This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft File: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft (raw, json) Hash identifier: 0KjlgkuCr8T6zZY1BUfM/R+CnVyXaddipEai6IHNvxo= Subject key identifier: A0:80:D8:8C:B9:3C:EA:39:06:D2:DE:80:98:BC:7F:E6:AD:C9:08:03 Authority key identifier: 0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E Certificate issuer: /CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Certificate serial: 019C41D8451B63591DE7FC6D3CC5B54B9F8D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft Manifest number: 065B Signing time: Mon 09 Feb 2026 10:00:18 +0000 Manifest this update: Mon 09 Feb 2026 10:00:18 +0000 Manifest next update: Tue 10 Feb 2026 10:00:18 +0000 Files and hashes: 1: DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl (hash: lHRBaEz7sIwJ6JsBqETHkmE4T4ZbcZ6bzP+YrLrl1ZI=) 2: c437ZNmHK-X0W4HjrhQoFz8sC0k.roa (hash: OO5X7dolAlKIdBk6pdoOqhkso/69x43tE+00VUmgi4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:45:1b:63:59:1d:e7:fc:6d:3c:c5:b5:4b:9f:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0df10c8a580543f92d19fd5f8f564beeaa48ca1e Validity Not Before: Feb 9 10:00:18 2026 GMT Not After : Feb 10 10:00:18 2026 GMT Subject: CN=a080d88cb93cea3906d2de8098bc7fe6adc90803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:13:b9:3d:dd:90:47:48:31:a5:5c:ec:4e: 15:ff:81:db:a6:73:60:83:26:80:a6:30:da:a9:58: 3d:66:6a:5e:17:10:ef:fe:f5:8d:e4:3e:e7:2c:07: 3f:aa:db:fa:3d:e7:3e:cc:a0:55:b1:27:4b:59:fb: f0:7b:f7:2c:4b:aa:0b:7c:7c:d5:ea:1b:00:26:fc: 26:34:f6:67:cc:c0:69:a0:c3:67:61:0a:c4:e1:3b: 25:4e:d3:47:5c:37:e6:dc:45:be:2a:cd:e3:4b:e8: b5:2e:cc:e2:bb:34:ce:52:b5:e7:a4:90:96:f2:d4: 90:a2:d3:71:66:bf:e2:a8:0d:04:ab:0f:d1:57:95: 98:b1:6e:aa:32:88:d1:90:36:49:8a:d3:a1:e6:74: 6a:4d:76:5d:de:86:0e:2e:8f:74:15:40:f0:1d:63: 0f:3e:93:a1:1a:1e:b9:c6:c4:e4:b9:0e:82:3e:59: f7:63:80:33:bd:aa:ed:4d:f6:ca:1a:f7:2c:5e:0b: 9a:e7:c9:39:a5:e9:e6:63:12:fb:b2:25:18:72:70: 2f:70:7d:f1:fe:55:34:05:af:98:b2:00:43:cd:5c: 1e:3d:2c:a8:92:47:df:e5:65:a3:0a:c4:55:3b:8f: df:46:73:be:c8:85:c8:15:62:5f:8a:fc:a6:55:b6: b9:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:80:D8:8C:B9:3C:EA:39:06:D2:DE:80:98:BC:7F:E6:AD:C9:08:03 X509v3 Authority Key Identifier: keyid:0D:F1:0C:8A:58:05:43:F9:2D:19:FD:5F:8F:56:4B:EE:AA:48:CA:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/5b55b7-44b6-4f64-9b5a-9e0a5a2f61b8/1/DfEMilgFQ_ktGf1fj1ZL7qpIyh4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:20:45:e7:97:4b:56:82:ca:bb:27:82:19:d6:6b:6f:5d:97: e7:b2:c5:8e:85:85:12:90:61:84:19:43:77:17:d7:67:d3:8c: 97:e8:b8:76:b2:86:00:70:ff:50:ba:cb:29:0d:41:76:d5:fa: a9:45:06:ad:ea:9b:1a:f1:16:0e:05:93:52:1e:7c:57:be:d5: a1:f2:02:ff:da:b5:87:00:7b:5b:69:a0:30:05:d8:b3:3a:e2: 8b:98:46:b2:4e:23:4c:11:47:b5:15:35:f0:e7:8d:b9:89:d2: 30:4c:dd:34:b0:42:d7:1a:9f:27:17:b5:cf:13:96:6b:fb:88: 9e:37:3a:61:c2:e9:ad:e4:78:04:bc:60:1b:d2:90:ee:cc:ec: ce:a6:1b:51:5e:d5:25:8b:e2:7e:c2:ed:72:78:a1:8f:1c:54: c8:af:45:9c:13:53:32:dd:d1:e8:d3:f5:0b:28:c3:eb:d9:70: 12:82:9d:f8:90:44:28:ea:d8:36:c8:28:03:d0:4f:a2:7f:9e: 1f:bf:a3:0c:32:5c:84:5d:7d:0e:6d:4c:db:cc:f7:ae:e3:79: 69:20:31:ef:7a:6e:e0:db:11:0b:1a:be:b0:b3:07:e0:47:1c: bf:73:f5:14:5e:01:24:bc:38:eb:d6:e2:86:ba:b3:25:67:fe: b7:07:c0:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EUbY1kd5/xtPMW1S5+NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkZjEwYzhhNTgwNTQzZjkyZDE5ZmQ1ZjhmNTY0YmVlYWE0 OGNhMWUwHhcNMjYwMjA5MTAwMDE4WhcNMjYwMjEwMTAwMDE4WjAzMTEwLwYDVQQD EyhhMDgwZDg4Y2I5M2NlYTM5MDZkMmRlODA5OGJjN2ZlNmFkYzkwODAzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIMTuT3dkEdIMaVc7E4V/4HbpnNg gyaApjDaqVg9ZmpeFxDv/vWN5D7nLAc/qtv6Pec+zKBVsSdLWfvwe/csS6oLfHzV 6hsAJvwmNPZnzMBpoMNnYQrE4TslTtNHXDfm3EW+Ks3jS+i1LsziuzTOUrXnpJCW 8tSQotNxZr/iqA0Eqw/RV5WYsW6qMojRkDZJitOh5nRqTXZd3oYOLo90FUDwHWMP PpOhGh65xsTkuQ6CPln3Y4AzvartTfbKGvcsXgua58k5penmYxL7siUYcnAvcH3x /lU0Ba+YsgBDzVwePSyokkff5WWjCsRVO4/fRnO+yIXIFWJfivymVba5AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCA2Iy5POo5BtLegJi8f+atyQgDMB8GA1UdIwQY MBaAFA3xDIpYBUP5LRn9X49WS+6qSMoeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEt OWUwYTVhMmY2MWI4LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS81YjU1YjctNDRiNi00ZjY0LTliNWEtOWUwYTVhMmY2MWI4 LzEvRGZFTWlsZ0ZRX2t0R2YxZmoxWkw3cXBJeWg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAniBF55dL VoLKuyeCGdZrb12X57LFjoWFEpBhhBlDdxfXZ9OMl+i4drKGAHD/ULrLKQ1BdtX6 qUUGreqbGvEWDgWTUh58V77VofIC/9q1hwB7W2mgMAXYszrii5hGsk4jTBFHtRU1 8OeNuYnSMEzdNLBC1xqfJxe1zxOWa/uInjc6YcLpreR4BLxgG9KQ7szszqYbUV7V JYvifsLtcnihjxxUyK9FnBNTMt3R6NP1CyjD69lwEoKd+JBEKOrYNsgoA9BPon+e H7+jDDJchF19Dm1M28z3ruN5aSAx73pu4NsRCxq+sLMH4Eccv3P1FF4BJLw469bi hrqzJWf+twfAlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:28 2026 by rpki-client