This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft File: Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft (raw, json) Hash identifier: hYmRCJAbNan+tJq1QqdLZ8Plz3s1jNLjjiaqkXf6Uzg= Subject key identifier: DF:74:47:7E:7D:AD:C8:42:5F:6F:ED:3C:26:50:49:63:CD:09:3A:AE Authority key identifier: 0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 Certificate issuer: /CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Certificate serial: 019C41D8EC4C0D56E5D04A3128ACDA38ADE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft Manifest number: 0D5D Signing time: Mon 09 Feb 2026 10:01:01 +0000 Manifest this update: Mon 09 Feb 2026 10:01:01 +0000 Manifest next update: Tue 10 Feb 2026 10:01:01 +0000 Files and hashes: 1: Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl (hash: 9R7XzGGbvfcR+63lBR+TjM1L46iJof6U3Xp6mOgpxRs=) 2: e8A6sXBGduUCZGJ5-6Y7kMDswOw.roa (hash: FM6aG3gkOk8roOMZ1iwyahhjRPg2yzj4NPtQ7Gqvp50=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:ec:4c:0d:56:e5:d0:4a:31:28:ac:da:38:ad:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ecabe061f2d890a8c8b4181adbca6ca943bd222 Validity Not Before: Feb 9 10:01:01 2026 GMT Not After : Feb 10 10:01:01 2026 GMT Subject: CN=df74477e7dadc8425f6fed3c26504963cd093aae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:4f:ce:bb:67:6f:37:2b:83:1a:0c:a2:66:22: bd:8e:28:60:30:ab:49:55:17:67:c3:34:9d:7a:5d: 9d:7b:f4:c1:40:0f:36:66:61:f9:53:ee:90:47:d7: ad:e7:7c:18:33:d7:aa:9a:fe:16:96:16:1d:fe:b0: b4:7d:83:23:a2:a1:33:d9:5b:d0:b2:e2:df:87:09: 33:2e:ba:b9:92:ed:66:92:94:42:02:f5:7f:3c:33: dd:d7:ef:73:53:3a:ca:21:69:2f:ed:5c:0c:f9:48: 7d:ac:6f:2e:97:09:a3:eb:9f:10:bd:29:df:f0:3e: 0f:26:b9:d0:94:f5:d2:0c:df:79:d8:f1:23:a6:95: 4c:88:9a:39:f5:af:64:6d:61:ae:86:7c:4c:d7:ff: bc:27:03:2d:98:92:bd:66:74:e0:29:19:ad:a4:94: 6f:ed:9e:3a:b6:84:24:b5:1c:77:de:a0:22:b7:08: ac:cd:54:a8:75:9d:d6:d2:00:e3:59:41:c0:fc:10: cc:2d:a7:96:c3:07:6f:d2:e6:af:36:a1:22:f0:17: fb:72:36:5e:41:b0:6a:bc:07:77:41:b6:7c:3f:21: 63:ce:8c:3a:67:6e:24:34:1c:bf:a9:19:29:92:fd: 52:12:97:1a:5b:e9:70:63:5d:e6:cf:8c:c2:2d:18: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:74:47:7E:7D:AD:C8:42:5F:6F:ED:3C:26:50:49:63:CD:09:3A:AE X509v3 Authority Key Identifier: keyid:0E:CA:BE:06:1F:2D:89:0A:8C:8B:41:81:AD:BC:A6:CA:94:3B:D2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dsq-Bh8tiQqMi0GBrbymypQ70iI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/2fd019-773d-4c99-acf5-04a1f95413f7/1/Dsq-Bh8tiQqMi0GBrbymypQ70iI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:2f:dd:bb:c1:a4:77:d3:7f:18:63:3f:fc:52:0e:eb:00:53: 12:85:27:90:6c:db:10:fe:58:45:7e:84:56:85:75:69:f9:85: 01:d1:48:10:eb:88:84:fe:7e:ae:fb:c0:20:c3:36:80:01:3b: 59:06:c0:9c:41:af:6b:da:a9:c4:f8:72:e2:09:18:08:e5:45: 0c:73:54:93:b7:3b:6f:b2:11:d2:cf:32:78:40:be:17:27:87: 61:88:9d:3a:84:ac:f0:8e:25:64:59:5a:62:8e:4f:fd:cb:68: 70:1f:6a:40:15:3d:cb:00:7c:8b:04:85:6b:e7:b1:5c:f0:b3: 3b:cd:45:78:88:8d:1e:ad:80:c8:eb:ac:fe:b2:b1:32:70:c6: 98:e1:a4:f7:8e:c2:c0:36:fd:c2:73:1c:c7:75:86:ea:60:cf: 4e:b6:97:27:87:43:a4:fa:59:15:0d:84:f8:af:18:e3:83:cb: bf:93:b2:c3:91:55:08:4d:82:7c:88:66:b0:61:1a:b2:ef:6a: 08:cc:3b:f3:61:7d:dc:11:3b:d4:e1:5c:7c:d4:f1:11:6a:49: 39:30:cc:98:cc:75:92:b8:29:58:fb:0f:21:cc:98:75:50:c7: 9e:17:75:c2:eb:9d:f2:ea:7b:7a:9c:e2:3c:56:98:18:41:5d: 8d:cf:58:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OxMDVbl0EoxKKzaOK3lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlY2FiZTA2MWYyZDg5MGE4YzhiNDE4MWFkYmNhNmNhOTQz YmQyMjIwHhcNMjYwMjA5MTAwMTAxWhcNMjYwMjEwMTAwMTAxWjAzMTEwLwYDVQQD EyhkZjc0NDc3ZTdkYWRjODQyNWY2ZmVkM2MyNjUwNDk2M2NkMDkzYWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6E/Ou2dvNyuDGgyiZiK9jihgMKtJ VRdnwzSdel2de/TBQA82ZmH5U+6QR9et53wYM9eqmv4WlhYd/rC0fYMjoqEz2VvQ suLfhwkzLrq5ku1mkpRCAvV/PDPd1+9zUzrKIWkv7VwM+Uh9rG8ulwmj658QvSnf 8D4PJrnQlPXSDN952PEjppVMiJo59a9kbWGuhnxM1/+8JwMtmJK9ZnTgKRmtpJRv 7Z46toQktRx33qAitwiszVSodZ3W0gDjWUHA/BDMLaeWwwdv0uavNqEi8Bf7cjZe QbBqvAd3QbZ8PyFjzow6Z24kNBy/qRkpkv1SEpcaW+lwY13mz4zCLRifmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN90R359rchCX2/tPCZQSWPNCTquMB8GA1UdIwQY MBaAFA7KvgYfLYkKjItBga28psqUO9IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUt MDRhMWY5NTQxM2Y3LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yZmQwMTktNzczZC00Yzk5LWFjZjUtMDRhMWY5NTQxM2Y3 LzEvRHNxLUJoOHRpUXFNaTBHQnJieW15cFE3MGlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMy/du8Gk d9N/GGM//FIO6wBTEoUnkGzbEP5YRX6EVoV1afmFAdFIEOuIhP5+rvvAIMM2gAE7 WQbAnEGva9qpxPhy4gkYCOVFDHNUk7c7b7IR0s8yeEC+FyeHYYidOoSs8I4lZFla Yo5P/ctocB9qQBU9ywB8iwSFa+exXPCzO81FeIiNHq2AyOus/rKxMnDGmOGk947C wDb9wnMcx3WG6mDPTraXJ4dDpPpZFQ2E+K8Y44PLv5Oyw5FVCE2CfIhmsGEasu9q CMw782F93BE71OFcfNTxEWpJOTDMmMx1krgpWPsPIcyYdVDHnhd1wuud8up7epzi PFaYGEFdjc9YwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:35 2026 by rpki-client