This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft File: DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft (raw, json) Hash identifier: xa/bYTthkoT4p2xGipm7AOxok0If51zzG1IaGfNj9p0= Subject key identifier: 65:C3:5C:24:06:E1:FD:B1:E8:31:3A:02:9A:95:0B:AE:5F:C2:6C:D9 Authority key identifier: 0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 Certificate issuer: /CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Certificate serial: 019C424629E8D7A2735E46094609DBAF9BE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft Manifest number: 0AD7 Signing time: Mon 09 Feb 2026 12:00:20 +0000 Manifest this update: Mon 09 Feb 2026 12:00:20 +0000 Manifest next update: Tue 10 Feb 2026 12:00:20 +0000 Files and hashes: 1: Ajd0L8XQdcyvJF9_JDszHwb-ypM.roa (hash: JhIrWGN9lZ7WVHOAnXcV9RrmyiG8gnQ8alzgC7IHdko=) 2: DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl (hash: CSwAp2nbvM574jEuSThgjMIFx0Blz++t6fxS0ik7nZw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:29:e8:d7:a2:73:5e:46:09:46:09:db:af:9b:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d026a518947dd5bd3981ed0669c11c5621d0475 Validity Not Before: Feb 9 12:00:20 2026 GMT Not After : Feb 10 12:00:20 2026 GMT Subject: CN=65c35c2406e1fdb1e8313a029a950bae5fc26cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:c0:2f:70:49:af:58:c5:2f:06:2d:c3:8e: 54:c4:a2:cc:71:d1:89:38:5f:c0:62:79:9f:83:6a: e7:c3:6d:0e:0c:bf:19:8f:1c:38:3b:99:95:ee:97: 47:5e:e2:f7:30:73:e7:51:9f:63:9d:23:58:30:5b: e6:59:04:0a:ae:f7:a7:a7:26:56:63:9c:90:39:19: 6a:e8:f8:09:36:f3:d5:ad:e4:10:cb:08:cb:2b:56: d6:24:41:a1:a9:d7:f0:08:4e:1a:95:85:9b:7b:78: 0a:ab:30:ed:b2:ef:c8:bb:a9:a0:8f:c9:6a:a3:6e: 08:65:ca:88:9e:08:47:b4:e1:98:2b:26:7b:55:10: a5:c5:0f:e9:96:92:d2:9e:34:45:8e:10:01:06:a2: f2:c1:24:51:82:c7:dc:5c:ba:b6:a5:36:f7:4c:bb: 87:98:01:9b:c0:84:62:24:50:4e:23:00:36:de:6f: 66:1f:43:0c:60:93:1b:d1:c5:7d:d3:17:83:6d:52: 36:cc:d8:21:e4:96:57:86:f0:1c:07:73:04:76:1f: af:5b:0d:94:48:32:1b:3e:0d:27:cb:0b:7f:7a:66: 62:6a:81:83:0b:20:73:79:cd:33:a1:85:99:75:42: 82:83:67:fa:ac:3f:9a:d5:92:b6:8c:42:eb:80:ac: c2:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C3:5C:24:06:E1:FD:B1:E8:31:3A:02:9A:95:0B:AE:5F:C2:6C:D9 X509v3 Authority Key Identifier: keyid:0D:02:6A:51:89:47:DD:5B:D3:98:1E:D0:66:9C:11:C5:62:1D:04:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQJqUYlH3VvTmB7QZpwRxWIdBHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/417a43-55e9-4626-99c5-25cb092f5cac/1/DQJqUYlH3VvTmB7QZpwRxWIdBHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:16:ee:c1:51:e6:d1:7c:3d:da:93:df:ae:b3:a7:50:ec:a9: 58:82:64:5b:88:46:5c:23:55:3b:e4:54:86:bd:57:30:05:48: 83:4f:0c:ce:03:56:64:80:90:c9:24:d3:be:5a:68:2e:75:4c: 78:40:98:5c:df:bd:fb:77:68:13:d9:49:ee:dd:20:26:83:3f: 8a:d4:ca:37:ff:0c:db:87:55:b0:24:5a:0e:2a:cf:43:62:f0: e3:f2:7b:2c:ed:cd:a2:4b:7f:0f:39:35:a9:d8:c0:97:60:32: 82:ac:1c:c6:18:3f:95:30:76:86:5e:a1:68:58:52:93:3a:d1: b1:1d:ee:0c:cc:e0:5d:14:45:81:c4:50:d9:01:45:a2:18:df: 56:36:6c:b0:9c:3e:d6:8c:9e:de:07:fb:4b:09:32:e8:61:62: af:97:dd:c5:8e:3e:c0:db:b4:55:b4:07:40:22:61:e4:8e:df: 3f:50:ea:f5:2a:dc:81:bc:d0:db:74:85:cc:75:ad:79:f0:40: 27:63:0f:fe:22:cf:df:4d:e1:2a:0a:99:02:f5:d8:58:b7:79: ef:f4:5d:75:b1:3f:b4:2b:b3:31:f1:6d:b4:f6:40:ff:5e:87: f5:ba:2f:af:65:2f:fe:1c:68:3c:8e:61:69:3c:17:a4:80:c1: b2:d4:f9:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRino16JzXkYJRgnbr5vjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDI2YTUxODk0N2RkNWJkMzk4MWVkMDY2OWMxMWM1NjIx ZDA0NzUwHhcNMjYwMjA5MTIwMDIwWhcNMjYwMjEwMTIwMDIwWjAzMTEwLwYDVQQD Eyg2NWMzNWMyNDA2ZTFmZGIxZTgzMTNhMDI5YTk1MGJhZTVmYzI2Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqurAL3BJr1jFLwYtw45UxKLMcdGJ OF/AYnmfg2rnw20ODL8Zjxw4O5mV7pdHXuL3MHPnUZ9jnSNYMFvmWQQKrvenpyZW Y5yQORlq6PgJNvPVreQQywjLK1bWJEGhqdfwCE4alYWbe3gKqzDtsu/Iu6mgj8lq o24IZcqInghHtOGYKyZ7VRClxQ/plpLSnjRFjhABBqLywSRRgsfcXLq2pTb3TLuH mAGbwIRiJFBOIwA23m9mH0MMYJMb0cV90xeDbVI2zNgh5JZXhvAcB3MEdh+vWw2U SDIbPg0nywt/emZiaoGDCyBzec0zoYWZdUKCg2f6rD+a1ZK2jELrgKzCkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXDXCQG4f2x6DE6ApqVC65fwmzZMB8GA1UdIwQY MBaAFA0CalGJR91b05ge0GacEcViHQR1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUt MjVjYjA5MmY1Y2FjLzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My80MTdhNDMtNTVlOS00NjI2LTk5YzUtMjVjYjA5MmY1Y2Fj LzEvRFFKcVVZbEgzVnZUbUI3UVpwd1J4V0lkQkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyxbuwVHm 0Xw92pPfrrOnUOypWIJkW4hGXCNVO+RUhr1XMAVIg08MzgNWZICQySTTvlpoLnVM eECYXN+9+3doE9lJ7t0gJoM/itTKN/8M24dVsCRaDirPQ2Lw4/J7LO3Nokt/Dzk1 qdjAl2Aygqwcxhg/lTB2hl6haFhSkzrRsR3uDMzgXRRFgcRQ2QFFohjfVjZssJw+ 1oye3gf7Swky6GFir5fdxY4+wNu0VbQHQCJh5I7fP1Dq9SrcgbzQ23SFzHWtefBA J2MP/iLP303hKgqZAvXYWLd57/RddbE/tCuzMfFttPZA/16H9bovr2Uv/hxoPI5h aTwXpIDBstT5Bg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:53 2026 by rpki-client