This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft File: _0DYouqWdjaeboF2eUkOTlBcifM.mft (raw, json) Hash identifier: ho98xEtFAsFtRIpiYyisuQVnuGJfpHr14iDt7eGOXOM= Subject key identifier: 20:1F:CB:09:63:8F:B2:CD:D2:1B:F3:1F:9F:D6:EA:C8:26:F4:64:9D Authority key identifier: FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 Certificate issuer: /CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Certificate serial: 019C42B3F31A251998702568DDB52E0364FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft Manifest number: 181A Signing time: Mon 09 Feb 2026 14:00:15 +0000 Manifest this update: Mon 09 Feb 2026 14:00:15 +0000 Manifest next update: Tue 10 Feb 2026 14:00:15 +0000 Files and hashes: 1: _0DYouqWdjaeboF2eUkOTlBcifM.crl (hash: xQU3AH8WAPs9sPrvbAEQ3I3oHqaThmUHuhGIWy11inY=) 2: k18lVXCHbb1-8v6yyvWMJ8VYVHU.roa (hash: In1eQKHvGTUmAaOtsHiEQVzo1kSRudjkKkxMelV/95Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f3:1a:25:19:98:70:25:68:dd:b5:2e:03:64:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff40d8a2ea9676369e6e817679490e4e505c89f3 Validity Not Before: Feb 9 14:00:15 2026 GMT Not After : Feb 10 14:00:15 2026 GMT Subject: CN=201fcb09638fb2cdd21bf31f9fd6eac826f4649d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0c:e5:e2:35:1f:9f:2b:bd:8d:c0:43:42:ad: 52:fd:7c:2c:82:51:dd:46:36:a4:06:1a:af:fa:b0: 99:cf:85:f6:65:29:22:1b:0c:6d:d6:df:59:97:b2: f6:a8:79:fa:46:7c:4d:6c:e7:4c:17:4a:3f:54:ec: f4:3d:e5:48:d6:10:dc:1e:05:df:9f:55:17:a5:53: 84:84:b5:8a:5d:ae:f2:3d:f2:7a:65:e4:33:13:4d: c0:0d:f3:c5:e0:a2:b9:84:f0:7a:c1:2a:be:44:8f: e9:bc:f2:0e:60:d0:a1:ca:0e:73:c2:49:16:9b:d3: c7:a9:bc:d4:09:93:06:71:2c:52:53:4c:2f:a9:96: ae:84:9d:bd:02:38:6c:06:c8:48:20:f5:14:6e:bc: 08:41:d5:46:2b:fb:f0:f0:cb:96:a9:98:1f:96:52: 13:8f:18:af:fb:f1:c1:e0:17:6c:ca:08:91:41:cc: e2:17:dc:ee:23:35:79:85:5c:46:e8:dc:41:d0:00: b6:ca:cc:f0:c0:91:fd:2f:ef:95:29:be:ff:09:05: 02:36:46:ae:85:9f:1d:cc:1c:99:97:ef:9b:5b:a1: 44:ac:51:56:15:e0:16:27:f7:74:8a:43:b2:e0:66: 30:58:09:83:b2:28:88:15:2d:a8:ec:d1:21:74:49: 26:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:1F:CB:09:63:8F:B2:CD:D2:1B:F3:1F:9F:D6:EA:C8:26:F4:64:9D X509v3 Authority Key Identifier: keyid:FF:40:D8:A2:EA:96:76:36:9E:6E:81:76:79:49:0E:4E:50:5C:89:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0DYouqWdjaeboF2eUkOTlBcifM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7abf3c-29f3-43c8-978e-b050c1129126/1/_0DYouqWdjaeboF2eUkOTlBcifM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:c0:c6:23:d3:8e:89:a8:8e:53:1c:46:20:1d:94:df:8c:61: e0:4a:38:b9:07:08:77:4d:a0:bd:7e:c6:6d:e5:ab:14:0b:d1: 71:7f:d8:cd:cd:ce:74:c9:ad:e1:a2:5c:fa:42:57:59:44:6b: 78:30:81:97:04:fd:a4:5a:e0:b5:46:76:59:54:1c:19:88:45: 4b:21:5e:2f:a0:95:26:79:1e:aa:0c:d4:7c:c4:c7:ea:95:3a: f5:97:e8:9b:90:ca:79:eb:78:ef:73:50:d0:b1:4a:3e:58:4a: 9b:17:02:2f:cc:d4:94:67:63:8f:ce:7d:a5:69:ff:c5:9a:48: df:f3:48:06:d5:1c:78:74:be:46:4c:14:2f:4e:0f:61:88:00: b7:83:19:e4:c0:e2:bd:cc:b7:4f:a0:f7:ce:cb:32:2b:4e:e8: 52:87:dc:54:38:ff:4a:0b:5c:e8:18:b3:ff:57:13:22:9b:d1: 6d:71:13:29:de:97:f4:f9:5d:01:db:c7:91:4c:0e:ea:47:5e: be:1d:7f:cc:83:2c:af:51:c4:74:4e:3c:a4:2e:3b:ce:11:83: 17:28:09:a1:6f:5b:37:9a:65:d6:4c:ba:b0:14:e1:4c:f2:3c: b0:73:fa:0b:9e:04:cb:f3:57:e7:78:ec:c9:a5:31:1b:cf:36: d4:60:a7:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/MaJRmYcCVo3bUuA2T9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDBkOGEyZWE5Njc2MzY5ZTZlODE3Njc5NDkwZTRlNTA1 Yzg5ZjMwHhcNMjYwMjA5MTQwMDE1WhcNMjYwMjEwMTQwMDE1WjAzMTEwLwYDVQQD EygyMDFmY2IwOTYzOGZiMmNkZDIxYmYzMWY5ZmQ2ZWFjODI2ZjQ2NDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wzl4jUfnyu9jcBDQq1S/XwsglHd RjakBhqv+rCZz4X2ZSkiGwxt1t9Zl7L2qHn6RnxNbOdMF0o/VOz0PeVI1hDcHgXf n1UXpVOEhLWKXa7yPfJ6ZeQzE03ADfPF4KK5hPB6wSq+RI/pvPIOYNChyg5zwkkW m9PHqbzUCZMGcSxSU0wvqZauhJ29AjhsBshIIPUUbrwIQdVGK/vw8MuWqZgfllIT jxiv+/HB4BdsygiRQcziF9zuIzV5hVxG6NxB0AC2yszwwJH9L++VKb7/CQUCNkau hZ8dzByZl++bW6FErFFWFeAWJ/d0ikOy4GYwWAmDsiiIFS2o7NEhdEkmsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCAfywljj7LN0hvzH5/W6sgm9GSdMB8GA1UdIwQY MBaAFP9A2KLqlnY2nm6BdnlJDk5QXInzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUt YjA1MGMxMTI5MTI2LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS83YWJmM2MtMjlmMy00M2M4LTk3OGUtYjA1MGMxMTI5MTI2 LzEvXzBEWW91cVdkamFlYm9GMmVVa09UbEJjaWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMDGI9OO iaiOUxxGIB2U34xh4Eo4uQcId02gvX7GbeWrFAvRcX/Yzc3OdMmt4aJc+kJXWURr eDCBlwT9pFrgtUZ2WVQcGYhFSyFeL6CVJnkeqgzUfMTH6pU69Zfom5DKeet473NQ 0LFKPlhKmxcCL8zUlGdjj859pWn/xZpI3/NIBtUceHS+RkwUL04PYYgAt4MZ5MDi vcy3T6D3zssyK07oUofcVDj/Sgtc6Biz/1cTIpvRbXETKd6X9PldAdvHkUwO6kde vh1/zIMsr1HEdE48pC47zhGDFygJoW9bN5pl1ky6sBThTPI8sHP6C54Ey/NX53js yaUxG8821GCnGA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:41 2026 by rpki-client