBg7Zb3EAZEqkcYE98+bASrfl9fy0BgYKCyV+5JsewQSVZ71PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzDRVnqLoqP0TlM2bQaThOVFOvHMB8GA1UdIwQY MBaAFAwFNVTIGGdM1Ua3md1EeFpWTFbLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEt YmY5Yzc5MTQ5NDYyLzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80NjBmOGEtNmMzOS00NjIyLWI0MGEtYmY5Yzc5MTQ5NDYy LzEvREFVMVZNZ1laMHpWUnJlWjNVUjRXbFpNVnNzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAczicM01G dEwR8IKGo3LmMMKqxU7/recaGG22FfOlls5X1wZ6w+gVqHNOe4THQOsYAa8OvyCv tCmHwp4TZxlZPtjovT+E4PpKz7Da/jPSYAEefrQQyLn6ruOAaDFGoa+7Z+biwg+B YOMtw6afPIy3QMDF+64rtD584nWvYAGoFkyTXvR3Kk6RSfBkhhhtIqiD3D+5aSwq UaIYFPgE3QnJrAp6UdIlxKZTWrY64mU/WbgzEjfzX9R7SFn1Ch19tXj71fN8jjws scBiGkZnI5QtfTgTvbjUqqKMpiJCp1AePBN1GzmvlNAC3t4A4wXcLVfHN+3QrtNO pZZPPPQu3Euwow== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:56 2026 by rpki-client