This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json) Hash identifier: 2vuX0746bi6o3DaH8M8Nyeb1VP3NMZeeExSe0FRKCuo= Subject key identifier: A3:85:EA:2A:51:08:1B:4A:E2:A6:A1:17:94:D0:38:98:04:A2:15:80 Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Certificate serial: 019C420F607EE371BDA5F7285695943E45D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 11:00:29 +0000 Manifest this update: Mon 09 Feb 2026 11:00:29 +0000 Manifest next update: Tue 10 Feb 2026 11:00:29 +0000 Files and hashes: 1: 9ZpkTQXpmkfvpR0E4XJe3RUF224.roa (hash: 03q2A8HDE0gao07Rw7lfTux7UqjzMWOiEnt7Qllp1sU=) 2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: 3rp57lJNqG5+OttymzJAVSYOQQMfEoOqpgRkI4/DNEE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:60:7e:e3:71:bd:a5:f7:28:56:95:94:3e:45:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f Validity Not Before: Feb 9 11:00:29 2026 GMT Not After : Feb 10 11:00:29 2026 GMT Subject: CN=a385ea2a51081b4ae2a6a11794d0389804a21580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:26:93:ba:de:63:0f:fa:70:46:97:36:6e: a0:d3:4e:d4:ef:58:28:96:c7:90:cb:5d:98:72:6f: b9:bb:56:1b:83:80:3f:d5:c6:19:de:9f:4a:02:79: 96:c7:10:45:5a:90:e2:48:f1:d0:a1:25:b6:4f:a3: 65:e5:b6:9e:49:1c:00:ce:90:d3:17:56:5c:48:be: 11:c8:c6:0c:54:c4:45:4b:79:24:c2:82:56:fa:41: 2a:95:04:71:3c:83:36:48:30:84:91:cd:ce:69:fa: 81:75:ed:0a:84:ba:d5:23:2c:1e:f9:ab:f1:d8:48: 4e:f5:27:07:1b:be:53:88:69:94:ea:78:71:3f:bc: b3:7a:95:ee:a5:f2:ad:a8:48:83:df:8a:da:0b:cc: da:f8:1d:bd:af:1c:46:76:95:82:77:8c:c9:72:42: 3e:76:d4:99:ae:b3:b8:65:48:6e:fd:ae:e3:51:c2: 93:09:75:14:e4:27:97:1b:b9:aa:0e:e2:9a:70:58: d1:f9:92:4d:11:be:77:3e:4f:ed:f3:a5:ff:a3:b3: 69:e8:1c:17:88:64:3b:9c:1a:c3:42:1b:9d:93:aa: 11:96:a7:22:51:7b:b4:b1:ff:61:b1:ec:0b:8f:81: 09:eb:2c:81:a4:7e:00:91:98:b6:7d:63:57:e8:92: cc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:85:EA:2A:51:08:1B:4A:E2:A6:A1:17:94:D0:38:98:04:A2:15:80 X509v3 Authority Key Identifier: keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:f2:23:af:57:04:ed:d1:33:20:c6:30:34:0f:c2:25:af:16: f7:f1:43:c8:04:04:27:d1:a4:75:50:f0:7e:07:23:81:d2:3f: d4:2e:63:99:3d:49:63:b1:d3:b6:f4:44:3e:56:7b:9b:20:ae: 01:a7:d3:fb:f2:4e:14:4f:5b:fa:40:3a:f9:5e:0e:b7:f4:18: a3:5f:2b:72:c5:ac:ba:4b:67:24:04:a8:9f:e0:03:cd:be:87: 1d:75:22:01:4c:1e:f8:01:2d:c8:d1:7e:7c:a6:97:f9:49:5a: f4:b2:64:93:05:f7:be:18:d5:8e:51:3c:1a:c3:3f:3d:98:07: b7:da:3c:7e:ff:ed:e7:c0:e8:0c:d0:a4:61:49:88:f5:2e:ee: 91:ec:db:84:f4:0e:c3:ad:b3:ea:6e:73:8b:c5:c9:d2:cd:98: 22:7e:5e:60:1e:e8:01:5a:70:6b:d2:60:67:76:94:00:ee:2b: b6:a0:e7:f0:85:29:9d:4a:4c:e3:6f:3a:31:18:bc:fe:f6:9a: 07:19:2b:6f:ae:76:d4:63:4d:83:f0:85:07:02:29:37:ed:fc: 18:46:5f:77:a4:af:e0:11:29:12:60:20:64:0d:09:72:7d:74: b7:8f:55:77:86:85:ee:cf:d7:ff:39:ca:9a:ea:15:7c:21:ea: 7a:b4:89:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2B+43G9pfcoVpWUPkXTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYzgxZDA3NDM1N2RlNWQzMmY4YTY1Y2Q5ZWU3YTU4NWJm M2VjNmYwHhcNMjYwMjA5MTEwMDI5WhcNMjYwMjEwMTEwMDI5WjAzMTEwLwYDVQQD EyhhMzg1ZWEyYTUxMDgxYjRhZTJhNmExMTc5NGQwMzg5ODA0YTIxNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaQmk7reYw/6cEaXNm6g007U71go lseQy12Ycm+5u1Ybg4A/1cYZ3p9KAnmWxxBFWpDiSPHQoSW2T6Nl5baeSRwAzpDT F1ZcSL4RyMYMVMRFS3kkwoJW+kEqlQRxPIM2SDCEkc3OafqBde0KhLrVIywe+avx 2EhO9ScHG75TiGmU6nhxP7yzepXupfKtqEiD34raC8za+B29rxxGdpWCd4zJckI+ dtSZrrO4ZUhu/a7jUcKTCXUU5CeXG7mqDuKacFjR+ZJNEb53Pk/t86X/o7Np6BwX iGQ7nBrDQhudk6oRlqciUXu0sf9hsewLj4EJ6yyBpH4AkZi2fWNX6JLMhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOF6ipRCBtK4qahF5TQOJgEohWAMB8GA1UdIwQY MBaAFAzIHQdDV95dMvimXNnuelhb8+xvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEt ZGY1Y2U1NmU3YjRiLzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS9iMmQ2MDQtZGRmYi00ZWZmLWI0OWEtZGY1Y2U1NmU3YjRi LzEvRE1nZEIwTlgzbDB5LUtaYzJlNTZXRnZ6N0c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvIjr1cE 7dEzIMYwNA/CJa8W9/FDyAQEJ9GkdVDwfgcjgdI/1C5jmT1JY7HTtvREPlZ7myCu AafT+/JOFE9b+kA6+V4Ot/QYo18rcsWsuktnJASon+ADzb6HHXUiAUwe+AEtyNF+ fKaX+Ula9LJkkwX3vhjVjlE8GsM/PZgHt9o8fv/t58DoDNCkYUmI9S7ukezbhPQO w62z6m5zi8XJ0s2YIn5eYB7oAVpwa9JgZ3aUAO4rtqDn8IUpnUpM4286MRi8/vaa Bxkrb6521GNNg/CFBwIpN+38GEZfd6Sv4BEpEmAgZA0Jcn10t49Vd4aF7s/X/znK muoVfCHqerSJ9w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:57 2026 by rpki-client