This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft File: DigqFcGl0VS72ocrNXYHqR-VCqU.mft (raw, json) Hash identifier: vArVn2ZVhxS+Xp46FJVT6RtGNLSGk5s1VjLHGOEnmRs= Subject key identifier: 07:B1:FD:1E:91:B4:8F:12:1E:EA:AB:DB:4C:DD:FB:02:0B:52:07:FE Authority key identifier: 0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 Certificate issuer: /CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Certificate serial: 019C43594B3B6935C22173F24CB5DE759F41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft Manifest number: 1437 Signing time: Mon 09 Feb 2026 17:00:51 +0000 Manifest this update: Mon 09 Feb 2026 17:00:51 +0000 Manifest next update: Tue 10 Feb 2026 17:00:51 +0000 Files and hashes: 1: DigqFcGl0VS72ocrNXYHqR-VCqU.crl (hash: 1HySejRbQuniAGn7YnWixMMCULfnZEyn5vVROc4Qn64=) 2: mIYyTvexp96yx1uEcepE1haYD0M.roa (hash: ztPj0SKUR6Aodbe+4A8evaG8qpSR4Uk72LpJ31rdnmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 17:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4b:3b:69:35:c2:21:73:f2:4c:b5:de:75:9f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e282a15c1a5d154bbda872b357607a91f950aa5 Validity Not Before: Feb 9 17:00:51 2026 GMT Not After : Feb 10 17:00:51 2026 GMT Subject: CN=07b1fd1e91b48f121eeaabdb4cddfb020b5207fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:4e:e8:5d:36:64:92:03:f1:af:40:54:11: 96:20:ad:a5:b5:22:c8:03:c0:95:e4:e5:45:ae:f8: 8f:03:dd:46:bf:b2:41:c4:24:ec:1d:47:e3:a9:3b: 8a:1c:73:11:0d:c3:41:5a:e3:86:17:cf:01:a7:6e: ab:16:17:1e:99:06:91:6e:23:31:c0:57:ba:8c:fe: dd:70:c9:3d:8f:2f:20:8c:df:be:aa:60:0b:82:6d: a0:5f:04:65:5c:f1:f8:73:9c:3f:70:1b:3d:52:20: 6f:20:01:62:15:6c:79:bd:9c:9d:19:fa:a3:fa:a3: ee:62:f4:80:4e:eb:e6:ac:8e:7d:78:d6:f8:50:d9: 79:65:af:52:aa:80:09:bd:a5:21:46:87:51:8d:4a: cf:55:4f:12:76:33:55:33:18:01:b3:b7:e0:26:48: a9:c1:50:35:48:ad:73:1c:6d:a7:73:1b:3e:9c:25: ec:d4:55:1a:0d:59:8b:72:1a:70:6c:fc:1c:47:69: 81:e5:fd:20:26:c5:d1:e9:bf:4c:59:f2:15:ec:b5: 41:29:b0:9a:50:2b:fe:05:80:ee:af:7f:09:ba:d4: 62:b1:c3:72:cf:18:12:c1:04:41:cd:d7:3e:5c:79: a1:a1:22:33:3b:e0:1a:05:90:99:4a:f7:c2:80:33: c6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:B1:FD:1E:91:B4:8F:12:1E:EA:AB:DB:4C:DD:FB:02:0B:52:07:FE X509v3 Authority Key Identifier: keyid:0E:28:2A:15:C1:A5:D1:54:BB:DA:87:2B:35:76:07:A9:1F:95:0A:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DigqFcGl0VS72ocrNXYHqR-VCqU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/daf1ae-d5eb-4ca4-8aaf-78741ac93b30/1/DigqFcGl0VS72ocrNXYHqR-VCqU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:2e:0e:a6:ed:d6:96:b8:ce:46:74:a6:ef:49:c4:c7:71:d7: 04:3d:7a:98:a7:29:13:21:84:30:3e:a0:0f:24:46:ce:9b:69: 23:fd:cf:7b:8b:b8:35:d3:52:70:b7:61:4b:49:6e:f6:0e:81: ea:ae:f5:74:b5:a2:d4:95:a3:ee:a9:cf:1d:da:2e:8c:38:d0: 13:b7:4f:f3:dc:6d:28:df:5f:6d:88:b8:7d:da:4c:64:95:b1: f3:07:ec:32:b6:ec:8e:4f:5e:0d:be:55:75:45:c7:ca:ca:3d: 4b:e5:17:2c:5a:31:83:92:f1:62:90:3d:17:4e:1c:d2:e5:cc: db:11:5f:53:80:2d:7e:17:2c:d7:49:10:1f:ac:a9:4b:cd:1b: 71:d8:65:b5:aa:34:d1:68:ca:72:d2:f0:e5:68:cd:6b:f7:ad: 58:9b:34:1d:aa:cf:7e:39:e9:65:40:ee:cd:f3:2d:21:91:79: 9b:54:69:47:22:a1:da:d7:5d:0f:ac:dc:f1:70:12:ce:ec:a5: c2:0d:7c:12:95:e3:d4:c6:91:c3:7a:6c:b5:82:31:ad:ed:36: 15:6d:fe:9a:28:99:3d:49:e1:93:f9:1f:5a:15:3e:ec:2f:df: ce:c8:3a:c4:02:8c:73:93:0a:ad:45:23:77:70:fc:2a:f6:a6: 73:99:36:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWUs7aTXCIXPyTLXedZ9BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMjgyYTE1YzFhNWQxNTRiYmRhODcyYjM1NzYwN2E5MWY5 NTBhYTUwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD EygwN2IxZmQxZTkxYjQ4ZjEyMWVlYWFiZGI0Y2RkZmIwMjBiNTIwN2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFZO6F02ZJID8a9AVBGWIK2ltSLI A8CV5OVFrviPA91Gv7JBxCTsHUfjqTuKHHMRDcNBWuOGF88Bp26rFhcemQaRbiMx wFe6jP7dcMk9jy8gjN++qmALgm2gXwRlXPH4c5w/cBs9UiBvIAFiFWx5vZydGfqj +qPuYvSATuvmrI59eNb4UNl5Za9SqoAJvaUhRodRjUrPVU8SdjNVMxgBs7fgJkip wVA1SK1zHG2ncxs+nCXs1FUaDVmLchpwbPwcR2mB5f0gJsXR6b9MWfIV7LVBKbCa UCv+BYDur38JutRiscNyzxgSwQRBzdc+XHmhoSIzO+AaBZCZSvfCgDPGWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAex/R6RtI8SHuqr20zd+wILUgf+MB8GA1UdIwQY MBaAFA4oKhXBpdFUu9qHKzV2B6kflQqlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYt Nzg3NDFhYzkzYjMwLzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9kYWYxYWUtZDVlYi00Y2E0LThhYWYtNzg3NDFhYzkzYjMw LzEvRGlncUZjR2wwVlM3Mm9jck5YWUhxUi1WQ3FVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYC4Opu3W lrjORnSm70nEx3HXBD16mKcpEyGEMD6gDyRGzptpI/3Pe4u4NdNScLdhS0lu9g6B 6q71dLWi1JWj7qnPHdoujDjQE7dP89xtKN9fbYi4fdpMZJWx8wfsMrbsjk9eDb5V dUXHyso9S+UXLFoxg5LxYpA9F04c0uXM2xFfU4Atfhcs10kQH6ypS80bcdhltao0 0WjKctLw5WjNa/etWJs0HarPfjnpZUDuzfMtIZF5m1RpRyKh2tddD6zc8XASzuyl wg18EpXj1MaRw3pstYIxre02FW3+miiZPUnhk/kfWhU+7C/fzsg6xAKMc5MKrUUj d3D8Kvamc5k2Ig== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:27 2026 by rpki-client