This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft File: dhwFdTsZvNtTL9x_b0fpfpNboKI.mft (raw, json) Hash identifier: WaGpDCqZT4W2s2saod+FcVyKox6MuYtaOckjSQG2tlU= Subject key identifier: E7:E1:28:9E:93:8B:70:35:85:05:72:16:67:E5:5F:0A:E2:B0:49:9E Authority key identifier: 76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2 Certificate issuer: /CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2 Certificate serial: 019C42EB9ED7AC6B130FC8F86B80A8668196 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft Manifest number: 12F0 Signing time: Mon 09 Feb 2026 15:01:03 +0000 Manifest this update: Mon 09 Feb 2026 15:01:03 +0000 Manifest next update: Tue 10 Feb 2026 15:01:03 +0000 Files and hashes: 1: NqpHuEMuxziK_s6FwV4-BlExn5I.roa (hash: vG3pCOebbp8ka7ppT4ebnWl3F1yFRDRI4TRKdbhBhzs=) 2: dhwFdTsZvNtTL9x_b0fpfpNboKI.crl (hash: iRVM0FGAUwll38EFbetNiPMzjkHa4BkmJ7D4n2MIhU0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:9e:d7:ac:6b:13:0f:c8:f8:6b:80:a8:66:81:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=761c05753b19bcdb532fdc7f6f47e97e935ba0a2 Validity Not Before: Feb 9 15:01:03 2026 GMT Not After : Feb 10 15:01:03 2026 GMT Subject: CN=e7e1289e938b70358505721667e55f0ae2b0499e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c1:b6:d7:8b:7b:3e:45:8d:37:b0:89:3f:1e: 84:59:4f:d4:b6:1f:77:2c:6b:35:45:48:8b:31:69: 2e:42:bf:b2:2e:b4:9d:a5:51:be:f1:32:1a:ac:fc: 3a:87:c4:e5:30:ff:f4:44:4b:16:ea:40:43:9e:f1: 04:31:96:84:b4:e3:00:c7:c8:c0:5d:bb:ed:7c:73: ca:4a:8a:1e:b8:f4:ea:44:7e:59:19:ff:7f:68:c9: d4:ba:d6:0e:5f:30:66:43:78:dc:67:83:82:ed:9e: e6:be:a8:e0:df:5a:73:b1:c7:3e:67:31:16:64:26: f6:61:3d:71:9a:d8:bd:8b:22:c5:4f:26:8e:6d:3e: 44:93:6c:2f:e2:78:13:1f:f3:b1:8a:a4:1b:70:e7: 10:3c:d6:82:30:ca:ae:ec:af:52:07:d8:cb:a7:92: 9d:62:08:b9:b1:91:dd:af:44:a0:80:9a:3b:d7:a6: 95:0e:4e:0c:93:9f:10:7f:af:05:ff:a0:f5:3d:b8: d3:22:df:0e:e4:cf:df:d4:87:6d:c4:de:3e:65:24: fa:c8:81:17:41:99:55:2b:57:bc:85:39:dc:48:d5: 49:61:38:b7:b8:03:58:60:3d:6b:e7:cb:af:12:b5: eb:58:6f:a2:df:09:c6:b0:d3:38:0d:d1:c0:4a:c8: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:E1:28:9E:93:8B:70:35:85:05:72:16:67:E5:5F:0A:E2:B0:49:9E X509v3 Authority Key Identifier: keyid:76:1C:05:75:3B:19:BC:DB:53:2F:DC:7F:6F:47:E9:7E:93:5B:A0:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dhwFdTsZvNtTL9x_b0fpfpNboKI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5befa7-87fd-44a2-b1f4-3e8f575eddff/1/dhwFdTsZvNtTL9x_b0fpfpNboKI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:2b:c8:e0:dd:46:ee:a7:84:6b:2c:8b:49:7f:b1:ac:fc:8b: f2:66:e5:71:7d:6a:9e:f8:36:87:ff:7a:c6:28:73:35:49:ab: 5a:87:ee:43:21:ed:d7:38:27:e5:5b:dd:c5:ba:b1:94:17:88: fa:df:1d:4e:4c:e4:1f:9d:44:e1:e9:af:dc:98:7a:46:bd:80: ce:68:8d:a3:f0:39:c0:d8:6c:9e:1b:b1:a7:5d:be:0d:99:95: 35:16:6d:ce:fe:36:3b:a6:27:85:fe:15:3a:6a:da:2f:32:57: 8a:cb:46:8e:d7:74:89:59:e9:a3:42:19:ec:ac:5f:b6:92:2c: 58:e2:37:96:77:4b:1c:d4:09:f9:e5:52:7d:ba:84:8b:bc:86: 0b:f8:0b:90:f3:fa:e7:d1:8d:29:ac:79:70:33:fe:4d:1b:29: 45:e6:69:b5:db:e1:57:be:53:f1:87:53:ec:10:1b:98:9f:8f: 53:91:91:47:a4:74:71:11:89:bf:40:5d:93:d9:98:23:b6:93: 48:d9:fb:93:01:65:42:29:3c:68:61:b2:55:bc:f0:d1:cf:a6: 9f:47:ec:6c:cd:48:a3:13:fb:9b:45:6b:35:8e:85:26:cd:91: 58:8d:0e:04:5c:2d:a8:59:11:84:61:e8:f4:08:5b:21:6a:06: fd:7d:1d:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC657XrGsTD8j4a4CoZoGWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2MWMwNTc1M2IxOWJjZGI1MzJmZGM3ZjZmNDdlOTdlOTM1 YmEwYTIwHhcNMjYwMjA5MTUwMTAzWhcNMjYwMjEwMTUwMTAzWjAzMTEwLwYDVQQD EyhlN2UxMjg5ZTkzOGI3MDM1ODUwNTcyMTY2N2U1NWYwYWUyYjA0OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MG214t7PkWNN7CJPx6EWU/Uth93 LGs1RUiLMWkuQr+yLrSdpVG+8TIarPw6h8TlMP/0REsW6kBDnvEEMZaEtOMAx8jA XbvtfHPKSooeuPTqRH5ZGf9/aMnUutYOXzBmQ3jcZ4OC7Z7mvqjg31pzscc+ZzEW ZCb2YT1xmti9iyLFTyaObT5Ek2wv4ngTH/OxiqQbcOcQPNaCMMqu7K9SB9jLp5Kd Ygi5sZHdr0SggJo716aVDk4Mk58Qf68F/6D1PbjTIt8O5M/f1IdtxN4+ZST6yIEX QZlVK1e8hTncSNVJYTi3uANYYD1r58uvErXrWG+i3wnGsNM4DdHASsjgjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfhKJ6Ti3A1hQVyFmflXwrisEmeMB8GA1UdIwQY MBaAFHYcBXU7GbzbUy/cf29H6X6TW6CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQt M2U4ZjU3NWVkZGZmLzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy81YmVmYTctODdmZC00NGEyLWIxZjQtM2U4ZjU3NWVkZGZm LzEvZGh3RmRUc1p2TnRUTDl4X2IwZnBmcE5ib0tJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSvI4N1G 7qeEayyLSX+xrPyL8mblcX1qnvg2h/96xihzNUmrWofuQyHt1zgn5VvdxbqxlBeI +t8dTkzkH51E4emv3Jh6Rr2AzmiNo/A5wNhsnhuxp12+DZmVNRZtzv42O6Ynhf4V OmraLzJXistGjtd0iVnpo0IZ7KxftpIsWOI3lndLHNQJ+eVSfbqEi7yGC/gLkPP6 59GNKax5cDP+TRspReZptdvhV75T8YdT7BAbmJ+PU5GRR6R0cRGJv0Bdk9mYI7aT SNn7kwFlQik8aGGyVbzw0c+mn0fsbM1IoxP7m0VrNY6FJs2RWI0OBFwtqFkRhGHo 9AhbIWoG/X0dRg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:55 2026 by rpki-client