This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft File: druWg5UW9vs1BsYgZNY9YoeaUnc.mft (raw, json) Hash identifier: RDzGcOcaSCzVSN+d6i6HTMuCO1kqj2HSPgEqux0HpLk= Subject key identifier: 5C:7F:E8:C0:20:30:91:60:D8:A0:D0:8B:E5:A4:6C:68:87:C0:8E:A4 Authority key identifier: 76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 Certificate issuer: /CN=76bb96839516f6fb3506c62064d63d62879a5277 Certificate serial: 019C4390337742265831B4EB1ACD5CA27D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft Manifest number: 1220 Signing time: Mon 09 Feb 2026 18:00:49 +0000 Manifest this update: Mon 09 Feb 2026 18:00:49 +0000 Manifest next update: Tue 10 Feb 2026 18:00:49 +0000 Files and hashes: 1: GRQibr18mvAtFQUlZf2-LSDjO00.roa (hash: uHEAFGUIa+w818s33SMz8sos1XEYiW4NZhUvG/v7Vkk=) 2: druWg5UW9vs1BsYgZNY9YoeaUnc.crl (hash: HTEHsdrXTqYlDPCMzWCPdnyQKFPudyQJIgNEZ/1Y7Pw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:33:77:42:26:58:31:b4:eb:1a:cd:5c:a2:7d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76bb96839516f6fb3506c62064d63d62879a5277 Validity Not Before: Feb 9 18:00:49 2026 GMT Not After : Feb 10 18:00:49 2026 GMT Subject: CN=5c7fe8c020309160d8a0d08be5a46c6887c08ea4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:95:81:e9:47:a0:b0:14:03:51:fc:17:0a: 8d:bb:51:09:50:f7:be:c3:d0:37:4d:12:fa:9a:2f: c7:00:af:f5:b0:99:0d:48:4d:20:6c:39:fb:06:cb: 02:ba:ac:7b:c5:c1:79:d9:2b:32:86:4a:84:82:15: 0e:85:8a:7b:ba:ae:4f:d5:f2:7d:c7:d7:4c:b1:a0: 12:d9:dc:8f:a4:7b:98:8f:0d:44:d3:42:83:ce:1e: e8:83:4d:06:86:4b:a2:89:97:34:ee:a0:b5:b4:71: 66:8b:8c:8d:4b:49:87:05:dc:d9:41:a7:af:f5:8c: b9:65:fb:56:34:20:5f:9b:38:48:1a:85:26:37:7c: b0:d5:1b:e1:38:5e:c4:29:1d:82:0f:4e:88:3d:10: 90:29:a8:54:d4:ad:11:f3:0a:a9:c2:e2:0c:9e:71: a2:40:56:b1:4b:44:cc:c3:62:b9:69:06:04:12:cc: 17:94:d1:1c:05:81:a6:87:1f:7a:57:7f:31:45:55: 36:8f:66:bb:d3:0c:e3:16:68:25:f2:f7:6e:03:d6: 67:c0:b6:7f:96:c6:e4:82:93:93:4d:3f:cc:10:38: 12:fa:16:aa:b8:6a:e9:a8:d2:7b:83:35:bf:07:9b: 45:11:15:d5:6d:3a:84:ab:4d:fd:82:be:c9:29:85: 24:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:7F:E8:C0:20:30:91:60:D8:A0:D0:8B:E5:A4:6C:68:87:C0:8E:A4 X509v3 Authority Key Identifier: keyid:76:BB:96:83:95:16:F6:FB:35:06:C6:20:64:D6:3D:62:87:9A:52:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/druWg5UW9vs1BsYgZNY9YoeaUnc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e66a35-f6b2-4e3b-a43a-18e8b9814695/1/druWg5UW9vs1BsYgZNY9YoeaUnc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d1:13:4b:99:4b:ff:1c:83:02:33:44:4d:dc:8e:81:1e:99: 39:87:47:a5:d1:fa:37:61:57:de:7d:2b:f5:cf:b1:b4:da:61: 0b:a2:b5:a0:67:3a:b1:57:1f:95:9e:ab:70:8f:b8:8f:17:6a: 02:d2:e8:f5:a2:2c:ad:ca:b4:65:be:3b:c3:09:4a:1d:cf:54: 0b:00:92:53:e8:68:4b:33:34:68:e7:a5:c5:43:66:f5:92:bc: 0d:2f:af:a1:6f:9e:d4:08:49:ee:e2:33:d6:b1:21:c3:78:ae: 1f:e6:a7:6b:29:6f:e4:df:e9:1d:be:c2:03:3e:9f:e9:d4:a2: a7:cc:32:c4:fe:7b:f0:1c:33:8e:51:e5:67:2e:18:c0:be:f2: 04:e1:33:46:a6:42:53:0f:5a:76:a6:7f:e2:5d:f5:22:62:a3: 34:09:1d:32:c5:00:a7:15:75:9d:6e:bd:99:0c:3b:42:c5:03: 03:3f:79:d2:93:00:6d:f5:b7:b1:79:29:9a:65:52:fd:ac:54: 2a:18:f1:0d:6a:b1:26:e1:ef:3f:65:3d:d1:08:e0:a0:0d:fd: f7:36:7e:c4:67:50:1d:0c:6b:e7:ba:27:22:4f:91:13:b8:a6: 75:29:8b:3d:3b:93:19:0f:e6:e1:e2:66:24:b3:8e:fe:ba:94: 78:20:8c:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDN3QiZYMbTrGs1con0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2YmI5NjgzOTUxNmY2ZmIzNTA2YzYyMDY0ZDYzZDYyODc5 YTUyNzcwHhcNMjYwMjA5MTgwMDQ5WhcNMjYwMjEwMTgwMDQ5WjAzMTEwLwYDVQQD Eyg1YzdmZThjMDIwMzA5MTYwZDhhMGQwOGJlNWE0NmM2ODg3YzA4ZWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp42VgelHoLAUA1H8FwqNu1EJUPe+ w9A3TRL6mi/HAK/1sJkNSE0gbDn7BssCuqx7xcF52SsyhkqEghUOhYp7uq5P1fJ9 x9dMsaAS2dyPpHuYjw1E00KDzh7og00GhkuiiZc07qC1tHFmi4yNS0mHBdzZQaev 9Yy5ZftWNCBfmzhIGoUmN3yw1RvhOF7EKR2CD06IPRCQKahU1K0R8wqpwuIMnnGi QFaxS0TMw2K5aQYEEswXlNEcBYGmhx96V38xRVU2j2a70wzjFmgl8vduA9ZnwLZ/ lsbkgpOTTT/MEDgS+haquGrpqNJ7gzW/B5tFERXVbTqEq039gr7JKYUkiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFx/6MAgMJFg2KDQi+WkbGiHwI6kMB8GA1UdIwQY MBaAFHa7loOVFvb7NQbGIGTWPWKHmlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2Et MThlOGI5ODE0Njk1LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yi9lNjZhMzUtZjZiMi00ZTNiLWE0M2EtMThlOGI5ODE0Njk1 LzEvZHJ1V2c1VVc5dnMxQnNZZ1pOWTlZb2VhVW5jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALNETS5lL /xyDAjNETdyOgR6ZOYdHpdH6N2FX3n0r9c+xtNphC6K1oGc6sVcflZ6rcI+4jxdq AtLo9aIsrcq0Zb47wwlKHc9UCwCSU+hoSzM0aOelxUNm9ZK8DS+voW+e1AhJ7uIz 1rEhw3iuH+anaylv5N/pHb7CAz6f6dSip8wyxP578BwzjlHlZy4YwL7yBOEzRqZC Uw9adqZ/4l31ImKjNAkdMsUApxV1nW69mQw7QsUDAz950pMAbfW3sXkpmmVS/axU KhjxDWqxJuHvP2U90QjgoA399zZ+xGdQHQxr57onIk+RE7imdSmLPTuTGQ/m4eJm JLOO/rqUeCCMJg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:16 2026 by rpki-client