This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft File: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft (raw, json) Hash identifier: rg2GAoDJ7OrY7PNsbWdTChP7TbNLb+7UO5/Mhwxmzc8= Subject key identifier: 4E:B7:31:DA:E6:9B:0C:62:70:91:95:70:3C:D7:03:0E:8E:B9:54:48 Authority key identifier: 0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 Certificate issuer: /CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Certificate serial: 019C247387050B5BBE375BFCC74831FD1852 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft Manifest number: 0F64 Signing time: Tue 03 Feb 2026 17:01:16 +0000 Manifest this update: Tue 03 Feb 2026 17:01:16 +0000 Manifest next update: Wed 04 Feb 2026 17:01:16 +0000 Files and hashes: 1: DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl (hash: W4VZPPqdj6RrZ6Tr/n2t2APm29dY701SPpEhW54wM6w=) 2: x5ebKc9_3qA7pEOC0_BnOS1B8oI.roa (hash: AqP1AEgenjD2KrPY+QLH5krFzTJA90JozOTpwzG6a5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 04 Feb 2026 15:22:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:24:73:87:05:0b:5b:be:37:5b:fc:c7:48:31:fd:18:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d784bd96a44bc361d13344d54c8bc51ff67a802 Validity Not Before: Feb 3 17:01:16 2026 GMT Not After : Feb 4 17:01:16 2026 GMT Subject: CN=4eb731dae69b0c62709195703cd7030e8eb95448 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:47:33:9e:5b:ef:ce:98:bc:36:1a:6e:82:f2: 10:18:75:7c:0a:36:93:ad:00:31:cb:a6:02:00:f2: d1:06:16:a2:49:ad:a6:e3:41:b3:12:12:cf:77:80: 47:c7:e9:86:f9:44:2d:f6:72:3f:06:50:37:88:97: 06:17:87:cb:32:56:ee:76:b3:ca:70:fc:ee:36:47: 79:1d:50:02:c9:dc:1a:44:b9:21:13:5c:a3:59:ee: 63:30:e3:08:b9:66:de:9c:0b:c5:a5:7c:39:ef:d9: 7f:27:ec:a6:3a:7b:4f:ef:e0:4c:13:15:c7:eb:1f: 9e:4b:dc:dd:b9:22:47:9e:18:2a:24:0b:34:40:0d: a6:f5:1c:21:bc:92:1c:36:5b:ae:44:33:5b:39:6e: d2:ae:50:4a:6d:e4:5b:76:4e:c1:eb:dd:84:ec:16: aa:ba:ae:7c:e6:46:a7:29:ad:11:26:06:09:f4:e6: 4e:d7:ed:30:6c:be:78:c3:25:8e:b6:29:60:f0:c1: 4b:a5:5d:28:37:4e:9e:a7:a4:a3:40:35:98:ca:70: 62:a9:88:89:13:7e:2a:b6:3b:b0:72:73:4d:d9:ac: 01:5f:7f:18:dc:8e:db:67:3c:a2:fe:6d:20:2e:88: 33:fe:d6:87:b7:1a:90:40:3f:a4:0e:8a:89:51:84: d0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:B7:31:DA:E6:9B:0C:62:70:91:95:70:3C:D7:03:0E:8E:B9:54:48 X509v3 Authority Key Identifier: keyid:0D:78:4B:D9:6A:44:BC:36:1D:13:34:4D:54:C8:BC:51:FF:67:A8:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/425c24-bfe0-4790-b250-d4c66f4f3b6e/1/DXhL2WpEvDYdEzRNVMi8Uf9nqAI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:9c:30:97:e8:cd:54:17:67:7b:d8:9a:35:cb:9e:bc:3b:48: 9d:41:b2:a1:3b:78:77:02:24:43:9a:c6:b9:17:27:af:cf:a5: 72:ab:e3:c2:45:61:09:52:3b:2a:ed:81:f3:82:56:13:4a:fa: 7f:97:5c:d2:4b:86:51:76:ea:a2:05:ce:c3:fd:5f:9c:df:da: 21:49:ba:0c:9f:e2:51:8b:b2:1e:f9:e5:b5:02:46:2e:6b:8a: fc:1f:a9:d2:08:83:31:5c:d9:10:d4:1b:bc:eb:4b:b4:82:ca: 9a:15:4e:1c:42:ac:88:6d:c5:37:09:4a:ba:82:cf:db:fd:17: 29:ca:2c:20:92:1e:f3:a7:3e:b9:db:e3:ea:0d:f7:eb:71:0d: 38:d1:82:f7:69:77:1c:c6:76:9a:47:b5:96:ff:0a:7d:0b:ec: f0:54:d8:6f:56:10:97:33:51:e0:6e:a4:28:d2:6c:09:91:36: 86:9d:65:8d:62:01:19:41:ef:f0:8b:89:73:ca:39:dc:35:3a: 41:5b:8c:7f:76:d9:48:7f:40:8d:ba:6a:52:8a:10:81:b1:56: 26:8a:2a:f0:1d:b7:bc:6c:93:17:6a:41:09:57:22:03:e3:5a: 72:bd:84:14:35:fe:c3:ba:5f:4b:94:e4:c4:87:cc:4d:59:a8: 8a:83:bf:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwkc4cFC1u+N1v8x0gx/RhSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzg0YmQ5NmE0NGJjMzYxZDEzMzQ0ZDU0YzhiYzUxZmY2 N2E4MDIwHhcNMjYwMjAzMTcwMTE2WhcNMjYwMjA0MTcwMTE2WjAzMTEwLwYDVQQD Eyg0ZWI3MzFkYWU2OWIwYzYyNzA5MTk1NzAzY2Q3MDMwZThlYjk1NDQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ucznlvvzpi8NhpugvIQGHV8CjaT rQAxy6YCAPLRBhaiSa2m40GzEhLPd4BHx+mG+UQt9nI/BlA3iJcGF4fLMlbudrPK cPzuNkd5HVACydwaRLkhE1yjWe5jMOMIuWbenAvFpXw579l/J+ymOntP7+BMExXH 6x+eS9zduSJHnhgqJAs0QA2m9RwhvJIcNluuRDNbOW7SrlBKbeRbdk7B692E7Baq uq585kanKa0RJgYJ9OZO1+0wbL54wyWOtilg8MFLpV0oN06ep6SjQDWYynBiqYiJ E34qtjuwcnNN2awBX38Y3I7bZzyi/m0gLogz/taHtxqQQD+kDoqJUYTQXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE63MdrmmwxicJGVcDzXAw6OuVRIMB8GA1UdIwQY MBaAFA14S9lqRLw2HRM0TVTIvFH/Z6gCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAt ZDRjNjZmNGYzYjZlLzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni80MjVjMjQtYmZlMC00NzkwLWIyNTAtZDRjNjZmNGYzYjZl LzEvRFhoTDJXcEV2RFlkRXpSTlZNaThVZjlucUFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZwwl+jN VBdne9iaNcuevDtInUGyoTt4dwIkQ5rGuRcnr8+lcqvjwkVhCVI7Ku2B84JWE0r6 f5dc0kuGUXbqogXOw/1fnN/aIUm6DJ/iUYuyHvnltQJGLmuK/B+p0giDMVzZENQb vOtLtILKmhVOHEKsiG3FNwlKuoLP2/0XKcosIJIe86c+udvj6g3363ENONGC92l3 HMZ2mke1lv8KfQvs8FTYb1YQlzNR4G6kKNJsCZE2hp1ljWIBGUHv8IuJc8o53DU6 QVuMf3bZSH9AjbpqUooQgbFWJooq8B23vGyTF2pBCVciA+Nacr2EFDX+w7pfS5Tk xIfMTVmoioO/tg== -----END CERTIFICATE-----Generated at Tue Feb 3 21:13:45 2026 by rpki-client