This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft File: dLJ8XVaEhkhT31uBVyIS7eMizgo.mft (raw, json) Hash identifier: aezNp6nlEX3WW+n4xwzcZtuFi5NKKIzFancFZM3blHQ= Subject key identifier: 63:53:E9:AE:71:E6:35:93:C9:CB:66:56:59:A5:4B:87:5D:6B:E8:DF Authority key identifier: 74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A Certificate issuer: /CN=74b27c5d5684864853df5b81572212ede322ce0a Certificate serial: 019C427D0CEBFD6AFC349AB05CB13213C259 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft Manifest number: 04E4 Signing time: Mon 09 Feb 2026 13:00:17 +0000 Manifest this update: Mon 09 Feb 2026 13:00:17 +0000 Manifest next update: Tue 10 Feb 2026 13:00:17 +0000 Files and hashes: 1: dLJ8XVaEhkhT31uBVyIS7eMizgo.crl (hash: XiKhfwYuJ5Kmre7s0mOywLT64mJtFpRhXb4QL1nAxME=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0c:eb:fd:6a:fc:34:9a:b0:5c:b1:32:13:c2:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74b27c5d5684864853df5b81572212ede322ce0a Validity Not Before: Feb 9 13:00:17 2026 GMT Not After : Feb 10 13:00:17 2026 GMT Subject: CN=6353e9ae71e63593c9cb665659a54b875d6be8df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8c:a6:99:78:63:69:86:20:cb:23:dd:7b:4a: ea:c9:4d:50:31:85:01:b3:e6:13:25:c0:95:67:cc: dd:26:1e:5b:b2:ab:c1:5d:6e:f3:f9:7f:d2:b8:d3: 89:fc:af:3a:c7:24:f3:41:7c:17:ec:c8:a9:11:dd: 7a:c3:17:8c:e7:08:09:31:d0:25:03:c5:df:de:ba: 75:97:31:09:21:4d:19:56:3d:67:64:3f:79:d2:34: fd:ac:3f:6b:5f:41:13:4d:e4:54:4e:78:76:42:64: 65:9f:ca:47:7b:ed:50:56:d3:47:6c:63:37:89:19: fd:a3:a2:40:ca:40:bf:23:56:ce:f2:78:5a:0b:b8: 99:2c:74:22:27:dc:6b:63:57:fc:00:b5:79:a7:fa: 68:2d:7c:82:a2:01:62:8a:d9:c4:49:eb:e5:19:c2: 8a:ea:97:19:3f:ad:5d:ef:1b:a7:9c:89:9e:e0:6a: 83:de:f2:00:51:9d:21:a1:8d:5b:38:5d:ca:fb:9a: 3e:c1:dd:f5:ca:11:0b:5d:48:b0:71:8f:dc:6f:5b: c4:46:c3:e0:cf:ad:a1:b1:21:3f:94:22:8f:89:69: 03:35:63:16:26:2f:6b:87:28:9e:f5:dc:e0:63:a2: 48:af:51:57:9b:6e:e5:dc:7d:fc:28:75:fb:17:67: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:53:E9:AE:71:E6:35:93:C9:CB:66:56:59:A5:4B:87:5D:6B:E8:DF X509v3 Authority Key Identifier: keyid:74:B2:7C:5D:56:84:86:48:53:DF:5B:81:57:22:12:ED:E3:22:CE:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLJ8XVaEhkhT31uBVyIS7eMizgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/299656-744a-4daa-8cfd-010a9856f785/1/dLJ8XVaEhkhT31uBVyIS7eMizgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:3b:9f:08:69:b0:64:0c:6a:43:99:0e:27:40:51:75:2b:aa: 04:ca:a8:32:ce:ed:f7:54:e0:55:99:c5:ec:1e:42:3a:94:b5: 06:1f:4d:4a:f1:c1:2f:f7:2c:42:6e:b5:26:e1:8d:4e:b5:f8: 4d:7e:79:9c:45:88:4b:e8:cc:48:8f:01:a3:52:30:1d:bf:4e: e6:1b:f0:53:45:6f:7b:aa:d3:92:9f:94:e7:bc:6f:e7:06:09: ca:6a:50:2b:32:d6:ba:4a:bf:17:5f:e2:b9:df:d1:57:f1:f1: da:e9:87:da:23:ba:cd:14:bd:42:37:70:77:ec:ed:07:28:60: 7a:a6:92:b8:1e:c4:01:f8:55:80:b0:de:b8:1b:34:33:7b:2a: db:16:93:86:79:77:ce:cc:21:53:2b:f1:03:13:c1:28:2a:a6: cf:37:f6:f1:eb:2a:ce:88:49:a8:6d:ec:37:a1:de:4d:f9:a9: 5e:2d:6e:f1:6b:d7:33:ad:2f:13:3b:f0:55:82:41:67:ce:a1: c7:09:94:a5:97:de:b7:52:5d:54:1f:6f:e9:80:6d:8c:47:ef: 9d:82:44:42:77:2c:85:f1:e2:97:6c:d0:a0:1a:93:ca:42:f4: 97:ba:88:37:f7:ff:1b:f3:3e:37:5f:da:33:fb:92:4b:63:65: 71:f3:67:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQzr/Wr8NJqwXLEyE8JZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YjI3YzVkNTY4NDg2NDg1M2RmNWI4MTU3MjIxMmVkZTMy MmNlMGEwHhcNMjYwMjA5MTMwMDE3WhcNMjYwMjEwMTMwMDE3WjAzMTEwLwYDVQQD Eyg2MzUzZTlhZTcxZTYzNTkzYzljYjY2NTY1OWE1NGI4NzVkNmJlOGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYymmXhjaYYgyyPde0rqyU1QMYUB s+YTJcCVZ8zdJh5bsqvBXW7z+X/SuNOJ/K86xyTzQXwX7MipEd16wxeM5wgJMdAl A8Xf3rp1lzEJIU0ZVj1nZD950jT9rD9rX0ETTeRUTnh2QmRln8pHe+1QVtNHbGM3 iRn9o6JAykC/I1bO8nhaC7iZLHQiJ9xrY1f8ALV5p/poLXyCogFiitnESevlGcKK 6pcZP61d7xunnIme4GqD3vIAUZ0hoY1bOF3K+5o+wd31yhELXUiwcY/cb1vERsPg z62hsSE/lCKPiWkDNWMWJi9rhyie9dzgY6JIr1FXm27l3H38KHX7F2eZGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNT6a5x5jWTyctmVlmlS4dda+jfMB8GA1UdIwQY MBaAFHSyfF1WhIZIU99bgVciEu3jIs4KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZExKOFhWYUVoa2hUMzF1QlZ5SVM3ZU1pemdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yOTk2NTYtNzQ0YS00ZGFhLThjZmQt MDEwYTk4NTZmNzg1LzEvZExKOFhWYUVoa2hUMzF1QlZ5SVM3ZU1pemdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yOTk2NTYtNzQ0YS00ZGFhLThjZmQtMDEwYTk4NTZmNzg1 LzEvZExKOFhWYUVoa2hUMzF1QlZ5SVM3ZU1pemdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbjufCGmw ZAxqQ5kOJ0BRdSuqBMqoMs7t91TgVZnF7B5COpS1Bh9NSvHBL/csQm61JuGNTrX4 TX55nEWIS+jMSI8Bo1IwHb9O5hvwU0Vve6rTkp+U57xv5wYJympQKzLWukq/F1/i ud/RV/Hx2umH2iO6zRS9Qjdwd+ztByhgeqaSuB7EAfhVgLDeuBs0M3sq2xaThnl3 zswhUyvxAxPBKCqmzzf28esqzohJqG3sN6HeTfmpXi1u8WvXM60vEzvwVYJBZ86h xwmUpZfet1JdVB9v6YBtjEfvnYJEQncshfHil2zQoBqTykL0l7qIN/f/G/M+N1/a M/uSS2NlcfNnRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:02 2026 by rpki-client