This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft File: DPSuqBZureCsfGkRvcnmnHB1TBQ.mft (raw, json) Hash identifier: e64766tZ+A3nu1dM9PJmLTdbDu1gG6/0AibXAzJ7m70= Subject key identifier: E0:EA:54:B5:9C:9F:3B:42:92:85:82:FB:99:15:7D:72:EF:2E:2C:70 Authority key identifier: 0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14 Certificate issuer: /CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14 Certificate serial: 019C427D0BE39C68557BF2C73FABBD59C8EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 13:00:17 +0000 Manifest this update: Mon 09 Feb 2026 13:00:17 +0000 Manifest next update: Tue 10 Feb 2026 13:00:17 +0000 Files and hashes: 1: DPSuqBZureCsfGkRvcnmnHB1TBQ.crl (hash: PI6ARqlDDzo1JpCMTRgz1MWp+mMVCrQJgYYEwAtS25U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0b:e3:9c:68:55:7b:f2:c7:3f:ab:bd:59:c8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf4aea8166eade0ac7c6911bdc9e69c70754c14 Validity Not Before: Feb 9 13:00:17 2026 GMT Not After : Feb 10 13:00:17 2026 GMT Subject: CN=e0ea54b59c9f3b42928582fb99157d72ef2e2c70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:66:70:8d:a5:59:de:6c:52:b6:8b:27:6d:3c: 2f:3d:63:7f:c5:4d:40:ab:0b:d5:76:94:47:e9:d5: 1d:99:cb:5e:ff:3d:06:f4:e0:dd:bb:77:99:b6:ef: fb:1b:f7:59:c5:8b:92:5b:1f:a3:c6:7c:30:1f:d6: 91:bd:95:06:6c:6a:31:55:14:2e:d4:0a:25:58:bb: 2a:fa:75:04:e3:c3:c3:e1:fb:36:7a:c9:4a:c5:df: b5:16:bd:bd:07:2b:21:d8:65:1f:63:95:f4:06:4c: 2f:7b:36:e9:40:20:18:f3:05:35:f4:20:c8:c4:d2: b3:8d:0b:60:17:97:3d:09:96:25:a2:eb:b1:4f:81: 7e:ac:a8:87:44:42:bf:aa:24:49:52:a9:bf:63:5d: 10:8e:b9:dd:ce:65:e1:a0:2d:12:51:df:12:ee:88: 1c:2e:f6:3a:60:70:8d:33:27:cf:16:5f:7b:90:62: b7:8f:10:88:dc:35:5a:10:3d:66:f4:f3:7a:c0:ab: c3:9e:a0:7a:6d:c0:27:00:86:7b:8a:24:ea:a9:59: ce:ab:94:4c:18:7d:7f:2f:40:7f:3a:40:91:27:d0: 6e:0f:74:73:6c:11:0a:31:e9:9a:ba:db:31:80:d7: 05:78:00:99:1b:e3:28:40:05:ed:c9:aa:8a:ba:7f: c7:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:EA:54:B5:9C:9F:3B:42:92:85:82:FB:99:15:7D:72:EF:2E:2C:70 X509v3 Authority Key Identifier: keyid:0C:F4:AE:A8:16:6E:AD:E0:AC:7C:69:11:BD:C9:E6:9C:70:75:4C:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DPSuqBZureCsfGkRvcnmnHB1TBQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8adf19-0869-46fb-92b3-f0d7b2774d3e/1/DPSuqBZureCsfGkRvcnmnHB1TBQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1f:fd:0c:49:6b:c9:5b:61:8c:05:c5:a7:ff:74:09:38:e2: ce:02:cb:9d:f7:1e:65:14:90:d4:9c:7a:55:4f:61:7e:51:bd: 0c:dc:38:d8:7f:46:0e:88:ef:81:57:db:49:4e:3a:40:c1:2e: 13:0d:c1:31:c3:0b:8b:6a:69:37:db:2c:2a:fe:16:3a:52:df: b6:19:e7:c0:ce:7b:be:6a:0b:b7:cf:8e:f1:28:01:6b:08:e2: 22:c1:b9:70:f6:e0:be:3d:a8:d3:17:15:a5:8d:fa:a7:4e:c5: a7:ff:cb:c7:f0:0f:dc:23:da:e4:02:a1:fb:09:c0:2c:94:e5: f9:8c:ea:9e:1c:ee:b4:2c:57:8b:37:f1:47:9e:1d:e9:99:7e: 7e:ba:df:91:e3:81:96:f4:15:0b:fd:d9:f6:11:7c:be:c3:ab: f9:56:f4:94:49:21:1c:e9:ed:72:e5:6a:9e:37:e3:cf:c9:0c: 86:2a:66:b1:32:b2:ef:2f:e4:2d:15:54:0f:5f:a7:a6:d6:4e: 96:5c:a6:83:90:93:bb:74:14:dc:52:32:e1:bf:b2:8b:40:32: aa:2e:8c:d5:e6:d3:d1:5a:6c:41:43:3b:12:10:66:c9:a1:73: 8c:10:92:fd:db:d4:a0:d2:f6:40:c5:20:0f:6e:bf:a2:a4:f0: 65:54:c7:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQvjnGhVe/LHP6u9WcjqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZjRhZWE4MTY2ZWFkZTBhYzdjNjkxMWJkYzllNjljNzA3 NTRjMTQwHhcNMjYwMjA5MTMwMDE3WhcNMjYwMjEwMTMwMDE3WjAzMTEwLwYDVQQD EyhlMGVhNTRiNTljOWYzYjQyOTI4NTgyZmI5OTE1N2Q3MmVmMmUyYzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02ZwjaVZ3mxStosnbTwvPWN/xU1A qwvVdpRH6dUdmcte/z0G9ODdu3eZtu/7G/dZxYuSWx+jxnwwH9aRvZUGbGoxVRQu 1AolWLsq+nUE48PD4fs2eslKxd+1Fr29Bysh2GUfY5X0BkwvezbpQCAY8wU19CDI xNKzjQtgF5c9CZYlouuxT4F+rKiHREK/qiRJUqm/Y10QjrndzmXhoC0SUd8S7ogc LvY6YHCNMyfPFl97kGK3jxCI3DVaED1m9PN6wKvDnqB6bcAnAIZ7iiTqqVnOq5RM GH1/L0B/OkCRJ9BuD3RzbBEKMemautsxgNcFeACZG+MoQAXtyaqKun/HowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFODqVLWcnztCkoWC+5kVfXLvLixwMB8GA1UdIwQY MBaAFAz0rqgWbq3grHxpEb3J5pxwdUwUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84YWRmMTktMDg2OS00NmZiLTkyYjMt ZjBkN2IyNzc0ZDNlLzEvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy84YWRmMTktMDg2OS00NmZiLTkyYjMtZjBkN2IyNzc0ZDNl LzEvRFBTdXFCWnVyZUNzZkdrUnZjbm1uSEIxVEJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMB/9DElr yVthjAXFp/90CTjizgLLnfceZRSQ1Jx6VU9hflG9DNw42H9GDojvgVfbSU46QMEu Ew3BMcMLi2ppN9ssKv4WOlLfthnnwM57vmoLt8+O8SgBawjiIsG5cPbgvj2o0xcV pY36p07Fp//Lx/AP3CPa5AKh+wnALJTl+YzqnhzutCxXizfxR54d6Zl+frrfkeOB lvQVC/3Z9hF8vsOr+Vb0lEkhHOntcuVqnjfjz8kMhipmsTKy7y/kLRVUD1+nptZO llymg5CTu3QU3FIy4b+yi0Ayqi6M1ebT0VpsQUM7EhBmyaFzjBCS/dvUoNL2QMUg D26/oqTwZVTHlA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:57:12 2026 by rpki-client