This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft File: DudNGMQEmi2bgSwqWFXP63Wvpmc.mft (raw, json) Hash identifier: PNT/oVFPiAjZ6KOrtdS7Rc5H+EW2NOjdZBlctI6CzAI= Subject key identifier: 99:17:9C:FD:0D:5F:CF:62:19:2A:92:B4:C8:7F:40:1A:BF:13:D4:20 Authority key identifier: 0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67 Certificate issuer: /CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667 Certificate serial: 019C439013CAECCCF2CB8B941025D97D99C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: DudNGMQEmi2bgSwqWFXP63Wvpmc.crl (hash: Dvurnmg68s2nv7GlXZ5IiAXtnM93LBqCXu2+VQQL2og=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:13:ca:ec:cc:f2:cb:8b:94:10:25:d9:7d:99:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ee74d18c4049a2d9b812c2a5855cfeb75afa667 Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=99179cfd0d5fcf62192a92b4c87f401abf13d420 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f8:d4:27:d8:d6:71:c1:df:ee:1b:29:14:d7: 5f:f3:0e:51:ea:b4:ee:e6:70:0c:9c:0d:1b:41:b0: f5:62:ac:cc:26:e2:77:aa:ab:41:39:fc:7a:c6:a6: 8d:7e:ac:69:fb:06:9a:98:45:17:f9:27:e7:ff:a1: 89:f2:10:78:3b:8c:7f:dc:eb:40:cf:fb:f9:0d:b9: 94:dc:22:4f:cc:88:9b:fb:f9:91:f4:5d:13:0d:2d: fb:88:ad:b4:bf:78:73:30:db:4e:45:fa:24:16:15: 07:80:09:45:6c:f2:d8:6d:50:dd:f3:d5:cc:1d:07: f4:27:be:62:57:2f:fb:c6:bc:96:e9:0d:43:56:45: 26:6b:ed:9a:f0:67:9d:51:6e:71:d6:3f:73:95:4d: 62:1a:8d:f3:98:91:ef:aa:82:c4:41:de:02:03:4b: 68:2c:5d:61:31:50:03:b2:e2:35:6e:ef:32:0d:83: 2e:76:b2:1a:a4:a4:33:4f:48:8d:c0:7b:a1:e3:81: c3:80:f8:7a:9e:a8:84:0e:04:e6:03:55:17:2b:95: 15:26:00:8d:c5:50:97:03:38:05:e3:86:c0:bf:f3: 64:ff:4e:20:8c:86:c8:f7:f9:da:a6:25:ef:2e:e2: 78:50:ee:43:e1:5e:be:eb:e5:73:90:c9:86:35:37: f7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:17:9C:FD:0D:5F:CF:62:19:2A:92:B4:C8:7F:40:1A:BF:13:D4:20 X509v3 Authority Key Identifier: keyid:0E:E7:4D:18:C4:04:9A:2D:9B:81:2C:2A:58:55:CF:EB:75:AF:A6:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DudNGMQEmi2bgSwqWFXP63Wvpmc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/2c8dbc-40ae-49c6-8dd3-c25debcb1197/1/DudNGMQEmi2bgSwqWFXP63Wvpmc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b8:a7:a2:6f:20:2e:8f:34:33:95:1a:ce:1f:30:ec:30:bf: eb:d3:56:3d:be:86:45:95:61:90:90:98:72:ee:81:cf:41:ce: cf:22:2f:f9:6e:23:17:af:0f:ba:58:a8:c5:d3:9f:81:5a:c1: e6:8b:30:44:18:29:66:32:e6:10:ba:3d:bc:8b:4e:1e:24:0c: 0a:ed:c0:f4:68:9a:43:34:2b:04:2f:0f:15:42:17:50:8b:31: e7:d1:3d:12:41:15:4c:f4:5a:21:29:cc:aa:bc:32:42:05:48: 72:53:fc:4f:76:5f:f1:e0:c2:97:4f:30:5c:89:d3:85:91:6f: 31:a3:32:fb:78:71:37:74:bf:44:80:34:59:22:5c:e8:96:5b: 67:88:ee:f5:7f:a1:b0:af:c6:04:f3:c3:5f:9a:6c:c0:36:83: d3:21:f4:ed:c6:bb:50:90:21:d2:a0:74:37:cc:18:30:12:68: 3b:75:1b:73:e8:35:23:ed:c6:57:e7:20:46:fe:94:06:ae:6f: 8e:50:96:ac:33:99:3f:d2:66:89:af:c5:9c:49:b6:1f:e2:bc: 1b:ef:fc:b2:fa:5d:e1:b9:8b:ed:6a:9b:b2:bd:05:f9:b9:4c: 89:c1:06:02:5f:49:43:fc:02:c6:04:a5:83:6b:4a:0c:22:7a: 6b:b5:48:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBPK7Mzyy4uUECXZfZnHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZTc0ZDE4YzQwNDlhMmQ5YjgxMmMyYTU4NTVjZmViNzVh ZmE2NjcwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD Eyg5OTE3OWNmZDBkNWZjZjYyMTkyYTkyYjRjODdmNDAxYWJmMTNkNDIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfjUJ9jWccHf7hspFNdf8w5R6rTu 5nAMnA0bQbD1YqzMJuJ3qqtBOfx6xqaNfqxp+waamEUX+Sfn/6GJ8hB4O4x/3OtA z/v5DbmU3CJPzIib+/mR9F0TDS37iK20v3hzMNtORfokFhUHgAlFbPLYbVDd89XM HQf0J75iVy/7xryW6Q1DVkUma+2a8GedUW5x1j9zlU1iGo3zmJHvqoLEQd4CA0to LF1hMVADsuI1bu8yDYMudrIapKQzT0iNwHuh44HDgPh6nqiEDgTmA1UXK5UVJgCN xVCXAzgF44bAv/Nk/04gjIbI9/napiXvLuJ4UO5D4V6+6+VzkMmGNTf3uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkXnP0NX89iGSqStMh/QBq/E9QgMB8GA1UdIwQY MBaAFA7nTRjEBJotm4EsKlhVz+t1r6ZnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMt YzI1ZGViY2IxMTk3LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMi8yYzhkYmMtNDBhZS00OWM2LThkZDMtYzI1ZGViY2IxMTk3 LzEvRHVkTkdNUUVtaTJiZ1N3cVdGWFA2M1d2cG1jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUrinom8g Lo80M5Uazh8w7DC/69NWPb6GRZVhkJCYcu6Bz0HOzyIv+W4jF68PulioxdOfgVrB 5oswRBgpZjLmELo9vItOHiQMCu3A9GiaQzQrBC8PFUIXUIsx59E9EkEVTPRaISnM qrwyQgVIclP8T3Zf8eDCl08wXInThZFvMaMy+3hxN3S/RIA0WSJc6JZbZ4ju9X+h sK/GBPPDX5pswDaD0yH07ca7UJAh0qB0N8wYMBJoO3Ubc+g1I+3GV+cgRv6UBq5v jlCWrDOZP9Jmia/FnEm2H+K8G+/8svpd4bmL7Wqbsr0F+blMicEGAl9JQ/wCxgSl g2tKDCJ6a7VIkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:38 2026 by rpki-client