This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft File: DloI_DRpD1LbDCt-R-jlOIMUWpg.mft (raw, json) Hash identifier: jwcdZDnAC5qBAHRcnZd7K7H2Byps7Popz5D+Mq6aC2s= Subject key identifier: 41:A7:EC:67:CC:DB:91:CE:5B:32:B0:33:5B:03:B2:93:12:5A:26:3D Authority key identifier: 0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 Certificate issuer: /CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Certificate serial: 019C435913E01127A65105BD721B0997EFD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft Manifest number: 0321 Signing time: Mon 09 Feb 2026 17:00:37 +0000 Manifest this update: Mon 09 Feb 2026 17:00:37 +0000 Manifest next update: Tue 10 Feb 2026 17:00:37 +0000 Files and hashes: 1: DloI_DRpD1LbDCt-R-jlOIMUWpg.crl (hash: iipRcHJGTQRytCfWHWdM8nBywt/mGtBmil8LJd8wEDk=) 2: ZHi1ZhCdWfH9BoGN5VcU78t29bk.roa (hash: SRJcc4sRWkIGgmHfVj6UPyJviHaRkjxeQWqok2u9PGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:13:e0:11:27:a6:51:05:bd:72:1b:09:97:ef:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e5a08fc34690f52db0c2b7e47e8e53883145a98 Validity Not Before: Feb 9 17:00:37 2026 GMT Not After : Feb 10 17:00:37 2026 GMT Subject: CN=41a7ec67ccdb91ce5b32b0335b03b293125a263d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:be:b0:b1:d7:eb:9b:7f:c2:ff:64:9a:24: a3:36:46:1e:76:18:23:ca:3d:47:3e:2d:d7:da:f3: 9b:38:86:8b:aa:83:3a:1f:b4:cd:e1:7c:b7:d2:aa: 90:e4:07:fd:95:a5:00:a7:1e:7d:4c:9d:65:13:b7: ea:77:31:c9:1a:a6:8e:b2:bd:9e:51:db:b3:36:df: bd:5a:1c:95:2a:35:f8:7d:b2:f9:c1:be:a9:8c:11: 15:8e:ac:ef:a3:57:87:58:6a:90:4d:e4:cf:73:0e: c1:a6:69:0c:8c:d5:bf:40:88:68:5e:a3:f1:97:e3: 84:25:0b:2c:f6:c3:aa:cd:62:9d:8d:3d:0b:6f:8a: 7b:5b:cc:7a:50:3e:20:18:d0:82:c7:e9:94:5b:8e: 1a:ac:21:47:9e:11:77:9d:8d:b5:41:45:d4:87:8b: 22:7d:0e:47:76:58:f7:63:8d:09:a7:89:76:90:04: 34:97:cc:8c:8d:07:3a:34:27:00:6b:ce:45:05:95: 73:81:d7:04:d0:32:15:fa:a0:a5:39:6c:b5:a4:07: 59:7f:41:a9:36:1e:98:fb:0d:40:c9:17:27:1b:1c: 57:ae:59:fc:42:92:18:dd:ca:17:50:52:dd:c7:a2: f9:d8:70:f2:3e:da:d2:d5:9f:02:c5:ab:c3:95:8a: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:EC:67:CC:DB:91:CE:5B:32:B0:33:5B:03:B2:93:12:5A:26:3D X509v3 Authority Key Identifier: keyid:0E:5A:08:FC:34:69:0F:52:DB:0C:2B:7E:47:E8:E5:38:83:14:5A:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DloI_DRpD1LbDCt-R-jlOIMUWpg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/017849-7ccf-4815-bc69-a77f0b32144e/1/DloI_DRpD1LbDCt-R-jlOIMUWpg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:0e:fe:8f:bc:76:b3:3f:08:25:98:b6:88:3b:88:23:69:73: 30:6e:50:38:0d:60:b3:78:84:29:f5:a9:9a:e3:40:cb:d3:8c: 64:1d:fd:a6:ec:72:a7:d6:ff:b8:19:f0:70:f5:7e:0f:39:be: 84:21:bf:1a:09:d1:8c:fa:6e:4c:15:c8:8e:5b:4c:0a:4b:d9: 09:ff:88:80:00:21:ca:57:64:4f:65:71:05:71:8f:b0:8f:20: 89:dc:92:fc:6d:08:0d:45:5b:06:f6:f2:d6:7c:71:21:f7:65: 2f:63:c8:e5:56:72:be:51:84:f7:4b:e1:62:fa:ea:63:62:cc: 03:11:c0:42:d4:9a:7f:9a:e7:df:a3:4e:a8:5c:1d:f4:49:8f: b0:bb:6a:83:89:cd:bf:b9:ec:b5:9e:9e:eb:bf:d5:16:eb:62: b4:68:5b:9a:2f:e4:8b:0f:b2:56:46:40:0c:e6:b2:c0:09:03: 59:32:87:2a:25:f8:56:3a:92:66:15:c5:62:9e:56:89:8e:15: 77:7c:d3:c9:48:66:f7:30:f0:02:01:68:72:8f:13:25:da:4d: 47:a8:b9:07:6d:44:a1:4c:b6:f5:7d:47:9e:8e:b9:b4:d0:3b: ee:71:71:59:73:0d:b2:9f:7d:82:e5:3a:5f:a8:63:78:ac:8b: 74:7a:07:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRPgESemUQW9chsJl+/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNWEwOGZjMzQ2OTBmNTJkYjBjMmI3ZTQ3ZThlNTM4ODMx NDVhOTgwHhcNMjYwMjA5MTcwMDM3WhcNMjYwMjEwMTcwMDM3WjAzMTEwLwYDVQQD Eyg0MWE3ZWM2N2NjZGI5MWNlNWIzMmIwMzM1YjAzYjI5MzEyNWEyNjNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnW+sLHX65t/wv9kmiSjNkYedhgj yj1HPi3X2vObOIaLqoM6H7TN4Xy30qqQ5Af9laUApx59TJ1lE7fqdzHJGqaOsr2e UduzNt+9WhyVKjX4fbL5wb6pjBEVjqzvo1eHWGqQTeTPcw7BpmkMjNW/QIhoXqPx l+OEJQss9sOqzWKdjT0Lb4p7W8x6UD4gGNCCx+mUW44arCFHnhF3nY21QUXUh4si fQ5Hdlj3Y40Jp4l2kAQ0l8yMjQc6NCcAa85FBZVzgdcE0DIV+qClOWy1pAdZf0Gp Nh6Y+w1AyRcnGxxXrln8QpIY3coXUFLdx6L52HDyPtrS1Z8CxavDlYoMgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEGn7GfM25HOWzKwM1sDspMSWiY9MB8GA1UdIwQY MBaAFA5aCPw0aQ9S2wwrfkfo5TiDFFqYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjkt YTc3ZjBiMzIxNDRlLzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8wMTc4NDktN2NjZi00ODE1LWJjNjktYTc3ZjBiMzIxNDRl LzEvRGxvSV9EUnBEMUxiREN0LVItamxPSU1VV3BnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMA7+j7x2 sz8IJZi2iDuII2lzMG5QOA1gs3iEKfWpmuNAy9OMZB39puxyp9b/uBnwcPV+Dzm+ hCG/GgnRjPpuTBXIjltMCkvZCf+IgAAhyldkT2VxBXGPsI8gidyS/G0IDUVbBvby 1nxxIfdlL2PI5VZyvlGE90vhYvrqY2LMAxHAQtSaf5rn36NOqFwd9EmPsLtqg4nN v7nstZ6e67/VFutitGhbmi/kiw+yVkZADOaywAkDWTKHKiX4VjqSZhXFYp5WiY4V d3zTyUhm9zDwAgFoco8TJdpNR6i5B21EoUy29X1Hno65tNA77nFxWXMNsp99guU6 X6hjeKyLdHoHKQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:56:27 2026 by rpki-client