This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft File: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft (raw, json) Hash identifier: 9jBIkM5hWQWaVobjk/NQdirPcM6oD+s/H+XRWoWAoPA= Subject key identifier: 7E:24:AA:55:37:B7:F4:67:AE:F3:8B:00:9F:80:F1:70:3B:D2:CB:BC Authority key identifier: 0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89 Certificate issuer: /CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189 Certificate serial: 019C42B46A87E106E0D3BDB8C67DB185D8D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft Manifest number: 067C Signing time: Mon 09 Feb 2026 14:00:45 +0000 Manifest this update: Mon 09 Feb 2026 14:00:45 +0000 Manifest next update: Tue 10 Feb 2026 14:00:45 +0000 Files and hashes: 1: Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl (hash: BSB0SnNHKe2mWY7MCOq9BOAPgjH6ngNzT+068WTOliA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:6a:87:e1:06:e0:d3:bd:b8:c6:7d:b1:85:d8:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e87e5d33a9b28be7f1af8bc9c138b158090f189 Validity Not Before: Feb 9 14:00:45 2026 GMT Not After : Feb 10 14:00:45 2026 GMT Subject: CN=7e24aa5537b7f467aef38b009f80f1703bd2cbbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:e0:12:7f:0f:9e:48:09:0c:5a:d0:29:c8: 86:84:52:ce:d0:ae:41:b7:3d:76:fc:a0:a5:49:03: a6:b2:5a:34:e7:7a:e2:1e:c6:bc:cb:52:fd:f9:77: b5:8b:bc:3f:39:9e:2a:c9:ec:0b:74:dd:8b:75:2e: c7:2e:31:a2:7c:fa:d0:30:e1:0a:f3:41:31:b8:04: 3f:30:45:3d:73:bd:36:54:00:a7:9a:3b:99:24:5c: 2c:3b:da:0c:11:ba:6f:d3:41:8f:79:57:33:a3:7b: f4:11:2f:ff:68:a1:98:68:08:a0:fe:5c:4a:dd:5b: d5:19:60:ed:0e:2c:e4:08:b0:72:12:d2:aa:e8:7c: e4:7e:67:2a:87:e7:f1:08:0c:74:23:e6:8a:9d:7d: e3:f8:30:93:98:17:c0:b4:03:7b:25:d4:88:2d:6b: 4b:c5:5a:6c:db:95:54:a5:51:d0:00:4d:c6:a4:6d: 2b:9d:25:be:ea:c9:92:ff:b9:8f:22:68:db:ab:76: f3:57:96:1b:e5:65:0e:0b:d4:1c:1c:f3:7b:bd:c2: 9a:3a:bb:be:be:b5:58:63:9c:f1:2c:12:a1:c1:5f: 09:b9:1d:d8:be:70:d3:a6:5e:50:8e:a3:1f:eb:97: 91:d8:8a:8b:1f:38:8e:25:8d:46:ea:31:39:62:eb: 6b:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:24:AA:55:37:B7:F4:67:AE:F3:8B:00:9F:80:F1:70:3B:D2:CB:BC X509v3 Authority Key Identifier: keyid:0E:87:E5:D3:3A:9B:28:BE:7F:1A:F8:BC:9C:13:8B:15:80:90:F1:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/e0a25c-d527-4c75-a1bb-3ef640f937c4/1/Dofl0zqbKL5_Gvi8nBOLFYCQ8Yk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:97:b4:f3:32:2e:e8:cd:73:90:40:00:ce:e8:22:bd:ec:a0: e0:ec:1c:d7:81:85:9a:94:82:16:85:4f:16:d5:fa:4e:4e:06: 39:ee:69:18:34:be:6f:e9:65:1d:31:87:0b:df:0c:fe:96:67: 07:2e:ec:4a:7b:b7:78:96:81:d0:15:cd:11:55:a7:02:57:d1: 3c:2e:af:57:2b:a5:42:18:d5:db:b3:c6:47:9c:5d:00:a0:2b: b7:3a:2f:63:0f:e1:6c:e2:43:5d:37:fc:1f:12:77:16:76:c9: 43:b9:95:de:20:68:ce:5d:4a:f3:58:34:cd:4b:9a:f9:1e:68: 5b:75:65:84:e8:3a:9b:76:9a:57:75:e5:d2:53:00:05:ea:00: a1:0c:bc:a9:12:75:f5:be:23:e8:8b:f7:b3:97:b7:35:17:4f: f5:38:08:f1:83:fe:02:f2:ea:97:25:5f:9f:08:5c:c5:74:3d: 7b:5e:ae:33:11:c2:4d:34:6b:9f:11:f4:fa:07:5a:8a:51:3e: bb:2d:86:1c:43:7a:f8:8c:c9:fa:e9:9b:fa:5f:2d:3a:85:8e: ec:12:b2:03:34:ae:7d:8a:38:69:80:91:1e:55:7b:99:78:4c: 49:d2:58:ac:01:69:1a:71:46:c4:26:60:f3:21:f5:36:ac:7b: 18:db:0b:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGqH4Qbg0724xn2xhdjWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlODdlNWQzM2E5YjI4YmU3ZjFhZjhiYzljMTM4YjE1ODA5 MGYxODkwHhcNMjYwMjA5MTQwMDQ1WhcNMjYwMjEwMTQwMDQ1WjAzMTEwLwYDVQQD Eyg3ZTI0YWE1NTM3YjdmNDY3YWVmMzhiMDA5ZjgwZjE3MDNiZDJjYmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM7gEn8PnkgJDFrQKciGhFLO0K5B tz12/KClSQOmslo053riHsa8y1L9+Xe1i7w/OZ4qyewLdN2LdS7HLjGifPrQMOEK 80ExuAQ/MEU9c702VACnmjuZJFwsO9oMEbpv00GPeVczo3v0ES//aKGYaAig/lxK 3VvVGWDtDizkCLByEtKq6Hzkfmcqh+fxCAx0I+aKnX3j+DCTmBfAtAN7JdSILWtL xVps25VUpVHQAE3GpG0rnSW+6smS/7mPImjbq3bzV5Yb5WUOC9QcHPN7vcKaOru+ vrVYY5zxLBKhwV8JuR3YvnDTpl5QjqMf65eR2IqLHziOJY1G6jE5Yutr9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4kqlU3t/RnrvOLAJ+A8XA70su8MB8GA1UdIwQY MBaAFA6H5dM6myi+fxr4vJwTixWAkPGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmIt M2VmNjQwZjkzN2M0LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9lMGEyNWMtZDUyNy00Yzc1LWExYmItM2VmNjQwZjkzN2M0 LzEvRG9mbDB6cWJLTDVfR3ZpOG5CT0xGWUNROFlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5e08zIu 6M1zkEAAzugiveyg4Owc14GFmpSCFoVPFtX6Tk4GOe5pGDS+b+llHTGHC98M/pZn By7sSnu3eJaB0BXNEVWnAlfRPC6vVyulQhjV27PGR5xdAKArtzovYw/hbOJDXTf8 HxJ3FnbJQ7mV3iBozl1K81g0zUua+R5oW3VlhOg6m3aaV3Xl0lMABeoAoQy8qRJ1 9b4j6Iv3s5e3NRdP9TgI8YP+AvLqlyVfnwhcxXQ9e16uMxHCTTRrnxH0+gdailE+ uy2GHEN6+IzJ+umb+l8tOoWO7BKyAzSufYo4aYCRHlV7mXhMSdJYrAFpGnFGxCZg 8yH1Nqx7GNsLrA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:15 2026 by rpki-client