This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft File: D81k6vJZSCLz-aLrzRnbm3-nDZo.mft (raw, json) Hash identifier: 4TSXLYK2BQUUxG+mP/eCF2Mc/sfsKIPvK/j/T1S81q8= Subject key identifier: E7:C2:FA:0A:D2:AB:A9:10:32:D5:0A:D1:76:DB:97:94:F2:CA:DA:79 Authority key identifier: 0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A Certificate issuer: /CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Certificate serial: 019C443547C524060CD04395FF9A27B77668 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft Manifest number: 0419 Signing time: Mon 09 Feb 2026 21:01:08 +0000 Manifest this update: Mon 09 Feb 2026 21:01:08 +0000 Manifest next update: Tue 10 Feb 2026 21:01:08 +0000 Files and hashes: 1: D81k6vJZSCLz-aLrzRnbm3-nDZo.crl (hash: jXZaz/c/6FKNKi0awedtKHoE8vBfUa48blpMTzG6pRU=) 2: kiTvl7qRwBbY6cobkK0xpr1YwKU.roa (hash: ej/OHpg3lUXGkRe1UvCRILNoIypuMG3kknoqujS4cxQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:47:c5:24:06:0c:d0:43:95:ff:9a:27:b7:76:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0fcd64eaf2594822f3f9a2ebcd19db9b7fa70d9a Validity Not Before: Feb 9 21:01:08 2026 GMT Not After : Feb 10 21:01:08 2026 GMT Subject: CN=e7c2fa0ad2aba91032d50ad176db9794f2cada79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7a:85:5a:14:d0:12:bd:6c:a4:01:a4:4f:fa: ca:c0:c0:22:05:0b:a9:11:b1:fe:ed:8c:88:81:f2: f1:94:6c:e7:34:fe:96:a0:c3:37:e7:9d:d6:57:86: 72:6c:09:10:c6:ed:5b:b9:3a:7b:40:32:ea:7e:30: bc:72:54:b8:fd:89:97:38:20:96:ba:18:65:19:1b: 25:a9:26:6d:e1:69:73:f0:16:8f:26:d1:7b:eb:d7: 66:e4:e1:5a:8b:d2:8f:ea:63:e8:22:db:23:9a:40: 91:8f:06:51:58:20:da:2c:3f:da:80:df:e7:ad:e5: f4:ab:36:2e:dd:5e:3d:e4:33:e6:ed:9c:46:e4:d1: 88:02:cc:41:1a:f9:5a:3e:4f:85:3a:ba:93:e7:8f: d1:01:97:4b:bf:fd:b0:10:31:fc:c3:97:3c:19:bc: 5f:c9:11:72:c3:7d:57:f4:31:d2:f0:65:9e:98:13: d3:19:c9:84:e5:0d:a2:9e:eb:de:01:60:1d:82:36: 4a:5d:30:56:25:07:5d:ec:01:5d:f8:ba:50:01:2c: 1f:9b:79:aa:91:af:08:f0:23:0f:f3:98:fa:d8:ed: 17:b0:45:29:7b:01:42:60:1d:76:2b:55:e5:64:46: d5:3e:bb:1d:75:92:92:7f:18:9f:26:ca:04:74:67: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C2:FA:0A:D2:AB:A9:10:32:D5:0A:D1:76:DB:97:94:F2:CA:DA:79 X509v3 Authority Key Identifier: keyid:0F:CD:64:EA:F2:59:48:22:F3:F9:A2:EB:CD:19:DB:9B:7F:A7:0D:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D81k6vJZSCLz-aLrzRnbm3-nDZo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/0e6542-3abe-45a1-a838-1a37f1076557/1/D81k6vJZSCLz-aLrzRnbm3-nDZo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:72:c8:e8:16:c4:1a:8b:c8:3f:2d:56:d9:d6:66:80:b3:2d: 3e:f7:18:bb:0b:b7:1b:ca:10:0a:0a:a3:88:d6:a2:1d:e2:51: 64:db:60:30:bb:73:f3:7b:e8:a1:7e:38:a5:e6:9e:ba:5b:91: 4c:80:13:ba:72:3f:79:e4:a9:6c:43:a7:31:da:6b:f9:b9:21: 37:43:da:4c:a0:a2:8f:28:22:96:d7:a0:2a:f2:d2:e3:38:c4: a1:c0:67:7c:61:b6:fb:70:f5:12:83:d7:55:e6:9b:05:2c:7c: e0:73:5d:12:9f:bb:fe:ed:25:b4:e6:e4:e7:47:f3:53:f3:d3: 11:1b:de:95:a1:1f:cf:36:c9:ad:05:57:4a:3a:11:c5:28:f0: fb:29:03:0b:71:11:bb:27:da:6f:87:06:45:97:b6:6d:34:d7: 2e:8e:86:e0:6e:a6:c3:10:ea:bf:ad:9e:bb:74:17:a1:a4:f7: 64:41:98:f5:36:a4:27:7d:36:4b:73:97:6e:0d:1b:d8:30:41: f0:7e:8a:e7:62:83:9c:fc:f6:73:9c:a9:6a:4a:4e:47:24:dd: 10:4d:85:41:26:2f:6c:73:99:be:a2:ef:48:3a:89:3a:b6:39: 4a:1e:8e:92:ff:d5:1d:40:66:53:3a:7a:4f:16:c7:66:77:72: aa:1e:29:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENUfFJAYM0EOV/5ont3ZoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmY2Q2NGVhZjI1OTQ4MjJmM2Y5YTJlYmNkMTlkYjliN2Zh NzBkOWEwHhcNMjYwMjA5MjEwMTA4WhcNMjYwMjEwMjEwMTA4WjAzMTEwLwYDVQQD EyhlN2MyZmEwYWQyYWJhOTEwMzJkNTBhZDE3NmRiOTc5NGYyY2FkYTc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23qFWhTQEr1spAGkT/rKwMAiBQup EbH+7YyIgfLxlGznNP6WoMM3553WV4ZybAkQxu1buTp7QDLqfjC8clS4/YmXOCCW uhhlGRslqSZt4Wlz8BaPJtF769dm5OFai9KP6mPoItsjmkCRjwZRWCDaLD/agN/n reX0qzYu3V495DPm7ZxG5NGIAsxBGvlaPk+FOrqT54/RAZdLv/2wEDH8w5c8Gbxf yRFyw31X9DHS8GWemBPTGcmE5Q2inuveAWAdgjZKXTBWJQdd7AFd+LpQASwfm3mq ka8I8CMP85j62O0XsEUpewFCYB12K1XlZEbVPrsddZKSfxifJsoEdGdhQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfC+grSq6kQMtUK0Xbbl5Tyytp5MB8GA1UdIwQY MBaAFA/NZOryWUgi8/mi680Z25t/pw2aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4Mzgt MWEzN2YxMDc2NTU3LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi8wZTY1NDItM2FiZS00NWExLWE4MzgtMWEzN2YxMDc2NTU3 LzEvRDgxazZ2SlpTQ0x6LWFMcnpSbmJtMy1uRFpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXLI6BbE GovIPy1W2dZmgLMtPvcYuwu3G8oQCgqjiNaiHeJRZNtgMLtz83vooX44peaeuluR TIATunI/eeSpbEOnMdpr+bkhN0PaTKCijygiltegKvLS4zjEocBnfGG2+3D1EoPX VeabBSx84HNdEp+7/u0ltObk50fzU/PTERvelaEfzzbJrQVXSjoRxSjw+ykDC3ER uyfab4cGRZe2bTTXLo6G4G6mwxDqv62eu3QXoaT3ZEGY9TakJ302S3OXbg0b2DBB 8H6K52KDnPz2c5ypakpORyTdEE2FQSYvbHOZvqLvSDqJOrY5Sh6Okv/VHUBmUzp6 TxbHZndyqh4pMA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:37:09 2026 by rpki-client