This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft File: 0hNMcoigwXozuLX-jFgGa0RC8YM.mft (raw, json) Hash identifier: 4/++vo4Q9x2IDLSd5nvpsAtGEy40rt6Wg7ol9bruYZs= Subject key identifier: DC:1C:C7:3C:17:61:C8:E8:D6:D3:11:81:61:D1:01:39:12:BD:00:40 Authority key identifier: D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 Certificate issuer: /CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Certificate serial: 019C41D8E8B004C1BEBA730C081460D04D28 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft Manifest number: 0641 Signing time: Mon 09 Feb 2026 10:01:00 +0000 Manifest this update: Mon 09 Feb 2026 10:01:00 +0000 Manifest next update: Tue 10 Feb 2026 10:01:00 +0000 Files and hashes: 1: 0hNMcoigwXozuLX-jFgGa0RC8YM.crl (hash: uTEjg+kQphJCKyrG25P2pz6Pp4u5OIR7xTCBLtQ7PbQ=) 2: snrfUjBn7hs_JXI-JDADVPqBfu0.roa (hash: chl5WtQulq1NJ8dnVwRq5DKzxSTQgdztVrgONAQmO1c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e8:b0:04:c1:be:ba:73:0c:08:14:60:d0:4d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d2134c7288a0c17a33b8b5fe8c58066b4442f183 Validity Not Before: Feb 9 10:01:00 2026 GMT Not After : Feb 10 10:01:00 2026 GMT Subject: CN=dc1cc73c1761c8e8d6d3118161d1013912bd0040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:19:1d:06:c5:1d:f6:73:66:b2:a6:13:0e:7b: 65:5f:72:6e:eb:6f:4e:44:0c:69:c6:6c:06:95:7f: ef:cb:f6:c7:0e:29:09:45:18:08:6b:a5:27:9f:fa: 5b:bf:be:25:ba:ea:ac:1e:c1:f8:73:ed:3e:65:de: 63:df:b9:5e:29:fb:1a:76:79:83:da:01:17:e9:d6: 8d:42:fb:98:0c:87:90:f4:e6:e9:b8:2c:a4:8c:ea: 76:42:70:03:e2:94:f9:d4:3b:f7:11:f1:d8:fd:c6: 8e:35:46:fc:3a:b9:4c:fd:48:2f:ec:a7:e5:e0:b3: e7:78:3f:0e:0c:66:72:66:e8:69:b4:35:59:0d:cb: 2f:c0:82:15:c8:03:4c:5b:6e:be:ad:44:91:e5:40: 25:14:76:ef:f3:1b:1b:f3:2c:59:a3:00:fa:29:bc: 28:e7:09:9f:fa:d6:d5:02:a6:f6:fc:3c:47:43:84: df:02:b6:ca:50:de:9a:34:9f:44:13:0c:0b:58:b5: d1:3f:ba:21:3f:9d:5a:03:0a:81:69:cd:b4:a4:26: 05:09:ef:25:56:d5:98:26:b5:4a:ab:a6:3b:94:7a: d3:a0:29:67:46:5d:cf:23:fa:a6:5d:22:4b:8e:5b: 06:82:ee:60:02:87:3b:15:66:ac:2c:f9:7f:f5:1f: 5e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:1C:C7:3C:17:61:C8:E8:D6:D3:11:81:61:D1:01:39:12:BD:00:40 X509v3 Authority Key Identifier: keyid:D2:13:4C:72:88:A0:C1:7A:33:B8:B5:FE:8C:58:06:6B:44:42:F1:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0hNMcoigwXozuLX-jFgGa0RC8YM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ddaf47-4e6d-4994-877b-2a89df1af16a/1/0hNMcoigwXozuLX-jFgGa0RC8YM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:4f:d7:6a:54:a1:d9:07:af:a8:b1:c0:eb:f9:55:12:a8:f0: 19:08:39:c5:00:42:3e:cb:ae:03:64:84:d2:a2:12:22:ba:20: b5:9c:76:d4:7e:31:44:69:59:b8:91:d4:2d:65:90:2e:5f:09: 81:02:64:31:f6:92:99:03:29:5c:51:64:34:35:de:79:1e:5c: 1f:7c:5a:ce:73:07:71:6e:ba:14:10:c8:94:e8:93:05:c0:28: 27:69:64:9d:14:7f:d0:a8:77:3a:9a:db:f6:8e:79:89:69:35: 36:d6:30:33:51:e2:28:76:50:6d:9c:7f:12:fe:a6:df:5d:0f: a9:61:77:1d:ab:f6:af:30:06:5e:58:4d:79:c2:2f:23:3c:1e: 63:25:f2:e5:9e:3a:cd:d5:38:8c:ec:3f:c0:8c:47:c7:8f:3c: c1:13:f4:e0:12:f6:74:78:bd:cc:62:8a:7c:e1:44:be:cc:27: 9b:1b:aa:b2:c5:34:9f:24:65:89:79:71:2a:93:1f:0c:8a:a1: 79:be:d2:25:7d:f1:d4:79:af:0a:d3:05:0e:26:a3:6d:cc:e0: 0c:9a:5a:9b:17:4d:4b:be:94:e2:0d:79:7d:4f:7c:42:9d:96: 57:89:43:7d:d7:f0:e6:04:f6:e0:02:dc:86:f8:e3:02:72:22: 1b:6d:f4:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OiwBMG+unMMCBRg0E0oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTM0YzcyODhhMGMxN2EzM2I4YjVmZThjNTgwNjZiNDQ0 MmYxODMwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD EyhkYzFjYzczYzE3NjFjOGU4ZDZkMzExODE2MWQxMDEzOTEyYmQwMDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBkdBsUd9nNmsqYTDntlX3Ju629O RAxpxmwGlX/vy/bHDikJRRgIa6Unn/pbv74luuqsHsH4c+0+Zd5j37leKfsadnmD 2gEX6daNQvuYDIeQ9ObpuCykjOp2QnAD4pT51Dv3EfHY/caONUb8OrlM/Ugv7Kfl 4LPneD8ODGZyZuhptDVZDcsvwIIVyANMW26+rUSR5UAlFHbv8xsb8yxZowD6Kbwo 5wmf+tbVAqb2/DxHQ4TfArbKUN6aNJ9EEwwLWLXRP7ohP51aAwqBac20pCYFCe8l VtWYJrVKq6Y7lHrToClnRl3PI/qmXSJLjlsGgu5gAoc7FWasLPl/9R9eUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNwcxzwXYcjo1tMRgWHRATkSvQBAMB8GA1UdIwQY MBaAFNITTHKIoMF6M7i1/oxYBmtEQvGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2It MmE4OWRmMWFmMTZhLzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My9kZGFmNDctNGU2ZC00OTk0LTg3N2ItMmE4OWRmMWFmMTZh LzEvMGhOTWNvaWd3WG96dUxYLWpGZ0dhMFJDOFlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE/XalSh 2QevqLHA6/lVEqjwGQg5xQBCPsuuA2SE0qISIrogtZx21H4xRGlZuJHULWWQLl8J gQJkMfaSmQMpXFFkNDXeeR5cH3xaznMHcW66FBDIlOiTBcAoJ2lknRR/0Kh3Oprb 9o55iWk1NtYwM1HiKHZQbZx/Ev6m310PqWF3Hav2rzAGXlhNecIvIzweYyXy5Z46 zdU4jOw/wIxHx488wRP04BL2dHi9zGKKfOFEvswnmxuqssU0nyRliXlxKpMfDIqh eb7SJX3x1HmvCtMFDiajbczgDJpamxdNS76U4g15fU98Qp2WV4lDfdfw5gT24ALc hvjjAnIiG230cA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:52 2026 by rpki-client