This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft File: DwxSlP25wrH3QxZPyWDAB-a_5gE.mft (raw, json) Hash identifier: gC6XGvWbqAi1R0l1ZMGzFC/TiwiX3ar8RgRepFutEmM= Subject key identifier: 36:DE:AC:72:45:AA:AC:DB:80:21:8C:35:52:E5:A8:90:AE:FA:33:94 Authority key identifier: 0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01 Certificate issuer: /CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601 Certificate serial: 019C43227A01AAE7C1BA5C9B9A760A3A8901 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:00:58 +0000 Manifest this update: Mon 09 Feb 2026 16:00:58 +0000 Manifest next update: Tue 10 Feb 2026 16:00:58 +0000 Files and hashes: 1: DwxSlP25wrH3QxZPyWDAB-a_5gE.crl (hash: RM7BVd3Vjkn448LfH2Mjtq2cb2Is0KPOsPufMg1ofWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:7a:01:aa:e7:c1:ba:5c:9b:9a:76:0a:3a:89:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0c5294fdb9c2b1f743164fc960c007e6bfe601 Validity Not Before: Feb 9 16:00:58 2026 GMT Not After : Feb 10 16:00:58 2026 GMT Subject: CN=36deac7245aaacdb80218c3552e5a890aefa3394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3b:aa:24:13:8d:cd:f5:56:b9:e3:1e:10:4c: 43:e1:2d:26:50:73:56:82:20:ea:fd:33:1a:6d:13: 2b:91:18:b6:aa:7c:a7:0d:05:8d:b9:65:81:af:d6: fe:c6:3b:4b:c0:6f:20:b1:76:60:4b:46:63:f4:5d: 3a:88:3d:75:9b:ae:0e:39:00:61:e4:83:65:21:0b: 38:75:48:c4:20:72:9b:e7:0e:28:19:6f:ec:d2:ab: f6:ad:3d:c3:33:7f:7e:61:91:22:57:22:eb:a6:0f: bb:d4:65:31:eb:fe:88:09:17:92:f3:20:7e:ae:4e: 4a:8b:6c:9b:07:7e:1a:05:fb:1f:6c:6c:c7:b6:aa: 03:b8:4f:95:d4:d6:0c:2a:df:ee:19:24:c7:83:9c: 1d:a5:3d:41:e5:5f:d2:c6:2a:e6:0e:d2:f3:8f:54: a5:f5:15:e0:32:1e:65:83:11:d2:3e:67:fa:28:d3: a6:d9:6b:ce:b4:98:d4:0a:c9:0d:2c:b6:34:a3:80: 86:e3:7f:e3:6c:99:5b:e6:5b:41:b7:23:eb:9b:53: d1:9e:6d:20:df:18:72:24:1a:1e:70:ea:aa:da:e1: 01:82:b7:3f:d4:64:f5:f2:03:19:3c:28:e0:e7:45: 68:3a:15:7e:39:86:5e:4d:47:00:cd:5a:7f:8f:2c: 77:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:DE:AC:72:45:AA:AC:DB:80:21:8C:35:52:E5:A8:90:AE:FA:33:94 X509v3 Authority Key Identifier: keyid:0F:0C:52:94:FD:B9:C2:B1:F7:43:16:4F:C9:60:C0:07:E6:BF:E6:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwxSlP25wrH3QxZPyWDAB-a_5gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8c918e-3aaf-4aa6-8c4d-24ed40c9f389/1/DwxSlP25wrH3QxZPyWDAB-a_5gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7b:83:7a:ee:68:21:52:b2:1e:18:76:91:28:50:d9:a8:75: ee:4f:29:f1:92:11:7e:14:54:f8:02:1b:33:d2:b5:5b:7f:b8: 8f:a9:01:97:c3:fd:7d:61:a6:80:11:8e:3c:5c:70:bc:a2:ff: b6:76:59:b3:43:5b:50:2d:a7:11:b8:b8:15:00:ba:94:c1:ed: 7f:46:9b:36:db:00:d0:be:cf:98:e7:c4:84:ff:29:94:14:dc: f2:82:a6:32:82:1f:d6:a5:80:43:da:14:9f:7c:9c:4f:15:c9: 1a:e7:4c:06:de:0b:1b:a8:f9:3a:06:82:e4:8f:1f:5b:42:62: d5:d6:1e:d8:4e:85:b2:e4:50:cb:db:2e:5c:6d:6a:3f:6f:e7: 49:94:a2:c2:21:68:84:a1:06:41:3e:1c:0e:b3:36:3c:62:18: da:89:c0:c4:56:87:80:87:bb:27:b9:3e:c3:7d:9e:8e:8f:75: ad:b7:d9:7e:75:09:5d:6c:64:6e:bf:65:bf:b0:47:c9:03:34: 5c:98:da:59:0b:6f:18:28:8e:ed:84:18:45:c3:f1:fb:6f:bd: 53:f5:43:5e:2a:86:1e:53:c1:64:26:79:cf:72:07:71:e4:0f: ed:c7:83:54:a4:83:c1:46:85:2f:e7:97:d1:d1:0b:4b:9d:ae: 90:70:0c:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInoBqufBulybmnYKOokBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGM1Mjk0ZmRiOWMyYjFmNzQzMTY0ZmM5NjBjMDA3ZTZi ZmU2MDEwHhcNMjYwMjA5MTYwMDU4WhcNMjYwMjEwMTYwMDU4WjAzMTEwLwYDVQQD EygzNmRlYWM3MjQ1YWFhY2RiODAyMThjMzU1MmU1YTg5MGFlZmEzMzk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjuqJBONzfVWueMeEExD4S0mUHNW giDq/TMabRMrkRi2qnynDQWNuWWBr9b+xjtLwG8gsXZgS0Zj9F06iD11m64OOQBh 5INlIQs4dUjEIHKb5w4oGW/s0qv2rT3DM39+YZEiVyLrpg+71GUx6/6ICReS8yB+ rk5Ki2ybB34aBfsfbGzHtqoDuE+V1NYMKt/uGSTHg5wdpT1B5V/SxirmDtLzj1Sl 9RXgMh5lgxHSPmf6KNOm2WvOtJjUCskNLLY0o4CG43/jbJlb5ltBtyPrm1PRnm0g 3xhyJBoecOqq2uEBgrc/1GT18gMZPCjg50VoOhV+OYZeTUcAzVp/jyx3vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDberHJFqqzbgCGMNVLlqJCu+jOUMB8GA1UdIwQY MBaAFA8MUpT9ucKx90MWT8lgwAfmv+YBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQt MjRlZDQwYzlmMzg5LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC84YzkxOGUtM2FhZi00YWE2LThjNGQtMjRlZDQwYzlmMzg5 LzEvRHd4U2xQMjV3ckgzUXhaUHlXREFCLWFfNWdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdnuDeu5o IVKyHhh2kShQ2ah17k8p8ZIRfhRU+AIbM9K1W3+4j6kBl8P9fWGmgBGOPFxwvKL/ tnZZs0NbUC2nEbi4FQC6lMHtf0abNtsA0L7PmOfEhP8plBTc8oKmMoIf1qWAQ9oU n3ycTxXJGudMBt4LG6j5OgaC5I8fW0Ji1dYe2E6FsuRQy9suXG1qP2/nSZSiwiFo hKEGQT4cDrM2PGIY2onAxFaHgIe7J7k+w32ejo91rbfZfnUJXWxkbr9lv7BHyQM0 XJjaWQtvGCiO7YQYRcPx+2+9U/VDXiqGHlPBZCZ5z3IHceQP7ceDVKSDwUaFL+eX 0dELS52ukHAM2g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:49 2026 by rpki-client