This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft File: DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft (raw, json) Hash identifier: RQDG4qOpt81M/xiQPfDftlEUlNGDYFKJFNKpYoHAVVQ= Subject key identifier: D8:5D:F0:EC:B1:E6:6B:DA:CE:B8:41:AF:41:15:CE:28:F2:6A:45:AB Authority key identifier: 0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF Certificate issuer: /CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Certificate serial: 019C421008EE44101E382385AD821D275FD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft Manifest number: 1600 Signing time: Mon 09 Feb 2026 11:01:12 +0000 Manifest this update: Mon 09 Feb 2026 11:01:12 +0000 Manifest next update: Tue 10 Feb 2026 11:01:12 +0000 Files and hashes: 1: 7yB2yDJ-HgimpHgTLA1aufvYXvA.roa (hash: We/Y2EIgK33DNG81UZmPRyHMQRU13Wzwkuo+kvc15gs=) 2: DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl (hash: KS7EHfnvmEGCaBDkoAkkPIOQ5IeUKAwwEk8J04c6tdY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:08:ee:44:10:1e:38:23:85:ad:82:1d:27:5f:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ea3c9c4497c1fa485e9dd1758af9f000e2bd4bf Validity Not Before: Feb 9 11:01:12 2026 GMT Not After : Feb 10 11:01:12 2026 GMT Subject: CN=d85df0ecb1e66bdaceb841af4115ce28f26a45ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:95:4d:18:77:53:47:e6:be:fb:b2:11:8e:b9: 42:90:df:a2:db:26:6d:53:35:06:3e:ab:28:59:20: f2:5d:b5:2f:4c:af:1b:74:97:50:be:76:e5:b7:9a: 82:87:c4:46:4f:b0:56:4e:76:fa:01:4e:d8:f5:47: 75:c2:c9:4a:d6:c5:6a:3f:df:77:05:83:e2:fd:24: 26:14:7c:e4:3a:ca:65:d4:ad:e7:a0:73:86:41:49: 87:de:28:e4:9a:4b:20:46:e4:d2:b7:c0:39:d5:26: 2a:41:4c:d1:c4:dc:f6:0c:40:68:14:34:d1:8c:68: 05:e8:35:6b:cd:31:f1:6a:8f:8d:09:a5:a7:3b:dd: a8:2d:59:35:a0:7d:42:35:f8:b6:53:3c:06:50:5d: 7d:1b:5b:13:15:20:c6:fa:74:33:b5:78:63:00:ce: 6a:fe:63:c3:26:23:9c:bd:f6:04:ec:49:08:2c:12: 7e:ef:c1:0d:20:e0:3f:31:6d:3b:a0:4d:9d:73:3e: f1:4c:9e:cd:f7:77:b2:f8:87:24:c7:98:af:4f:34: 04:cc:d9:2f:a0:11:2b:83:bc:eb:7d:95:20:eb:7a: 2a:d7:e4:d6:17:7f:ae:ae:be:2a:aa:a1:2a:78:6c: da:1b:03:db:f9:64:c2:e4:6f:d9:ee:b6:b0:bf:04: a0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:5D:F0:EC:B1:E6:6B:DA:CE:B8:41:AF:41:15:CE:28:F2:6A:45:AB X509v3 Authority Key Identifier: keyid:0E:A3:C9:C4:49:7C:1F:A4:85:E9:DD:17:58:AF:9F:00:0E:2B:D4:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DqPJxEl8H6SF6d0XWK-fAA4r1L8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/aad27b-69ba-49ed-bb7e-a990f9064a57/1/DqPJxEl8H6SF6d0XWK-fAA4r1L8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:81:c5:8f:0d:00:0e:c9:78:7d:13:41:ca:c6:bc:76:e9:58: 3f:ec:6b:4c:96:29:73:f7:f4:a8:97:95:21:01:c9:03:e1:e2: e7:8d:ba:5b:d4:74:c1:59:c0:c1:5c:69:bf:38:c5:46:d6:bb: a5:ab:30:8e:0d:06:a9:56:36:f4:e9:d6:00:12:04:a4:0b:3b: 0c:35:09:8c:4e:80:1d:68:2c:07:50:60:f2:fb:62:b7:81:93: 6c:fd:de:57:fb:02:3b:c0:23:33:62:4d:25:fc:4a:f5:a9:40: b9:81:46:de:59:36:af:c9:70:5e:fd:3e:da:f3:5b:00:80:8b: 9e:46:d9:4f:8b:b1:78:30:46:11:1f:d1:4a:84:a9:f2:78:01: 2b:01:db:f9:54:18:2d:6e:47:17:44:fd:4b:f9:f5:1e:51:6b: 1e:a3:84:6a:07:fd:57:35:29:b3:91:b7:20:67:09:d4:38:50: 5d:85:0a:07:17:51:8d:9a:c5:19:b5:f3:ba:c8:83:34:f4:81: 9f:cc:6f:d4:28:64:b8:f4:7a:8b:52:a3:51:50:63:92:20:d2: ec:ba:17:de:95:c6:4e:0f:c7:22:a0:fd:8d:26:8c:38:bb:26: 11:47:b4:cd:b2:eb:61:9f:cb:39:9d:5f:7c:93:2e:6a:83:c2: 0a:fd:e0:eb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAjuRBAeOCOFrYIdJ1/SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlYTNjOWM0NDk3YzFmYTQ4NWU5ZGQxNzU4YWY5ZjAwMGUy YmQ0YmYwHhcNMjYwMjA5MTEwMTEyWhcNMjYwMjEwMTEwMTEyWjAzMTEwLwYDVQQD EyhkODVkZjBlY2IxZTY2YmRhY2ViODQxYWY0MTE1Y2UyOGYyNmE0NWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJVNGHdTR+a++7IRjrlCkN+i2yZt UzUGPqsoWSDyXbUvTK8bdJdQvnblt5qCh8RGT7BWTnb6AU7Y9Ud1wslK1sVqP993 BYPi/SQmFHzkOspl1K3noHOGQUmH3ijkmksgRuTSt8A51SYqQUzRxNz2DEBoFDTR jGgF6DVrzTHxao+NCaWnO92oLVk1oH1CNfi2UzwGUF19G1sTFSDG+nQztXhjAM5q /mPDJiOcvfYE7EkILBJ+78ENIOA/MW07oE2dcz7xTJ7N93ey+Ickx5ivTzQEzNkv oBErg7zrfZUg63oq1+TWF3+urr4qqqEqeGzaGwPb+WTC5G/Z7rawvwSgTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNhd8Oyx5mvazrhBr0EVzijyakWrMB8GA1UdIwQY MBaAFA6jycRJfB+khendF1ivnwAOK9S/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2Ut YTk5MGY5MDY0YTU3LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMS9hYWQyN2ItNjliYS00OWVkLWJiN2UtYTk5MGY5MDY0YTU3 LzEvRHFQSnhFbDhINlNGNmQwWFdLLWZBQTRyMUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoHFjw0A Dsl4fRNBysa8dulYP+xrTJYpc/f0qJeVIQHJA+Hi5426W9R0wVnAwVxpvzjFRta7 paswjg0GqVY29OnWABIEpAs7DDUJjE6AHWgsB1Bg8vtit4GTbP3eV/sCO8AjM2JN JfxK9alAuYFG3lk2r8lwXv0+2vNbAICLnkbZT4uxeDBGER/RSoSp8ngBKwHb+VQY LW5HF0T9S/n1HlFrHqOEagf9VzUps5G3IGcJ1DhQXYUKBxdRjZrFGbXzusiDNPSB n8xv1ChkuPR6i1KjUVBjkiDS7LoX3pXGTg/HIqD9jSaMOLsmEUe0zbLrYZ/LOZ1f fJMuaoPCCv3g6w== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:38 2026 by rpki-client