This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft File: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft (raw, json) Hash identifier: 1ne8z7dLtUEOcTXhn463AO9zikZTB0DA9pTVbWzxlpA= Subject key identifier: A9:BD:81:3B:45:C9:79:CE:DB:2F:5E:9F:ED:49:7B:D2:21:2D:B6:B5 Authority key identifier: 74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E Certificate issuer: /CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Certificate serial: 019C424639D03DCD002761AEBE2ED36A8AFD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft Manifest number: 10E6 Signing time: Mon 09 Feb 2026 12:00:24 +0000 Manifest this update: Mon 09 Feb 2026 12:00:24 +0000 Manifest next update: Tue 10 Feb 2026 12:00:24 +0000 Files and hashes: 1: dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl (hash: aL+Md1vkt0A3vZb+tzFZh2h58rfVyT1u5ZrCZaR1Sr0=) 2: gNzUmUgQXk7G4YryRBrkTshiOLY.roa (hash: jrGbKzoOn481FO6Gv/dBrgR8DcLBCJ5w3uT6Yvsqj0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:39:d0:3d:cd:00:27:61:ae:be:2e:d3:6a:8a:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a59b7fb4e034f67775f2875efbfc9eff247e8e Validity Not Before: Feb 9 12:00:24 2026 GMT Not After : Feb 10 12:00:24 2026 GMT Subject: CN=a9bd813b45c979cedb2f5e9fed497bd2212db6b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:d2:c6:64:ba:96:6e:21:3b:71:96:72:65: cd:79:3f:59:7c:db:3c:ea:49:23:ad:c9:76:6b:fb: 07:b0:37:f1:b1:b2:c6:d2:2c:b1:6b:37:d6:9f:32: ca:c2:9a:87:6c:c5:43:24:4e:6b:60:8f:3a:09:f9: 9c:e2:a5:41:d8:3a:c6:03:a0:73:54:17:6f:aa:ff: 85:93:18:e9:80:2b:a3:b0:2f:c1:db:02:ed:7e:16: eb:df:9d:a6:04:24:b5:22:5a:d9:ef:57:ac:f3:f6: 02:53:3c:14:f0:c8:fc:98:fa:54:21:36:6e:ba:f2: f8:ac:b9:22:4c:39:b1:73:e6:d5:3f:a3:3b:4c:ec: 3f:07:08:cb:1f:3a:8c:a8:b1:de:ad:00:40:3f:77: 16:46:b3:d0:47:a1:ff:a1:ab:32:17:4d:71:0e:42: e7:ec:19:6f:d8:57:0c:21:48:93:eb:6b:9a:e9:58: fd:4c:ea:81:a8:63:7b:15:f7:ca:f3:af:b2:63:0b: db:c7:fe:ba:03:73:38:89:56:9c:87:f2:59:95:21: 53:e1:3a:68:53:6d:48:61:52:27:d4:ce:c8:0c:4e: 6d:bd:cf:9f:4b:fa:ce:d6:5e:3a:9d:2d:50:db:1f: e5:68:3d:63:2f:64:c1:c0:e2:90:3a:3c:7b:08:56: 54:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:BD:81:3B:45:C9:79:CE:DB:2F:5E:9F:ED:49:7B:D2:21:2D:B6:B5 X509v3 Authority Key Identifier: keyid:74:A5:9B:7F:B4:E0:34:F6:77:75:F2:87:5E:FB:FC:9E:FF:24:7E:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/2b195e-0aba-47d4-8e3b-ad32ef49d419/1/dKWbf7TgNPZ3dfKHXvv8nv8kfo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:e8:f3:a3:aa:df:b2:10:32:86:5c:e1:4e:37:a2:46:5d:23: df:a0:4a:58:fd:b8:a4:d7:d8:da:30:e6:7f:8d:d0:46:af:d7: ae:4d:da:c3:a5:82:a8:2b:af:bf:ce:5e:33:77:77:47:4c:88: 1a:f0:c3:98:db:7a:42:03:41:4e:21:87:7e:68:90:f9:b7:38: 41:84:8c:db:35:a0:2e:1c:f6:36:89:b6:7e:a4:35:19:bd:45: 12:a5:75:10:a0:e3:66:ca:06:cf:7c:dc:e0:43:c2:2b:e1:09: c4:6c:ac:c3:52:8d:c0:1b:b3:f9:7a:ba:df:a7:12:23:8f:7a: 16:f1:ba:ef:2e:27:39:43:5b:2e:42:ee:d0:af:36:46:2a:3e: af:f7:35:06:2e:87:e8:20:3f:ca:38:c5:11:39:51:ad:2e:80: 6a:d2:55:86:35:05:70:b9:42:79:d1:23:a3:bc:39:11:fc:63: 5e:51:66:38:14:0f:a5:07:03:78:88:25:c9:29:07:68:75:02: a3:41:f2:d4:aa:24:7e:ad:92:e0:d8:46:cb:f6:8e:f0:1f:8b: 23:aa:2c:9f:09:a0:b4:fa:5c:a6:93:22:fb:57:99:03:41:a0: 3b:cf:40:50:3e:af:e4:75:50:6a:7b:29:f8:5f:33:eb:e6:46: f0:73:ca:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRjnQPc0AJ2Guvi7Taor9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YTU5YjdmYjRlMDM0ZjY3Nzc1ZjI4NzVlZmJmYzllZmYy NDdlOGUwHhcNMjYwMjA5MTIwMDI0WhcNMjYwMjEwMTIwMDI0WjAzMTEwLwYDVQQD EyhhOWJkODEzYjQ1Yzk3OWNlZGIyZjVlOWZlZDQ5N2JkMjIxMmRiNmI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQbSxmS6lm4hO3GWcmXNeT9ZfNs8 6kkjrcl2a/sHsDfxsbLG0iyxazfWnzLKwpqHbMVDJE5rYI86Cfmc4qVB2DrGA6Bz VBdvqv+FkxjpgCujsC/B2wLtfhbr352mBCS1IlrZ71es8/YCUzwU8Mj8mPpUITZu uvL4rLkiTDmxc+bVP6M7TOw/BwjLHzqMqLHerQBAP3cWRrPQR6H/oasyF01xDkLn 7Blv2FcMIUiT62ua6Vj9TOqBqGN7FffK86+yYwvbx/66A3M4iVach/JZlSFT4Tpo U21IYVIn1M7IDE5tvc+fS/rO1l46nS1Q2x/laD1jL2TBwOKQOjx7CFZUiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKm9gTtFyXnO2y9en+1Je9IhLba1MB8GA1UdIwQY MBaAFHSlm3+04DT2d3Xyh177/J7/JH6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2It YWQzMmVmNDlkNDE5LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8yYjE5NWUtMGFiYS00N2Q0LThlM2ItYWQzMmVmNDlkNDE5 LzEvZEtXYmY3VGdOUFozZGZLSFh2djhudjhrZm80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbujzo6rf shAyhlzhTjeiRl0j36BKWP24pNfY2jDmf43QRq/Xrk3aw6WCqCuvv85eM3d3R0yI GvDDmNt6QgNBTiGHfmiQ+bc4QYSM2zWgLhz2Nom2fqQ1Gb1FEqV1EKDjZsoGz3zc 4EPCK+EJxGysw1KNwBuz+Xq636cSI496FvG67y4nOUNbLkLu0K82Rio+r/c1Bi6H 6CA/yjjFETlRrS6AatJVhjUFcLlCedEjo7w5EfxjXlFmOBQPpQcDeIglySkHaHUC o0Hy1Kokfq2S4NhGy/aO8B+LI6osnwmgtPpcppMi+1eZA0GgO89AUD6v5HVQansp +F8z6+ZG8HPKyg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:32 2026 by rpki-client