This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft File: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft (raw, json) Hash identifier: aTUFPtzwtxVmL8VwGn+R1Dd3v0CbcT3j1QphEXjqDEw= Subject key identifier: 47:83:68:EC:2C:D4:4F:99:E3:89:C5:D2:67:80:DD:D0:88:BB:9F:3F Authority key identifier: 0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 Certificate issuer: /CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Certificate serial: 019C41D89F9E9BA26DD63DAB8DCBD4170358 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 10:00:41 +0000 Manifest this update: Mon 09 Feb 2026 10:00:41 +0000 Manifest next update: Tue 10 Feb 2026 10:00:41 +0000 Files and hashes: 1: Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl (hash: MtH4+fgVTFaUdb9LGUgh4l8TNNuFgsBIAzmmlsYsCu0=) 2: pUIM7v10t5OGFrSPmfiKdj44TIc.roa (hash: Oo445ykGaPumhWQXMGT+U7KwU/ygHDEsLqsafB1c140=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:9f:9e:9b:a2:6d:d6:3d:ab:8d:cb:d4:17:03:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f37397d8b6c873e29be6e099de7b746eafd0eb4 Validity Not Before: Feb 9 10:00:41 2026 GMT Not After : Feb 10 10:00:41 2026 GMT Subject: CN=478368ec2cd44f99e389c5d26780ddd088bb9f3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:de:32:58:88:ec:65:ee:8b:3a:14:39:bd:7a: 48:b9:37:e0:fc:93:60:80:50:c1:2b:11:35:32:14: f0:fc:80:16:c3:35:9e:43:69:5a:ab:20:8f:3e:19: 9b:0d:79:31:d0:f6:71:22:f0:1b:9e:0d:2d:9f:73: 21:de:b8:56:f0:9e:0b:da:17:8f:14:64:d4:0b:27: de:07:f9:f6:23:39:63:88:2e:00:6e:71:0c:56:e5: c4:08:e5:f8:1b:dc:72:d0:cd:b6:3f:34:9f:21:b0: 50:28:ca:68:ea:2f:6a:ac:cc:b2:b2:c4:6f:69:84: 92:6a:64:18:39:60:78:f2:6d:0f:d9:59:8c:53:bd: 89:1a:ce:e7:41:c4:ab:b2:1d:1e:93:3b:45:2c:72: cc:9e:90:18:a2:7e:4f:55:2d:6d:8c:d2:9f:47:cf: e0:46:73:31:89:0e:26:a5:39:52:a1:ff:d2:3e:4f: c1:c1:54:df:47:cf:10:38:d2:7a:52:4c:69:9a:4b: 5e:c8:54:24:9b:c0:9c:f2:6c:0e:b9:c1:71:91:37: b2:4c:7c:57:2d:0c:5a:46:6a:54:d2:db:4a:ea:a4: 3e:e0:22:a2:3f:49:10:22:fc:e7:91:83:da:d1:7a: ae:ea:9e:ef:45:5c:91:3c:63:b3:f8:3f:19:6c:91: f1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:83:68:EC:2C:D4:4F:99:E3:89:C5:D2:67:80:DD:D0:88:BB:9F:3F X509v3 Authority Key Identifier: keyid:0F:37:39:7D:8B:6C:87:3E:29:BE:6E:09:9D:E7:B7:46:EA:FD:0E:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/21ba83-f94e-455a-a2b7-a62556d25447/1/Dzc5fYtshz4pvm4Jnee3Rur9DrQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:18:5b:47:2c:92:40:6b:b4:84:95:08:20:63:81:e3:17: 35:6a:c1:94:7c:59:a3:9e:68:b7:8a:a4:c1:8a:29:ac:b3:2d: 55:2b:36:1f:4c:d2:ca:58:a8:fd:55:46:1b:13:fe:a3:c2:1c: 28:46:19:92:0e:74:da:51:f9:53:5b:34:54:77:14:65:bd:d6: 9e:7d:8f:c7:09:8b:21:28:cf:9c:d7:e5:04:cc:ec:82:7c:41: bf:84:e9:93:a3:01:2c:92:83:06:2c:92:8c:88:c6:60:c0:9c: ed:cc:85:55:33:c2:6b:02:6f:fc:69:48:0a:b1:29:4a:65:92: 23:c4:e3:ca:07:93:c7:01:b2:d6:3c:b1:29:db:23:ef:5c:d9: e9:3c:5d:2d:d6:da:92:48:8f:c6:02:61:79:53:cc:4f:00:66: 51:63:6f:f8:cf:8a:b4:78:0f:4d:57:70:05:ab:91:26:ba:6b: cf:be:72:c5:bf:c4:b2:12:4d:a0:6c:23:36:82:09:0e:9c:db: ee:34:9a:81:99:04:a8:a9:d7:26:67:5b:85:34:1e:ec:90:2c: 06:a4:e8:cb:d5:c2:2e:6b:f0:52:2d:29:b4:f1:b4:b0:c3:2b: dd:c7:ae:1b:a9:70:c5:c5:be:7f:68:fa:b9:6e:ed:98:d2:b9: b0:79:ea:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2J+em6Jt1j2rjcvUFwNYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMzczOTdkOGI2Yzg3M2UyOWJlNmUwOTlkZTdiNzQ2ZWFm ZDBlYjQwHhcNMjYwMjA5MTAwMDQxWhcNMjYwMjEwMTAwMDQxWjAzMTEwLwYDVQQD Eyg0NzgzNjhlYzJjZDQ0Zjk5ZTM4OWM1ZDI2NzgwZGRkMDg4YmI5ZjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN4yWIjsZe6LOhQ5vXpIuTfg/JNg gFDBKxE1MhTw/IAWwzWeQ2laqyCPPhmbDXkx0PZxIvAbng0tn3Mh3rhW8J4L2heP FGTUCyfeB/n2IzljiC4AbnEMVuXECOX4G9xy0M22PzSfIbBQKMpo6i9qrMyyssRv aYSSamQYOWB48m0P2VmMU72JGs7nQcSrsh0ekztFLHLMnpAYon5PVS1tjNKfR8/g RnMxiQ4mpTlSof/SPk/BwVTfR88QONJ6UkxpmkteyFQkm8Cc8mwOucFxkTeyTHxX LQxaRmpU0ttK6qQ+4CKiP0kQIvznkYPa0Xqu6p7vRVyRPGOz+D8ZbJHxrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEeDaOws1E+Z44nF0meA3dCIu58/MB8GA1UdIwQY MBaAFA83OX2LbIc+Kb5uCZ3nt0bq/Q60MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjct YTYyNTU2ZDI1NDQ3LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy8yMWJhODMtZjk0ZS00NTVhLWEyYjctYTYyNTU2ZDI1NDQ3 LzEvRHpjNWZZdHNoejRwdm00Sm5lZTNSdXI5RHJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWMIYW0cs kkBrtISVCCBjgeMXNWrBlHxZo55ot4qkwYoprLMtVSs2H0zSylio/VVGGxP+o8Ic KEYZkg502lH5U1s0VHcUZb3Wnn2PxwmLISjPnNflBMzsgnxBv4Tpk6MBLJKDBiyS jIjGYMCc7cyFVTPCawJv/GlICrEpSmWSI8TjygeTxwGy1jyxKdsj71zZ6TxdLdba kkiPxgJheVPMTwBmUWNv+M+KtHgPTVdwBauRJrprz75yxb/EshJNoGwjNoIJDpzb 7jSagZkEqKnXJmdbhTQe7JAsBqToy9XCLmvwUi0ptPG0sMMr3ceuG6lwxcW+f2j6 uW7tmNK5sHnq8w== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:07 2026 by rpki-client