This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft File: duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft (raw, json) Hash identifier: 1C5VMvwceW4709T3SgknaXqPWuAHllUAikXdGML6yNg= Subject key identifier: ED:68:AA:CB:A7:1B:69:C1:4B:4E:E4:F7:E1:8D:21:25:D2:A8:42:6B Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6 Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6 Certificate serial: 019C427D291AF66EE0334EFD77D50111C7C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 13:00:24 +0000 Manifest this update: Mon 09 Feb 2026 13:00:24 +0000 Manifest next update: Tue 10 Feb 2026 13:00:24 +0000 Files and hashes: 1: HuM-fqgyJipWVuJxhHWn42tWfGs.roa (hash: U6kHpEw2y7t9pxRNfk/+X/Y6S7JlFdwGGwL7w7s/5Yo=) 2: duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl (hash: PiSdOEujZzEPm5i3aaYxnMHsMudVsv8vz+RfQ3EmIa8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:29:1a:f6:6e:e0:33:4e:fd:77:d5:01:11:c7:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6 Validity Not Before: Feb 9 13:00:24 2026 GMT Not After : Feb 10 13:00:24 2026 GMT Subject: CN=ed68aacba71b69c14b4ee4f7e18d2125d2a8426b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:34:76:ed:0f:b3:09:22:ba:e2:2e:de:0d:8f: 55:6b:b1:c4:9a:3f:c1:8c:2a:b5:35:25:0a:b1:3a: 55:40:69:06:fa:ce:49:c3:97:a4:06:85:6d:8c:7e: cb:d0:a5:7e:4b:a0:5a:e5:6a:79:31:21:be:68:d9: 21:0a:81:9f:b0:ca:ff:79:a9:c8:4e:5b:26:d4:4a: 17:4d:85:e9:8e:1a:a4:cb:c8:aa:cd:5b:6c:61:31: 73:58:39:47:2f:3f:c6:f7:c5:43:23:16:92:d1:62: c8:d4:5f:c4:cf:ed:8e:17:ca:fb:d9:ab:de:0d:6d: fb:8b:19:cb:13:dc:d3:ea:24:4d:3c:b0:20:f0:d0: 23:20:b8:43:c3:de:6b:b0:b2:12:9d:9f:0f:57:83: 28:e2:09:6e:59:34:1b:af:a1:26:ac:8c:19:43:ec: c3:05:b5:df:62:af:10:e6:df:a2:9d:ac:03:d7:fd: 7a:b0:35:4a:10:ca:b9:02:f8:a6:76:a9:9d:58:6d: 79:90:aa:22:db:08:d7:33:da:28:23:86:ca:2d:69: e6:47:3c:58:75:f3:6a:e1:cb:d9:dd:2b:af:cb:83: e6:78:03:14:74:e8:16:91:93:8b:8d:e3:2e:11:cd: 5f:3b:5f:ea:b3:6b:d9:0d:59:9e:0e:0b:f4:41:59: 7b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:68:AA:CB:A7:1B:69:C1:4B:4E:E4:F7:E1:8D:21:25:D2:A8:42:6B X509v3 Authority Key Identifier: keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:2c:52:1d:6b:e6:d3:6e:a8:df:d8:b8:69:f2:0d:e1:d5:5a: 9f:d0:e2:e1:c1:b8:2a:35:11:bb:81:79:11:08:39:ba:13:7e: 30:b7:de:64:df:b1:76:7e:6b:be:9b:16:02:f2:e9:af:13:37: 9d:cc:b1:f7:7e:43:ed:e8:b5:36:65:bc:ce:aa:70:44:00:65: 54:20:cf:08:f5:e5:ac:5d:8b:d2:bb:a3:c0:0a:d9:1e:b9:78: e2:8b:6a:0c:67:4f:0f:1e:6f:d2:a7:aa:71:46:ef:e9:7d:55: 21:8c:82:9a:d3:8d:d1:1a:6a:1f:91:c3:0f:71:62:4a:ff:5a: 14:2b:2d:f9:2d:ba:3b:c9:4e:72:e3:75:c9:c9:b6:ab:cc:20: 83:e9:dc:b3:55:de:25:cd:97:fb:6a:92:6b:e2:62:44:d3:90: 20:20:b3:30:de:c1:7b:be:9c:e6:14:7e:e9:30:55:5a:61:ca: 86:5c:69:c4:b6:95:af:3b:8a:fe:f9:56:ee:7d:5e:1d:bc:05: 31:db:9a:18:27:16:83:a7:f8:2b:db:2f:fe:33:82:74:fa:ca: 20:b2:64:e1:6d:98:de:38:c6:18:cf:93:c1:81:d3:4a:c1:3a: ea:9b:68:a7:b8:f7:f7:fe:a7:e7:4e:01:21:ec:46:cb:4b:45: f2:27:f1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSka9m7gM079d9UBEcfEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2ZTJhZTRmZTBjMGQ2Y2IwNzQ5Yjg3N2FlMTU1YTYyOWZl MmFmZDYwHhcNMjYwMjA5MTMwMDI0WhcNMjYwMjEwMTMwMDI0WjAzMTEwLwYDVQQD EyhlZDY4YWFjYmE3MWI2OWMxNGI0ZWU0ZjdlMThkMjEyNWQyYTg0MjZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jR27Q+zCSK64i7eDY9Va7HEmj/B jCq1NSUKsTpVQGkG+s5Jw5ekBoVtjH7L0KV+S6Ba5Wp5MSG+aNkhCoGfsMr/eanI Tlsm1EoXTYXpjhqky8iqzVtsYTFzWDlHLz/G98VDIxaS0WLI1F/Ez+2OF8r72ave DW37ixnLE9zT6iRNPLAg8NAjILhDw95rsLISnZ8PV4Mo4gluWTQbr6EmrIwZQ+zD BbXfYq8Q5t+inawD1/16sDVKEMq5AvimdqmdWG15kKoi2wjXM9ooI4bKLWnmRzxY dfNq4cvZ3Suvy4PmeAMUdOgWkZOLjeMuEc1fO1/qs2vZDVmeDgv0QVl7eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO1oqsunG2nBS07k9+GNISXSqEJrMB8GA1UdIwQY MBaAFHbirk/gwNbLB0m4d64VWmKf4q/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHVLdVQtREExc3NIU2JoM3JoVmFZcF9pcjlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC85YTUyZmQtMDM2NC00MTUwLWFhY2Et NDE2MDJmZGM5ZmRlLzEvZHVLdVQtREExc3NIU2JoM3JoVmFZcF9pcjlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC85YTUyZmQtMDM2NC00MTUwLWFhY2EtNDE2MDJmZGM5ZmRl LzEvZHVLdVQtREExc3NIU2JoM3JoVmFZcF9pcjlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkixSHWvm 026o39i4afIN4dVan9Di4cG4KjURu4F5EQg5uhN+MLfeZN+xdn5rvpsWAvLprxM3 ncyx935D7ei1NmW8zqpwRABlVCDPCPXlrF2L0rujwArZHrl44otqDGdPDx5v0qeq cUbv6X1VIYyCmtON0RpqH5HDD3FiSv9aFCst+S26O8lOcuN1ycm2q8wgg+ncs1Xe Jc2X+2qSa+JiRNOQICCzMN7Be76c5hR+6TBVWmHKhlxpxLaVrzuK/vlW7n1eHbwF MduaGCcWg6f4K9sv/jOCdPrKILJk4W2Y3jjGGM+TwYHTSsE66ptop7j39/6n504B IexGy0tF8ifxuw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:06 2026 by rpki-client