This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft File: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft (raw, json) Hash identifier: IUwPh3UGtl41JIV9tKJomT+QfWO+wLtkG2ze1zmf3V4= Subject key identifier: 59:3B:67:F7:C1:E7:DC:72:DA:46:21:E1:D6:E3:B1:A3:66:92:9C:3D Authority key identifier: 0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0 Certificate issuer: /CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0 Certificate serial: 019C43908B67DFFDCE9DD10AABC787FFE199 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 18:01:12 +0000 Manifest this update: Mon 09 Feb 2026 18:01:12 +0000 Manifest next update: Tue 10 Feb 2026 18:01:12 +0000 Files and hashes: 1: Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl (hash: CpijQt/YVT0gzyftAc/knjsGXwGgeo70M0LShPZsC4E=) 2: b85PS3H30eMs5XV1Zj_5kBi4YS8.roa (hash: ADteCFtgyfMf5jEQhYpSnrBciRI5sXi17xBqTjm3R+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:8b:67:df:fd:ce:9d:d1:0a:ab:c7:87:ff:e1:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ddd10875e9e4c9e7e87e701bb516aa6e1b952b0 Validity Not Before: Feb 9 18:01:12 2026 GMT Not After : Feb 10 18:01:12 2026 GMT Subject: CN=593b67f7c1e7dc72da4621e1d6e3b1a366929c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:93:96:6e:d6:fc:a6:0e:d8:03:47:be:c2: e9:b5:cd:b2:94:46:be:1f:9c:16:cc:bd:a3:f1:33: ea:55:7e:50:83:62:18:74:b5:a2:52:60:8f:90:6f: 09:db:2e:96:59:8c:d4:54:01:d1:c3:de:80:80:05: 56:80:cb:62:ab:59:1f:be:95:ab:a0:e6:f8:84:32: 44:e5:6d:7b:bf:e7:a5:ac:fe:a2:d9:57:12:57:f0: 9d:2e:a2:97:07:49:77:71:95:f6:f7:90:d5:4f:9e: 3d:8e:97:cc:2d:fc:9d:f0:28:f6:d5:c1:30:fa:dc: a1:ac:5d:64:89:20:69:12:55:30:22:2e:5a:92:1f: 88:b3:c9:0d:9d:5c:6f:51:13:0b:0c:bf:70:b7:ea: 37:af:80:75:45:35:c9:48:e0:77:b8:b7:04:4f:26: 2f:ff:a1:0a:4d:29:22:d7:c4:b8:2f:4c:7a:ea:b4: 06:59:c1:b5:d3:84:e1:80:a7:da:20:bf:fc:58:06: 3a:31:69:8c:5b:cd:d2:a3:db:4c:8b:51:e4:c9:53: ac:bb:a5:5d:52:2a:77:75:1b:5a:92:c2:67:a2:bc: 7b:c3:90:ae:66:f0:4a:36:48:ac:78:f1:87:0d:fc: 7e:ae:59:c5:b7:47:be:3c:4d:50:6c:64:aa:d3:11: b4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:3B:67:F7:C1:E7:DC:72:DA:46:21:E1:D6:E3:B1:A3:66:92:9C:3D X509v3 Authority Key Identifier: keyid:0D:DD:10:87:5E:9E:4C:9E:7E:87:E7:01:BB:51:6A:A6:E1:B9:52:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/4f63a4-d57b-4c9c-8ceb-983c71ff7053/1/Dd0Qh16eTJ5-h-cBu1FqpuG5UrA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:b9:58:9c:80:90:c2:50:b1:a1:fe:f1:d7:68:f9:00:ef:dc: 44:61:28:ea:36:3f:e2:c7:8d:4e:db:3d:24:70:88:9d:e7:5b: f2:15:7a:21:83:66:ca:bb:90:bf:f1:41:af:96:96:e5:27:ce: 8f:dc:a4:8b:26:d7:03:1f:d1:34:af:d7:15:f2:e8:98:14:23: 52:d2:a5:46:e3:4f:ef:fd:bc:47:55:67:5e:19:bf:76:9b:68: 03:cc:04:fd:9e:d2:56:47:c8:35:0e:71:27:d2:dc:45:58:6e: 80:59:9b:2e:9f:06:6a:3e:5d:64:cd:f4:c3:40:4f:27:3b:7b: ef:59:d6:ac:10:96:9b:bc:01:d8:db:0a:94:ed:7f:02:09:eb: 71:ff:54:42:e7:15:51:a2:a0:30:99:b6:15:6c:dd:16:7f:62: 3e:a2:61:c2:05:be:a6:c4:7a:fb:88:09:65:ff:01:5b:88:9e: 84:ec:02:90:93:72:a4:8a:a0:75:7b:d0:17:60:f2:ff:74:77: b7:f6:9d:6d:82:54:f3:bc:b1:02:eb:15:90:e8:d6:99:16:78: 2e:d6:fc:3c:15:a5:5b:bf:c2:ea:07:e6:e9:6c:55:75:dd:d8: 8d:f2:c2:19:c5:21:5e:7c:da:df:24:eb:fc:b5:da:b6:94:1e: bf:b6:3b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkItn3/3OndEKq8eH/+GZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZGQxMDg3NWU5ZTRjOWU3ZTg3ZTcwMWJiNTE2YWE2ZTFi OTUyYjAwHhcNMjYwMjA5MTgwMTEyWhcNMjYwMjEwMTgwMTEyWjAzMTEwLwYDVQQD Eyg1OTNiNjdmN2MxZTdkYzcyZGE0NjIxZTFkNmUzYjFhMzY2OTI5YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSiTlm7W/KYO2ANHvsLptc2ylEa+ H5wWzL2j8TPqVX5Qg2IYdLWiUmCPkG8J2y6WWYzUVAHRw96AgAVWgMtiq1kfvpWr oOb4hDJE5W17v+elrP6i2VcSV/CdLqKXB0l3cZX295DVT549jpfMLfyd8Cj21cEw +tyhrF1kiSBpElUwIi5akh+Is8kNnVxvURMLDL9wt+o3r4B1RTXJSOB3uLcETyYv /6EKTSki18S4L0x66rQGWcG104ThgKfaIL/8WAY6MWmMW83So9tMi1HkyVOsu6Vd Uip3dRtaksJnorx7w5CuZvBKNkisePGHDfx+rlnFt0e+PE1QbGSq0xG0NwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFk7Z/fB59xy2kYh4dbjsaNmkpw9MB8GA1UdIwQY MBaAFA3dEIdenkyefofnAbtRaqbhuVKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWIt OTgzYzcxZmY3MDUzLzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS80ZjYzYTQtZDU3Yi00YzljLThjZWItOTgzYzcxZmY3MDUz LzEvRGQwUWgxNmVUSjUtaC1jQnUxRnFwdUc1VXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIrlYnICQ wlCxof7x12j5AO/cRGEo6jY/4seNTts9JHCInedb8hV6IYNmyruQv/FBr5aW5SfO j9ykiybXAx/RNK/XFfLomBQjUtKlRuNP7/28R1VnXhm/dptoA8wE/Z7SVkfINQ5x J9LcRVhugFmbLp8Gaj5dZM30w0BPJzt771nWrBCWm7wB2NsKlO1/Agnrcf9UQucV UaKgMJm2FWzdFn9iPqJhwgW+psR6+4gJZf8BW4iehOwCkJNypIqgdXvQF2Dy/3R3 t/adbYJU87yxAusVkOjWmRZ4Ltb8PBWlW7/C6gfm6WxVdd3YjfLCGcUhXnza3yTr /LXatpQev7Y7qQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:43 2026 by rpki-client