This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft File: DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft (raw, json) Hash identifier: GEJLxiBzi6iaWjI/Q3MLq6TCHCChZYikxe+Gbj+1WwY= Subject key identifier: FF:A0:C9:DF:A0:4F:E6:05:D3:24:AC:09:53:A1:99:16:93:CD:BB:7F Authority key identifier: 0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E Certificate issuer: /CN=0f2913e31531019a4328190655b45dd96bdd2c9e Certificate serial: 019C443486A09A74FCD5ED3C0B0297021793 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft Manifest number: 082A Signing time: Mon 09 Feb 2026 21:00:18 +0000 Manifest this update: Mon 09 Feb 2026 21:00:18 +0000 Manifest next update: Tue 10 Feb 2026 21:00:18 +0000 Files and hashes: 1: DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl (hash: ONGM9Oz2AiznBU2/fr/DyQr4JqJcpySgAMicC1NiVVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:86:a0:9a:74:fc:d5:ed:3c:0b:02:97:02:17:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2913e31531019a4328190655b45dd96bdd2c9e Validity Not Before: Feb 9 21:00:18 2026 GMT Not After : Feb 10 21:00:18 2026 GMT Subject: CN=ffa0c9dfa04fe605d324ac0953a1991693cdbb7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a8:25:b2:ad:88:19:43:f9:f3:c8:9f:af:d4: c1:06:c9:ee:22:65:74:84:d6:79:76:76:cf:e3:0d: d8:18:59:de:a8:8f:d2:1a:12:28:5f:bf:fd:a5:ce: e8:da:3a:ad:a2:09:35:67:62:c6:70:b3:60:2e:93: f4:ed:8f:54:d1:c6:d9:46:e3:e3:0b:28:3a:4b:c2: fd:46:2b:47:a1:aa:16:ba:df:50:fb:30:30:65:b9: 23:5f:e1:bd:53:61:dc:1b:ca:10:5b:1b:69:07:a0: be:28:32:c5:0e:26:3d:48:84:74:4d:0c:b4:68:13: fd:36:57:0f:2e:83:ad:c8:3a:25:c7:4a:e7:6f:a4: e8:2e:3d:90:ec:64:36:ca:b0:a5:01:28:9b:ac:85: 72:aa:af:c6:99:2d:20:36:24:d6:7d:ab:f1:ed:7c: 79:96:9b:f9:49:83:dd:1f:5f:7f:b0:47:4d:37:55: 7c:8e:11:2a:79:cf:b4:94:72:a9:a9:9e:46:74:20: 53:a4:6f:37:31:5c:fc:16:9a:0d:c5:a4:75:fe:0a: b1:31:1b:b9:b3:50:d0:07:d4:d6:fc:68:d4:76:94: 15:d0:0e:da:41:ff:d2:c1:25:1a:3b:c8:47:f0:b7: 12:83:11:d4:55:a3:04:cf:ac:a2:e2:c5:cc:81:95: 49:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:A0:C9:DF:A0:4F:E6:05:D3:24:AC:09:53:A1:99:16:93:CD:BB:7F X509v3 Authority Key Identifier: keyid:0F:29:13:E3:15:31:01:9A:43:28:19:06:55:B4:5D:D9:6B:DD:2C:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DykT4xUxAZpDKBkGVbRd2WvdLJ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0d2ca3-0234-4dbf-8190-12d28d7d4223/1/DykT4xUxAZpDKBkGVbRd2WvdLJ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:7a:7e:0d:52:de:80:dd:e2:df:aa:a3:ca:ca:ac:f8:b0:60: f9:2a:40:08:81:99:21:0b:ab:6c:b2:ff:90:f3:a2:30:57:d0: 4b:56:90:2d:91:02:12:1d:66:71:97:fb:61:56:6e:e2:c5:7a: 0e:be:7d:3b:0c:05:83:05:96:b6:ee:4b:d1:a0:0c:21:91:e3: fc:98:21:9a:65:13:b1:8a:44:74:cb:08:46:07:f8:af:c3:37: ed:36:2c:90:c4:ec:31:32:3b:d5:d2:f6:f1:59:3d:df:2f:1e: c9:a7:d7:02:72:18:83:8b:66:9f:5e:bb:7a:a6:cc:9d:0a:55: 8c:f4:a0:c7:3d:2a:7a:85:64:e1:ff:10:88:6a:f9:f9:e1:ba: bd:18:f3:e2:f1:0c:6b:fb:22:ad:80:9f:ac:46:3c:68:6e:fc: 7b:18:37:96:46:09:75:c5:74:e5:11:be:66:bf:79:cb:56:8e: a3:fd:15:0c:67:41:53:ef:a9:ac:d3:29:d1:b2:3d:aa:2e:06: fa:7c:25:00:92:56:43:35:74:4c:19:25:34:d2:80:fc:7d:a3: 5e:08:7a:4a:7d:9c:d5:f7:f9:31:d6:b4:37:fb:58:c6:39:cc: f0:26:16:e0:7b:45:d9:53:9e:54:a7:76:b7:aa:46:a3:cd:24: 18:b2:fd:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENIagmnT81e08CwKXAheTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjkxM2UzMTUzMTAxOWE0MzI4MTkwNjU1YjQ1ZGQ5NmJk ZDJjOWUwHhcNMjYwMjA5MjEwMDE4WhcNMjYwMjEwMjEwMDE4WjAzMTEwLwYDVQQD EyhmZmEwYzlkZmEwNGZlNjA1ZDMyNGFjMDk1M2ExOTkxNjkzY2RiYjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaglsq2IGUP588ifr9TBBsnuImV0 hNZ5dnbP4w3YGFneqI/SGhIoX7/9pc7o2jqtogk1Z2LGcLNgLpP07Y9U0cbZRuPj Cyg6S8L9RitHoaoWut9Q+zAwZbkjX+G9U2HcG8oQWxtpB6C+KDLFDiY9SIR0TQy0 aBP9NlcPLoOtyDolx0rnb6ToLj2Q7GQ2yrClASibrIVyqq/GmS0gNiTWfavx7Xx5 lpv5SYPdH19/sEdNN1V8jhEqec+0lHKpqZ5GdCBTpG83MVz8FpoNxaR1/gqxMRu5 s1DQB9TW/GjUdpQV0A7aQf/SwSUaO8hH8LcSgxHUVaMEz6yi4sXMgZVJvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+gyd+gT+YF0ySsCVOhmRaTzbt/MB8GA1UdIwQY MBaAFA8pE+MVMQGaQygZBlW0Xdlr3SyeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAt MTJkMjhkN2Q0MjIzLzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wZDJjYTMtMDIzNC00ZGJmLTgxOTAtMTJkMjhkN2Q0MjIz LzEvRHlrVDR4VXhBWnBES0JrR1ZiUmQyV3ZkTEo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxXp+DVLe gN3i36qjysqs+LBg+SpACIGZIQurbLL/kPOiMFfQS1aQLZECEh1mcZf7YVZu4sV6 Dr59OwwFgwWWtu5L0aAMIZHj/JghmmUTsYpEdMsIRgf4r8M37TYskMTsMTI71dL2 8Vk93y8eyafXAnIYg4tmn167eqbMnQpVjPSgxz0qeoVk4f8QiGr5+eG6vRjz4vEM a/sirYCfrEY8aG78exg3lkYJdcV05RG+Zr95y1aOo/0VDGdBU++prNMp0bI9qi4G +nwlAJJWQzV0TBklNNKA/H2jXgh6Sn2c1ff5Mda0N/tYxjnM8CYW4HtF2VOeVKd2 t6pGo80kGLL9QA== -----END CERTIFICATE-----Generated at Tue Feb 10 02:59:27 2026 by rpki-client