This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft File: DQh0szPjXfFP2XDhiVgdoJO8gJM.mft (raw, json) Hash identifier: uCNwNI+vUMrL+iwvr/5pbma7C0Y5mizaUnV05DoPF8Q= Subject key identifier: C5:03:76:3D:27:59:70:74:9F:F0:92:1E:9F:7D:8E:E6:06:FA:82:3B Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93 Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093 Certificate serial: 019C42B452EAA27273986ACD76EFFBEAAFD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft Manifest number: 1816 Signing time: Mon 09 Feb 2026 14:00:39 +0000 Manifest this update: Mon 09 Feb 2026 14:00:39 +0000 Manifest next update: Tue 10 Feb 2026 14:00:39 +0000 Files and hashes: 1: DQh0szPjXfFP2XDhiVgdoJO8gJM.crl (hash: NIgRxak9aRHZTkM9agze3jJ5eZsQImcG4pLjXMWzSds=) 2: X45FUcZNo-YtDvtPWevU4wJ2FEY.roa (hash: rSd13zzClfxZXjpfUKzjtwc06S4fldzcQ0W8TuRXJxI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:52:ea:a2:72:73:98:6a:cd:76:ef:fb:ea:af:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : Feb 10 14:00:39 2026 GMT Subject: CN=c503763d275970749ff0921e9f7d8ee606fa823b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:88:12:20:9e:08:d9:fc:f1:df:d0:99:53: 81:b0:4d:f6:74:3a:80:01:97:d1:a3:8b:e6:5e:a2: bc:60:7e:65:54:cb:ef:72:78:06:5f:95:eb:8b:60: f4:a9:9b:ad:57:69:98:2b:49:89:5f:46:af:9b:d9: 9f:f5:e8:9c:c7:de:82:57:90:f6:94:1f:16:70:7f: 6d:69:90:97:1e:e7:3d:38:26:7d:c5:a8:0b:82:fc: fd:ac:b4:9b:33:2c:5e:b1:55:6b:e6:54:1c:dc:ce: 17:df:e6:cd:b1:c7:cc:45:eb:e2:bd:25:39:17:90: 78:21:da:59:98:94:a3:53:b0:1a:bc:a7:a7:67:61: f6:30:e7:a2:3a:bc:16:c9:16:fa:88:df:45:f2:d2: 86:b3:df:81:aa:7e:c1:e3:75:ee:57:44:66:30:55: 56:50:c3:dc:c0:9b:69:5f:de:bf:77:ba:d0:f2:6a: 1e:3e:fe:76:1c:70:9a:c1:4c:e9:91:89:8f:3a:eb: cb:77:2c:8c:6e:7e:7b:ac:07:dd:17:ae:9b:be:99: a5:7b:5c:71:75:48:6e:15:db:ab:da:92:a2:22:77: 37:54:7c:8a:de:95:bf:a4:2b:22:d1:f2:14:1d:f7: ba:88:ef:86:bf:7e:92:50:79:57:25:26:aa:c9:f8: 5a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:03:76:3D:27:59:70:74:9F:F0:92:1E:9F:7D:8E:E6:06:FA:82:3B X509v3 Authority Key Identifier: keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ac:0f:b7:77:f2:39:25:ec:13:37:e5:c2:0e:85:a2:a9:c3: 1a:7f:90:d8:31:9a:93:ad:e8:f0:28:30:b2:e7:9d:f5:62:f2: 26:45:47:b3:4c:48:68:64:b5:85:65:7c:ac:82:72:fa:04:fc: 78:ce:4d:ab:7a:4d:60:7b:12:fb:94:2d:4c:b4:88:5e:52:78: 66:38:4c:41:1f:22:1a:0c:5b:2a:9a:35:5b:57:f0:85:e5:e1: d0:40:c3:1e:6e:8d:0c:d1:49:91:e7:4c:58:db:06:32:87:6a: 79:ee:31:98:65:94:c3:9a:08:83:e8:c7:72:65:1d:01:a9:2d: 4d:a2:68:77:a4:0e:45:48:61:53:0e:18:87:0c:d5:68:48:dc: 8f:a5:0d:e1:ae:58:32:11:84:2a:11:77:ab:e7:ed:dc:c6:d9: b4:34:71:45:0d:2a:0d:b7:ce:51:00:f9:68:5a:50:33:9a:1f: 7c:b8:fe:be:1f:cd:a6:5e:6d:43:f9:5f:cd:3e:5c:a6:da:27: 9e:9a:34:46:47:8c:19:0a:eb:3f:6d:23:d5:59:cf:bf:25:dc: 68:c7:49:ab:3f:c8:85:c8:37:73:9e:4d:25:a4:6c:e2:15:d1: de:7c:95:fa:31:8b:0e:0e:6e:6b:63:71:29:95:32:1a:f0:51: d6:c3:b1:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtFLqonJzmGrNdu/76q/TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkMDg3NGIzMzNlMzVkZjE0ZmQ5NzBlMTg5NTgxZGEwOTNi YzgwOTMwHhcNMjYwMjA5MTQwMDM5WhcNMjYwMjEwMTQwMDM5WjAzMTEwLwYDVQQD EyhjNTAzNzYzZDI3NTk3MDc0OWZmMDkyMWU5ZjdkOGVlNjA2ZmE4MjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF6IEiCeCNn88d/QmVOBsE32dDqA AZfRo4vmXqK8YH5lVMvvcngGX5Xri2D0qZutV2mYK0mJX0avm9mf9eicx96CV5D2 lB8WcH9taZCXHuc9OCZ9xagLgvz9rLSbMyxesVVr5lQc3M4X3+bNscfMRevivSU5 F5B4IdpZmJSjU7AavKenZ2H2MOeiOrwWyRb6iN9F8tKGs9+Bqn7B43XuV0RmMFVW UMPcwJtpX96/d7rQ8moePv52HHCawUzpkYmPOuvLdyyMbn57rAfdF66bvpmle1xx dUhuFdur2pKiInc3VHyK3pW/pCsi0fIUHfe6iO+Gv36SUHlXJSaqyfha3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUDdj0nWXB0n/CSHp99juYG+oI7MB8GA1UdIwQY MBaAFA0IdLMz413xT9lw4YlYHaCTvICTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUt MzE4MWRiOTExYTEzLzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9iMDM5YmMtMjEzYi00NTdjLTk2YWUtMzE4MWRiOTExYTEz LzEvRFFoMHN6UGpYZkZQMlhEaGlWZ2RvSk84Z0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVawPt3fy OSXsEzflwg6FoqnDGn+Q2DGak63o8Cgwsued9WLyJkVHs0xIaGS1hWV8rIJy+gT8 eM5Nq3pNYHsS+5QtTLSIXlJ4ZjhMQR8iGgxbKpo1W1fwheXh0EDDHm6NDNFJkedM WNsGModqee4xmGWUw5oIg+jHcmUdAaktTaJod6QORUhhUw4YhwzVaEjcj6UN4a5Y MhGEKhF3q+ft3MbZtDRxRQ0qDbfOUQD5aFpQM5offLj+vh/Npl5tQ/lfzT5cpton npo0RkeMGQrrP20j1VnPvyXcaMdJqz/Ihcg3c55NJaRs4hXR3nyV+jGLDg5ua2Nx KZUyGvBR1sOxoA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:22 2026 by rpki-client