This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft File: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft (raw, json) Hash identifier: bBjO56jG8zm46BrgKSDrlFxI37hUZ7bpgLF9/q8mcck= Subject key identifier: 7B:4E:0A:FD:6E:7F:EF:D9:D0:0D:7F:B2:B7:E1:11:95:A9:1F:B9:05 Authority key identifier: 75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4 Certificate issuer: /CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4 Certificate serial: 019C42EAF27EE9DEE967AA90DB730480BF9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft Manifest number: 01BA Signing time: Mon 09 Feb 2026 15:00:19 +0000 Manifest this update: Mon 09 Feb 2026 15:00:19 +0000 Manifest next update: Tue 10 Feb 2026 15:00:19 +0000 Files and hashes: 1: dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl (hash: xsUQITyfrIOnVEaT9pITU+RtCzbNx4VUaChzwdVAUIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:f2:7e:e9:de:e9:67:aa:90:db:73:04:80:bf:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7538c4790d6dd93b930e5cdd20f503e20291f7b4 Validity Not Before: Feb 9 15:00:19 2026 GMT Not After : Feb 10 15:00:19 2026 GMT Subject: CN=7b4e0afd6e7fefd9d00d7fb2b7e11195a91fb905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:e2:57:f2:cf:7b:92:6d:04:a9:8b:d3:9e: e9:31:6e:04:4a:b6:5a:01:21:df:3e:ee:eb:aa:28: e0:f3:c4:b7:e2:9e:82:81:50:ee:d7:9e:64:a6:c6: f0:97:65:63:0c:12:25:0a:5b:70:49:46:da:d8:60: 3a:82:78:6a:eb:fe:37:26:2b:8e:c4:b6:81:28:e2: ed:1c:59:8f:f2:0f:47:1c:e8:d4:fd:8a:44:81:17: 1b:98:dd:30:2f:85:8b:4e:54:5f:31:ab:b3:74:3f: 0b:f2:43:0c:9d:b6:92:ab:e0:0d:d2:63:d4:a5:ef: c8:3c:f0:63:b0:0b:7f:7d:9c:13:22:de:08:57:3f: 86:a2:cd:f6:ef:4e:5a:64:59:02:86:31:bb:10:c0: c0:e6:ce:26:ce:a9:2e:a1:a7:aa:f6:1a:d6:9d:7a: 1f:b6:fd:de:12:cd:89:43:ae:10:28:da:71:f8:69: 3e:3e:4d:b7:81:92:2d:3a:65:69:8a:ae:bf:04:fb: 14:15:97:ca:3a:36:8b:0e:d9:3c:f7:9c:ed:d6:21: cd:0d:6b:8a:22:75:59:71:12:aa:2b:01:8b:10:78: 8e:43:33:81:8d:6a:03:ea:c8:90:ff:22:ca:73:24: dc:f0:78:6b:f1:95:57:15:37:97:f9:0e:80:90:1d: 08:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:0A:FD:6E:7F:EF:D9:D0:0D:7F:B2:B7:E1:11:95:A9:1F:B9:05 X509v3 Authority Key Identifier: keyid:75:38:C4:79:0D:6D:D9:3B:93:0E:5C:DD:20:F5:03:E2:02:91:F7:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/043b18-9be6-47b3-b778-bf836c5b9907/1/dTjEeQ1t2TuTDlzdIPUD4gKR97Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:04:19:54:bb:79:38:d3:39:f6:e5:a4:b0:51:02:61:fd:fd: a9:ac:0f:ff:5e:c7:23:79:2a:8a:bc:c7:8b:b2:25:b7:6c:11: 03:2f:04:05:1a:da:50:a6:5f:ad:e3:b7:50:08:dc:f6:c7:bf: 8f:f6:dc:12:39:00:3f:c3:64:6d:35:0d:30:d7:e8:f3:aa:50: 2d:91:8c:08:76:04:b9:b8:f7:81:77:66:06:bd:de:eb:f6:76: d7:ed:0c:5d:f6:9e:ef:7c:d7:34:7b:18:d6:52:f5:80:18:b3: 23:8c:2e:da:9c:21:a8:05:95:92:1e:00:97:37:fd:7b:f1:66: c8:c6:18:57:1d:ef:42:33:c9:91:2c:72:1c:c8:79:23:c6:10: 57:dd:b1:cd:b9:70:3b:aa:2e:18:b8:ef:d9:22:92:99:80:6b: 42:46:34:16:14:24:16:1e:32:b7:d1:88:78:7c:5b:f8:14:7a: b6:3c:42:be:bc:16:b0:7d:e0:93:e5:24:74:ed:45:21:33:18: 98:5c:47:91:87:d6:08:0c:72:77:4e:d1:ad:ed:98:34:0d:0e: 08:0c:c2:1e:1d:1b:71:8f:ce:77:fe:a9:89:62:6c:d5:82:6f: 57:11:ea:0d:86:04:aa:9a:3d:0a:39:f4:8d:70:0d:3d:ce:8d: 77:e0:e4:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vJ+6d7pZ6qQ23MEgL+dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1MzhjNDc5MGQ2ZGQ5M2I5MzBlNWNkZDIwZjUwM2UyMDI5 MWY3YjQwHhcNMjYwMjA5MTUwMDE5WhcNMjYwMjEwMTUwMDE5WjAzMTEwLwYDVQQD Eyg3YjRlMGFmZDZlN2ZlZmQ5ZDAwZDdmYjJiN2UxMTE5NWE5MWZiOTA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssniV/LPe5JtBKmL057pMW4ESrZa ASHfPu7rqijg88S34p6CgVDu155kpsbwl2VjDBIlCltwSUba2GA6gnhq6/43JiuO xLaBKOLtHFmP8g9HHOjU/YpEgRcbmN0wL4WLTlRfMauzdD8L8kMMnbaSq+AN0mPU pe/IPPBjsAt/fZwTIt4IVz+Gos32705aZFkChjG7EMDA5s4mzqkuoaeq9hrWnXof tv3eEs2JQ64QKNpx+Gk+Pk23gZItOmVpiq6/BPsUFZfKOjaLDtk895zt1iHNDWuK InVZcRKqKwGLEHiOQzOBjWoD6siQ/yLKcyTc8Hhr8ZVXFTeX+Q6AkB0IpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHtOCv1uf+/Z0A1/srfhEZWpH7kFMB8GA1UdIwQY MBaAFHU4xHkNbdk7kw5c3SD1A+ICkfe0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFRqRWVRMXQyVHVURGx6ZElQVUQ0Z0tSOTdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS8wNDNiMTgtOWJlNi00N2IzLWI3Nzgt YmY4MzZjNWI5OTA3LzEvZFRqRWVRMXQyVHVURGx6ZElQVUQ0Z0tSOTdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS8wNDNiMTgtOWJlNi00N2IzLWI3NzgtYmY4MzZjNWI5OTA3 LzEvZFRqRWVRMXQyVHVURGx6ZElQVUQ0Z0tSOTdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJgQZVLt5 ONM59uWksFECYf39qawP/17HI3kqirzHi7Ilt2wRAy8EBRraUKZfreO3UAjc9se/ j/bcEjkAP8NkbTUNMNfo86pQLZGMCHYEubj3gXdmBr3e6/Z21+0MXfae73zXNHsY 1lL1gBizI4wu2pwhqAWVkh4Alzf9e/FmyMYYVx3vQjPJkSxyHMh5I8YQV92xzblw O6ouGLjv2SKSmYBrQkY0FhQkFh4yt9GIeHxb+BR6tjxCvrwWsH3gk+UkdO1FITMY mFxHkYfWCAxyd07Rre2YNA0OCAzCHh0bcY/Od/6piWJs1YJvVxHqDYYEqpo9Cjn0 jXANPc6Nd+DkJA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:55 2026 by rpki-client