This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft File: Dw-fBE4rkph410fF_7uArRDj1r0.mft (raw, json) Hash identifier: NExOUUYhmgaTj8CgU2DKhvmzsC6w/cBv4Qyn3qa8pYY= Subject key identifier: A4:9C:A2:2B:A5:2B:CE:DC:97:B1:2C:77:C1:54:31:0A:21:AF:AF:5C Authority key identifier: 0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD Certificate issuer: /CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Certificate serial: 019C42EB7649B190FD0A2CBFE9DEA146B448 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft Manifest number: 0CA9 Signing time: Mon 09 Feb 2026 15:00:53 +0000 Manifest this update: Mon 09 Feb 2026 15:00:53 +0000 Manifest next update: Tue 10 Feb 2026 15:00:53 +0000 Files and hashes: 1: Dw-fBE4rkph410fF_7uArRDj1r0.crl (hash: kj1+HQvytsA9yq1zSnzY3k8k/EBMDZIU5YK0PHiRqsE=) 2: V74Jz1wXKEOVFxFJuc3IlOQAtRc.roa (hash: f0NajtksvBvEsqeKrzgLbgQXCMvGxhAemXF0EzhQ/c4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:76:49:b1:90:fd:0a:2c:bf:e9:de:a1:46:b4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f0f9f044e2b929878d747c5ffbb80ad10e3d6bd Validity Not Before: Feb 9 15:00:53 2026 GMT Not After : Feb 10 15:00:53 2026 GMT Subject: CN=a49ca22ba52bcedc97b12c77c154310a21afaf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:f4:2d:2c:b6:6a:3e:8c:da:e0:25:73:eb: 72:69:ad:f2:61:6a:dc:19:8f:8e:9d:e7:ca:04:db: 88:16:be:b5:d6:7b:3e:d0:d5:e1:fa:86:50:8a:94: ff:a9:9c:52:9d:7e:75:5f:c6:e7:97:04:29:25:74: 98:c7:39:6a:93:b3:b8:62:03:ac:9b:ed:c9:31:e6: 26:11:6d:ab:00:57:70:6d:e2:b8:06:7d:ee:1d:59: 62:8b:9c:5a:77:a4:90:c4:4e:e4:16:b7:34:38:53: e0:08:16:6e:fe:f7:7d:ba:fa:45:f7:4a:27:48:04: d0:60:c7:58:33:3d:74:a9:92:40:fe:90:f0:7c:52: 02:05:e1:72:ba:4e:ec:ef:8d:04:43:a8:c2:f5:82: 66:49:c0:56:37:98:42:3e:da:33:45:11:d8:68:60: 5a:a9:ce:f6:ae:f2:e0:88:eb:15:84:ba:a8:49:e7: 6b:f9:60:1c:15:b4:44:11:ad:36:99:3f:c6:e2:91: ff:74:4d:af:60:03:c5:10:f2:da:74:ee:64:26:00: 49:a4:47:a2:b5:53:8e:2e:29:42:e9:ec:cb:ee:0c: 2c:8a:ff:7a:45:b9:0d:40:6f:28:c4:8f:ad:41:ba: 40:84:b4:df:70:85:51:19:5e:66:66:1e:73:d1:fe: c4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:9C:A2:2B:A5:2B:CE:DC:97:B1:2C:77:C1:54:31:0A:21:AF:AF:5C X509v3 Authority Key Identifier: keyid:0F:0F:9F:04:4E:2B:92:98:78:D7:47:C5:FF:BB:80:AD:10:E3:D6:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dw-fBE4rkph410fF_7uArRDj1r0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/93d460-368c-46d7-8e7a-cdbd3b6ce777/1/Dw-fBE4rkph410fF_7uArRDj1r0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:2c:3a:e1:4e:a3:e3:65:3f:3a:1e:bd:70:d9:ad:f3:c4:60: 4c:b6:3b:a0:cf:16:64:e3:06:5b:04:e6:b1:a2:30:19:82:a2: ed:5b:a1:ef:3c:fc:d9:72:ab:d6:87:c3:11:d9:8d:11:d9:31: be:2d:07:39:1f:f4:df:e6:de:72:56:e7:36:4e:a2:2d:a2:41: af:fd:9d:db:53:c5:05:2a:fc:bb:e6:38:33:3a:5b:89:1b:f0: bd:65:98:42:6b:9e:2b:b0:d3:fe:dd:77:3f:66:88:78:c9:cb: 8c:fa:3b:94:54:46:46:30:a1:04:69:ec:29:85:f0:a7:d4:e1: e1:97:c3:b8:8a:b8:5a:89:aa:46:e3:ff:99:bb:ec:f9:b3:2c: 12:e4:f5:3f:70:75:ff:5c:63:2b:b2:a8:55:f3:94:e4:f7:b0: 3b:03:a8:3b:f2:ea:0a:57:40:9b:bf:93:82:d6:90:1b:67:f5: 76:94:5e:b2:9e:1b:77:40:c0:86:e9:0b:41:9f:f5:f4:e8:be: 49:73:b5:6f:8d:e4:42:f4:44:71:60:11:ff:96:fb:88:5e:60: 70:53:f7:09:44:83:55:0b:57:1f:8b:5a:6c:9a:f6:c2:da:6e: 4e:e3:78:69:69:db:20:84:2d:61:21:00:26:50:26:cc:03:cd: 6c:9d:d1:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63ZJsZD9Ciy/6d6hRrRIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMGY5ZjA0NGUyYjkyOTg3OGQ3NDdjNWZmYmI4MGFkMTBl M2Q2YmQwHhcNMjYwMjA5MTUwMDUzWhcNMjYwMjEwMTUwMDUzWjAzMTEwLwYDVQQD EyhhNDljYTIyYmE1MmJjZWRjOTdiMTJjNzdjMTU0MzEwYTIxYWZhZjVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUr0LSy2aj6M2uAlc+tyaa3yYWrc GY+OnefKBNuIFr611ns+0NXh+oZQipT/qZxSnX51X8bnlwQpJXSYxzlqk7O4YgOs m+3JMeYmEW2rAFdwbeK4Bn3uHVlii5xad6SQxE7kFrc0OFPgCBZu/vd9uvpF90on SATQYMdYMz10qZJA/pDwfFICBeFyuk7s740EQ6jC9YJmScBWN5hCPtozRRHYaGBa qc72rvLgiOsVhLqoSedr+WAcFbREEa02mT/G4pH/dE2vYAPFEPLadO5kJgBJpEei tVOOLilC6ezL7gwsiv96RbkNQG8oxI+tQbpAhLTfcIVRGV5mZh5z0f7EqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKScoiulK87cl7Esd8FUMQohr69cMB8GA1UdIwQY MBaAFA8PnwROK5KYeNdHxf+7gK0Q49a9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2Et Y2RiZDNiNmNlNzc3LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85M2Q0NjAtMzY4Yy00NmQ3LThlN2EtY2RiZDNiNmNlNzc3 LzEvRHctZkJFNHJrcGg0MTBmRl83dUFyUkRqMXIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALiw64U6j 42U/Oh69cNmt88RgTLY7oM8WZOMGWwTmsaIwGYKi7Vuh7zz82XKr1ofDEdmNEdkx vi0HOR/03+beclbnNk6iLaJBr/2d21PFBSr8u+Y4MzpbiRvwvWWYQmueK7DT/t13 P2aIeMnLjPo7lFRGRjChBGnsKYXwp9Th4ZfDuIq4WomqRuP/mbvs+bMsEuT1P3B1 /1xjK7KoVfOU5PewOwOoO/LqCldAm7+TgtaQG2f1dpResp4bd0DAhukLQZ/19Oi+ SXO1b43kQvREcWAR/5b7iF5gcFP3CUSDVQtXH4tabJr2wtpuTuN4aWnbIIQtYSEA JlAmzAPNbJ3RrQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:07 2026 by rpki-client