This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft File: DcGyhbbH8r8EyZjeiStDbxDTTcA.mft (raw, json) Hash identifier: sE0F52X+2GBhMLhrZ5ulAG+9V59/L9eNW5URSe7lDP0= Subject key identifier: 15:C5:12:9C:D1:9F:C6:38:14:9F:35:C7:E0:B3:57:D5:4E:15:38:CF Authority key identifier: 0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0 Certificate issuer: /CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0 Certificate serial: 019C41D8C5A21798549362E972B4439379D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft Manifest number: 0148 Signing time: Mon 09 Feb 2026 10:00:51 +0000 Manifest this update: Mon 09 Feb 2026 10:00:51 +0000 Manifest next update: Tue 10 Feb 2026 10:00:51 +0000 Files and hashes: 1: DcGyhbbH8r8EyZjeiStDbxDTTcA.crl (hash: T2uaOb4zzySQXVP3SK3hhl475DvcVtWFgqDvx6CmoF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c5:a2:17:98:54:93:62:e9:72:b4:43:93:79:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc1b285b6c7f2bf04c998de892b436f10d34dc0 Validity Not Before: Feb 9 10:00:51 2026 GMT Not After : Feb 10 10:00:51 2026 GMT Subject: CN=15c5129cd19fc638149f35c7e0b357d54e1538cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:37:f7:7c:4b:28:04:5c:56:d8:b0:e6:3d:3b: 5f:b7:0e:ad:83:04:c6:03:3e:7a:39:a1:60:35:c3: 68:a4:6a:2f:f2:6a:a7:da:15:3d:39:c7:47:71:34: 3f:ff:da:13:1d:34:b8:0e:b8:12:bc:81:99:1c:b8: 3e:60:56:22:8f:18:c0:cc:02:24:68:e2:f6:fd:08: ad:d3:e4:6e:56:51:ec:35:ec:be:1f:4d:c7:58:9a: 57:af:45:2b:0c:22:05:9c:7c:8f:a0:46:ed:5b:24: d3:1a:ec:03:7c:2d:13:c4:6f:c8:d1:76:c3:d1:85: ad:5c:1a:32:30:66:8f:25:46:90:39:28:e1:2f:70: de:41:11:e8:a2:56:18:0b:93:2e:00:22:f7:c3:8c: 8c:eb:ac:f9:e6:ba:e5:0d:60:8a:46:09:0a:12:92: 6a:c6:bb:ef:23:fe:2e:0f:88:5a:0c:cd:32:56:fd: c8:95:92:64:53:e1:7d:14:81:82:1e:06:af:c1:a5: a0:b2:83:ca:52:06:5d:2a:91:70:06:23:ba:33:3b: 1f:f8:be:30:80:9b:e2:98:9a:cf:e4:7b:77:78:94: 3d:a2:8a:3d:2c:2e:c0:59:96:e5:33:a8:0c:ca:65: d6:e5:77:42:c9:78:ac:d4:4f:a7:95:24:45:f4:05: af:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:C5:12:9C:D1:9F:C6:38:14:9F:35:C7:E0:B3:57:D5:4E:15:38:CF X509v3 Authority Key Identifier: keyid:0D:C1:B2:85:B6:C7:F2:BF:04:C9:98:DE:89:2B:43:6F:10:D3:4D:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcGyhbbH8r8EyZjeiStDbxDTTcA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/3eada9-d441-476a-baa4-ecaa5ddd1d0f/1/DcGyhbbH8r8EyZjeiStDbxDTTcA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5e:29:3d:91:e3:23:49:5c:0f:e2:b2:4f:68:85:45:c6:33: d0:86:57:41:e9:45:eb:9b:30:fd:e2:a1:18:28:f3:1f:56:a0: cc:9b:e0:6f:07:4b:c2:f0:58:fa:3c:4b:cb:e9:f2:eb:0a:bc: f4:da:9e:8d:3c:94:7e:ab:aa:34:3e:ff:52:35:65:35:61:f7: 9c:c1:5d:c3:80:e2:11:1f:5b:6a:cf:47:bf:8c:2b:a4:3d:a5: 4d:dc:c0:1d:dc:4f:f6:87:66:52:06:16:51:4b:2d:a4:31:8b: 1a:91:27:ef:8c:86:d7:12:5c:ff:5a:a3:74:22:ab:ac:c8:29: 0f:e2:3e:47:05:a7:0c:e1:db:22:18:3e:ee:c0:11:65:ff:f3: c9:21:7c:7e:c3:12:34:8e:e5:2f:d3:5e:79:1f:50:d3:8c:2d: ec:10:36:5e:d6:17:3d:5d:24:36:88:58:13:71:1d:c8:40:34: 66:da:ff:94:c4:86:d0:c1:d8:f2:18:2a:52:90:35:31:a9:79: 8c:a8:89:50:49:06:4c:ee:af:95:84:1e:0a:9f:5b:26:03:5c: d2:00:f9:1b:a4:6b:09:16:74:89:93:9b:1a:18:34:61:fc:bf: 16:1c:82:54:07:15:5f:3e:de:49:7d:d1:fe:1c:f4:b2:a1:77: 3b:49:83:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MWiF5hUk2LpcrRDk3nVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzFiMjg1YjZjN2YyYmYwNGM5OThkZTg5MmI0MzZmMTBk MzRkYzAwHhcNMjYwMjA5MTAwMDUxWhcNMjYwMjEwMTAwMDUxWjAzMTEwLwYDVQQD EygxNWM1MTI5Y2QxOWZjNjM4MTQ5ZjM1YzdlMGIzNTdkNTRlMTUzOGNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjf3fEsoBFxW2LDmPTtftw6tgwTG Az56OaFgNcNopGov8mqn2hU9OcdHcTQ//9oTHTS4DrgSvIGZHLg+YFYijxjAzAIk aOL2/Qit0+RuVlHsNey+H03HWJpXr0UrDCIFnHyPoEbtWyTTGuwDfC0TxG/I0XbD 0YWtXBoyMGaPJUaQOSjhL3DeQRHoolYYC5MuACL3w4yM66z55rrlDWCKRgkKEpJq xrvvI/4uD4haDM0yVv3IlZJkU+F9FIGCHgavwaWgsoPKUgZdKpFwBiO6Mzsf+L4w gJvimJrP5Ht3eJQ9ooo9LC7AWZblM6gMymXW5XdCyXis1E+nlSRF9AWvpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXFEpzRn8Y4FJ81x+CzV9VOFTjPMB8GA1UdIwQY MBaAFA3BsoW2x/K/BMmY3okrQ28Q003AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8zZWFkYTktZDQ0MS00NzZhLWJhYTQt ZWNhYTVkZGQxZDBmLzEvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8zZWFkYTktZDQ0MS00NzZhLWJhYTQtZWNhYTVkZGQxZDBm LzEvRGNHeWhiYkg4cjhFeVpqZWlTdERieERUVGNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl14pPZHj I0lcD+KyT2iFRcYz0IZXQelF65sw/eKhGCjzH1agzJvgbwdLwvBY+jxLy+ny6wq8 9NqejTyUfquqND7/UjVlNWH3nMFdw4DiER9bas9Hv4wrpD2lTdzAHdxP9odmUgYW UUstpDGLGpEn74yG1xJc/1qjdCKrrMgpD+I+RwWnDOHbIhg+7sARZf/zySF8fsMS NI7lL9NeeR9Q04wt7BA2XtYXPV0kNohYE3EdyEA0Ztr/lMSG0MHY8hgqUpA1Mal5 jKiJUEkGTO6vlYQeCp9bJgNc0gD5G6RrCRZ0iZObGhg0Yfy/FhyCVAcVXz7eSX3R /hz0sqF3O0mDQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:41 2026 by rpki-client