This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft File: D0fcf_SFuEE7449b7oCRczCzFzg.mft (raw, json) Hash identifier: xcBVeCNbjYgRpiK2d7672zXLtxZe5FDsbDBB5hh8Aeg= Subject key identifier: 85:18:88:84:64:BA:82:7A:F1:E7:B4:28:9C:1C:46:87:05:3A:80:14 Authority key identifier: 0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 Certificate issuer: /CN=0f47dc7ff485b8413be38f5bee80917330b31738 Certificate serial: 019C42EB7496D4883889B72B55906808CB2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 15:00:52 +0000 Manifest this update: Mon 09 Feb 2026 15:00:52 +0000 Manifest next update: Tue 10 Feb 2026 15:00:52 +0000 Files and hashes: 1: D0fcf_SFuEE7449b7oCRczCzFzg.crl (hash: jv5g427YGdbwqOnsxVbjSs9+VahsySLkbEJZyTPOqJg=) 2: tlQuieYreVj3_gDq6M-5ic7hd2g.roa (hash: qC3uGzqeAOsxTCH/391q/r0lsBSsBvvNrLSi+GwlwHE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:74:96:d4:88:38:89:b7:2b:55:90:68:08:cb:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f47dc7ff485b8413be38f5bee80917330b31738 Validity Not Before: Feb 9 15:00:52 2026 GMT Not After : Feb 10 15:00:52 2026 GMT Subject: CN=8518888464ba827af1e7b4289c1c4687053a8014 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f8:f6:12:16:fd:34:db:5a:ba:03:9f:bc:41: c4:f7:0d:e3:50:16:51:3e:6f:02:5d:76:3a:f1:25: 8b:36:0e:4d:f6:bf:c4:45:3a:f2:6f:35:9e:9e:7e: bf:df:84:84:83:bc:c0:6d:4c:90:9f:d0:8c:19:15: da:39:65:b3:34:66:7d:5e:a0:7e:f9:46:76:8c:54: 8d:3d:22:17:8f:f9:c0:ea:ec:75:7b:85:9d:55:48: dd:ff:f2:da:9e:ed:a5:a2:b0:88:20:89:01:4d:4b: 27:63:49:8d:e6:5a:f8:3e:0f:2e:00:f8:07:5b:01: ac:c5:b2:d9:94:a3:e6:d5:d6:7a:5e:f8:e5:fe:bf: e6:a6:be:77:46:93:e9:a3:65:a7:cd:58:21:e8:bb: 0a:96:f7:43:7a:31:03:16:60:51:f3:c4:a4:d3:53: 28:9e:cf:0c:17:69:05:7a:dd:55:99:8d:ce:e5:ee: 0e:70:47:61:37:1e:c4:0f:29:99:66:25:73:96:42: 9c:19:bb:81:5a:83:e4:4e:c6:b0:ef:02:12:be:3f: fe:d1:5c:0c:a6:75:0a:08:cb:0e:79:33:a0:1c:b4: a7:6f:0d:48:0c:65:c7:32:6a:e3:28:e3:08:0b:d4: 0f:cb:62:4d:a7:b6:1d:8e:40:7c:91:03:c0:10:73: 35:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:18:88:84:64:BA:82:7A:F1:E7:B4:28:9C:1C:46:87:05:3A:80:14 X509v3 Authority Key Identifier: keyid:0F:47:DC:7F:F4:85:B8:41:3B:E3:8F:5B:EE:80:91:73:30:B3:17:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fcf_SFuEE7449b7oCRczCzFzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af5078-2243-4fdb-ab2b-2d847a3f7d2f/1/D0fcf_SFuEE7449b7oCRczCzFzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:21:51:15:60:51:70:cb:59:8c:c7:49:4d:9b:e7:33:0a:10: 46:e8:96:cc:44:5e:dc:0a:2c:ef:49:16:b2:91:14:9d:81:4e: 3b:40:66:b8:22:01:bf:f6:cf:85:bf:22:72:ad:88:9a:5e:04: 9e:9f:fb:9a:32:29:42:e9:77:5b:7b:d0:2e:34:23:0d:ce:9d: 60:51:d7:a6:93:6c:8b:3a:1c:b1:05:af:b3:4a:d3:04:75:e3: 90:bc:d7:02:07:7b:8a:d9:3c:c4:c1:0a:b4:e5:0c:fd:43:36: 54:d6:09:0b:17:a9:41:be:ce:67:2e:94:16:e4:9b:b8:f9:ba: f3:7b:78:08:a6:e7:cd:5c:61:21:b6:cb:27:fc:63:7b:06:b2: d5:9a:4a:9a:58:d0:5f:3f:54:e6:0f:b2:e2:3b:73:b1:f3:a8: 83:0c:69:20:d4:9f:c0:a1:50:84:a9:8e:7c:00:7b:f1:ac:19: e4:65:02:9f:1d:7b:1f:b8:e0:56:60:9a:f9:fe:8f:02:eb:82: c3:65:62:34:c1:e8:38:c9:cd:c8:61:bc:e3:e1:d5:9d:6d:89: 55:db:33:d3:67:75:c4:2e:79:68:a0:2a:9b:64:d7:ff:7a:70: 8d:0c:88:e2:42:e8:38:21:b1:1f:72:a1:de:14:06:bf:20:d1: f1:58:b5:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63SW1Ig4ibcrVZBoCMstMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNDdkYzdmZjQ4NWI4NDEzYmUzOGY1YmVlODA5MTczMzBi MzE3MzgwHhcNMjYwMjA5MTUwMDUyWhcNMjYwMjEwMTUwMDUyWjAzMTEwLwYDVQQD Eyg4NTE4ODg4NDY0YmE4MjdhZjFlN2I0Mjg5YzFjNDY4NzA1M2E4MDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/j2Ehb9NNtaugOfvEHE9w3jUBZR Pm8CXXY68SWLNg5N9r/ERTrybzWenn6/34SEg7zAbUyQn9CMGRXaOWWzNGZ9XqB+ +UZ2jFSNPSIXj/nA6ux1e4WdVUjd//Lanu2lorCIIIkBTUsnY0mN5lr4Pg8uAPgH WwGsxbLZlKPm1dZ6Xvjl/r/mpr53RpPpo2WnzVgh6LsKlvdDejEDFmBR88Sk01Mo ns8MF2kFet1VmY3O5e4OcEdhNx7EDymZZiVzlkKcGbuBWoPkTsaw7wISvj/+0VwM pnUKCMsOeTOgHLSnbw1IDGXHMmrjKOMIC9QPy2JNp7YdjkB8kQPAEHM17wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUYiIRkuoJ68ee0KJwcRocFOoAUMB8GA1UdIwQY MBaAFA9H3H/0hbhBO+OPW+6AkXMwsxc4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmIt MmQ4NDdhM2Y3ZDJmLzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS9hZjUwNzgtMjI0My00ZmRiLWFiMmItMmQ4NDdhM2Y3ZDJm LzEvRDBmY2ZfU0Z1RUU3NDQ5YjdvQ1JjekN6RnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATSFRFWBR cMtZjMdJTZvnMwoQRuiWzERe3Aos70kWspEUnYFOO0BmuCIBv/bPhb8icq2Iml4E np/7mjIpQul3W3vQLjQjDc6dYFHXppNsizocsQWvs0rTBHXjkLzXAgd7itk8xMEK tOUM/UM2VNYJCxepQb7OZy6UFuSbuPm683t4CKbnzVxhIbbLJ/xjeway1ZpKmljQ Xz9U5g+y4jtzsfOogwxpINSfwKFQhKmOfAB78awZ5GUCnx17H7jgVmCa+f6PAuuC w2ViNMHoOMnNyGG84+HVnW2JVdsz02d1xC55aKAqm2TX/3pwjQyI4kLoOCGxH3Kh 3hQGvyDR8Vi1eA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:00 2026 by rpki-client