This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft File: 33dmL2C1xBAy4FNe5ycYTjrbe3c.mft (raw, json) Hash identifier: eW0snrMhuTHW1k1QS5Da+JzmMuFxhiLI3G6CPBxttb4= Subject key identifier: AA:B0:98:9C:AA:FC:16:B6:73:4D:0B:6B:14:BF:9E:3C:F2:14:93:69 Authority key identifier: DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 Certificate issuer: /CN=df77662f60b5c41032e0535ee727184e3adb7b77 Certificate serial: 019C41A2680C0AB0D55E3BE5D386ABE824F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft Manifest number: 1666 Signing time: Mon 09 Feb 2026 09:01:28 +0000 Manifest this update: Mon 09 Feb 2026 09:01:28 +0000 Manifest next update: Tue 10 Feb 2026 09:01:28 +0000 Files and hashes: 1: 33dmL2C1xBAy4FNe5ycYTjrbe3c.crl (hash: LrmjjWdDvvF6c1kiXtvP0UDLff+a3dhXWfQIACNdb8o=) 2: awGbKeiIXvU216fzJMCxNDxUUJY.roa (hash: piofhzgTxalrRmezqZx4jWP4SBJFItloggR8CaiMj4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:68:0c:0a:b0:d5:5e:3b:e5:d3:86:ab:e8:24:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df77662f60b5c41032e0535ee727184e3adb7b77 Validity Not Before: Feb 9 09:01:28 2026 GMT Not After : Feb 10 09:01:28 2026 GMT Subject: CN=aab0989caafc16b6734d0b6b14bf9e3cf2149369 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:14:6c:e8:82:00:5b:85:2f:a8:68:37:82:9b: 27:4d:85:03:b5:47:3b:34:4c:55:49:48:1e:69:c0: e0:b0:09:fd:24:63:98:ae:c1:72:ac:6a:bf:87:fa: 16:46:37:72:08:3f:93:74:75:95:31:e0:8d:bf:7d: da:f6:77:0c:d5:6e:9d:f4:b7:c5:45:bf:76:ce:61: 3d:a7:ff:11:93:2b:d6:be:49:a8:44:bd:3c:60:5a: ae:4d:75:5a:ae:14:26:38:81:9e:30:89:11:1e:a4: 52:92:b4:2f:f5:85:50:b9:d2:0e:ce:f8:1a:66:c8: 6c:02:82:7b:a2:a5:c8:03:63:a2:28:10:89:fa:0d: d4:9b:2f:b4:23:de:af:4a:95:ba:77:6f:3e:82:17: 79:7e:d5:56:a4:f9:7f:cf:78:ff:69:c7:6b:45:fb: 78:fd:54:6d:5f:cd:b8:3e:3e:55:53:be:ae:c8:91: 8a:e9:78:e2:93:3d:1c:91:59:77:53:1b:35:0d:f2: 0a:d2:6b:df:e5:48:96:08:dd:ce:2c:b2:97:98:7c: 7a:ac:0f:b2:96:a3:67:06:11:3a:26:49:0c:6f:fd: 5d:7a:ee:9d:15:75:4c:aa:9e:49:8c:9c:d8:f5:27: 97:c2:eb:77:b0:0a:45:41:4f:5b:8f:48:18:5c:84: ea:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:B0:98:9C:AA:FC:16:B6:73:4D:0B:6B:14:BF:9E:3C:F2:14:93:69 X509v3 Authority Key Identifier: keyid:DF:77:66:2F:60:B5:C4:10:32:E0:53:5E:E7:27:18:4E:3A:DB:7B:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33dmL2C1xBAy4FNe5ycYTjrbe3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/fc5766-aebf-4529-8e3f-4105f8a3bb9c/1/33dmL2C1xBAy4FNe5ycYTjrbe3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:71:61:12:39:d5:4a:32:c4:1e:10:e4:08:55:42:05:82:a0: 4d:9b:1a:7f:4c:90:4a:3d:ac:70:1a:dc:fa:32:5c:df:fa:53: 9a:9c:a3:8a:f3:a7:ff:e8:6f:9c:e5:0f:17:e6:fa:53:cd:c2: 2e:05:03:87:34:f1:17:5c:13:e0:64:d8:35:c9:f1:48:c5:77: 52:0c:34:6e:3c:bd:4e:94:31:dd:d6:49:dc:79:12:4d:49:18: f5:69:22:8d:f5:57:ab:d2:96:3c:5e:16:49:e5:f7:73:80:a7: 3f:44:8c:17:b4:3e:e3:97:b6:93:e9:a6:5d:e1:a8:17:97:9c: f5:62:02:56:3c:f8:b3:a2:ca:39:1a:e9:41:e4:e7:83:36:00: 5f:2f:d6:bb:06:b4:a2:66:56:44:fb:ae:7d:7a:6a:80:d2:e0: 4b:b8:2f:5c:31:e5:81:a0:9b:88:88:47:6c:62:18:9d:b4:f2: 1b:85:f3:ac:e7:bb:78:0d:fa:11:0f:60:0f:56:57:d5:4e:6a: c0:6e:4e:65:91:6b:7b:2e:b4:bd:12:f5:40:01:fe:48:6e:46: c8:79:77:5c:b8:17:08:43:4a:69:d4:ba:fb:66:bf:15:f7:f3: 51:01:59:20:18:41:a2:aa:5d:eb:15:34:e8:96:26:a2:d0:4d: a5:b1:2a:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBomgMCrDVXjvl04ar6CTwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmNzc2NjJmNjBiNWM0MTAzMmUwNTM1ZWU3MjcxODRlM2Fk YjdiNzcwHhcNMjYwMjA5MDkwMTI4WhcNMjYwMjEwMDkwMTI4WjAzMTEwLwYDVQQD EyhhYWIwOTg5Y2FhZmMxNmI2NzM0ZDBiNmIxNGJmOWUzY2YyMTQ5MzY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBRs6IIAW4UvqGg3gpsnTYUDtUc7 NExVSUgeacDgsAn9JGOYrsFyrGq/h/oWRjdyCD+TdHWVMeCNv33a9ncM1W6d9LfF Rb92zmE9p/8RkyvWvkmoRL08YFquTXVarhQmOIGeMIkRHqRSkrQv9YVQudIOzvga ZshsAoJ7oqXIA2OiKBCJ+g3Umy+0I96vSpW6d28+ghd5ftVWpPl/z3j/acdrRft4 /VRtX824Pj5VU76uyJGK6Xjikz0ckVl3Uxs1DfIK0mvf5UiWCN3OLLKXmHx6rA+y lqNnBhE6JkkMb/1deu6dFXVMqp5JjJzY9SeXwut3sApFQU9bj0gYXITqDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKqwmJyq/Ba2c00LaxS/njzyFJNpMB8GA1UdIwQY MBaAFN93Zi9gtcQQMuBTXucnGE4623t3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2Yt NDEwNWY4YTNiYjljLzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9mYzU3NjYtYWViZi00NTI5LThlM2YtNDEwNWY4YTNiYjlj LzEvMzNkbUwyQzF4QkF5NEZOZTV5Y1lUanJiZTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx3FhEjnV SjLEHhDkCFVCBYKgTZsaf0yQSj2scBrc+jJc3/pTmpyjivOn/+hvnOUPF+b6U83C LgUDhzTxF1wT4GTYNcnxSMV3Ugw0bjy9TpQx3dZJ3HkSTUkY9WkijfVXq9KWPF4W SeX3c4CnP0SMF7Q+45e2k+mmXeGoF5ec9WICVjz4s6LKORrpQeTngzYAXy/Wuwa0 omZWRPuufXpqgNLgS7gvXDHlgaCbiIhHbGIYnbTyG4XzrOe7eA36EQ9gD1ZX1U5q wG5OZZFrey60vRL1QAH+SG5GyHl3XLgXCENKadS6+2a/FffzUQFZIBhBoqpd6xU0 6JYmotBNpbEqDA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:22 2026 by rpki-client