This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft File: DZgNjKRkrkQzDALWCX0bPjRn4IU.mft (raw, json) Hash identifier: MGRfXALq16/v4lfa6OV+N5tDrWTHNcj8P0AlpED6a7k= Subject key identifier: 97:00:29:21:04:08:65:49:FB:3F:8F:C6:EE:5D:4B:D6:68:57:0A:ED Authority key identifier: 0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 Certificate issuer: /CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Certificate serial: 019C4133B54FDED73BF7F96B52992A30A6D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft Manifest number: 0BAB Signing time: Mon 09 Feb 2026 07:00:33 +0000 Manifest this update: Mon 09 Feb 2026 07:00:33 +0000 Manifest next update: Tue 10 Feb 2026 07:00:33 +0000 Files and hashes: 1: DZgNjKRkrkQzDALWCX0bPjRn4IU.crl (hash: 70kEXzdgwIWupSBWyDUYj1+GzlrbcrXvE2T+xipIhz0=) 2: M5PnGpQYm028ws30MJtZnTaTcpo.roa (hash: /Y8TDD+fi7yLoYjDRGZ16k+8Sg/nu7LlsqZTmrtMrIE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:b5:4f:de:d7:3b:f7:f9:6b:52:99:2a:30:a6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d980d8ca464ae44330c02d6097d1b3e3467e085 Validity Not Before: Feb 9 07:00:33 2026 GMT Not After : Feb 10 07:00:33 2026 GMT Subject: CN=9700292104086549fb3f8fc6ee5d4bd668570aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6e:8c:bc:ee:c6:59:d4:83:d7:a5:2a:e6:f5: bf:32:2b:8c:0b:f5:44:13:7f:a9:15:d8:2c:9b:e6: 3d:c6:c9:3e:80:43:5f:39:54:b4:84:46:4b:1a:6e: f7:93:84:62:1b:5c:54:de:e8:66:02:82:70:62:d3: 9d:69:29:f1:35:16:e0:24:9f:32:44:71:51:5e:5f: 4f:0f:96:38:30:db:97:cf:31:5f:10:1e:54:0b:72: 07:dd:b1:11:2d:96:0a:f3:ec:6b:24:fb:93:a1:ed: b2:58:05:f3:07:8a:da:a1:42:19:32:aa:7f:b9:0d: ed:67:e7:3c:d0:54:c7:30:ac:73:28:9c:b1:f0:57: 49:b1:f9:63:16:36:73:47:67:8f:27:74:a7:2e:30: 5f:6b:15:93:e4:a5:8d:22:fa:40:22:6e:32:0d:8c: 32:8b:69:2c:1f:7f:c7:0f:64:71:6b:e7:f4:eb:e4: 62:45:53:94:da:f2:31:14:0f:c2:08:ca:ce:21:24: c0:43:cc:4c:e5:79:70:61:91:43:77:c0:0f:55:f4: 2c:09:52:c6:70:dc:8a:e7:c4:4b:84:8a:7e:62:7a: 16:28:e6:1d:88:1b:65:4e:32:a7:fd:b2:5d:db:e3: 35:fa:7f:d9:dc:ef:51:09:42:c8:83:35:ca:9b:d5: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:00:29:21:04:08:65:49:FB:3F:8F:C6:EE:5D:4B:D6:68:57:0A:ED X509v3 Authority Key Identifier: keyid:0D:98:0D:8C:A4:64:AE:44:33:0C:02:D6:09:7D:1B:3E:34:67:E0:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DZgNjKRkrkQzDALWCX0bPjRn4IU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/63569e-f458-4467-a415-f6ff281fbc32/1/DZgNjKRkrkQzDALWCX0bPjRn4IU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:4b:29:d9:19:ef:e3:9a:c5:cd:94:b2:ef:2b:28:fb:cd:95: c2:2a:0b:09:01:aa:c9:3c:a5:1a:e7:ac:2c:4f:5e:79:69:72: 5f:a0:1f:03:19:7d:46:35:a2:73:8a:11:8c:a5:30:e6:0b:e0: fa:cb:5d:1c:54:00:10:ab:64:84:cb:d4:e8:58:63:71:d8:ba: 32:9d:09:27:e7:0b:c8:a0:75:3b:ba:76:0b:56:4b:3b:2e:60: 8c:4d:7e:d7:c9:7f:8a:ec:13:a0:bd:03:ef:fe:0a:98:1b:eb: c5:0c:05:d3:3d:10:06:38:07:5a:e2:24:3f:8a:d5:cf:82:40: 34:d3:82:2d:d8:d4:69:e3:b9:d2:c3:2a:bc:86:a5:e3:7d:be: 4a:b6:00:b0:02:e5:af:29:de:53:86:23:8c:d5:47:7b:d5:06: b0:47:23:5c:fa:98:b8:48:aa:3c:b1:1e:f1:7e:f6:a5:16:39: 8b:ac:49:9d:e0:b1:b8:f7:d1:b6:28:d6:9a:df:21:48:18:13: 35:5f:74:b6:10:2b:93:8a:f3:da:ee:9e:09:f7:af:5e:22:9c: af:da:13:d4:7c:b0:0e:4e:54:fd:d5:c5:43:15:2e:b3:61:52: 86:6b:74:46:50:1d:83:d5:a2:bf:1f:c3:83:8e:92:a3:85:98: 52:b9:ad:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM7VP3tc79/lrUpkqMKbSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkOTgwZDhjYTQ2NGFlNDQzMzBjMDJkNjA5N2QxYjNlMzQ2 N2UwODUwHhcNMjYwMjA5MDcwMDMzWhcNMjYwMjEwMDcwMDMzWjAzMTEwLwYDVQQD Eyg5NzAwMjkyMTA0MDg2NTQ5ZmIzZjhmYzZlZTVkNGJkNjY4NTcwYWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu26MvO7GWdSD16Uq5vW/MiuMC/VE E3+pFdgsm+Y9xsk+gENfOVS0hEZLGm73k4RiG1xU3uhmAoJwYtOdaSnxNRbgJJ8y RHFRXl9PD5Y4MNuXzzFfEB5UC3IH3bERLZYK8+xrJPuToe2yWAXzB4raoUIZMqp/ uQ3tZ+c80FTHMKxzKJyx8FdJsfljFjZzR2ePJ3SnLjBfaxWT5KWNIvpAIm4yDYwy i2ksH3/HD2Rxa+f06+RiRVOU2vIxFA/CCMrOISTAQ8xM5XlwYZFDd8APVfQsCVLG cNyK58RLhIp+YnoWKOYdiBtlTjKn/bJd2+M1+n/Z3O9RCULIgzXKm9XbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcAKSEECGVJ+z+Pxu5dS9ZoVwrtMB8GA1UdIwQY MBaAFA2YDYykZK5EMwwC1gl9Gz40Z+CFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUt ZjZmZjI4MWZiYzMyLzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS82MzU2OWUtZjQ1OC00NDY3LWE0MTUtZjZmZjI4MWZiYzMy LzEvRFpnTmpLUmtya1F6REFMV0NYMGJQalJuNElVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm0sp2Rnv 45rFzZSy7yso+82VwioLCQGqyTylGuesLE9eeWlyX6AfAxl9RjWic4oRjKUw5gvg +stdHFQAEKtkhMvU6Fhjcdi6Mp0JJ+cLyKB1O7p2C1ZLOy5gjE1+18l/iuwToL0D 7/4KmBvrxQwF0z0QBjgHWuIkP4rVz4JANNOCLdjUaeO50sMqvIal432+SrYAsALl ryneU4YjjNVHe9UGsEcjXPqYuEiqPLEe8X72pRY5i6xJneCxuPfRtijWmt8hSBgT NV90thArk4rz2u6eCfevXiKcr9oT1HywDk5U/dXFQxUus2FShmt0RlAdg9Wivx/D g46So4WYUrmthw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:23 2026 by rpki-client