This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft File: DNszEee1KoxC8GUP9DwPyE0yDxY.mft (raw, json) Hash identifier: 2Dr7SZ6Va6/v+yoAIumqpWrx7ikFlveMtuzfPicB/XE= Subject key identifier: 8D:39:45:0F:AE:5C:9F:B5:21:52:DD:BC:3A:5D:62:18:13:0A:0D:BF Authority key identifier: 0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 Certificate issuer: /CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Certificate serial: 019C1C14CCCE0B043948B628144B8AC89726 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft Manifest number: 4E Signing time: Mon 02 Feb 2026 02:00:50 +0000 Manifest this update: Mon 02 Feb 2026 02:00:50 +0000 Manifest next update: Tue 03 Feb 2026 02:00:50 +0000 Files and hashes: 1: DNszEee1KoxC8GUP9DwPyE0yDxY.crl (hash: 05ap02h7ymEs2JgBQ21ek260a8heEohDG+Z0t6JmjHk=) 2: KkZ9T-InsQon19zi2pp0iLPe7uw.asa (hash: PxN+SD6/SnkXuWBprhfsz0XFK1K5PUh2KfS43HH5dtw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:cc:ce:0b:04:39:48:b6:28:14:4b:8a:c8:97:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cdb3311e7b52a8c42f0650ff43c0fc84d320f16 Validity Not Before: Feb 2 02:00:50 2026 GMT Not After : Feb 3 02:00:50 2026 GMT Subject: CN=8d39450fae5c9fb52152ddbc3a5d6218130a0dbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bb:2f:54:45:9e:ad:a9:89:45:fe:85:20:c7: e0:4c:78:bc:a3:74:4d:ff:04:43:53:1c:71:f2:9f: 28:ad:c0:14:3e:0f:ac:58:ac:a1:28:54:36:3d:8b: ae:b9:47:65:41:0f:62:65:39:a9:59:db:41:02:93: 01:1a:b8:4e:2b:af:7b:bd:5b:21:61:93:22:8c:cd: db:36:4b:fc:6b:96:7a:3d:9e:7e:71:a9:00:ae:67: 7b:a8:a8:51:7e:97:ba:1f:82:ca:8d:f2:39:ca:ca: a0:ab:7c:61:af:0d:9e:1d:95:71:89:aa:26:10:6c: 5f:2c:be:ac:8f:39:e5:9f:63:8c:8c:be:ad:3e:95: 76:f1:e0:d9:a0:b3:b9:68:ad:cb:f9:38:47:68:3e: 30:3e:61:60:94:de:19:da:3c:af:b7:d4:74:7c:c8: ac:38:d3:fa:eb:bb:49:15:07:36:60:0b:00:95:46: c1:76:9a:0c:a6:bd:53:d0:60:31:3a:84:e4:63:8b: a1:14:b9:8b:a2:15:1f:70:55:72:60:5f:58:ea:38: eb:bd:73:77:11:bc:da:8b:3d:c9:08:c1:6c:3a:1e: 60:b8:04:72:47:53:96:78:32:6c:05:e3:6a:d4:56: 45:47:3d:db:d6:f9:aa:df:e0:0b:5d:ff:94:c1:1c: 2f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:39:45:0F:AE:5C:9F:B5:21:52:DD:BC:3A:5D:62:18:13:0A:0D:BF X509v3 Authority Key Identifier: keyid:0C:DB:33:11:E7:B5:2A:8C:42:F0:65:0F:F4:3C:0F:C8:4D:32:0F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNszEee1KoxC8GUP9DwPyE0yDxY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/1a798f-9489-4e1f-b8b7-1c9cef9d882f/1/DNszEee1KoxC8GUP9DwPyE0yDxY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:30:37:60:23:c8:bb:c7:07:96:0d:3b:53:46:00:78:c1:37: c6:99:1d:e0:3b:b8:0c:d9:4d:f7:6d:cb:ae:e5:8b:4b:a6:91: c2:79:41:f1:02:a5:46:50:02:a5:3c:97:cb:d3:a4:06:b7:d1: 10:36:10:ed:c5:f8:41:9e:31:4e:8b:eb:bd:59:36:d5:c9:21: 1c:51:e8:5b:09:10:bb:97:7d:87:88:9e:b4:d0:b1:6a:7a:d2: d9:23:26:5a:ba:28:3d:cc:2d:a6:ef:66:dc:75:e1:52:1d:89: 62:b9:08:17:d0:33:84:9b:74:81:da:43:0b:2b:22:b9:9a:a4: c7:12:0b:3c:c6:a7:d2:f2:22:9e:bb:78:9f:75:21:85:81:cd: 9c:2a:80:0e:39:d1:7b:d2:09:50:c1:6d:52:a5:bb:d3:d1:06: c6:9d:0b:29:78:28:30:7c:47:74:87:0d:61:b1:33:85:26:94: f3:7d:a5:75:7f:03:4a:6c:6b:6a:47:34:be:c2:70:d7:84:7b: e8:c5:b6:24:1c:4b:27:ff:da:e4:4f:fe:43:8b:1b:f3:eb:1d: 62:3f:5d:b6:c7:ea:5c:06:5d:a2:ca:c9:22:32:e3:44:1b:33: 6d:be:e7:b1:89:dc:cd:40:c6:bb:d0:ba:11:7f:0a:df:16:67: d4:2a:4a:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFMzOCwQ5SLYoFEuKyJcmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZGIzMzExZTdiNTJhOGM0MmYwNjUwZmY0M2MwZmM4NGQz MjBmMTYwHhcNMjYwMjAyMDIwMDUwWhcNMjYwMjAzMDIwMDUwWjAzMTEwLwYDVQQD Eyg4ZDM5NDUwZmFlNWM5ZmI1MjE1MmRkYmMzYTVkNjIxODEzMGEwZGJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbsvVEWeramJRf6FIMfgTHi8o3RN /wRDUxxx8p8orcAUPg+sWKyhKFQ2PYuuuUdlQQ9iZTmpWdtBApMBGrhOK697vVsh YZMijM3bNkv8a5Z6PZ5+cakArmd7qKhRfpe6H4LKjfI5ysqgq3xhrw2eHZVxiaom EGxfLL6sjznln2OMjL6tPpV28eDZoLO5aK3L+ThHaD4wPmFglN4Z2jyvt9R0fMis ONP667tJFQc2YAsAlUbBdpoMpr1T0GAxOoTkY4uhFLmLohUfcFVyYF9Y6jjrvXN3 Ebzaiz3JCMFsOh5guARyR1OWeDJsBeNq1FZFRz3b1vmq3+ALXf+UwRwvxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI05RQ+uXJ+1IVLdvDpdYhgTCg2/MB8GA1UdIwQY MBaAFAzbMxHntSqMQvBlD/Q8D8hNMg8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4Yjct MWM5Y2VmOWQ4ODJmLzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi8xYTc5OGYtOTQ4OS00ZTFmLWI4YjctMWM5Y2VmOWQ4ODJm LzEvRE5zekVlZTFLb3hDOEdVUDlEd1B5RTB5RHhZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADTA3YCPI u8cHlg07U0YAeME3xpkd4Du4DNlN923LruWLS6aRwnlB8QKlRlACpTyXy9OkBrfR EDYQ7cX4QZ4xTovrvVk21ckhHFHoWwkQu5d9h4ietNCxanrS2SMmWrooPcwtpu9m 3HXhUh2JYrkIF9AzhJt0gdpDCysiuZqkxxILPMan0vIinrt4n3UhhYHNnCqADjnR e9IJUMFtUqW709EGxp0LKXgoMHxHdIcNYbEzhSaU832ldX8DSmxrakc0vsJw14R7 6MW2JBxLJ//a5E/+Q4sb8+sdYj9dtsfqXAZdosrJIjLjRBszbb7nsYnczUDGu9C6 EX8K3xZn1CpKrw== -----END CERTIFICATE-----Generated at Mon Feb 2 07:55:40 2026 by rpki-client