This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft File: Dp842O8xOufFpwiU9m6HGjMYA_8.mft (raw, json) Hash identifier: 6RNdFJfw4oih80wH1l5bs2Sjmsxlh96JUsXRB6nAY5w= Subject key identifier: B7:3E:E5:9A:05:88:E0:6E:7F:FB:43:77:C7:45:93:D6:59:3E:53:2C Authority key identifier: 0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF Certificate issuer: /CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Certificate serial: 019C4322D05263BAC7D207184B70D1118A02 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:20 +0000 Manifest this update: Mon 09 Feb 2026 16:01:20 +0000 Manifest next update: Tue 10 Feb 2026 16:01:20 +0000 Files and hashes: 1: Dp842O8xOufFpwiU9m6HGjMYA_8.crl (hash: aCMEl6Qt6sqHG25Idk1II0KoYaQxJ+opu2jUjPBBR1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:d0:52:63:ba:c7:d2:07:18:4b:70:d1:11:8a:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e9f38d8ef313ae7c5a70894f66e871a331803ff Validity Not Before: Feb 9 16:01:20 2026 GMT Not After : Feb 10 16:01:20 2026 GMT Subject: CN=b73ee59a0588e06e7ffb4377c74593d6593e532c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:69:4f:b2:54:0a:b7:ae:0c:de:51:a5:77:39: 2e:3d:96:a5:71:72:77:49:0c:6f:29:aa:a4:4d:da: 98:3a:bf:b6:13:14:fb:10:df:15:a4:5f:10:f8:70: c1:3b:86:27:e6:64:8b:98:24:15:80:e8:53:b9:a6: ee:43:12:06:3a:56:83:d8:36:a9:80:8c:8b:c6:17: 87:ff:25:7d:b6:32:06:92:d5:c2:be:5f:83:19:05: b0:26:c4:8f:8e:3e:3c:96:42:89:4c:25:f9:08:e6: 43:c4:d2:df:a2:0c:14:45:ae:28:ad:5d:81:64:21: 49:c6:18:a9:61:70:c8:0c:7b:e5:d5:28:01:37:9e: 1c:5a:ed:42:2f:cc:8c:34:61:3e:8d:89:d5:b7:2f: 0b:58:38:74:cb:94:21:38:09:de:57:be:50:4e:f8: 4e:04:89:00:2c:9f:62:bb:65:2f:d9:25:f9:c2:6d: 06:4b:17:8d:4c:d2:06:fd:1b:79:ec:66:fe:c1:ca: 05:dc:94:9b:58:ec:5f:23:62:35:de:bd:10:cb:6a: 33:c9:8a:a1:13:1e:c6:87:d9:8d:18:1a:d1:a5:57: 01:79:d3:e9:60:2a:60:5c:22:77:ea:f5:6b:1f:12: 12:c0:4e:4e:4a:8f:97:1b:1c:2f:ee:21:3b:60:29: 0b:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:3E:E5:9A:05:88:E0:6E:7F:FB:43:77:C7:45:93:D6:59:3E:53:2C X509v3 Authority Key Identifier: keyid:0E:9F:38:D8:EF:31:3A:E7:C5:A7:08:94:F6:6E:87:1A:33:18:03:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dp842O8xOufFpwiU9m6HGjMYA_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/2f4796-4512-464d-b9de-880f8238fe0b/1/Dp842O8xOufFpwiU9m6HGjMYA_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:b8:48:c7:56:12:bf:e2:69:ba:40:96:66:d6:56:25:4d:b3: c5:8f:1a:4a:79:04:cc:0d:e8:4b:10:a3:3c:49:f7:e8:51:d9: 44:f3:cf:ee:ed:4c:a2:6c:76:9d:95:6b:87:e2:ca:99:a8:74: 08:6b:e3:47:8d:e3:23:41:39:1f:ed:00:70:44:4a:c6:73:45: 3e:13:1d:61:3a:d5:1e:14:c4:7f:af:15:d2:98:dc:c6:52:dd: 85:52:9a:2f:c8:8e:78:65:69:10:6a:40:b1:9a:e1:45:1d:da: f7:e9:fa:fa:4c:f6:1e:08:76:c4:56:84:dc:b1:c3:87:92:40: 2a:ad:4d:f9:c7:63:66:4c:68:75:0f:27:a3:73:c8:4e:87:1d: 61:ed:31:18:34:b0:8e:c2:39:e3:24:08:f9:fa:05:d8:ba:72: 1d:68:47:db:e8:0c:da:c0:37:2d:b5:95:eb:ca:60:00:df:43: 13:ca:9a:11:ae:c6:49:8a:26:bb:82:dd:ef:64:28:da:de:63: a2:5f:6f:02:9b:16:ba:c8:81:b8:99:df:cb:d7:af:cb:29:a4: 9d:e0:fe:69:e9:6d:b3:d8:bf:75:9b:05:f7:19:93:fa:69:e4: be:26:d7:69:1b:37:4f:3c:da:d8:d5:20:05:c0:8c:16:e6:ff: 48:06:ae:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDItBSY7rH0gcYS3DREYoCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlOWYzOGQ4ZWYzMTNhZTdjNWE3MDg5NGY2NmU4NzFhMzMx ODAzZmYwHhcNMjYwMjA5MTYwMTIwWhcNMjYwMjEwMTYwMTIwWjAzMTEwLwYDVQQD EyhiNzNlZTU5YTA1ODhlMDZlN2ZmYjQzNzdjNzQ1OTNkNjU5M2U1MzJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWlPslQKt64M3lGldzkuPZalcXJ3 SQxvKaqkTdqYOr+2ExT7EN8VpF8Q+HDBO4Yn5mSLmCQVgOhTuabuQxIGOlaD2Dap gIyLxheH/yV9tjIGktXCvl+DGQWwJsSPjj48lkKJTCX5COZDxNLfogwURa4orV2B ZCFJxhipYXDIDHvl1SgBN54cWu1CL8yMNGE+jYnVty8LWDh0y5QhOAneV75QTvhO BIkALJ9iu2Uv2SX5wm0GSxeNTNIG/Rt57Gb+wcoF3JSbWOxfI2I13r0Qy2ozyYqh Ex7Gh9mNGBrRpVcBedPpYCpgXCJ36vVrHxISwE5OSo+XGxwv7iE7YCkLUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLc+5ZoFiOBuf/tDd8dFk9ZZPlMsMB8GA1UdIwQY MBaAFA6fONjvMTrnxacIlPZuhxozGAP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUt ODgwZjgyMzhmZTBiLzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS8yZjQ3OTYtNDUxMi00NjRkLWI5ZGUtODgwZjgyMzhmZTBi LzEvRHA4NDJPOHhPdWZGcHdpVTltNkhHak1ZQV84LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbbhIx1YS v+JpukCWZtZWJU2zxY8aSnkEzA3oSxCjPEn36FHZRPPP7u1Momx2nZVrh+LKmah0 CGvjR43jI0E5H+0AcERKxnNFPhMdYTrVHhTEf68V0pjcxlLdhVKaL8iOeGVpEGpA sZrhRR3a9+n6+kz2Hgh2xFaE3LHDh5JAKq1N+cdjZkxodQ8no3PITocdYe0xGDSw jsI54yQI+foF2LpyHWhH2+gM2sA3LbWV68pgAN9DE8qaEa7GSYomu4Ld72Qo2t5j ol9vApsWusiBuJnfy9evyymkneD+aelts9i/dZsF9xmT+mnkvibXaRs3Tzza2NUg BcCMFub/SAautA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:33 2026 by rpki-client