This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft File: DO-ss3RB3RkYO9HLV9te5VR3p6c.mft (raw, json) Hash identifier: +80L6VKW538pq+ejzODgcp6AYLekUeP5mp7C2uc7Iq8= Subject key identifier: E7:06:09:F5:82:30:E3:E2:D6:68:9C:4A:43:D3:24:1A:0D:FD:3D:9F Authority key identifier: 0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7 Certificate issuer: /CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7 Certificate serial: 019C44D9B17C2183F07E740C9B0B1E0FACEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft Manifest number: 0BD0 Signing time: Tue 10 Feb 2026 00:00:43 +0000 Manifest this update: Tue 10 Feb 2026 00:00:43 +0000 Manifest next update: Wed 11 Feb 2026 00:00:43 +0000 Files and hashes: 1: 8kLexoC86Do5vfxQjSviKxTow3s.roa (hash: R+3NYgMoxiJU1fSK7xfN36pT86q7Kv/cYyTRhCNtf3g=) 2: DO-ss3RB3RkYO9HLV9te5VR3p6c.crl (hash: pBxTsCmaDyI/R/hQje9syDRviqJBlQsZpgvLUZnDf9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:b1:7c:21:83:f0:7e:74:0c:9b:0b:1e:0f:ac:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cefacb37441dd19183bd1cb57db5ee55477a7a7 Validity Not Before: Feb 10 00:00:43 2026 GMT Not After : Feb 11 00:00:43 2026 GMT Subject: CN=e70609f58230e3e2d6689c4a43d3241a0dfd3d9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ae:32:15:4e:e6:24:66:c5:29:5f:95:57:e2: f4:02:08:33:21:d0:ad:dd:ab:26:93:fc:be:5a:5e: f4:d2:5f:1e:13:ad:1d:d2:72:48:13:86:46:b8:ea: a6:d9:02:b4:eb:53:bf:60:d3:2a:fb:7a:ea:aa:b2: 67:fa:7b:41:e4:be:41:45:dc:09:16:4a:68:cd:19: 2c:2d:1b:b4:79:57:c0:e4:7e:75:3b:bf:ff:6e:c7: 72:5f:49:dc:09:4c:06:33:c1:f1:23:10:93:e3:3e: 07:e1:79:4b:23:e0:b3:b9:99:f7:b7:df:4f:d9:fb: 38:08:ef:d9:5d:96:87:2d:2b:c0:1f:30:fe:cb:02: 28:76:d5:68:23:a4:c4:26:0a:5e:a7:ea:b0:1f:02: 24:dd:bf:72:af:b2:29:4f:9f:b2:4f:2b:cd:aa:a4: 9a:e7:60:a9:fc:f7:c4:32:90:69:33:c8:3b:62:5e: 68:e2:8c:50:7b:bf:1a:ab:ce:b1:f3:7c:eb:b0:f0: b6:c4:ca:b1:47:a8:4c:83:4c:00:f5:12:e2:8c:60: 01:8f:fa:7f:fe:9b:32:b6:a2:3f:34:70:00:80:3a: 4d:df:7b:e5:e5:b5:57:f0:43:1d:97:5a:1e:2b:fb: 80:8b:c1:dd:c9:56:9c:57:30:d0:ab:b5:45:fa:53: 7f:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:06:09:F5:82:30:E3:E2:D6:68:9C:4A:43:D3:24:1A:0D:FD:3D:9F X509v3 Authority Key Identifier: keyid:0C:EF:AC:B3:74:41:DD:19:18:3B:D1:CB:57:DB:5E:E5:54:77:A7:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DO-ss3RB3RkYO9HLV9te5VR3p6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/63da8a-de6f-4b12-a864-e3dd52799bda/1/DO-ss3RB3RkYO9HLV9te5VR3p6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:53:65:86:a0:08:06:55:45:db:4f:05:76:a8:f4:3b:b0:59: 7b:3b:a6:78:a8:f4:98:83:4a:b9:07:dd:93:95:73:27:62:e1: 6c:98:b6:74:e2:1f:80:a4:af:d3:df:71:34:10:8a:f4:52:30: 56:8c:b9:2c:a6:cd:7e:3f:b0:dc:e6:dd:8c:ff:e8:90:e7:d8: bc:39:09:7a:bd:92:ef:6b:a5:42:08:bf:ca:01:d3:c5:26:c1: 8c:ed:78:0f:4f:e0:de:51:ac:b0:f8:55:eb:e1:c0:43:3a:30: f7:6a:05:e4:63:c0:78:ed:0d:7c:32:b3:33:ef:9a:49:a3:70: b3:4e:93:a8:1b:3b:e4:2c:4b:96:3c:af:05:34:01:d2:62:12: ac:e5:00:29:cc:ac:7e:36:af:a1:ac:94:75:0d:97:68:1d:56: 6e:05:07:82:9e:73:3c:70:ec:09:a0:fb:ce:3f:49:79:dc:69: 4e:6f:1b:bc:e7:51:fe:e2:5d:b1:f5:14:73:9d:68:6e:2d:69: 83:11:7e:1a:a3:ff:88:f0:0a:ee:e1:c7:6f:17:21:87:c2:c3: 52:be:7d:b0:b4:fe:76:a1:c3:a6:61:4b:98:b2:8e:7f:61:88: b2:07:3e:51:ac:27:4e:6a:78:9c:2b:ea:49:72:ea:f4:9b:b6: 91:ec:2f:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2bF8IYPwfnQMmwseD6zvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWZhY2IzNzQ0MWRkMTkxODNiZDFjYjU3ZGI1ZWU1NTQ3 N2E3YTcwHhcNMjYwMjEwMDAwMDQzWhcNMjYwMjExMDAwMDQzWjAzMTEwLwYDVQQD EyhlNzA2MDlmNTgyMzBlM2UyZDY2ODljNGE0M2QzMjQxYTBkZmQzZDlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoK4yFU7mJGbFKV+VV+L0AggzIdCt 3asmk/y+Wl700l8eE60d0nJIE4ZGuOqm2QK061O/YNMq+3rqqrJn+ntB5L5BRdwJ FkpozRksLRu0eVfA5H51O7//bsdyX0ncCUwGM8HxIxCT4z4H4XlLI+CzuZn3t99P 2fs4CO/ZXZaHLSvAHzD+ywIodtVoI6TEJgpep+qwHwIk3b9yr7IpT5+yTyvNqqSa 52Cp/PfEMpBpM8g7Yl5o4oxQe78aq86x83zrsPC2xMqxR6hMg0wA9RLijGABj/p/ /psytqI/NHAAgDpN33vl5bVX8EMdl1oeK/uAi8HdyVacVzDQq7VF+lN/OwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcGCfWCMOPi1micSkPTJBoN/T2fMB8GA1UdIwQY MBaAFAzvrLN0Qd0ZGDvRy1fbXuVUd6enMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQt ZTNkZDUyNzk5YmRhLzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS82M2RhOGEtZGU2Zi00YjEyLWE4NjQtZTNkZDUyNzk5YmRh LzEvRE8tc3MzUkIzUmtZTzlITFY5dGU1VlIzcDZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1NlhqAI BlVF208Fdqj0O7BZezumeKj0mINKuQfdk5VzJ2LhbJi2dOIfgKSv099xNBCK9FIw Voy5LKbNfj+w3ObdjP/okOfYvDkJer2S72ulQgi/ygHTxSbBjO14D0/g3lGssPhV 6+HAQzow92oF5GPAeO0NfDKzM++aSaNws06TqBs75CxLljyvBTQB0mISrOUAKcys fjavoayUdQ2XaB1WbgUHgp5zPHDsCaD7zj9JedxpTm8bvOdR/uJdsfUUc51obi1p gxF+GqP/iPAK7uHHbxchh8LDUr59sLT+dqHDpmFLmLKOf2GIsgc+UawnTmp4nCvq SXLq9Ju2kewvDg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:59 2026 by rpki-client