This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft File: DBA3wXvBWnydhWmIf1sFg1zjLSc.mft (raw, json) Hash identifier: 8JI5atesAyo1jvAvlJC9WpFPXCMB1BMtklZwmgNn2Ps= Subject key identifier: 84:9D:80:37:C3:99:BF:84:CB:A5:B7:4E:63:F2:58:68:DD:8E:76:CD Authority key identifier: 0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27 Certificate issuer: /CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27 Certificate serial: 019C42EB27D11390F949614739E2ED3F2723 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 15:00:33 +0000 Manifest this update: Mon 09 Feb 2026 15:00:33 +0000 Manifest next update: Tue 10 Feb 2026 15:00:33 +0000 Files and hashes: 1: DBA3wXvBWnydhWmIf1sFg1zjLSc.crl (hash: IY21DW+I+MJ3K9tnaX6RpFqo/rCw274a3ybZogNBK1Y=) 2: FzYYHJjZ1VyjrqmR6VyqdhmHs8I.roa (hash: A2gvDrWNnIIKvLZJlwmcHqXl0rLuVgpVjavbxPCN9B4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:27:d1:13:90:f9:49:61:47:39:e2:ed:3f:27:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c1037c17bc15a7c9d8569887f5b05835ce32d27 Validity Not Before: Feb 9 15:00:33 2026 GMT Not After : Feb 10 15:00:33 2026 GMT Subject: CN=849d8037c399bf84cba5b74e63f25868dd8e76cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:88:fd:3b:11:96:6e:04:c7:17:bb:20:e3:c8: 68:36:e9:f6:b2:e2:72:a2:d1:ac:6d:3a:3d:9d:51: fe:18:5d:c0:b4:1e:3e:1a:ac:f5:54:2e:b5:3f:a1: df:02:b6:77:92:cb:bd:d3:7e:11:b8:9b:3f:eb:27: b4:f5:15:c5:e7:16:f4:84:ab:82:b3:b0:d1:45:5e: f3:93:49:94:40:5c:d4:9a:82:a3:fc:d0:46:2d:8e: 91:e5:56:f0:29:29:28:d2:3d:fd:9e:2b:5b:ac:30: ab:09:fd:6b:e3:11:2d:38:56:ab:97:c0:b8:63:31: 66:9b:cb:0b:a7:32:de:ba:9b:22:a2:fd:38:c5:2c: 5b:cd:5e:f1:bd:e6:e7:be:0f:ab:f3:df:e2:53:c8: 5f:b6:2f:63:cd:73:c7:bd:a9:85:1b:28:8f:22:86: c5:f1:a3:a6:ea:9a:09:f8:6a:9a:30:86:5d:76:6b: 20:7d:68:1b:47:3f:18:fa:fd:d8:55:5d:c2:e0:49: 3c:6b:62:e1:5a:ef:01:53:91:66:ad:77:5c:6b:0d: ab:c9:fd:f1:9c:92:ca:76:f2:06:c7:f2:11:d6:f4: 1e:10:0f:e6:ab:c7:64:7d:68:b9:8f:e1:e7:34:6b: a8:8c:1c:25:0d:d4:b8:cc:e0:36:aa:f3:50:c0:17: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:9D:80:37:C3:99:BF:84:CB:A5:B7:4E:63:F2:58:68:DD:8E:76:CD X509v3 Authority Key Identifier: keyid:0C:10:37:C1:7B:C1:5A:7C:9D:85:69:88:7F:5B:05:83:5C:E3:2D:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DBA3wXvBWnydhWmIf1sFg1zjLSc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a62a7b-8f76-4899-a153-8c500295cb96/1/DBA3wXvBWnydhWmIf1sFg1zjLSc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:1e:e6:71:94:08:04:1e:46:43:f3:c3:57:18:d2:99:23:0d: cf:bb:13:72:cf:b9:eb:e9:a6:b9:f2:d2:1d:dd:b6:32:18:36: 8b:49:39:0f:03:70:ee:e6:93:42:b9:ec:46:7b:15:47:bd:b3: 3a:b5:88:da:c4:3b:92:e2:a1:0a:fc:9e:ca:f8:6f:ec:55:09: 57:fc:e3:eb:68:ae:51:45:8c:a2:75:9a:f3:47:ee:c0:01:a3: 4b:00:33:64:2b:01:7f:58:89:b1:92:1a:5b:a3:fc:d9:b5:f3: c2:cf:85:3a:22:d6:1c:b6:6f:35:e6:e6:5d:a7:84:67:18:a3: 74:91:b9:ff:53:16:38:b3:d1:3b:87:03:58:82:ef:4d:5d:c1: a9:6a:6e:e1:ed:bd:71:3c:aa:a8:0d:97:7f:1f:f4:75:bd:2b: 66:5c:28:e7:d2:e5:0d:ab:88:5d:8d:f7:62:c6:4a:e0:d3:33: 1d:7f:f7:ac:7f:9d:8d:4b:08:58:98:82:29:a1:f9:a3:34:30: 24:88:fe:6c:4c:77:46:9f:d9:ab:e7:62:25:30:23:fd:2d:c8: a2:b2:33:f5:d3:be:af:55:fc:fb:cc:9c:5f:ef:ea:b5:41:b7: 74:ce:25:a2:cd:7d:1e:bc:91:1b:4f:b3:79:9c:70:03:90:2e: 4c:63:39:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6yfRE5D5SWFHOeLtPycjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjMTAzN2MxN2JjMTVhN2M5ZDg1Njk4ODdmNWIwNTgzNWNl MzJkMjcwHhcNMjYwMjA5MTUwMDMzWhcNMjYwMjEwMTUwMDMzWjAzMTEwLwYDVQQD Eyg4NDlkODAzN2MzOTliZjg0Y2JhNWI3NGU2M2YyNTg2OGRkOGU3NmNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIj9OxGWbgTHF7sg48hoNun2suJy otGsbTo9nVH+GF3AtB4+Gqz1VC61P6HfArZ3ksu9034RuJs/6ye09RXF5xb0hKuC s7DRRV7zk0mUQFzUmoKj/NBGLY6R5VbwKSko0j39nitbrDCrCf1r4xEtOFarl8C4 YzFmm8sLpzLeupsiov04xSxbzV7xvebnvg+r89/iU8hfti9jzXPHvamFGyiPIobF 8aOm6poJ+GqaMIZddmsgfWgbRz8Y+v3YVV3C4Ek8a2LhWu8BU5FmrXdcaw2ryf3x nJLKdvIGx/IR1vQeEA/mq8dkfWi5j+HnNGuojBwlDdS4zOA2qvNQwBcVYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISdgDfDmb+Ey6W3TmPyWGjdjnbNMB8GA1UdIwQY MBaAFAwQN8F7wVp8nYVpiH9bBYNc4y0nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMt OGM1MDAyOTVjYjk2LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS9hNjJhN2ItOGY3Ni00ODk5LWExNTMtOGM1MDAyOTVjYjk2 LzEvREJBM3dYdkJXbnlkaFdtSWYxc0ZnMXpqTFNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnx7mcZQI BB5GQ/PDVxjSmSMNz7sTcs+56+mmufLSHd22Mhg2i0k5DwNw7uaTQrnsRnsVR72z OrWI2sQ7kuKhCvyeyvhv7FUJV/zj62iuUUWMonWa80fuwAGjSwAzZCsBf1iJsZIa W6P82bXzws+FOiLWHLZvNebmXaeEZxijdJG5/1MWOLPRO4cDWILvTV3BqWpu4e29 cTyqqA2Xfx/0db0rZlwo59LlDauIXY33YsZK4NMzHX/3rH+djUsIWJiCKaH5ozQw JIj+bEx3Rp/Zq+diJTAj/S3IorIz9dO+r1X8+8ycX+/qtUG3dM4los19HryRG0+z eZxwA5AuTGM5TQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:24 2026 by rpki-client