This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft File: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft (raw, json) Hash identifier: QsTsPthuTMGWPRvolXBaT3d5Mr8Yt1hR2RcKKC2Rd0c= Subject key identifier: A9:8B:63:C6:1D:98:43:0D:E9:57:62:10:8E:BC:11:58:6A:82:47:60 Authority key identifier: 0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C Certificate issuer: /CN=0e56c9e58d96af1e4130d7224221192b2c132a5c Certificate serial: 019C42EB415A7713B770111B2938DBB2F8B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 15:00:39 +0000 Manifest this update: Mon 09 Feb 2026 15:00:39 +0000 Manifest next update: Tue 10 Feb 2026 15:00:39 +0000 Files and hashes: 1: DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl (hash: f8cC6oIKt2c2RG5cVlSy6KVyaGZQjRCwCeAOOYdSdys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:41:5a:77:13:b7:70:11:1b:29:38:db:b2:f8:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e56c9e58d96af1e4130d7224221192b2c132a5c Validity Not Before: Feb 9 15:00:39 2026 GMT Not After : Feb 10 15:00:39 2026 GMT Subject: CN=a98b63c61d98430de95762108ebc11586a824760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b0:74:05:12:85:40:36:f9:e4:7f:85:e7:f6: 0f:9b:a0:25:d5:30:b7:49:36:3e:3f:86:17:4b:99: d8:db:a9:b1:88:29:84:3b:d7:8b:1c:e9:88:59:15: 29:3a:23:e1:72:f2:e4:6c:ca:a0:5c:f9:85:8e:38: 95:73:a6:85:cb:c1:4c:4c:77:cc:aa:ad:7b:e3:6c: 58:3b:39:de:da:8f:45:f5:5b:7d:17:4d:63:1c:99: 22:f0:1a:fe:f1:ad:f3:f2:4b:af:5d:35:39:c4:77: 8c:25:50:5c:2d:5b:2b:88:28:3d:3e:e7:21:17:73: cb:f8:42:a9:e0:26:e8:4b:16:67:ee:14:6a:da:73: 04:82:9f:52:07:43:05:71:d8:69:0a:38:fc:7f:88: 3f:13:2b:7f:a8:0f:b1:69:38:f4:98:49:d0:0c:6d: 37:e1:e8:89:38:b1:90:14:38:d0:cc:41:3c:fe:b5: 35:63:ff:62:c7:d3:69:9f:8b:77:89:3b:3e:d5:ab: 2e:cc:9f:a2:88:76:8b:ee:b2:88:00:19:73:37:a9: a1:9e:81:7d:c8:69:3c:25:3b:d5:b4:7c:c0:28:e9: 00:d5:4c:62:e9:fb:c7:2e:4f:86:bd:c6:42:13:28: 23:55:0b:29:50:32:d0:1d:73:af:f9:ee:10:34:9e: 24:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8B:63:C6:1D:98:43:0D:E9:57:62:10:8E:BC:11:58:6A:82:47:60 X509v3 Authority Key Identifier: keyid:0E:56:C9:E5:8D:96:AF:1E:41:30:D7:22:42:21:19:2B:2C:13:2A:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4c8208-ba30-4716-a6c8-84f3524626bd/1/DlbJ5Y2Wrx5BMNciQiEZKywTKlw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:e4:ed:c2:66:88:21:04:66:5d:9e:44:ae:8d:86:da:fc:77: 03:f2:58:e3:cb:c9:f6:b7:5c:01:e8:1d:2d:4c:e9:e8:ba:70: fb:41:e9:50:5e:75:fe:09:37:61:a4:9f:df:c3:d0:d9:69:79: d6:fc:c0:87:5c:d8:46:6e:99:a4:25:fc:26:08:cd:59:f4:07: 7d:0e:62:e1:2b:db:17:b9:20:ca:5d:66:c4:5f:f5:97:37:4d: 68:63:9c:e7:39:28:0d:c6:f9:29:55:32:01:2c:83:9d:df:53: c9:80:96:9d:cc:b2:9b:b8:5e:6f:ec:d3:f7:e1:2f:65:07:a0: 65:53:d1:d8:1f:60:2d:c9:d6:ae:8f:0e:37:de:65:3a:97:98: 58:1f:1e:19:e3:4c:49:65:75:51:f3:11:64:b2:a7:dd:91:f1: 06:4a:39:04:5a:2b:77:30:a7:00:d2:f8:0c:8f:6d:3d:3b:a4: f4:9e:7f:4f:36:19:ba:ab:3e:76:bb:ff:04:7f:2f:19:b9:b7: a3:d4:53:83:65:58:9b:ae:3a:8b:67:6c:8c:63:5c:16:da:3b: 51:0a:60:cd:bd:2f:bc:8b:ff:ff:2a:a2:36:1a:3b:7b:84:64: a1:b1:c8:93:12:f9:96:67:22:25:cb:17:f9:c4:53:93:5b:8a: 1d:72:11:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60FadxO3cBEbKTjbsvi0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNTZjOWU1OGQ5NmFmMWU0MTMwZDcyMjQyMjExOTJiMmMx MzJhNWMwHhcNMjYwMjA5MTUwMDM5WhcNMjYwMjEwMTUwMDM5WjAzMTEwLwYDVQQD EyhhOThiNjNjNjFkOTg0MzBkZTk1NzYyMTA4ZWJjMTE1ODZhODI0NzYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7B0BRKFQDb55H+F5/YPm6Al1TC3 STY+P4YXS5nY26mxiCmEO9eLHOmIWRUpOiPhcvLkbMqgXPmFjjiVc6aFy8FMTHfM qq1742xYOzne2o9F9Vt9F01jHJki8Br+8a3z8kuvXTU5xHeMJVBcLVsriCg9Puch F3PL+EKp4CboSxZn7hRq2nMEgp9SB0MFcdhpCjj8f4g/Eyt/qA+xaTj0mEnQDG03 4eiJOLGQFDjQzEE8/rU1Y/9ix9Npn4t3iTs+1asuzJ+iiHaL7rKIABlzN6mhnoF9 yGk8JTvVtHzAKOkA1Uxi6fvHLk+GvcZCEygjVQspUDLQHXOv+e4QNJ4kbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKmLY8YdmEMN6VdiEI68EVhqgkdgMB8GA1UdIwQY MBaAFA5WyeWNlq8eQTDXIkIhGSssEypcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGxiSjVZMldyeDVCTU5jaVFpRVpLeXdUS2x3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80YzgyMDgtYmEzMC00NzE2LWE2Yzgt ODRmMzUyNDYyNmJkLzEvRGxiSjVZMldyeDVCTU5jaVFpRVpLeXdUS2x3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC80YzgyMDgtYmEzMC00NzE2LWE2YzgtODRmMzUyNDYyNmJk LzEvRGxiSjVZMldyeDVCTU5jaVFpRVpLeXdUS2x3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+TtwmaI IQRmXZ5Ero2G2vx3A/JY48vJ9rdcAegdLUzp6Lpw+0HpUF51/gk3YaSf38PQ2Wl5 1vzAh1zYRm6ZpCX8JgjNWfQHfQ5i4SvbF7kgyl1mxF/1lzdNaGOc5zkoDcb5KVUy ASyDnd9TyYCWncyym7heb+zT9+EvZQegZVPR2B9gLcnWro8ON95lOpeYWB8eGeNM SWV1UfMRZLKn3ZHxBko5BFordzCnANL4DI9tPTuk9J5/TzYZuqs+drv/BH8vGbm3 o9RTg2VYm646i2dsjGNcFto7UQpgzb0vvIv//yqiNho7e4RkobHIkxL5lmciJcsX +cRTk1uKHXIRRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:35 2026 by rpki-client