This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft File: Di1CDmYchlcQif8LUZZahuDXvHU.mft (raw, json) Hash identifier: N0X2mkqXnBvCAU4a/7PUaZwAIByq/R214/aqJkm0Thc= Subject key identifier: 21:8D:E7:B3:15:FA:1E:D8:92:16:B5:03:74:35:EE:6B:F5:2C:71:89 Authority key identifier: 0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 Certificate issuer: /CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Certificate serial: 019C424665E4DAE1226ADF2B698E0E605660 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:00:35 +0000 Manifest this update: Mon 09 Feb 2026 12:00:35 +0000 Manifest next update: Tue 10 Feb 2026 12:00:35 +0000 Files and hashes: 1: Di1CDmYchlcQif8LUZZahuDXvHU.crl (hash: 7rM+PPXP/6xfAaTuVYXp8WnFzqoT1TRydWx1+iibGI8=) 2: qB9Z-zHdmjEFSIG2vfJGfIMdpA0.roa (hash: MxW4mBfsVBC2g/oHLcgSIPQNdBtdZMBf3Vv3p/+UNxg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:65:e4:da:e1:22:6a:df:2b:69:8e:0e:60:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e2d420e661c86571089ff0b51965a86e0d7bc75 Validity Not Before: Feb 9 12:00:35 2026 GMT Not After : Feb 10 12:00:35 2026 GMT Subject: CN=218de7b315fa1ed89216b5037435ee6bf52c7189 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fb:23:10:93:61:72:70:42:94:cc:7d:22:db: 75:2d:32:7c:8e:eb:3a:3e:34:60:cb:81:19:92:f9: 4e:67:1f:bd:ec:89:5c:5e:5e:10:32:6e:e3:9c:28: 7a:24:9a:a4:ad:4d:54:7b:81:e9:40:e5:89:cb:c8: 4c:91:03:89:f9:67:44:a4:ea:bd:46:0c:99:e8:29: fc:44:2f:91:46:a5:41:c4:73:b1:41:6e:72:12:ca: 59:8e:30:c1:57:63:ac:2c:1b:8c:38:a8:22:4d:40: e5:f6:83:c6:01:9f:74:d9:d0:af:ef:d3:b6:7f:b9: 54:31:95:87:ae:3f:e9:63:ef:a8:02:8c:3d:1b:d2: 6b:4f:cb:be:6e:76:8d:32:b3:d9:3b:52:76:4f:3b: 13:56:a4:57:05:af:d2:63:0e:3f:a6:00:68:77:1a: b3:7d:d0:86:0b:58:36:93:ac:b6:85:fc:77:c9:6e: c3:2c:44:6d:5b:e8:f5:5d:11:40:a5:9e:bb:20:9f: d1:30:a8:45:ee:ab:43:83:48:a8:74:96:70:19:5e: 81:9a:13:fc:14:2c:9e:c1:23:75:c6:4b:1d:bf:b7: 9b:51:d6:82:5e:07:5a:ed:0f:6d:ce:ea:cc:14:8d: 9f:af:ee:5b:07:c2:c1:7a:a1:cd:53:25:81:ad:1c: f6:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:8D:E7:B3:15:FA:1E:D8:92:16:B5:03:74:35:EE:6B:F5:2C:71:89 X509v3 Authority Key Identifier: keyid:0E:2D:42:0E:66:1C:86:57:10:89:FF:0B:51:96:5A:86:E0:D7:BC:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Di1CDmYchlcQif8LUZZahuDXvHU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/750009-6fa1-4ef1-832a-75188b3c112e/1/Di1CDmYchlcQif8LUZZahuDXvHU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:8f:2b:55:07:50:e6:35:f5:3e:cd:85:0d:9d:f6:aa:56:43: c1:27:42:0b:87:3f:77:ac:d1:63:59:bc:1c:af:2c:b6:5a:a0: 3f:67:a1:0d:ee:79:a2:7c:e1:e4:bb:e3:99:18:5a:03:ad:41: 73:70:15:e5:8c:ac:f9:8d:7c:3c:8f:9b:6c:d2:b0:95:9a:64: 3e:43:cc:30:79:7d:d2:0c:b7:22:ad:06:33:a9:c4:c1:2a:66: 92:c5:ed:50:9c:55:0a:8b:47:3d:b1:62:b8:bd:55:a1:63:f1: 36:4f:5c:6f:22:b0:fe:dd:b0:7d:34:fe:9f:27:9d:d0:44:b3: a3:84:2f:e7:de:4b:95:dd:8b:96:f5:fa:10:41:18:18:99:9d: a5:d6:a8:cb:41:16:4d:cf:53:75:24:e2:0f:df:8d:de:f3:28: 4d:05:12:93:64:5e:77:c8:7d:e8:b8:ec:19:05:7d:9c:63:b2: e1:1b:1f:7f:27:de:92:e4:a1:91:1c:df:7a:a8:4f:f4:8d:f7: 77:fc:f7:33:de:8c:4c:4d:df:cf:d1:6c:1a:6e:d2:73:39:54: b2:f9:f6:2f:c0:ae:d3:ad:41:8a:cb:c2:b6:6c:b7:27:9f:49: 72:9c:21:5b:b0:48:64:65:4f:51:80:6c:13:ca:ea:df:c2:9f: 12:18:9c:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRmXk2uEiat8raY4OYFZgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMmQ0MjBlNjYxYzg2NTcxMDg5ZmYwYjUxOTY1YTg2ZTBk N2JjNzUwHhcNMjYwMjA5MTIwMDM1WhcNMjYwMjEwMTIwMDM1WjAzMTEwLwYDVQQD EygyMThkZTdiMzE1ZmExZWQ4OTIxNmI1MDM3NDM1ZWU2YmY1MmM3MTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPsjEJNhcnBClMx9Itt1LTJ8jus6 PjRgy4EZkvlOZx+97IlcXl4QMm7jnCh6JJqkrU1Ue4HpQOWJy8hMkQOJ+WdEpOq9 RgyZ6Cn8RC+RRqVBxHOxQW5yEspZjjDBV2OsLBuMOKgiTUDl9oPGAZ902dCv79O2 f7lUMZWHrj/pY++oAow9G9JrT8u+bnaNMrPZO1J2TzsTVqRXBa/SYw4/pgBodxqz fdCGC1g2k6y2hfx3yW7DLERtW+j1XRFApZ67IJ/RMKhF7qtDg0iodJZwGV6BmhP8 FCyewSN1xksdv7ebUdaCXgda7Q9tzurMFI2fr+5bB8LBeqHNUyWBrRz2wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCGN57MV+h7Ykha1A3Q17mv1LHGJMB8GA1UdIwQY MBaAFA4tQg5mHIZXEIn/C1GWWobg17x1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEt NzUxODhiM2MxMTJlLzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NTAwMDktNmZhMS00ZWYxLTgzMmEtNzUxODhiM2MxMTJl LzEvRGkxQ0RtWWNobGNRaWY4TFVaWmFodURYdkhVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbY8rVQdQ 5jX1Ps2FDZ32qlZDwSdCC4c/d6zRY1m8HK8stlqgP2ehDe55onzh5LvjmRhaA61B c3AV5Yys+Y18PI+bbNKwlZpkPkPMMHl90gy3Iq0GM6nEwSpmksXtUJxVCotHPbFi uL1VoWPxNk9cbyKw/t2wfTT+nyed0ESzo4Qv595Lld2LlvX6EEEYGJmdpdaoy0EW Tc9TdSTiD9+N3vMoTQUSk2Red8h96LjsGQV9nGOy4RsffyfekuShkRzfeqhP9I33 d/z3M96MTE3fz9FsGm7SczlUsvn2L8Cu061BisvCtmy3J59JcpwhW7BIZGVPUYBs E8rq38KfEhicKA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:52 2026 by rpki-client