This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft File: DGgkFYtzDEQWfqdzqXchjMYvQWo.mft (raw, json) Hash identifier: J+y2ppFVvKmeC8yYzZGBb5eKqiACQpFNvClwf3HeZ+4= Subject key identifier: 97:0F:EF:98:5A:07:A9:1C:D8:88:C2:34:68:82:82:0A:9E:A4:90:1D Authority key identifier: 0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A Certificate issuer: /CN=0c6824158b730c44167ea773a977218cc62f416a Certificate serial: 019C44D9AD366681B2D8AC0AFE8AA25FAD68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft Manifest number: 0D1C Signing time: Tue 10 Feb 2026 00:00:42 +0000 Manifest this update: Tue 10 Feb 2026 00:00:42 +0000 Manifest next update: Wed 11 Feb 2026 00:00:42 +0000 Files and hashes: 1: DGgkFYtzDEQWfqdzqXchjMYvQWo.crl (hash: HEtOIsx3cOmAyuLiiq5m+2EmlFAedFbdfPiNoRX3bVw=) 2: utyeED3clQkm3ZphFz4r6XrH5aM.roa (hash: 1/LGmMoXZvPyyNB1HdA73Zq1ZKG58JPMftBJCzzv2rs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:ad:36:66:81:b2:d8:ac:0a:fe:8a:a2:5f:ad:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c6824158b730c44167ea773a977218cc62f416a Validity Not Before: Feb 10 00:00:42 2026 GMT Not After : Feb 11 00:00:42 2026 GMT Subject: CN=970fef985a07a91cd888c2346882820a9ea4901d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5c:5b:98:bc:9d:9d:36:2c:00:cc:2a:ba:c8: 87:c0:b4:af:5d:36:de:b5:37:ef:d7:4d:c4:96:c6: ce:21:c5:4a:4d:c4:82:88:c3:4c:a9:91:ba:f6:92: 68:c1:42:91:71:93:bf:19:b0:20:ee:a0:9d:2d:41: cc:fa:39:7e:56:eb:6e:fb:95:01:44:ed:d0:cf:2b: 21:02:19:27:a0:7d:3a:13:d3:4d:ef:34:20:b4:40: d2:21:05:aa:26:b8:47:cc:97:78:68:58:fd:3d:b3: 02:e5:25:dd:94:7f:2c:59:22:f0:11:9a:d1:92:64: 5a:93:eb:28:f3:92:f3:3e:ac:35:2f:32:fa:b1:71: 98:b6:e4:7c:e4:d8:ca:a6:b2:15:79:9f:d4:25:e1: a8:63:03:71:69:88:fc:b5:68:32:db:82:cd:1f:05: c9:68:da:92:3b:b1:f7:a1:29:1b:5b:ca:39:2f:2a: 82:0d:dc:78:c0:2e:52:49:06:dd:31:e5:34:62:99: 17:7e:06:a4:ff:3a:fc:f0:a1:c9:59:15:61:eb:e7: 79:34:c8:84:ae:3b:f2:6d:77:b5:f5:f7:d3:4a:ab: 95:9f:2d:3b:c1:f6:76:68:57:ab:08:78:66:5b:8b: f0:73:c4:3d:14:75:4b:39:2d:e1:5c:06:5e:2a:d1: ab:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:EF:98:5A:07:A9:1C:D8:88:C2:34:68:82:82:0A:9E:A4:90:1D X509v3 Authority Key Identifier: keyid:0C:68:24:15:8B:73:0C:44:16:7E:A7:73:A9:77:21:8C:C6:2F:41:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DGgkFYtzDEQWfqdzqXchjMYvQWo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/5b4bb6-2082-4c2b-8ce5-fa2176aaa849/1/DGgkFYtzDEQWfqdzqXchjMYvQWo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:95:c0:c1:e6:0f:aa:d6:1a:ca:8a:96:5b:49:96:f0:f9:a5: f2:c3:95:f6:0a:36:dd:e6:e3:8a:ea:37:da:b1:c0:f4:02:5b: d3:8f:22:37:9a:f2:8a:9f:44:16:45:ce:f7:d2:00:a4:9c:9c: fe:f5:ec:a5:7e:3e:5b:3e:c9:4e:8a:d0:83:53:41:03:78:a3: 70:14:d0:fb:ae:aa:0e:ee:b2:eb:62:d6:c4:3b:9f:6c:5e:4b: 6c:3f:45:7e:33:18:d4:c0:2d:64:e3:ce:59:60:a4:60:8f:c1: f5:9d:a8:d2:c4:0f:da:2a:d9:b4:3d:aa:65:59:06:32:87:0b: 39:bb:0c:a6:cf:56:8f:87:01:c2:d9:d6:26:41:4a:15:a8:e4: 68:e3:c8:09:67:f3:65:05:12:4d:79:67:25:22:44:47:d1:d0: eb:64:9c:c9:00:8e:d3:95:c3:45:83:c7:56:34:9c:53:f9:24: 56:c9:9b:fc:db:7f:bc:3f:35:fd:04:1a:48:d5:e5:ee:1d:83: 4a:5f:ec:67:96:2e:8a:4b:77:b9:67:b0:05:69:6e:22:05:9f: fc:9e:88:39:07:d6:a4:ef:04:ea:fa:b7:a4:04:ad:c8:83:cc: 0d:eb:9b:01:c3:41:85:bb:d4:8e:3f:fb:bb:9f:6c:e1:fc:93: da:6e:03:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2a02ZoGy2KwK/oqiX61oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNjgyNDE1OGI3MzBjNDQxNjdlYTc3M2E5NzcyMThjYzYy ZjQxNmEwHhcNMjYwMjEwMDAwMDQyWhcNMjYwMjExMDAwMDQyWjAzMTEwLwYDVQQD Eyg5NzBmZWY5ODVhMDdhOTFjZDg4OGMyMzQ2ODgyODIwYTllYTQ5MDFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylxbmLydnTYsAMwqusiHwLSvXTbe tTfv103ElsbOIcVKTcSCiMNMqZG69pJowUKRcZO/GbAg7qCdLUHM+jl+Vutu+5UB RO3QzyshAhknoH06E9NN7zQgtEDSIQWqJrhHzJd4aFj9PbMC5SXdlH8sWSLwEZrR kmRak+so85LzPqw1LzL6sXGYtuR85NjKprIVeZ/UJeGoYwNxaYj8tWgy24LNHwXJ aNqSO7H3oSkbW8o5LyqCDdx4wC5SSQbdMeU0YpkXfgak/zr88KHJWRVh6+d5NMiE rjvybXe19ffTSquVny07wfZ2aFerCHhmW4vwc8Q9FHVLOS3hXAZeKtGrCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcP75haB6kc2IjCNGiCggqepJAdMB8GA1UdIwQY MBaAFAxoJBWLcwxEFn6nc6l3IYzGL0FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUt ZmEyMTc2YWFhODQ5LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi81YjRiYjYtMjA4Mi00YzJiLThjZTUtZmEyMTc2YWFhODQ5 LzEvREdna0ZZdHpERVFXZnFkenFYY2hqTVl2UVdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipXAweYP qtYayoqWW0mW8Pml8sOV9go23ebjiuo32rHA9AJb048iN5ryip9EFkXO99IApJyc /vXspX4+Wz7JTorQg1NBA3ijcBTQ+66qDu6y62LWxDufbF5LbD9FfjMY1MAtZOPO WWCkYI/B9Z2o0sQP2irZtD2qZVkGMocLObsMps9Wj4cBwtnWJkFKFajkaOPICWfz ZQUSTXlnJSJER9HQ62ScyQCO05XDRYPHVjScU/kkVsmb/Nt/vD81/QQaSNXl7h2D Sl/sZ5Yuikt3uWewBWluIgWf/J6IOQfWpO8E6vq3pAStyIPMDeubAcNBhbvUjj/7 u59s4fyT2m4DiQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:33 2026 by rpki-client