This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft File: Df5SSMH7abOKMYjflHLozbyFwZM.mft (raw, json) Hash identifier: A5Zx6dKhe+CIEwEptTRfccqqjWIP+U4zyFBYMG2GuDo= Subject key identifier: 22:33:EE:04:AA:84:A1:7D:B1:79:6D:51:3A:5A:F3:F1:46:69:76:85 Authority key identifier: 0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93 Certificate issuer: /CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193 Certificate serial: 019C44A25C9668A63D3018680ACB48DC86DB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft Manifest number: 06F0 Signing time: Mon 09 Feb 2026 23:00:16 +0000 Manifest this update: Mon 09 Feb 2026 23:00:16 +0000 Manifest next update: Tue 10 Feb 2026 23:00:16 +0000 Files and hashes: 1: Df5SSMH7abOKMYjflHLozbyFwZM.crl (hash: 3oKO0tSFEbZCrtBJAzsM7ijhjLzuOJN/u6LX/h9VPCQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:5c:96:68:a6:3d:30:18:68:0a:cb:48:dc:86:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dfe5248c1fb69b38a3188df9472e8cdbc85c193 Validity Not Before: Feb 9 23:00:16 2026 GMT Not After : Feb 10 23:00:16 2026 GMT Subject: CN=2233ee04aa84a17db1796d513a5af3f146697685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:52:df:7a:72:0f:d3:ce:f3:7d:d9:3e:a2:25: 7d:0b:ec:ba:c8:11:f6:27:91:34:53:01:3d:1a:fb: 8c:97:6e:eb:22:61:46:d9:35:51:0a:4e:83:35:d4: b8:41:e8:88:be:88:f3:55:e1:68:3a:66:20:7c:86: 3f:02:4d:f6:de:79:c5:2d:32:d2:1d:77:f6:9c:4e: bb:ce:be:fa:a3:97:1f:9c:9c:0f:79:f9:74:ae:36: c2:fd:b8:31:ea:72:8b:de:c6:24:21:46:31:05:f9: 79:47:92:0f:a3:5b:bd:31:25:d5:cd:88:3e:bd:b7: 82:ae:83:de:9c:15:32:6f:24:e6:b4:11:50:b3:a6: 36:49:0e:eb:40:23:00:22:b9:f1:5d:93:cc:91:98: f9:ee:4e:99:88:40:87:b5:ea:17:5c:4e:cd:da:6a: db:c6:c9:ff:e3:b8:85:79:b2:00:bc:e6:9e:80:e3: bc:d0:24:60:77:5c:e7:08:da:d0:a8:44:6c:4c:3f: da:5c:21:4a:9d:af:6e:20:65:7e:42:06:6d:7b:e9: 39:98:6f:8f:d6:f5:3d:ab:cc:a6:d8:24:79:82:ca: ef:80:2d:06:02:6b:25:9b:1f:fa:d9:c3:4e:83:bb: ba:eb:52:73:db:99:a1:37:50:fe:d8:18:61:df:69: d3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:33:EE:04:AA:84:A1:7D:B1:79:6D:51:3A:5A:F3:F1:46:69:76:85 X509v3 Authority Key Identifier: keyid:0D:FE:52:48:C1:FB:69:B3:8A:31:88:DF:94:72:E8:CD:BC:85:C1:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Df5SSMH7abOKMYjflHLozbyFwZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/6a75ce-3c16-4300-a332-548d085b455d/1/Df5SSMH7abOKMYjflHLozbyFwZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4d:c0:13:61:a3:3b:d7:d3:2a:9e:c3:bd:3e:4b:06:8c:c1: 4e:da:e6:c0:f7:53:b0:00:a8:93:39:e4:a8:61:49:3b:13:98: 60:c5:ce:9f:22:b8:d5:10:8a:ad:43:bb:3e:d5:37:03:72:28: aa:73:e8:5a:46:80:b8:b2:f2:05:dd:f5:21:fe:c7:f3:a7:c9: 9c:36:81:5f:6b:49:21:8d:a1:08:9e:74:8f:1a:6c:2a:2c:b0: 3d:c1:9a:cc:a1:44:12:10:60:48:88:34:fe:7e:92:fe:36:ee: 6c:81:f5:d5:db:32:4f:25:c0:ed:ab:40:70:c7:ff:0a:13:1d: a1:82:8b:cd:0f:96:fc:c2:c6:00:79:27:c7:9e:91:11:44:30: cd:78:5f:59:dc:77:9e:8e:34:94:1d:9d:b3:b8:8d:aa:2f:37: 90:90:57:34:2f:6b:3b:9d:ab:1a:85:a2:f3:4b:4e:f7:f8:5d: 8a:db:fe:37:d2:4d:e5:ab:18:a2:c8:57:26:9e:d1:99:84:98: 09:fd:eb:2a:13:6c:11:f8:3d:93:5a:5c:2d:be:a9:7d:e3:63: f9:16:3e:79:46:b7:8e:53:24:3c:a5:40:2a:2b:32:73:09:ea: 78:dd:52:3c:68:58:65:71:8e:bd:fe:8b:18:af:01:b2:fa:92: 0e:fc:82:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEolyWaKY9MBhoCstI3IbbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZmU1MjQ4YzFmYjY5YjM4YTMxODhkZjk0NzJlOGNkYmM4 NWMxOTMwHhcNMjYwMjA5MjMwMDE2WhcNMjYwMjEwMjMwMDE2WjAzMTEwLwYDVQQD EygyMjMzZWUwNGFhODRhMTdkYjE3OTZkNTEzYTVhZjNmMTQ2Njk3Njg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VLfenIP087zfdk+oiV9C+y6yBH2 J5E0UwE9GvuMl27rImFG2TVRCk6DNdS4QeiIvojzVeFoOmYgfIY/Ak323nnFLTLS HXf2nE67zr76o5cfnJwPefl0rjbC/bgx6nKL3sYkIUYxBfl5R5IPo1u9MSXVzYg+ vbeCroPenBUybyTmtBFQs6Y2SQ7rQCMAIrnxXZPMkZj57k6ZiECHteoXXE7N2mrb xsn/47iFebIAvOaegOO80CRgd1znCNrQqERsTD/aXCFKna9uIGV+QgZte+k5mG+P 1vU9q8ym2CR5gsrvgC0GAmslmx/62cNOg7u661Jz25mhN1D+2Bhh32nT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCIz7gSqhKF9sXltUTpa8/FGaXaFMB8GA1UdIwQY MBaAFA3+UkjB+2mzijGI35Ry6M28hcGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzIt NTQ4ZDA4NWI0NTVkLzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS82YTc1Y2UtM2MxNi00MzAwLWEzMzItNTQ4ZDA4NWI0NTVk LzEvRGY1U1NNSDdhYk9LTVlqZmxITG96YnlGd1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhU3AE2Gj O9fTKp7DvT5LBozBTtrmwPdTsACokznkqGFJOxOYYMXOnyK41RCKrUO7PtU3A3Io qnPoWkaAuLLyBd31If7H86fJnDaBX2tJIY2hCJ50jxpsKiywPcGazKFEEhBgSIg0 /n6S/jbubIH11dsyTyXA7atAcMf/ChMdoYKLzQ+W/MLGAHknx56REUQwzXhfWdx3 no40lB2ds7iNqi83kJBXNC9rO52rGoWi80tO9/hditv+N9JN5asYoshXJp7RmYSY Cf3rKhNsEfg9k1pcLb6pfeNj+RY+eUa3jlMkPKVAKisycwnqeN1SPGhYZXGOvf6L GK8BsvqSDvyCvQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:43:50 2026 by rpki-client