This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft File: DX08coAiI1d4gNOPBIyBiRImQDs.mft (raw, json) Hash identifier: Mvz9Rsuli4Ys9ixU/sU8VdVtCPOIpX3sjr3K5SupK7k= Subject key identifier: B8:9E:56:AE:5E:83:59:69:26:BB:5A:EF:1B:89:98:DE:4A:8A:8C:9A Authority key identifier: 0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B Certificate issuer: /CN=0d7d3c72802223577880d38f048c81891226403b Certificate serial: 019C4434C8E6EFEC5CD559D6CE908040E31C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft Manifest number: 0C72 Signing time: Mon 09 Feb 2026 21:00:35 +0000 Manifest this update: Mon 09 Feb 2026 21:00:35 +0000 Manifest next update: Tue 10 Feb 2026 21:00:35 +0000 Files and hashes: 1: DX08coAiI1d4gNOPBIyBiRImQDs.crl (hash: enpxS2/oabQh38onhAhAFtI/ixBZZSgbzF4t8xaBeNc=) 2: rmlQHSPR8QbJ4-lSxSii48UeNZs.roa (hash: xz18D6VTlXYgx+ypy0VFWQBhdsBWNVKOCFQd2upOGqA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:c8:e6:ef:ec:5c:d5:59:d6:ce:90:80:40:e3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d7d3c72802223577880d38f048c81891226403b Validity Not Before: Feb 9 21:00:35 2026 GMT Not After : Feb 10 21:00:35 2026 GMT Subject: CN=b89e56ae5e83596926bb5aef1b8998de4a8a8c9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:17:7b:ec:45:d4:7d:04:49:f9:57:04:04:73: ec:e8:54:71:d8:7a:68:03:64:32:de:a5:57:ab:ea: 9f:65:08:17:48:03:06:9d:f2:b1:ae:04:be:e6:d6: 67:1b:50:d6:ed:d9:28:06:33:83:ff:bc:8c:90:01: a2:a9:a9:d2:62:6a:53:7b:64:d3:e1:c9:bd:f5:0e: 61:6e:12:15:de:38:41:17:18:04:b5:5a:1a:82:6d: ff:6a:f7:da:15:87:72:b2:3b:d9:5e:b0:2f:2c:80: 95:0a:50:d4:50:d2:7b:5b:73:78:5d:6f:ec:52:e5: 31:4c:b8:bd:2d:49:1a:60:42:e1:17:9b:f9:fd:aa: cd:2c:31:66:03:47:6a:8e:7f:1a:f5:29:78:4a:a6: d6:5e:4a:c9:db:f2:a0:7d:10:6f:e5:a9:39:40:81: e7:95:70:33:15:ba:fb:58:3d:99:78:72:92:e8:55: a1:7a:ee:d8:9b:2b:a2:5d:28:8f:d0:f0:90:d7:4f: c3:7f:34:43:34:88:da:b6:0a:03:9a:ca:ae:3b:9a: 3f:f8:7e:c4:9f:90:d9:90:93:c2:27:8d:a6:ed:1d: 48:7e:90:ef:fd:31:0a:ea:8e:30:88:14:37:0e:dd: 59:9a:ea:2c:06:8e:d5:b7:ef:94:71:a5:44:24:73: 75:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:9E:56:AE:5E:83:59:69:26:BB:5A:EF:1B:89:98:DE:4A:8A:8C:9A X509v3 Authority Key Identifier: keyid:0D:7D:3C:72:80:22:23:57:78:80:D3:8F:04:8C:81:89:12:26:40:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DX08coAiI1d4gNOPBIyBiRImQDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/40e655-a2ac-4252-9437-864fdbc79770/1/DX08coAiI1d4gNOPBIyBiRImQDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:b1:92:d8:ad:1c:4e:4b:1b:d8:ea:de:ee:49:2d:15:25: 11:5d:cb:21:b8:15:8b:57:66:b5:04:18:56:66:d6:f6:9f:ae: 21:ea:55:4b:4e:ca:d4:2b:43:4c:d3:47:ef:d7:38:e2:2b:f0: 64:3b:25:fe:e8:d1:dd:ac:62:bd:b0:46:1f:67:c8:52:96:39: ac:7e:6f:69:8f:9b:59:b4:6e:0c:39:31:a7:35:6c:4a:52:32: 42:09:6a:27:f5:cc:67:9e:62:5e:c7:29:1d:44:21:67:be:58: db:45:fb:ea:9d:13:4e:0d:10:0f:df:82:b9:ff:3f:b5:47:0d: 7a:be:5f:93:5d:62:59:a0:79:17:a1:93:64:24:02:d7:81:e6: a9:dc:a3:16:9b:0b:13:fe:d7:a4:26:69:72:44:f2:cc:0f:78: 2d:e2:18:1e:92:a5:26:74:d0:f4:15:8e:52:0f:0f:fb:9d:94: c5:69:f5:42:b7:87:4e:e2:fa:98:7a:6d:f2:99:91:7f:d0:d2: 9b:a8:82:e9:1b:6c:19:66:e3:03:b5:ff:9f:1b:95:0d:da:b7: 7d:e8:f2:6f:83:f3:ac:2c:b1:bb:c2:ba:47:82:89:18:a8:b6: 2b:f8:ba:4d:d9:aa:14:f8:e3:06:6a:da:e7:46:59:18:f2:25: 14:36:82:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENMjm7+xc1VnWzpCAQOMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkN2QzYzcyODAyMjIzNTc3ODgwZDM4ZjA0OGM4MTg5MTIy NjQwM2IwHhcNMjYwMjA5MjEwMDM1WhcNMjYwMjEwMjEwMDM1WjAzMTEwLwYDVQQD EyhiODllNTZhZTVlODM1OTY5MjZiYjVhZWYxYjg5OThkZTRhOGE4YzlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBd77EXUfQRJ+VcEBHPs6FRx2Hpo A2Qy3qVXq+qfZQgXSAMGnfKxrgS+5tZnG1DW7dkoBjOD/7yMkAGiqanSYmpTe2TT 4cm99Q5hbhIV3jhBFxgEtVoagm3/avfaFYdysjvZXrAvLICVClDUUNJ7W3N4XW/s UuUxTLi9LUkaYELhF5v5/arNLDFmA0dqjn8a9Sl4SqbWXkrJ2/KgfRBv5ak5QIHn lXAzFbr7WD2ZeHKS6FWheu7YmyuiXSiP0PCQ10/DfzRDNIjatgoDmsquO5o/+H7E n5DZkJPCJ42m7R1IfpDv/TEK6o4wiBQ3Dt1ZmuosBo7Vt++UcaVEJHN1/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLieVq5eg1lpJrta7xuJmN5KioyaMB8GA1UdIwQY MBaAFA19PHKAIiNXeIDTjwSMgYkSJkA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0Mzct ODY0ZmRiYzc5NzcwLzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi80MGU2NTUtYTJhYy00MjUyLTk0MzctODY0ZmRiYzc5Nzcw LzEvRFgwOGNvQWlJMWQ0Z05PUEJJeUJpUkltUURzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD22xktit HE5LG9jq3u5JLRUlEV3LIbgVi1dmtQQYVmbW9p+uIepVS07K1CtDTNNH79c44ivw ZDsl/ujR3axivbBGH2fIUpY5rH5vaY+bWbRuDDkxpzVsSlIyQglqJ/XMZ55iXscp HUQhZ75Y20X76p0TTg0QD9+Cuf8/tUcNer5fk11iWaB5F6GTZCQC14HmqdyjFpsL E/7XpCZpckTyzA94LeIYHpKlJnTQ9BWOUg8P+52UxWn1QreHTuL6mHpt8pmRf9DS m6iC6RtsGWbjA7X/nxuVDdq3fejyb4PzrCyxu8K6R4KJGKi2K/i6TdmqFPjjBmra 50ZZGPIlFDaC9w== -----END CERTIFICATE-----Generated at Tue Feb 10 01:36:10 2026 by rpki-client