This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft File: Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft (raw, json) Hash identifier: I/QAZqSlpEq4A0Q4vpNx8ScIFTLG5OLonLbMjg8jXGY= Subject key identifier: D9:3F:0A:60:F7:E8:EB:08:C5:55:7F:1D:A0:7B:05:EA:AF:E3:9D:52 Authority key identifier: 0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C Certificate issuer: /CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c Certificate serial: 019C42EBA41B260D1A2374E85B7C3AD55FEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft Manifest number: 10C0 Signing time: Mon 09 Feb 2026 15:01:05 +0000 Manifest this update: Mon 09 Feb 2026 15:01:05 +0000 Manifest next update: Tue 10 Feb 2026 15:01:05 +0000 Files and hashes: 1: Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl (hash: 009nzaFStuPvrHYoihUcFGzQGJyd4vHuU6aY7m1KyfY=) 2: PsWp9xa53jWoAHdPeTK2Ik_zisE.roa (hash: FqYGJ8eq8LBylqBU2znfr/5XrCV20Sm8u8t86Ik5QN8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:a4:1b:26:0d:1a:23:74:e8:5b:7c:3a:d5:5f:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f2f8b2b94721e928f6188b5cf15053144dedf8c Validity Not Before: Feb 9 15:01:05 2026 GMT Not After : Feb 10 15:01:05 2026 GMT Subject: CN=d93f0a60f7e8eb08c5557f1da07b05eaafe39d52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bb:5d:36:67:26:1e:9b:47:69:13:86:82:38: e0:50:93:c0:34:57:ab:c1:05:c4:c9:e3:9b:55:90: b8:5a:c7:db:f2:8e:03:1b:8d:08:c8:84:ff:f0:19: 95:8c:b8:9d:43:1e:fd:c5:65:53:0c:25:fc:b3:7e: 46:e7:6a:45:0c:f2:ff:33:1c:36:66:69:fe:06:e3: 94:fc:7f:05:40:e6:83:52:2b:fb:8a:d9:7f:4e:82: ce:40:ba:66:5a:39:5d:a3:f7:0b:89:22:83:b9:45: 2e:2f:b7:71:2a:8f:17:1a:97:42:5a:24:50:ef:4d: c4:8f:41:d8:e7:96:c5:b3:51:52:83:16:e0:05:ce: 55:91:60:c4:70:df:d8:e8:ab:86:7e:f9:39:53:55: 57:0b:3c:f2:fb:3c:3b:c6:2a:7d:52:13:cf:b7:86: 37:f4:37:f8:4b:23:7d:3f:33:09:30:89:c6:58:e0: 70:72:5b:c6:ad:6e:4c:d2:ca:1c:25:30:c2:77:53: 94:fa:a9:5c:db:46:ab:c0:42:c0:d8:e9:78:4f:21: 73:ec:68:bc:cb:49:fd:e2:95:74:68:df:d2:e9:14: ce:3b:d9:85:7a:5c:55:28:11:cf:d9:15:cf:6c:b9: a9:34:16:48:62:39:1d:f6:b4:be:d2:89:3f:7b:1b: 97:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:3F:0A:60:F7:E8:EB:08:C5:55:7F:1D:A0:7B:05:EA:AF:E3:9D:52 X509v3 Authority Key Identifier: keyid:0F:2F:8B:2B:94:72:1E:92:8F:61:88:B5:CF:15:05:31:44:DE:DF:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dy-LK5RyHpKPYYi1zxUFMUTe34w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/4e5902-e283-4916-a33c-7226a8845e01/1/Dy-LK5RyHpKPYYi1zxUFMUTe34w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1b:a8:12:10:ed:e7:2f:93:1c:e7:e7:a4:9a:e7:45:63:41: 1c:ed:90:1d:d4:0c:ae:a9:06:aa:d9:0e:bc:05:3f:1a:67:c9: e3:fd:d0:85:e4:c7:94:b6:c5:2e:6f:02:6b:96:19:bf:3a:d9: a0:91:28:ee:88:ca:0b:45:35:ca:8e:78:e2:03:48:b3:6c:87: e5:5e:ba:51:29:fe:fe:b2:ac:62:bc:2a:33:a2:c2:7d:e2:b7: 87:6d:7a:00:70:ef:38:1c:b1:4b:cd:48:42:e9:72:71:d3:21: 20:a6:da:fb:d4:1f:5b:aa:55:92:84:0d:99:05:ad:75:18:a8: 45:42:70:c7:e8:c3:e1:7f:cb:0e:9b:59:40:3f:11:14:76:e1: 32:33:71:76:e2:fc:33:3c:b6:6c:84:59:1b:31:16:f0:9f:7c: cd:3b:79:44:f9:19:cc:98:c3:33:c9:1f:12:54:13:d8:56:8b: 28:2d:bc:2f:cd:7b:99:a8:02:c6:4f:be:85:bd:dd:c8:27:10: 1a:e6:f2:85:fa:ca:8f:3e:e4:a4:f4:89:45:70:d8:47:36:ea: e8:5d:3a:a9:73:74:ad:cf:51:04:5f:b9:7d:c1:7b:8c:09:64: c9:35:33:4e:c6:2a:78:d5:5a:3a:7a:42:03:4b:85:37:67:2a: 7d:e6:14:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66QbJg0aI3ToW3w61V/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMmY4YjJiOTQ3MjFlOTI4ZjYxODhiNWNmMTUwNTMxNDRk ZWRmOGMwHhcNMjYwMjA5MTUwMTA1WhcNMjYwMjEwMTUwMTA1WjAzMTEwLwYDVQQD EyhkOTNmMGE2MGY3ZThlYjA4YzU1NTdmMWRhMDdiMDVlYWFmZTM5ZDUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLtdNmcmHptHaROGgjjgUJPANFer wQXEyeObVZC4Wsfb8o4DG40IyIT/8BmVjLidQx79xWVTDCX8s35G52pFDPL/Mxw2 Zmn+BuOU/H8FQOaDUiv7itl/ToLOQLpmWjldo/cLiSKDuUUuL7dxKo8XGpdCWiRQ 703Ej0HY55bFs1FSgxbgBc5VkWDEcN/Y6KuGfvk5U1VXCzzy+zw7xip9UhPPt4Y3 9Df4SyN9PzMJMInGWOBwclvGrW5M0socJTDCd1OU+qlc20arwELA2Ol4TyFz7Gi8 y0n94pV0aN/S6RTOO9mFelxVKBHP2RXPbLmpNBZIYjkd9rS+0ok/exuXNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNk/CmD36OsIxVV/HaB7Beqv451SMB8GA1UdIwQY MBaAFA8viyuUch6Sj2GItc8VBTFE3t+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2Mt NzIyNmE4ODQ1ZTAxLzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi80ZTU5MDItZTI4My00OTE2LWEzM2MtNzIyNmE4ODQ1ZTAx LzEvRHktTEs1UnlIcEtQWVlpMXp4VUZNVVRlMzR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACxuoEhDt 5y+THOfnpJrnRWNBHO2QHdQMrqkGqtkOvAU/GmfJ4/3QheTHlLbFLm8Ca5YZvzrZ oJEo7ojKC0U1yo544gNIs2yH5V66USn+/rKsYrwqM6LCfeK3h216AHDvOByxS81I QulycdMhIKba+9QfW6pVkoQNmQWtdRioRUJwx+jD4X/LDptZQD8RFHbhMjNxduL8 Mzy2bIRZGzEW8J98zTt5RPkZzJjDM8kfElQT2FaLKC28L817magCxk++hb3dyCcQ GubyhfrKjz7kpPSJRXDYRzbq6F06qXN0rc9RBF+5fcF7jAlkyTUzTsYqeNVaOnpC A0uFN2cqfeYUDw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:36 2026 by rpki-client