This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft File: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft (raw, json) Hash identifier: 3BybwM5VAOqxQQArTc85DdR+zE1hAX9U0gkjHe2uEDQ= Subject key identifier: 2A:F6:28:99:A9:C2:C8:53:A0:B6:AF:1C:FD:78:F6:38:AB:77:18:0E Authority key identifier: 0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 Certificate issuer: /CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Certificate serial: 019C43229C4FC0D0FC6F545BF64D31842EB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft Manifest number: 0551 Signing time: Mon 09 Feb 2026 16:01:07 +0000 Manifest this update: Mon 09 Feb 2026 16:01:07 +0000 Manifest next update: Tue 10 Feb 2026 16:01:07 +0000 Files and hashes: 1: 54hfE0Y4-JoRYQyGvrDtVZ8e-2w.roa (hash: kkVZPLuB/2kBag1x2xaUBlbz/Jrwxqs4X3vOALGnn6I=) 2: DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl (hash: pZ9YZmupsXXANu0cwPRj6rWWSJ3zbKV8j/3NWWhvG0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:9c:4f:c0:d0:fc:6f:54:5b:f6:4d:31:84:2e:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e117a3e0d0d05d4b0ab823080e7bf6cfd4b3776 Validity Not Before: Feb 9 16:01:07 2026 GMT Not After : Feb 10 16:01:07 2026 GMT Subject: CN=2af62899a9c2c853a0b6af1cfd78f638ab77180e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b6:e6:0b:03:79:37:60:8b:37:0f:a7:b5:bb: 2e:d1:4f:63:71:20:7d:c5:31:4a:8a:e4:a1:7e:af: 95:2e:a9:e0:6c:a0:92:67:70:1f:17:f4:13:0e:fe: b8:c4:7a:b1:21:92:79:68:3e:d3:73:f7:45:bb:b1: 9d:1c:9a:b5:88:43:0d:95:79:57:2c:49:99:44:d1: f5:fa:0e:b7:6a:a3:0e:5c:7f:8a:e7:03:a0:93:ec: 6e:95:bb:2a:a8:bb:90:b3:e6:c3:05:b4:83:70:74: d9:5b:9e:04:82:2b:90:23:6b:57:0b:b4:ad:85:24: f9:5d:1c:97:f7:ed:bb:38:48:17:50:0e:20:51:58: 2e:a2:10:0c:11:f6:36:01:c0:68:14:02:7c:1d:ca: 03:dc:c0:05:22:95:c4:46:fc:98:80:0f:13:5d:a9: 16:60:79:af:98:58:b4:8a:70:54:70:81:ad:4e:b5: 20:6e:09:53:a4:58:cf:57:e2:c6:93:d6:88:c6:a3: ee:5a:1f:11:02:06:d1:e0:60:6d:8a:3b:12:4a:61: 85:a7:87:bf:f4:52:c4:2b:02:d7:b0:42:9b:75:9c: 10:10:ef:bb:58:72:8b:ec:a0:f8:bb:45:74:56:7e: 2f:6a:c7:36:8b:2a:a1:c3:7e:84:56:c3:db:72:6c: 31:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F6:28:99:A9:C2:C8:53:A0:B6:AF:1C:FD:78:F6:38:AB:77:18:0E X509v3 Authority Key Identifier: keyid:0E:11:7A:3E:0D:0D:05:D4:B0:AB:82:30:80:E7:BF:6C:FD:4B:37:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1422fa-e82b-4c0b-b23b-d8475f18464e/1/DhF6Pg0NBdSwq4IwgOe_bP1LN3Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:83:6d:f1:1a:8d:31:5c:af:8a:1f:20:f9:58:02:df:6e:0d: ff:13:61:dd:24:76:4a:1c:1a:fc:d5:bc:1a:dc:c3:2f:6c:f1: 54:7b:24:b0:87:34:76:ef:e7:08:80:e0:9e:50:dc:98:d4:a3: 67:3f:da:60:3e:92:f5:7c:6d:39:10:1c:6b:87:9d:89:73:1c: 3d:bb:65:da:92:ca:60:45:f6:72:e3:6f:65:b7:8e:6e:40:8c: f0:9d:fd:d3:9a:cc:5e:8b:7a:23:ca:41:5b:c5:56:81:11:48: 1f:31:af:76:ab:0d:62:a2:3c:76:5e:9d:93:10:c1:ad:09:d6: ec:bc:82:61:c8:20:d3:89:ed:ec:d3:42:07:d4:32:9c:8e:91: ee:b2:9e:7e:44:55:6d:09:20:09:f9:1a:44:d2:ce:c5:66:22: 9a:07:fb:5a:b5:9c:bf:a1:f6:39:e3:e2:3b:10:ec:5e:61:8e: 74:c1:b9:21:bd:f3:1b:67:b9:42:3c:f5:7a:23:f4:04:ea:00: f4:9e:03:b8:0d:0d:bb:4b:62:da:01:ed:4b:63:12:89:48:3b: 12:ea:ad:3f:38:76:8e:f6:5b:2f:24:40:8f:b2:86:ee:e3:05: a3:e3:91:2b:a0:96:fe:c0:b2:a5:11:22:18:4e:a3:df:76:a0: 9c:92:58:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpxPwND8b1Rb9k0xhC61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMTE3YTNlMGQwZDA1ZDRiMGFiODIzMDgwZTdiZjZjZmQ0 YjM3NzYwHhcNMjYwMjA5MTYwMTA3WhcNMjYwMjEwMTYwMTA3WjAzMTEwLwYDVQQD EygyYWY2Mjg5OWE5YzJjODUzYTBiNmFmMWNmZDc4ZjYzOGFiNzcxODBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7bmCwN5N2CLNw+ntbsu0U9jcSB9 xTFKiuShfq+VLqngbKCSZ3AfF/QTDv64xHqxIZJ5aD7Tc/dFu7GdHJq1iEMNlXlX LEmZRNH1+g63aqMOXH+K5wOgk+xulbsqqLuQs+bDBbSDcHTZW54EgiuQI2tXC7St hST5XRyX9+27OEgXUA4gUVguohAMEfY2AcBoFAJ8HcoD3MAFIpXERvyYgA8TXakW YHmvmFi0inBUcIGtTrUgbglTpFjPV+LGk9aIxqPuWh8RAgbR4GBtijsSSmGFp4e/ 9FLEKwLXsEKbdZwQEO+7WHKL7KD4u0V0Vn4vasc2iyqhw36EVsPbcmwx9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr2KJmpwshToLavHP149jirdxgOMB8GA1UdIwQY MBaAFA4Rej4NDQXUsKuCMIDnv2z9Szd2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2It ZDg0NzVmMTg0NjRlLzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS8xNDIyZmEtZTgyYi00YzBiLWIyM2ItZDg0NzVmMTg0NjRl LzEvRGhGNlBnME5CZFN3cTRJd2dPZV9iUDFMTjNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4Nt8RqN MVyvih8g+VgC324N/xNh3SR2Shwa/NW8GtzDL2zxVHsksIc0du/nCIDgnlDcmNSj Zz/aYD6S9XxtORAca4ediXMcPbtl2pLKYEX2cuNvZbeObkCM8J3905rMXot6I8pB W8VWgRFIHzGvdqsNYqI8dl6dkxDBrQnW7LyCYcgg04nt7NNCB9QynI6R7rKefkRV bQkgCfkaRNLOxWYimgf7WrWcv6H2OePiOxDsXmGOdMG5Ib3zG2e5Qjz1eiP0BOoA 9J4DuA0Nu0ti2gHtS2MSiUg7EuqtPzh2jvZbLyRAj7KG7uMFo+ORK6CW/sCypREi GE6j33agnJJYBg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:26 2026 by rpki-client