This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft File: DuPU2BDyR3hBqLhVk7jzDors1Ak.mft (raw, json) Hash identifier: z4zYFqOye9YqqbWn1PNcIX5pmZJmgMh+/gcLxRLpE4w= Subject key identifier: 99:0D:8A:3B:FC:C7:C5:21:BA:4A:D1:CF:62:6D:22:3F:2D:92:78:CB Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09 Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409 Certificate serial: 019C446B930D596460006CAE848D56E2813C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 22:00:26 +0000 Manifest this update: Mon 09 Feb 2026 22:00:26 +0000 Manifest next update: Tue 10 Feb 2026 22:00:26 +0000 Files and hashes: 1: DuPU2BDyR3hBqLhVk7jzDors1Ak.crl (hash: VM10BKKoGg1azDc5uhJxm5F2vWVEUG8FTNeiA4ksdTQ=) 2: YJY4ynuuiedvHHvTSK2Y99WgTKA.roa (hash: vAaOsQ/R4WjdxzIXlSEYb3gqw5HoiLYG5de2yPVuZNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:93:0d:59:64:60:00:6c:ae:84:8d:56:e2:81:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409 Validity Not Before: Feb 9 22:00:26 2026 GMT Not After : Feb 10 22:00:26 2026 GMT Subject: CN=990d8a3bfcc7c521ba4ad1cf626d223f2d9278cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:64:67:c9:d2:db:28:bb:a2:42:fa:94:d1:ec: e7:c2:f2:e9:ea:47:5a:12:89:69:6f:3e:8b:8c:cc: 1b:12:1b:86:39:a6:5b:68:7a:df:b9:0d:4b:49:4d: 05:9d:ab:79:a5:09:91:a6:46:19:5e:3f:b8:96:52: be:07:38:ef:cb:c2:c9:5e:db:4b:ec:4f:18:a3:68: a8:4e:20:5d:9e:54:ec:e7:d5:bf:de:bd:3a:58:a0: 6a:2f:ba:21:13:06:96:ad:8c:a8:fd:01:f3:bf:2e: 4d:61:5f:20:ff:ba:c0:e5:c8:36:ac:e7:dd:44:b6: 22:6e:33:11:43:4c:f1:a1:c5:41:29:85:53:5f:46: 7c:ea:77:28:23:2d:b5:5e:73:f3:7d:31:a6:d2:e6: 39:d6:42:7d:dd:f0:25:e0:cf:87:88:f4:17:34:a1: f3:54:70:d4:c3:f3:69:1c:7b:c1:f9:0f:bc:ea:a8: c4:b9:18:a5:15:c7:62:88:36:55:83:18:6f:64:aa: de:75:81:3f:c5:2f:a1:8d:67:10:c7:6d:fc:0a:a3: 7f:cf:a4:ff:af:a7:9f:38:d0:0c:22:af:b3:f6:42: 74:40:79:c2:c5:e4:e9:f2:11:ea:66:6d:b6:da:90: ce:4e:f1:20:c3:15:75:9f:8a:66:bb:c0:91:54:46: da:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:0D:8A:3B:FC:C7:C5:21:BA:4A:D1:CF:62:6D:22:3F:2D:92:78:CB X509v3 Authority Key Identifier: keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:2a:3e:a0:e6:7e:af:9f:1a:eb:bf:22:66:0c:62:75:95:b0: 77:85:31:a3:af:3b:ea:80:80:ff:f9:70:4b:77:74:09:38:a7: c8:cd:f6:02:09:18:07:3f:1c:95:42:dd:6b:64:9d:57:74:b7: 21:df:54:64:27:02:a6:3f:5b:cd:c0:6f:15:62:56:b3:77:39: 0b:09:da:05:74:1c:c0:b4:c0:db:02:40:0d:df:ee:d3:69:ff: 91:c8:94:64:d1:ab:3a:0b:dc:11:72:8b:57:8d:74:a0:bf:a3: 91:18:65:dc:c0:d3:0f:2e:52:b3:45:ab:20:5c:3d:eb:75:b1: 09:c3:03:52:9c:bf:f4:6b:08:0d:c4:69:b5:95:20:fa:53:12: f3:2c:a4:3c:e5:1e:2b:c9:7c:46:79:58:f2:57:53:df:59:31: 7f:20:cf:f2:52:32:43:5b:5a:92:91:66:0d:93:f9:4a:08:e6: e6:a7:08:10:19:71:fd:21:ed:29:b5:b2:a6:7b:01:ea:9b:a5: 0d:df:3c:3e:81:1e:80:f5:0b:d3:72:e2:3f:a3:8f:b2:13:8d: 50:54:70:3c:40:ef:1d:8b:e3:76:3e:f2:01:94:1c:09:c4:8f: 69:28:a2:e3:ea:1c:ac:e6:4b:f7:f3:7b:ec:27:41:89:7e:79: fc:b2:ed:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa5MNWWRgAGyuhI1W4oE8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTNkNGQ4MTBmMjQ3Nzg0MWE4Yjg1NTkzYjhmMzBlOGFl Y2Q0MDkwHhcNMjYwMjA5MjIwMDI2WhcNMjYwMjEwMjIwMDI2WjAzMTEwLwYDVQQD Eyg5OTBkOGEzYmZjYzdjNTIxYmE0YWQxY2Y2MjZkMjIzZjJkOTI3OGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGRnydLbKLuiQvqU0eznwvLp6kda Eolpbz6LjMwbEhuGOaZbaHrfuQ1LSU0Fnat5pQmRpkYZXj+4llK+Bzjvy8LJXttL 7E8Yo2ioTiBdnlTs59W/3r06WKBqL7ohEwaWrYyo/QHzvy5NYV8g/7rA5cg2rOfd RLYibjMRQ0zxocVBKYVTX0Z86ncoIy21XnPzfTGm0uY51kJ93fAl4M+HiPQXNKHz VHDUw/NpHHvB+Q+86qjEuRilFcdiiDZVgxhvZKredYE/xS+hjWcQx238CqN/z6T/ r6efONAMIq+z9kJ0QHnCxeTp8hHqZm222pDOTvEgwxV1n4pmu8CRVEbazwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkNijv8x8UhukrRz2JtIj8tknjLMB8GA1UdIwQY MBaAFA7j1NgQ8kd4Qai4VZO48w6K7NQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzIt YzMzMjZhZDJjZjhmLzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzItYzMzMjZhZDJjZjhm LzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlyo+oOZ+ r58a678iZgxidZWwd4Uxo6876oCA//lwS3d0CTinyM32AgkYBz8clULda2SdV3S3 Id9UZCcCpj9bzcBvFWJWs3c5CwnaBXQcwLTA2wJADd/u02n/kciUZNGrOgvcEXKL V410oL+jkRhl3MDTDy5Ss0WrIFw963WxCcMDUpy/9GsIDcRptZUg+lMS8yykPOUe K8l8RnlY8ldT31kxfyDP8lIyQ1takpFmDZP5Sgjm5qcIEBlx/SHtKbWypnsB6pul Dd88PoEegPUL03LiP6OPshONUFRwPEDvHYvjdj7yAZQcCcSPaSii4+ocrOZL9/N7 7CdBiX55/LLt7Q== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:24 2026 by rpki-client