This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json) Hash identifier: tD3MHLFC6MaYPiNhMszF5wdWCjoKD+vJ8FhtvvC3MLc= Subject key identifier: 1F:12:A7:88:1D:1C:DC:7A:94:86:FF:07:32:F5:20:76:24:75:BF:F7 Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b Certificate serial: 019C416A79A7644EE6D028647488CE245DD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 08:00:22 +0000 Manifest this update: Mon 09 Feb 2026 08:00:22 +0000 Manifest next update: Tue 10 Feb 2026 08:00:22 +0000 Files and hashes: 1: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: g9870M8lE+C+NgIp3soQCBfxRJI1AnOq7h/N9r28HYw=) 2: _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (hash: UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:79:a7:64:4e:e6:d0:28:64:74:88:ce:24:5d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b Validity Not Before: Feb 9 08:00:22 2026 GMT Not After : Feb 10 08:00:22 2026 GMT Subject: CN=1f12a7881d1cdc7a9486ff0732f520762475bff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:14:28:cb:34:87:96:d5:ff:6c:df:62:3e:60: e6:23:19:3d:8d:cb:c4:54:22:e3:45:05:1f:47:29: 73:70:f3:93:49:70:97:4c:27:ba:d5:25:d4:4e:de: 23:89:09:6b:30:06:56:e5:8d:c2:f3:d4:a4:ea:93: 17:3e:1e:26:df:7d:80:d2:11:fc:49:64:a0:ca:61: bd:6f:ca:97:2e:2f:48:f5:ed:0c:c4:52:15:f8:09: 41:d7:d5:8e:a5:e0:28:95:06:d6:53:c0:68:ad:0e: 22:99:0e:b0:2e:84:94:cf:d4:78:81:bd:6c:cc:b2: d7:a0:3f:1f:84:58:33:c5:7c:61:8f:bd:b9:5b:02: 22:d7:ee:3d:87:c3:45:57:fb:c6:e1:c9:f9:ff:66: 4f:c3:60:fc:a3:83:99:78:39:99:b4:f9:bf:d6:12: 1f:93:02:83:9b:0f:1f:a4:a6:fe:08:94:2f:38:ee: c5:d2:35:f5:eb:b5:47:83:82:3b:5c:39:dc:4f:68: d0:5a:24:c7:71:b8:b4:ca:5f:c5:d0:81:b2:5f:c1: f8:2a:4f:f9:70:b6:52:d6:c1:be:4f:c5:37:b8:28: 24:34:e0:4a:9b:5f:0c:4c:71:a1:f6:ae:84:cd:d9: bc:47:24:49:d3:b0:8b:b1:27:57:85:f2:70:d0:71: bb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:12:A7:88:1D:1C:DC:7A:94:86:FF:07:32:F5:20:76:24:75:BF:F7 X509v3 Authority Key Identifier: keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:1c:ac:b6:31:42:30:7c:95:b5:66:c8:11:af:66:3e:c8:42: db:97:4c:16:d2:55:6b:49:df:80:bc:36:4d:16:20:97:01:09: e9:89:0e:93:19:f9:47:ee:61:b5:ec:ca:a3:8a:50:21:c9:1b: aa:2b:55:e2:68:77:65:b3:25:9f:d5:35:89:3e:d4:5a:13:dc: c0:d6:5e:68:65:b5:30:4c:c2:14:72:d3:80:43:02:f8:a3:d8: f0:19:77:88:91:4c:9a:c7:51:1c:25:93:86:c5:cb:f1:31:c4: 7e:79:c0:9f:00:70:e4:e0:24:08:b8:b2:dc:30:f4:87:0d:f5: 95:df:80:dd:5e:73:4d:aa:88:b9:82:38:4a:f9:ac:9e:95:30: b5:d6:92:e7:42:37:73:b7:a6:1a:d3:ed:c5:ec:c9:08:a2:6a: 7f:4b:29:27:74:16:e6:0d:55:05:dc:62:db:78:b9:cc:79:5e: 24:f9:1a:b1:25:7e:50:f0:b4:0f:94:99:8a:88:32:07:cc:8f: 3e:3a:a3:62:30:72:a8:22:0d:54:08:5f:d1:81:d5:62:7b:79: cc:a6:ef:d2:62:d7:54:83:03:d9:50:b7:e3:28:34:4b:ed:dc: c0:ee:68:d0:97:51:57:f8:47:3a:54:ec:51:17:da:cf:c5:18: 3c:fc:7e:0c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBanmnZE7m0ChkdIjOJF3TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYTRiYjY5YjNmNTY4MDUxNDBlZmFlMjQzZTRkZDRiMzZj MGRkMWIwHhcNMjYwMjA5MDgwMDIyWhcNMjYwMjEwMDgwMDIyWjAzMTEwLwYDVQQD EygxZjEyYTc4ODFkMWNkYzdhOTQ4NmZmMDczMmY1MjA3NjI0NzViZmY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxQoyzSHltX/bN9iPmDmIxk9jcvE VCLjRQUfRylzcPOTSXCXTCe61SXUTt4jiQlrMAZW5Y3C89Sk6pMXPh4m332A0hH8 SWSgymG9b8qXLi9I9e0MxFIV+AlB19WOpeAolQbWU8BorQ4imQ6wLoSUz9R4gb1s zLLXoD8fhFgzxXxhj725WwIi1+49h8NFV/vG4cn5/2ZPw2D8o4OZeDmZtPm/1hIf kwKDmw8fpKb+CJQvOO7F0jX167VHg4I7XDncT2jQWiTHcbi0yl/F0IGyX8H4Kk/5 cLZS1sG+T8U3uCgkNOBKm18MTHGh9q6Ezdm8RyRJ07CLsSdXhfJw0HG7AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB8Sp4gdHNx6lIb/BzL1IHYkdb/3MB8GA1UdIwQY MBaAFAyku2mz9WgFFA764kPk3Us2wN0bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQt ZDdmNDVlMGE3NzM2LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC82ODZjZmQtYTAyYy00MDczLTk5ZGQtZDdmNDVlMGE3NzM2 LzEvREtTN2FiUDFhQVVVRHZyaVEtVGRTemJBM1JzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqhystjFC MHyVtWbIEa9mPshC25dMFtJVa0nfgLw2TRYglwEJ6YkOkxn5R+5htezKo4pQIckb qitV4mh3ZbMln9U1iT7UWhPcwNZeaGW1MEzCFHLTgEMC+KPY8Bl3iJFMmsdRHCWT hsXL8THEfnnAnwBw5OAkCLiy3DD0hw31ld+A3V5zTaqIuYI4SvmsnpUwtdaS50I3 c7emGtPtxezJCKJqf0spJ3QW5g1VBdxi23i5zHleJPkasSV+UPC0D5SZiogyB8yP PjqjYjByqCINVAhf0YHVYnt5zKbv0mLXVIMD2VC34yg0S+3cwO5o0JdRV/hHOlTs URfaz8UYPPx+DA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:53 2026 by rpki-client