This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft File: DXQT3PU3N0pw2qMf2amf0psDMjk.mft (raw, json) Hash identifier: ARMb/sndZ6cxi6VuQm9T1Nrw9y2Xs1GhupQs74129iE= Subject key identifier: 43:6F:3A:91:5D:D4:C0:9F:E9:A5:EF:F6:97:D5:F4:DB:D6:D0:6C:29 Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Certificate serial: 019C42B3F82C4341195B1D4D61EC0322511E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft Manifest number: 15D6 Signing time: Mon 09 Feb 2026 14:00:16 +0000 Manifest this update: Mon 09 Feb 2026 14:00:16 +0000 Manifest next update: Tue 10 Feb 2026 14:00:16 +0000 Files and hashes: 1: DXQT3PU3N0pw2qMf2amf0psDMjk.crl (hash: 5Q3sYsJdcxdCNgu+Bt7pOe8x5CEIJGKWBfJpDXl+0kE=) 2: mGAQzPjBEuNvLBk4PZVTydQ08Ik.roa (hash: nFMnkaBb6s7S3hBrs96M6UKrx0AkayAu23OFBBKrBXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f8:2c:43:41:19:5b:1d:4d:61:ec:03:22:51:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239 Validity Not Before: Feb 9 14:00:16 2026 GMT Not After : Feb 10 14:00:16 2026 GMT Subject: CN=436f3a915dd4c09fe9a5eff697d5f4dbd6d06c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:db:a8:70:8e:1f:a0:03:d2:2a:bf:64:96:12: 7d:c5:dc:3a:2d:35:87:df:df:24:f6:78:32:69:2d: 2b:7b:e5:8b:84:3b:84:11:26:ee:b8:99:1e:a2:39: 40:d0:11:40:13:3b:6f:1b:64:70:7d:39:c1:36:9f: 64:5e:76:97:9a:e3:4c:a0:b8:fa:29:c9:d9:ac:f2: c3:34:59:e9:33:03:20:1b:aa:8c:a6:33:62:0d:8b: eb:96:c2:54:c8:55:fd:f9:34:18:1b:2a:88:4a:14: 55:1b:37:e7:58:29:fe:14:f3:75:25:0e:ee:f7:0d: 49:a9:e3:ba:bc:bf:56:fa:bc:45:bc:77:42:4e:02: e0:7d:6a:c1:cf:c4:b7:49:8b:93:f9:62:2f:97:c9: 23:b2:93:a1:20:ca:2d:14:5b:0e:20:9a:c1:b5:4c: d8:e2:50:0d:56:82:ad:ec:ae:8e:28:19:0d:33:53: 06:5b:8f:c9:ac:36:f8:c0:1b:f7:52:e9:2b:a5:4e: 6d:b1:78:d4:8e:0c:de:47:fc:d7:3b:16:63:37:8c: 8b:e8:51:1b:ef:c5:6e:86:22:58:c4:e2:61:57:cd: 98:08:8c:5b:b7:92:02:9d:d8:40:0a:83:0a:22:1f: e0:44:d6:81:00:df:ec:49:bc:21:af:a6:1e:8b:e1: 69:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:6F:3A:91:5D:D4:C0:9F:E9:A5:EF:F6:97:D5:F4:DB:D6:D0:6C:29 X509v3 Authority Key Identifier: keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:32:d2:94:a0:d9:ab:76:be:78:3a:ff:5c:5b:62:2e:94:1a: 9b:31:b1:91:9e:20:52:30:90:c4:28:d1:df:42:db:56:67:e6: 82:c1:7d:5e:c9:df:db:c3:60:95:b4:1d:fd:a7:00:b4:50:ac: 22:32:3c:97:6b:ce:14:d0:a1:13:8c:f8:a3:e6:bc:a9:2a:85: 47:ec:76:96:b5:87:ad:f6:b6:c8:53:68:99:f0:c5:1e:1d:58: 4a:66:f6:f3:ba:0a:50:55:78:d0:49:ac:30:28:29:ec:58:13: 54:18:d6:a6:43:74:3e:f7:53:ac:3f:28:17:f2:f2:70:ff:c8: 5c:1f:fc:f6:03:e7:36:16:99:4d:84:fd:97:a4:8d:3f:f6:45: a9:e5:ab:18:28:f2:45:a2:e4:d8:ee:32:bc:9e:5e:06:9b:87: b0:37:fc:3c:16:9b:fb:35:a8:55:d0:25:b3:c9:ca:bd:7e:d6: 49:73:d9:b9:a7:7a:18:8b:4b:0f:50:89:e8:32:aa:ad:28:bd: 4c:25:89:61:58:4c:c9:7e:c3:9e:87:da:fe:e9:c3:86:01:8e: 1a:c6:56:e4:8c:62:15:c6:1e:bd:d8:38:07:85:da:ae:51:88: c0:05:b9:90:68:ea:fb:60:51:ce:57:77:9c:ad:6e:46:63:4f: 3f:5b:31:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/gsQ0EZWx1NYewDIlEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzQxM2RjZjUzNzM3NGE3MGRhYTMxZmQ5YTk5ZmQyOWIw MzMyMzkwHhcNMjYwMjA5MTQwMDE2WhcNMjYwMjEwMTQwMDE2WjAzMTEwLwYDVQQD Eyg0MzZmM2E5MTVkZDRjMDlmZTlhNWVmZjY5N2Q1ZjRkYmQ2ZDA2YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9uocI4foAPSKr9klhJ9xdw6LTWH 398k9ngyaS0re+WLhDuEESbuuJkeojlA0BFAEztvG2RwfTnBNp9kXnaXmuNMoLj6 KcnZrPLDNFnpMwMgG6qMpjNiDYvrlsJUyFX9+TQYGyqIShRVGzfnWCn+FPN1JQ7u 9w1JqeO6vL9W+rxFvHdCTgLgfWrBz8S3SYuT+WIvl8kjspOhIMotFFsOIJrBtUzY 4lANVoKt7K6OKBkNM1MGW4/JrDb4wBv3UukrpU5tsXjUjgzeR/zXOxZjN4yL6FEb 78VuhiJYxOJhV82YCIxbt5ICndhACoMKIh/gRNaBAN/sSbwhr6Yei+FpDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENvOpFd1MCf6aXv9pfV9NvW0GwpMB8GA1UdIwQY MBaAFA10E9z1NzdKcNqjH9mpn9KbAzI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQt ZTY5YmUzOTViMGY3LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC9lMzI2YjktNzk1Zi00YTBiLTllZmQtZTY5YmUzOTViMGY3 LzEvRFhRVDNQVTNOMHB3MnFNZjJhbWYwcHNETWprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTLSlKDZ q3a+eDr/XFtiLpQamzGxkZ4gUjCQxCjR30LbVmfmgsF9Xsnf28NglbQd/acAtFCs IjI8l2vOFNChE4z4o+a8qSqFR+x2lrWHrfa2yFNomfDFHh1YSmb287oKUFV40Ems MCgp7FgTVBjWpkN0PvdTrD8oF/LycP/IXB/89gPnNhaZTYT9l6SNP/ZFqeWrGCjy RaLk2O4yvJ5eBpuHsDf8PBab+zWoVdAls8nKvX7WSXPZuad6GItLD1CJ6DKqrSi9 TCWJYVhMyX7Dnofa/unDhgGOGsZW5IxiFcYevdg4B4XarlGIwAW5kGjq+2BRzld3 nK1uRmNPP1sxxw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:26 2026 by rpki-client