This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json) Hash identifier: oJAbf2nER6h1dRaSrOTYPxAf1tyUVZoWN6vboAEsCcw= Subject key identifier: F7:CE:4D:E9:4D:7F:C0:EF:80:84:A0:38:A1:52:7A:C6:5A:89:6A:F1 Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82 Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582 Certificate serial: 019C4390D06F53E4A38961D866FA3BE2F52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft Manifest number: 0B Signing time: Mon 09 Feb 2026 18:01:29 +0000 Manifest this update: Mon 09 Feb 2026 18:01:29 +0000 Manifest next update: Tue 10 Feb 2026 18:01:29 +0000 Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=) 2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: /oieG1GT4bK8T4g77bwXV5WOOtgzgrLrqN+uvf0drVI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:d0:6f:53:e4:a3:89:61:d8:66:fa:3b:e2:f5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582 Validity Not Before: Feb 9 18:01:29 2026 GMT Not After : Feb 10 18:01:29 2026 GMT Subject: CN=f7ce4de94d7fc0ef8084a038a1527ac65a896af1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:11:d2:81:1d:87:e7:4d:a7:4a:19:1c:49:09: 21:38:a5:62:4c:bd:da:f7:7b:97:65:a8:a4:52:6f: 85:57:34:38:2d:31:83:99:e4:ba:46:9f:2a:e1:da: ea:4f:cc:e6:75:b4:2b:aa:6b:ef:43:ec:ac:40:9d: 5c:3f:94:20:b2:5a:15:7a:84:8f:d8:9c:77:05:24: a8:2e:dd:9c:d5:6a:01:a0:89:33:1f:25:85:ae:a4: 0c:99:73:d4:0e:3c:24:e8:3a:14:da:c8:9f:be:84: 93:9a:fe:95:26:02:7c:23:58:2d:90:04:1c:bd:d4: 77:bb:94:62:a9:63:17:4c:a9:e5:60:4a:4a:39:99: 91:0e:b3:bf:4f:28:42:ef:36:1c:f5:c9:83:28:6b: 5f:01:2c:30:d8:65:3c:be:ad:e1:26:cd:ec:45:58: 9f:ec:de:ac:e8:68:2c:c8:74:42:0e:90:55:f7:d6: d4:74:70:aa:6c:9a:7a:51:1a:1e:fa:e5:87:2b:c4: 95:8b:d1:96:3b:43:63:fe:ec:c9:41:b3:9a:68:a2: 2d:e1:fc:ac:9b:cc:35:f9:80:94:f2:25:21:72:74: 2a:1f:c4:fc:c1:ba:17:61:2c:c9:73:e1:17:85:ec: 3c:fe:96:55:fc:36:7c:31:e7:37:4e:89:cf:24:b2: 95:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:CE:4D:E9:4D:7F:C0:EF:80:84:A0:38:A1:52:7A:C6:5A:89:6A:F1 X509v3 Authority Key Identifier: keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3b:02:5d:0e:fb:59:48:0b:74:e2:67:64:32:63:6c:55:a2: f5:de:be:97:ac:a8:39:11:bb:ea:45:20:16:58:6c:8d:de:5f: e7:a3:6f:27:24:e5:32:d9:2b:cb:ca:23:f1:a5:9c:ce:d2:f8: 86:fd:fb:b0:32:e3:25:45:d5:5d:39:78:03:0d:b6:b5:a2:91: 09:c8:c2:47:6b:68:6a:5d:4a:5f:4c:a1:3f:00:88:33:bc:b9: 4a:b9:6e:52:f4:31:7c:c3:dc:4d:68:49:d6:40:56:7b:ea:7d: f2:9c:7b:91:6a:85:61:86:bd:c0:ef:ff:d3:d3:93:4f:8b:c8: ce:6b:61:49:da:1f:67:6b:76:32:f7:7b:20:40:4a:9a:b4:d0: 9a:31:ef:3d:f0:db:41:9a:32:39:e9:f8:60:11:cf:7b:b5:f7: 69:8b:79:08:da:67:c1:51:b1:83:11:a3:73:f8:ce:64:b3:7b: bf:12:90:00:9b:4c:66:bc:e2:7e:13:58:a9:25:58:a2:12:21: 2b:25:56:12:45:a2:93:13:12:cd:4b:fa:3c:68:64:d3:c4:2e: c6:cf:3b:3f:57:a3:c4:5f:e9:b4:e2:19:83:69:93:0a:8c:67: e4:ec:99:cc:c3:7a:f8:cf:03:68:16:35:47:4e:80:36:4d:6f: 97:42:f0:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkNBvU+SjiWHYZvo74vUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDNmYjQyNWJjMWMzNTI1NzdlMGE5YWRlNWJmZjU5YzBi NGM1ODIwHhcNMjYwMjA5MTgwMTI5WhcNMjYwMjEwMTgwMTI5WjAzMTEwLwYDVQQD EyhmN2NlNGRlOTRkN2ZjMGVmODA4NGEwMzhhMTUyN2FjNjVhODk2YWYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArRHSgR2H502nShkcSQkhOKViTL3a 93uXZaikUm+FVzQ4LTGDmeS6Rp8q4drqT8zmdbQrqmvvQ+ysQJ1cP5QgsloVeoSP 2Jx3BSSoLt2c1WoBoIkzHyWFrqQMmXPUDjwk6DoU2sifvoSTmv6VJgJ8I1gtkAQc vdR3u5RiqWMXTKnlYEpKOZmRDrO/TyhC7zYc9cmDKGtfASww2GU8vq3hJs3sRVif 7N6s6GgsyHRCDpBV99bUdHCqbJp6URoe+uWHK8SVi9GWO0Nj/uzJQbOaaKIt4fys m8w1+YCU8iUhcnQqH8T8wboXYSzJc+EXhew8/pZV/DZ8Mec3TonPJLKV3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPfOTelNf8DvgISgOKFSesZaiWrxMB8GA1UdIwQY MBaAFA5D+0JbwcNSV34Kmt5b/1nAtMWCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWIt OTExZjFkZGRkNjZiLzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9mZDFhNDUtMzExOC00MTFkLThlMWItOTExZjFkZGRkNjZi LzEvRGtQN1FsdkJ3MUpYZmdxYTNsdl9XY0MweFlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAADsCXQ77 WUgLdOJnZDJjbFWi9d6+l6yoORG76kUgFlhsjd5f56NvJyTlMtkry8oj8aWcztL4 hv37sDLjJUXVXTl4Aw22taKRCcjCR2toal1KX0yhPwCIM7y5SrluUvQxfMPcTWhJ 1kBWe+p98px7kWqFYYa9wO//09OTT4vIzmthSdofZ2t2Mvd7IEBKmrTQmjHvPfDb QZoyOen4YBHPe7X3aYt5CNpnwVGxgxGjc/jOZLN7vxKQAJtMZrzifhNYqSVYohIh KyVWEkWikxMSzUv6PGhk08Quxs87P1ejxF/ptOIZg2mTCoxn5OyZzMN6+M8DaBY1 R06ANk1vl0Lw2A== -----END CERTIFICATE-----Generated at Mon Feb 9 20:46:47 2026 by rpki-client