This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json) Hash identifier: C+D4lFd4Q7Dd/ITm5pAJccZc8ZXqB5t2XL2VsB7V7g0= Subject key identifier: C4:45:9B:1C:79:3D:38:2A:3A:16:CD:61:11:BC:C9:D5:32:43:63:E5 Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2 Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2 Certificate serial: 019C4359669823A0772D54ECCDBD99130B9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft Manifest number: 0372 Signing time: Mon 09 Feb 2026 17:00:58 +0000 Manifest this update: Mon 09 Feb 2026 17:00:58 +0000 Manifest next update: Tue 10 Feb 2026 17:00:58 +0000 Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: V7vmpKBRNnP6pz0pTpIeB5PxdKQzg69bU0SIFcQLrdI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:66:98:23:a0:77:2d:54:ec:cd:bd:99:13:0b:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2 Validity Not Before: Feb 9 17:00:58 2026 GMT Not After : Feb 10 17:00:58 2026 GMT Subject: CN=c4459b1c793d382a3a16cd6111bcc9d5324363e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:39:63:ff:1b:e7:23:3f:32:b3:c1:ea:ae:9c: 8a:b5:28:71:4e:36:4f:35:e3:66:81:9b:5b:dd:c1: 86:ea:a9:27:36:5f:e0:80:6f:35:01:f6:d8:fa:40: 59:a9:57:0d:32:42:24:9f:32:21:b7:ec:81:01:75: 59:67:b0:ee:55:8e:35:26:27:33:8d:5d:3f:2e:47: f3:81:95:12:46:75:0a:03:f0:93:94:e0:e3:d6:d8: 73:c7:9d:62:fd:8c:79:9b:89:a1:be:ad:d0:54:73: ca:7e:8f:b0:03:5e:da:a1:f2:67:5a:fe:77:e0:fe: 06:45:a1:dd:17:22:a3:a1:fa:37:3c:00:17:02:4e: db:a9:fa:31:52:ed:50:3c:a8:de:a5:d2:cb:a8:e3: 36:73:58:23:b5:f6:35:2f:7e:90:1e:55:a6:a6:13: 64:be:0c:90:e4:bd:0b:ad:fb:f8:a0:8a:0f:16:15: a2:15:07:76:53:b6:35:b8:6a:c7:a0:7e:36:a2:c8: 63:a3:8a:4c:b9:40:d9:8d:ab:17:ee:57:16:5e:b9: 6e:34:d7:af:2b:8f:d4:3b:92:07:1b:96:e2:f0:b1: 74:06:90:c9:50:1d:70:a7:07:d4:20:29:4d:20:54: 96:9e:b3:c8:e1:e9:39:54:ce:3b:16:23:b6:6b:e6: 8d:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:45:9B:1C:79:3D:38:2A:3A:16:CD:61:11:BC:C9:D5:32:43:63:E5 X509v3 Authority Key Identifier: keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a4:b9:3c:38:ff:6f:8e:88:a0:e2:23:47:2c:47:b1:ec:f5: 63:2e:ee:c4:df:b8:c2:a3:7d:3f:ff:70:c6:b8:2d:c6:eb:b7: a8:ad:bb:67:41:a7:f3:16:3a:45:49:9b:86:29:9c:1f:67:ed: bc:72:53:7f:01:2a:c8:b3:8f:94:da:0d:9a:3d:16:ec:4b:99: a3:83:b3:90:4e:20:76:6e:df:d4:cb:c4:97:a6:dc:fe:10:a5: f9:95:71:13:ff:f6:d2:96:af:bc:25:e0:f2:1c:38:55:45:0b: 41:17:dd:d1:79:1d:92:28:57:cc:e1:c0:e2:1b:6a:54:15:58: 78:82:8f:f8:98:1e:75:a5:7a:dc:44:13:f8:06:1a:e8:f1:f9: 10:00:b8:b8:a5:bf:d3:f0:4d:23:96:83:b8:b8:41:c9:f9:7b: 60:22:5b:25:24:73:c2:b5:9d:ac:72:aa:95:e9:79:cc:e1:c1: 2d:87:96:af:b0:77:67:6c:38:7d:bc:38:9f:39:27:e7:94:e2: 1d:a3:3e:7e:17:67:77:fe:00:6f:0d:8c:58:58:31:80:d3:e3: f3:bc:2c:2a:89:9e:d4:e6:77:73:3f:6c:db:bd:a4:53:1f:15: 26:bd:31:f2:4a:06:df:6b:5f:5f:a5:33:eb:51:03:5a:07:3f: 8c:64:bb:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWWaYI6B3LVTszb2ZEwuaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0OTE1YTdlOGNkZWQ3YzBlZTIyMTllNzMwYzE5OGNiYjc4 YmM1ZjIwHhcNMjYwMjA5MTcwMDU4WhcNMjYwMjEwMTcwMDU4WjAzMTEwLwYDVQQD EyhjNDQ1OWIxYzc5M2QzODJhM2ExNmNkNjExMWJjYzlkNTMyNDM2M2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Tlj/xvnIz8ys8HqrpyKtShxTjZP NeNmgZtb3cGG6qknNl/ggG81AfbY+kBZqVcNMkIknzIht+yBAXVZZ7DuVY41Jicz jV0/LkfzgZUSRnUKA/CTlODj1thzx51i/Yx5m4mhvq3QVHPKfo+wA17aofJnWv53 4P4GRaHdFyKjofo3PAAXAk7bqfoxUu1QPKjepdLLqOM2c1gjtfY1L36QHlWmphNk vgyQ5L0Lrfv4oIoPFhWiFQd2U7Y1uGrHoH42oshjo4pMuUDZjasX7lcWXrluNNev K4/UO5IHG5bi8LF0BpDJUB1wpwfUIClNIFSWnrPI4ek5VM47FiO2a+aNRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRFmxx5PTgqOhbNYRG8ydUyQ2PlMB8GA1UdIwQY MBaAFHSRWn6M3tfA7iIZ5zDBmMu3i8XyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEpGYWZvemUxOER1SWhubk1NR1l5N2VMeGZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83YjFlNDItNDY4Zi00MWU3LWE5ZTct MGEyYThjNmM5NWRhLzEvZEpGYWZvemUxOER1SWhubk1NR1l5N2VMeGZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS83YjFlNDItNDY4Zi00MWU3LWE5ZTctMGEyYThjNmM5NWRh LzEvZEpGYWZvemUxOER1SWhubk1NR1l5N2VMeGZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6S5PDj/ b46IoOIjRyxHsez1Yy7uxN+4wqN9P/9wxrgtxuu3qK27Z0Gn8xY6RUmbhimcH2ft vHJTfwEqyLOPlNoNmj0W7EuZo4OzkE4gdm7f1MvEl6bc/hCl+ZVxE//20pavvCXg 8hw4VUULQRfd0XkdkihXzOHA4htqVBVYeIKP+JgedaV63EQT+AYa6PH5EAC4uKW/ 0/BNI5aDuLhByfl7YCJbJSRzwrWdrHKqlel5zOHBLYeWr7B3Z2w4fbw4nzkn55Ti HaM+fhdnd/4Abw2MWFgxgNPj87wsKome1OZ3cz9s272kUx8VJr0x8koG32tfX6Uz 61EDWgc/jGS7wg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:39 2026 by rpki-client