This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft File: Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft (raw, json) Hash identifier: zKXAx5RK4oX2jvOmxVJ6DQMcsJNyX5EYhJcLb/bU6yo= Subject key identifier: 74:E4:E3:32:BF:7D:5C:DD:85:A0:E3:BE:FB:AB:03:F0:08:DB:E9:4E Authority key identifier: 0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2 Certificate issuer: /CN=0dc871db5098bf838ffea99a02f679368b3e1ab2 Certificate serial: 019C43C6AD02225CD498B9FDF423D75DC103 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 19:00:19 +0000 Manifest this update: Mon 09 Feb 2026 19:00:19 +0000 Manifest next update: Tue 10 Feb 2026 19:00:19 +0000 Files and hashes: 1: Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl (hash: S+/k9pGSYuwM5vD2DDe9iovEk5movua1kQlJ0usHBVY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:ad:02:22:5c:d4:98:b9:fd:f4:23:d7:5d:c1:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc871db5098bf838ffea99a02f679368b3e1ab2 Validity Not Before: Feb 9 19:00:19 2026 GMT Not After : Feb 10 19:00:19 2026 GMT Subject: CN=74e4e332bf7d5cdd85a0e3befbab03f008dbe94e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ed:f2:20:d3:95:e9:6e:54:c8:d9:64:59:bd: 25:77:45:12:80:be:62:e5:1f:14:b7:d8:ed:f9:26: de:0c:1f:8e:09:3b:18:2e:23:02:e3:26:5a:04:3e: da:d8:06:d5:30:cc:8c:45:b4:0e:5e:f4:04:47:19: 99:4f:2e:44:d1:63:43:12:52:cb:ef:47:07:82:07: a9:45:2f:bf:33:e7:ee:ea:f9:50:c4:13:84:06:2e: e7:e2:8e:8c:0a:74:6c:1f:fc:13:8f:5f:bb:24:67: 3c:6f:aa:b7:93:9f:e7:91:1e:e7:91:7c:e7:a5:ff: f7:26:92:21:ad:c8:a3:2f:02:8b:89:19:f6:a0:4f: c9:af:26:0c:fe:df:52:9e:3b:17:23:18:ec:19:c1: f5:b6:5f:4e:4d:f2:78:c7:bd:f6:32:96:97:ca:dc: 08:87:be:bf:8c:03:ad:9f:96:08:88:9e:27:09:6a: a3:7f:2f:a8:97:ce:d1:0d:a7:f3:ff:60:65:8c:89: b8:6a:15:59:90:69:de:e0:4e:7a:f2:82:20:06:c1: 18:6c:fc:39:e1:7f:f7:55:47:73:ae:e9:53:e3:a9: 2e:67:08:28:3d:8b:c5:63:40:13:cd:a1:49:53:92: 8b:6a:49:0d:ee:8b:b3:57:ef:0b:66:90:9d:e6:27: 38:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E4:E3:32:BF:7D:5C:DD:85:A0:E3:BE:FB:AB:03:F0:08:DB:E9:4E X509v3 Authority Key Identifier: keyid:0D:C8:71:DB:50:98:BF:83:8F:FE:A9:9A:02:F6:79:36:8B:3E:1A:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dchx21CYv4OP_qmaAvZ5Nos-GrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/4a1238-cb64-4a46-af95-65be44d0dbd4/1/Dchx21CYv4OP_qmaAvZ5Nos-GrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:69:8c:24:d5:91:77:16:d3:11:ec:86:a4:36:b3:0f:df:b7: 24:ee:f3:4b:c8:26:ca:c3:3d:ec:3f:e4:d7:3c:d1:dc:e1:09: ec:bb:5c:e6:71:63:25:1b:5a:86:43:6c:e3:30:6d:82:56:17: e5:57:ed:4b:b3:3c:1b:81:47:a1:04:bf:15:60:45:ce:72:88: 72:ca:59:4b:d2:4d:3b:a9:73:02:e0:59:9c:a5:2e:d8:fc:32: 32:dc:5f:7f:bc:97:21:3c:2e:01:8e:a1:10:65:47:06:96:c7: 47:a7:ff:d6:ca:e4:9a:ba:9a:e4:b3:a3:72:93:57:64:8a:1d: 38:9b:9c:c7:1f:4e:b3:2d:e1:d1:18:71:8e:58:f8:8e:d2:1a: b1:d9:00:8e:0c:15:5a:d1:0a:bb:30:f9:82:47:be:17:c4:59: 64:10:4b:31:c8:f0:b9:02:90:d4:a2:e4:01:06:3a:f6:b8:c1: d0:21:03:65:23:e2:dd:ea:93:93:4f:7a:44:26:ef:1f:73:19: e1:80:b8:78:03:7a:b2:71:97:d1:12:cb:af:45:9b:32:13:f2: 08:1e:3e:7a:5d:af:1b:b1:f4:80:d7:30:4b:76:25:49:5e:f7: 5a:52:59:2a:09:04:2b:28:44:e8:4d:6f:55:c7:61:f4:80:e5: c5:ac:65:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxq0CIlzUmLn99CPXXcEDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzg3MWRiNTA5OGJmODM4ZmZlYTk5YTAyZjY3OTM2OGIz ZTFhYjIwHhcNMjYwMjA5MTkwMDE5WhcNMjYwMjEwMTkwMDE5WjAzMTEwLwYDVQQD Eyg3NGU0ZTMzMmJmN2Q1Y2RkODVhMGUzYmVmYmFiMDNmMDA4ZGJlOTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu3yINOV6W5UyNlkWb0ld0USgL5i 5R8Ut9jt+SbeDB+OCTsYLiMC4yZaBD7a2AbVMMyMRbQOXvQERxmZTy5E0WNDElLL 70cHggepRS+/M+fu6vlQxBOEBi7n4o6MCnRsH/wTj1+7JGc8b6q3k5/nkR7nkXzn pf/3JpIhrcijLwKLiRn2oE/JryYM/t9SnjsXIxjsGcH1tl9OTfJ4x732MpaXytwI h76/jAOtn5YIiJ4nCWqjfy+ol87RDafz/2BljIm4ahVZkGne4E568oIgBsEYbPw5 4X/3VUdzrulT46kuZwgoPYvFY0ATzaFJU5KLakkN7ouzV+8LZpCd5ic4EwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHTk4zK/fVzdhaDjvvurA/AI2+lOMB8GA1UdIwQY MBaAFA3IcdtQmL+Dj/6pmgL2eTaLPhqyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUt NjViZTQ0ZDBkYmQ0LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS80YTEyMzgtY2I2NC00YTQ2LWFmOTUtNjViZTQ0ZDBkYmQ0 LzEvRGNoeDIxQ1l2NE9QX3FtYUF2WjVOb3MtR3JJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmmMJNWR dxbTEeyGpDazD9+3JO7zS8gmysM97D/k1zzR3OEJ7Ltc5nFjJRtahkNs4zBtglYX 5VftS7M8G4FHoQS/FWBFznKIcspZS9JNO6lzAuBZnKUu2PwyMtxff7yXITwuAY6h EGVHBpbHR6f/1srkmrqa5LOjcpNXZIodOJucxx9Osy3h0Rhxjlj4jtIasdkAjgwV WtEKuzD5gke+F8RZZBBLMcjwuQKQ1KLkAQY69rjB0CEDZSPi3eqTk096RCbvH3MZ 4YC4eAN6snGX0RLLr0WbMhPyCB4+el2vG7H0gNcwS3YlSV73WlJZKgkEKyhE6E1v Vcdh9IDlxaxlrg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:31 2026 by rpki-client