This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json) Hash identifier: WcYIDpWuFt7W0e3fKn/Jdz5uOvF6huQFudcAvOR0JGg= Subject key identifier: 5E:9B:2E:51:2A:D0:9F:D9:6E:8D:6C:C7:63:27:96:6D:5E:D9:D4:E8 Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d Certificate serial: 019C4390D150AF5C714004B01D820F8BA0F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft Manifest number: 120A Signing time: Mon 09 Feb 2026 18:01:29 +0000 Manifest this update: Mon 09 Feb 2026 18:01:29 +0000 Manifest next update: Tue 10 Feb 2026 18:01:29 +0000 Files and hashes: 1: LA-wi6A11ya7LBdprms18TeIogg.roa (hash: mGJUSbaGKL8VGDPcuUd8EHQTcLMU3S2Uwe+tVWxibH8=) 2: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: z4vaDop+0kv96FwbCRcVBap3+rqA4txVcUTnUM4B3Z4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:d1:50:af:5c:71:40:04:b0:1d:82:0f:8b:a0:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d Validity Not Before: Feb 9 18:01:29 2026 GMT Not After : Feb 10 18:01:29 2026 GMT Subject: CN=5e9b2e512ad09fd96e8d6cc76327966d5ed9d4e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6d:38:ad:73:91:26:78:67:54:3f:61:43:eb: ab:79:83:b3:ae:24:11:c1:05:b4:81:12:8c:12:e3: 79:a6:4b:63:e0:9f:21:31:e3:37:d3:33:1a:61:cd: 93:c0:18:63:a0:d5:dc:eb:01:46:3c:79:4e:d1:0f: 5c:2a:ad:69:3a:02:f9:19:9b:46:e9:e7:cb:16:98: a7:ce:7e:71:48:89:80:d5:ef:2b:13:6f:90:02:c4: bc:45:0a:67:1f:1c:f0:73:6d:33:9f:f9:8f:36:03: 3f:54:d9:0e:d3:68:f2:b5:71:a6:7d:c1:6c:3f:3d: 86:a7:a4:60:db:ab:0a:66:78:3f:86:84:fa:6a:3b: 1c:73:2f:f5:90:f1:ff:b5:48:c6:54:67:69:21:ba: ab:06:74:e3:45:63:fc:10:76:6a:0a:9b:d2:aa:ba: 94:8b:2a:08:26:d5:47:b2:46:ae:44:b7:3f:5a:26: f3:3c:72:f3:70:48:ab:b8:73:6a:6a:79:5f:77:18: 90:a3:2e:c9:77:53:6f:40:74:7d:32:64:41:45:e2: 05:73:73:d5:d7:d1:8a:8d:eb:8a:89:d1:0e:c0:83: f8:fc:75:00:52:cd:20:a4:f5:62:a1:10:79:ad:a8: cb:48:c9:31:6f:46:29:56:ef:37:f0:22:4c:95:6b: 19:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9B:2E:51:2A:D0:9F:D9:6E:8D:6C:C7:63:27:96:6D:5E:D9:D4:E8 X509v3 Authority Key Identifier: keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:c5:9b:56:3d:02:7c:4a:7a:ed:04:2a:83:6a:ec:d1:6d:4f: 46:ac:7d:58:c4:c9:5b:5e:56:2e:56:be:ee:5b:26:4c:ba:4b: ec:35:b8:35:19:cc:89:e7:d9:9d:81:e8:9f:05:72:ef:45:9f: 9c:47:77:66:0f:df:16:67:6e:2c:43:fe:37:ed:c0:46:3f:d4: 88:86:4d:3f:44:cb:64:f8:6a:02:14:ab:6c:f0:7a:2a:80:b2: 4e:b4:f1:1b:97:e3:76:c1:26:64:31:37:7a:dc:1d:f5:26:78: c7:c0:b8:fe:34:23:be:f5:e5:f5:8d:70:72:bd:21:25:51:ed: 74:67:c7:11:5e:87:ec:72:26:a5:b0:fa:48:25:82:44:84:aa: a0:00:41:d1:10:14:14:e5:80:21:ca:97:88:43:1c:b8:be:dc: 74:c0:74:80:03:54:b2:d9:bd:02:e5:61:23:f7:87:f8:db:89: fb:b3:e6:c7:61:eb:b1:53:87:68:31:07:f2:f7:cf:8b:b5:69: 53:cb:fa:a5:2f:25:a6:e9:33:41:47:5a:19:87:dc:15:61:f2: fb:e7:3e:e6:fe:13:b9:8d:c8:f9:a5:97:54:0a:65:03:f9:2c: 31:ac:e9:59:87:30:90:53:0b:dd:50:26:a5:7d:4e:21:68:16: 98:e0:58:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkNFQr1xxQASwHYIPi6D3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM3ZTBjYjU4YWUyM2Q0NzNhZTEzYTczNDFiN2E3M2JkZDEw MjhhMGQwHhcNMjYwMjA5MTgwMTI5WhcNMjYwMjEwMTgwMTI5WjAzMTEwLwYDVQQD Eyg1ZTliMmU1MTJhZDA5ZmQ5NmU4ZDZjYzc2MzI3OTY2ZDVlZDlkNGU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW04rXORJnhnVD9hQ+ureYOzriQR wQW0gRKMEuN5pktj4J8hMeM30zMaYc2TwBhjoNXc6wFGPHlO0Q9cKq1pOgL5GZtG 6efLFpinzn5xSImA1e8rE2+QAsS8RQpnHxzwc20zn/mPNgM/VNkO02jytXGmfcFs Pz2Gp6Rg26sKZng/hoT6ajsccy/1kPH/tUjGVGdpIbqrBnTjRWP8EHZqCpvSqrqU iyoIJtVHskauRLc/WibzPHLzcEiruHNqanlfdxiQoy7Jd1NvQHR9MmRBReIFc3PV 19GKjeuKidEOwIP4/HUAUs0gpPVioRB5rajLSMkxb0YpVu838CJMlWsZgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF6bLlEq0J/Zbo1sx2Mnlm1e2dToMB8GA1UdIwQY MBaAFDfgy1iuI9RzrhOnNBt6c73RAooNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUt Mzg2OTEwZGNiOTAzLzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUtMzg2OTEwZGNiOTAz LzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAScWbVj0C fEp67QQqg2rs0W1PRqx9WMTJW15WLla+7lsmTLpL7DW4NRnMiefZnYHonwVy70Wf nEd3Zg/fFmduLEP+N+3ARj/UiIZNP0TLZPhqAhSrbPB6KoCyTrTxG5fjdsEmZDE3 etwd9SZ4x8C4/jQjvvXl9Y1wcr0hJVHtdGfHEV6H7HImpbD6SCWCRISqoABB0RAU FOWAIcqXiEMcuL7cdMB0gANUstm9AuVhI/eH+NuJ+7Pmx2HrsVOHaDEH8vfPi7Vp U8v6pS8lpukzQUdaGYfcFWHy++c+5v4TuY3I+aWXVAplA/ksMazpWYcwkFML3VAm pX1OIWgWmOBY4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:21 2026 by rpki-client