This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft File: DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft (raw, json) Hash identifier: n2DXnurL4RQTCOux71L8ST/6riMxKo/eYIR7eG+x/g0= Subject key identifier: 15:60:B8:39:5A:30:76:2E:0E:AC:F6:A1:59:9B:C7:9C:D2:66:3A:81 Authority key identifier: 0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 Certificate issuer: /CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Certificate serial: 019C42103B53617CD7FAC58BF434274D561A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 11:01:25 +0000 Manifest this update: Mon 09 Feb 2026 11:01:25 +0000 Manifest next update: Tue 10 Feb 2026 11:01:25 +0000 Files and hashes: 1: BCkDmJhYgCR9TE4jRqDw3_AqqdI.roa (hash: mNQmWHALaV0PGX2z6HR7E/b09jPkjPuON0y07SlXofA=) 2: DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl (hash: ln2xMzxUZ2kXEOjzBxDO+RdKLqjx6xxildrqXVipTGo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:3b:53:61:7c:d7:fa:c5:8b:f4:34:27:4d:56:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db49122d9e9bbafa577f6447f21b8bec76c05f0 Validity Not Before: Feb 9 11:01:25 2026 GMT Not After : Feb 10 11:01:25 2026 GMT Subject: CN=1560b8395a30762e0eacf6a1599bc79cd2663a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8e:06:32:4b:d6:09:c6:ee:93:a6:5c:79:08: 54:fd:10:cd:e0:77:09:01:9e:4f:1d:81:4e:97:97: 23:e3:a6:2c:97:9a:b0:ae:7a:cd:5c:99:c1:80:9a: b3:b1:f8:38:59:22:b5:3b:4f:c8:74:1c:79:89:33: 30:a2:39:f2:b0:d1:09:ed:16:06:05:f8:75:67:18: 64:73:83:74:92:29:09:83:29:68:df:b3:a4:ad:fe: 7c:ed:70:90:9a:62:13:04:c9:8b:10:46:1a:9d:1f: cf:58:4e:aa:a1:04:8b:29:66:73:e3:3c:71:63:b8: 49:3b:0e:18:50:fa:b1:b7:4a:9c:3a:02:ea:92:0a: 1a:3e:ad:c8:5e:d6:07:87:53:bf:6b:8e:c9:55:32: 11:2d:7e:96:e2:cc:30:41:a2:ed:84:ab:bd:fd:91: f4:a5:b4:79:0d:ec:31:48:77:d6:03:d6:be:98:9a: d3:5e:07:1a:7c:3d:8c:09:10:cf:60:e0:69:a1:dd: 35:0b:72:1c:3d:bf:47:c4:6d:e2:71:14:37:c7:91: 11:68:69:28:8a:da:fb:f8:5f:6a:f9:0e:e2:34:c2: 7e:d5:13:c6:bf:90:01:1e:57:b1:ca:69:d6:b3:4a: ab:53:83:3a:9a:a1:f1:8e:6f:c3:70:e9:93:81:98: 58:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:60:B8:39:5A:30:76:2E:0E:AC:F6:A1:59:9B:C7:9C:D2:66:3A:81 X509v3 Authority Key Identifier: keyid:0D:B4:91:22:D9:E9:BB:AF:A5:77:F6:44:7F:21:B8:BE:C7:6C:05:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbSRItnpu6-ld_ZEfyG4vsdsBfA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5de7fb-9488-4e84-83ca-14600d57808a/1/DbSRItnpu6-ld_ZEfyG4vsdsBfA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:02:34:e3:37:ef:30:71:97:3d:fc:ab:03:45:0b:fc:d7:92: b3:ac:da:d7:74:f9:41:64:53:58:ab:1d:2c:92:4f:19:95:c7: 03:f8:ca:1b:8f:2a:00:ac:6e:da:73:d5:74:86:0a:16:a1:49: 8d:71:c8:d1:b1:36:2f:9a:cd:75:d5:97:ef:63:44:e8:63:66: 6c:50:ae:be:e9:60:a7:dd:5f:80:9b:5c:bd:a4:ed:51:af:34: f9:2d:a0:eb:10:5f:67:11:26:d5:a8:50:bf:1f:f3:a8:3b:de: 53:91:85:8e:e4:7f:97:fb:2d:12:f0:3d:0e:85:6e:4e:d9:86: 34:65:5b:71:f1:b3:11:7c:1f:5a:a4:41:dd:ec:79:80:4e:df: f5:b8:fa:dd:62:8d:51:96:b0:e6:83:2f:8b:92:11:89:10:57: 5b:55:10:7f:31:0b:67:c6:35:c8:43:3e:70:f1:8d:85:44:ff: dd:39:24:33:90:f3:ca:26:0c:29:c3:60:c8:c5:8c:6d:bc:af: 84:27:3d:68:6a:40:3b:45:5e:91:5b:b7:7e:5e:b5:72:f4:fe: 4a:e7:55:8a:a6:76:09:9d:39:09:3f:d1:72:54:b5:21:b3:51: b4:51:db:37:85:65:00:1c:a3:4a:3d:c4:3c:0c:a0:b6:7f:77: 52:72:80:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDtTYXzX+sWL9DQnTVYaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjQ5MTIyZDllOWJiYWZhNTc3ZjY0NDdmMjFiOGJlYzc2 YzA1ZjAwHhcNMjYwMjA5MTEwMTI1WhcNMjYwMjEwMTEwMTI1WjAzMTEwLwYDVQQD EygxNTYwYjgzOTVhMzA3NjJlMGVhY2Y2YTE1OTliYzc5Y2QyNjYzYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y4GMkvWCcbuk6ZceQhU/RDN4HcJ AZ5PHYFOl5cj46Ysl5qwrnrNXJnBgJqzsfg4WSK1O0/IdBx5iTMwojnysNEJ7RYG Bfh1Zxhkc4N0kikJgylo37Okrf587XCQmmITBMmLEEYanR/PWE6qoQSLKWZz4zxx Y7hJOw4YUPqxt0qcOgLqkgoaPq3IXtYHh1O/a47JVTIRLX6W4swwQaLthKu9/ZH0 pbR5DewxSHfWA9a+mJrTXgcafD2MCRDPYOBpod01C3IcPb9HxG3icRQ3x5ERaGko itr7+F9q+Q7iNMJ+1RPGv5ABHlexymnWs0qrU4M6mqHxjm/DcOmTgZhYgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBVguDlaMHYuDqz2oVmbx5zSZjqBMB8GA1UdIwQY MBaAFA20kSLZ6buvpXf2RH8huL7HbAXwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2Et MTQ2MDBkNTc4MDhhLzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC81ZGU3ZmItOTQ4OC00ZTg0LTgzY2EtMTQ2MDBkNTc4MDhh LzEvRGJTUkl0bnB1Ni1sZF9aRWZ5RzR2c2RzQmZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQI04zfv MHGXPfyrA0UL/NeSs6za13T5QWRTWKsdLJJPGZXHA/jKG48qAKxu2nPVdIYKFqFJ jXHI0bE2L5rNddWX72NE6GNmbFCuvulgp91fgJtcvaTtUa80+S2g6xBfZxEm1ahQ vx/zqDveU5GFjuR/l/stEvA9DoVuTtmGNGVbcfGzEXwfWqRB3ex5gE7f9bj63WKN UZaw5oMvi5IRiRBXW1UQfzELZ8Y1yEM+cPGNhUT/3TkkM5DzyiYMKcNgyMWMbbyv hCc9aGpAO0VekVu3fl61cvT+SudViqZ2CZ05CT/RclS1IbNRtFHbN4VlAByjSj3E PAygtn93UnKAOw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:29 2026 by rpki-client