This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft File: D7o0uxz-i22g8bKwUkBsPpFhvyM.mft (raw, json) Hash identifier: XzyRYUrJHaPkIP9ny0BcVnrIHEiJadTqaBrebJGtRzY= Subject key identifier: 5D:F8:35:04:C5:77:E1:EB:6D:C5:B5:21:A5:95:1E:CA:AB:3E:D9:E7 Authority key identifier: 0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23 Certificate issuer: /CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23 Certificate serial: 019C1E724180387E7FA2DA6F9489D71B34BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft Manifest number: 17F9 Signing time: Mon 02 Feb 2026 13:02:10 +0000 Manifest this update: Mon 02 Feb 2026 13:02:10 +0000 Manifest next update: Tue 03 Feb 2026 13:02:10 +0000 Files and hashes: 1: D7o0uxz-i22g8bKwUkBsPpFhvyM.crl (hash: nCw5QYDpZrB2GQwq3aHZr2lphkNZvlHDHgoMGBO19KQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 13:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1e:72:41:80:38:7e:7f:a2:da:6f:94:89:d7:1b:34:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fba34bb1cfe8b6da0f1b2b052406c3e9161bf23 Validity Not Before: Feb 2 13:02:10 2026 GMT Not After : Feb 3 13:02:10 2026 GMT Subject: CN=5df83504c577e1eb6dc5b521a5951ecaab3ed9e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:01:af:c2:96:69:30:f6:36:bd:ce:3f:d3:0c: b0:52:6d:ac:a0:8d:41:bb:55:5b:0e:36:1f:3a:cf: 53:d8:83:9b:ff:4c:b3:f5:e5:a1:dd:7d:80:84:ba: 76:45:73:0c:6a:e4:59:d6:fb:21:6e:37:05:ac:94: da:30:f7:1b:7a:73:bb:ad:4f:44:31:e5:61:73:39: 69:f2:c5:d1:f9:1e:37:6c:c3:5c:36:78:27:72:5a: 4c:1f:44:9d:a0:33:2a:13:f2:a7:08:60:10:b6:23: 0c:8c:2a:48:b5:7c:c7:e2:a3:ff:e9:4e:ad:90:a9: 41:d4:a6:7a:95:37:a6:55:7e:84:6e:58:7e:ed:76: 65:61:2b:f1:b5:bc:bd:c9:b7:66:c2:52:1a:d8:9e: 80:d3:a9:10:7a:41:07:98:d2:d1:5d:08:f6:0e:ff: 34:83:87:cf:9f:ff:5d:e0:8b:70:11:b4:d6:df:3b: 3a:68:2b:ab:0b:e1:cf:da:ac:68:ec:6d:68:1a:86: ff:4c:50:19:bd:18:d8:1d:2f:d2:db:a9:24:60:15: 33:86:4d:98:27:dc:7d:e3:4d:45:66:5a:0d:8a:d9: 05:ee:05:8c:2e:d6:f6:c3:e6:f6:c1:33:0f:2d:bd: d8:3e:12:33:5e:5f:4a:f2:5a:21:bf:0b:83:c3:56: 62:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F8:35:04:C5:77:E1:EB:6D:C5:B5:21:A5:95:1E:CA:AB:3E:D9:E7 X509v3 Authority Key Identifier: keyid:0F:BA:34:BB:1C:FE:8B:6D:A0:F1:B2:B0:52:40:6C:3E:91:61:BF:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D7o0uxz-i22g8bKwUkBsPpFhvyM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/440cb1-b6f5-48cf-8886-e144ab19c5d1/1/D7o0uxz-i22g8bKwUkBsPpFhvyM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:9b:1e:b6:cb:14:ba:32:23:ed:f2:53:93:54:d2:30:e9:23: 29:3d:f3:83:7c:6e:df:0a:03:4f:73:a7:e9:b1:01:90:cd:06: f9:40:88:f8:44:a8:ef:6a:13:d5:91:a4:14:74:97:b2:96:73: 5f:92:08:9b:01:54:0e:20:e3:2d:75:b3:df:cc:93:c7:60:86: a4:72:69:76:3a:11:60:95:90:39:e1:ab:a0:a7:1d:01:5a:72: c1:5b:8f:65:62:1f:48:d1:fb:97:88:6d:e7:15:1c:b5:8f:f0: b5:b9:38:9b:4d:6f:76:7a:d9:8a:05:54:6b:c4:a5:7e:19:3c: bf:5f:c9:93:ab:fc:a1:cc:78:d3:de:2f:22:66:41:33:c9:f6: ae:cd:3d:2f:aa:54:ea:05:ce:4a:8f:8c:6a:87:a9:0d:21:e8: 62:38:b6:d5:f5:a8:02:4b:68:56:82:c0:97:d2:97:e8:64:25: 52:88:34:b3:32:7b:a3:fc:c0:35:60:ca:ad:74:79:e6:b4:9c: 18:52:ac:72:0c:c9:34:bc:5d:27:71:9d:c4:14:1f:46:89:fe: 7d:a9:27:57:bf:40:01:34:4b:d7:44:67:7e:91:cd:8b:33:08: 2c:d0:77:49:a7:40:5b:a2:e3:92:56:4b:d0:c8:9f:15:c3:bd: 5c:0a:f4:bd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZweckGAOH5/otpvlInXGzS6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmYmEzNGJiMWNmZThiNmRhMGYxYjJiMDUyNDA2YzNlOTE2 MWJmMjMwHhcNMjYwMjAyMTMwMjEwWhcNMjYwMjAzMTMwMjEwWjAzMTEwLwYDVQQD Eyg1ZGY4MzUwNGM1NzdlMWViNmRjNWI1MjFhNTk1MWVjYWFiM2VkOWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAGvwpZpMPY2vc4/0wywUm2soI1B u1VbDjYfOs9T2IOb/0yz9eWh3X2AhLp2RXMMauRZ1vshbjcFrJTaMPcbenO7rU9E MeVhczlp8sXR+R43bMNcNngnclpMH0SdoDMqE/KnCGAQtiMMjCpItXzH4qP/6U6t kKlB1KZ6lTemVX6Eblh+7XZlYSvxtby9ybdmwlIa2J6A06kQekEHmNLRXQj2Dv80 g4fPn/9d4ItwEbTW3zs6aCurC+HP2qxo7G1oGob/TFAZvRjYHS/S26kkYBUzhk2Y J9x9401FZloNitkF7gWMLtb2w+b2wTMPLb3YPhIzXl9K8lohvwuDw1ZiFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF34NQTFd+HrbcW1IaWVHsqrPtnnMB8GA1UdIwQY MBaAFA+6NLsc/ottoPGysFJAbD6RYb8jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYt ZTE0NGFiMTljNWQxLzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC80NDBjYjEtYjZmNS00OGNmLTg4ODYtZTE0NGFiMTljNWQx LzEvRDdvMHV4ei1pMjJnOGJLd1VrQnNQcEZodnlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYpsetssU ujIj7fJTk1TSMOkjKT3zg3xu3woDT3On6bEBkM0G+UCI+ESo72oT1ZGkFHSXspZz X5IImwFUDiDjLXWz38yTx2CGpHJpdjoRYJWQOeGroKcdAVpywVuPZWIfSNH7l4ht 5xUctY/wtbk4m01vdnrZigVUa8Slfhk8v1/Jk6v8ocx4094vImZBM8n2rs09L6pU 6gXOSo+MaoepDSHoYji21fWoAktoVoLAl9KX6GQlUog0szJ7o/zANWDKrXR55rSc GFKscgzJNLxdJ3GdxBQfRon+faknV79AATRL10RnfpHNizMILNB3SadAW6LjklZL 0MifFcO9XAr0vQ== -----END CERTIFICATE-----Generated at Mon Feb 2 20:44:47 2026 by rpki-client