This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft File: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft (raw, json) Hash identifier: 0QGmHYbIA6mMvpRid6fEYsC/3sjSlUTGzJoUfKTEdUI= Subject key identifier: 8C:5E:C9:43:FB:8D:CD:5D:6B:60:85:47:F6:F2:9F:1B:0E:84:32:DC Authority key identifier: 0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 Certificate issuer: /CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Certificate serial: 019C43224A3E68AD39D5108F9881106162B0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft Manifest number: 0BFE Signing time: Mon 09 Feb 2026 16:00:46 +0000 Manifest this update: Mon 09 Feb 2026 16:00:46 +0000 Manifest next update: Tue 10 Feb 2026 16:00:46 +0000 Files and hashes: 1: De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl (hash: /3mknoi87PGT81B3w3FZnOQdR+FSp9S7ojfu/XauGSQ=) 2: SbbT_vemLYhSpPxloUrfpgEATIA.roa (hash: TxqN78AgB7Nz/Wz8KEGfJojT7Yd8MRSlYTLQkCNBIXM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4a:3e:68:ad:39:d5:10:8f:98:81:10:61:62:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ded66d2c5a493a09534357e5ca26f03d1a4ddd4 Validity Not Before: Feb 9 16:00:46 2026 GMT Not After : Feb 10 16:00:46 2026 GMT Subject: CN=8c5ec943fb8dcd5d6b608547f6f29f1b0e8432dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:ad:48:2e:fa:57:be:84:4d:e8:26:33:14:da: db:97:1c:cd:f1:e9:56:7e:87:e1:4a:1c:9b:b6:7e: 46:80:75:3b:81:80:07:e6:80:27:79:b8:db:fe:ea: 5b:6c:c8:78:57:52:5f:e2:16:ec:17:f8:c7:55:93: b0:e5:aa:82:af:e2:3a:de:ac:67:28:1d:64:da:c0: d1:d6:ab:0f:97:bd:e8:2e:d8:41:e6:a0:ef:13:d5: a8:fd:3a:8c:93:37:f8:90:e4:8b:d4:51:1d:d6:09: 6d:84:c3:8f:d5:bf:34:34:d6:55:a9:5b:ff:5b:b9: 31:11:34:94:ba:8b:f8:b8:34:c9:f3:b3:4f:11:66: f2:55:b4:68:aa:9c:6a:97:b0:94:42:19:28:da:17: 08:e7:4a:0e:25:b9:c1:57:24:03:4b:77:47:42:b6: 4b:87:92:26:5f:f8:4c:43:06:55:c3:ee:92:0e:29: 84:5b:c1:6d:2e:c4:cc:ec:13:77:d9:84:b3:2f:4f: 15:19:a1:a5:6a:c8:6f:3d:3f:c0:7c:d7:21:9c:41: 7b:22:3b:e9:f1:50:4a:5b:cb:01:90:12:e4:af:26: f6:95:01:a1:01:e3:ba:c5:4a:28:6f:d1:28:9b:b9: bc:29:6e:15:58:b2:5d:5f:0e:9c:7f:82:85:58:65: 8f:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:5E:C9:43:FB:8D:CD:5D:6B:60:85:47:F6:F2:9F:1B:0E:84:32:DC X509v3 Authority Key Identifier: keyid:0D:ED:66:D2:C5:A4:93:A0:95:34:35:7E:5C:A2:6F:03:D1:A4:DD:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d9cc5b-f868-43fe-9c5c-37b96ffba76a/1/De1m0sWkk6CVNDV-XKJvA9Gk3dQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:13:6d:b6:8e:82:a4:e6:2c:db:f7:30:05:da:6e:e1:88:5b: 43:76:80:bc:53:ca:8f:4a:76:26:3b:91:d3:f8:36:ce:53:1d: 38:01:da:7a:a6:0b:b1:58:ce:8f:3a:7b:ce:ec:8d:01:f5:3e: ed:4b:b7:3a:78:8c:33:eb:85:b7:c5:37:03:02:a5:0b:c9:08: 46:aa:e6:0e:5f:88:22:cb:d6:d2:19:a0:56:50:a2:d4:55:7c: ee:2e:47:4d:e9:4e:95:72:05:03:f3:45:8b:f7:89:06:78:2e: 59:58:07:09:d9:73:07:74:98:4f:f8:a6:d5:86:8b:f2:1c:8c: 75:a4:73:37:b8:7a:fb:39:88:c6:bd:2e:83:50:93:fb:dc:85: bd:c0:c2:4c:74:96:fc:d3:12:de:a8:dc:32:32:de:1a:95:02: c9:80:fb:55:ca:70:53:40:54:ef:25:aa:1d:d5:b0:d6:0b:ef: 50:d9:c9:fd:58:3c:be:8b:a8:19:9b:ef:a5:f9:57:e7:3f:68: 5a:23:42:6a:49:aa:b7:65:fa:a4:11:38:38:92:8a:4c:e8:26: f6:f0:ab:61:22:0c:83:c8:88:31:d6:a6:c7:49:8f:60:44:38: ad:87:92:8b:51:f4:3a:3d:9a:a6:85:ab:da:38:5d:1c:31:76: 25:5f:db:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIko+aK051RCPmIEQYWKwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZWQ2NmQyYzVhNDkzYTA5NTM0MzU3ZTVjYTI2ZjAzZDFh NGRkZDQwHhcNMjYwMjA5MTYwMDQ2WhcNMjYwMjEwMTYwMDQ2WjAzMTEwLwYDVQQD Eyg4YzVlYzk0M2ZiOGRjZDVkNmI2MDg1NDdmNmYyOWYxYjBlODQzMmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxq1ILvpXvoRN6CYzFNrblxzN8elW fofhShybtn5GgHU7gYAH5oAnebjb/upbbMh4V1Jf4hbsF/jHVZOw5aqCr+I63qxn KB1k2sDR1qsPl73oLthB5qDvE9Wo/TqMkzf4kOSL1FEd1glthMOP1b80NNZVqVv/ W7kxETSUuov4uDTJ87NPEWbyVbRoqpxql7CUQhko2hcI50oOJbnBVyQDS3dHQrZL h5ImX/hMQwZVw+6SDimEW8FtLsTM7BN32YSzL08VGaGlashvPT/AfNchnEF7Ijvp 8VBKW8sBkBLkryb2lQGhAeO6xUoob9Eom7m8KW4VWLJdXw6cf4KFWGWPkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxeyUP7jc1da2CFR/bynxsOhDLcMB8GA1UdIwQY MBaAFA3tZtLFpJOglTQ1flyibwPRpN3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMt MzdiOTZmZmJhNzZhLzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNC9kOWNjNWItZjg2OC00M2ZlLTljNWMtMzdiOTZmZmJhNzZh LzEvRGUxbTBzV2trNkNWTkRWLVhLSnZBOUdrM2RRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRNtto6C pOYs2/cwBdpu4YhbQ3aAvFPKj0p2JjuR0/g2zlMdOAHaeqYLsVjOjzp7zuyNAfU+ 7Uu3OniMM+uFt8U3AwKlC8kIRqrmDl+IIsvW0hmgVlCi1FV87i5HTelOlXIFA/NF i/eJBnguWVgHCdlzB3SYT/im1YaL8hyMdaRzN7h6+zmIxr0ug1CT+9yFvcDCTHSW /NMS3qjcMjLeGpUCyYD7VcpwU0BU7yWqHdWw1gvvUNnJ/Vg8vouoGZvvpflX5z9o WiNCakmqt2X6pBE4OJKKTOgm9vCrYSIMg8iIMdamx0mPYEQ4rYeSi1H0Oj2apoWr 2jhdHDF2JV/bdQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:45:58 2026 by rpki-client