This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft File: dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft (raw, json) Hash identifier: PinyD6KqELw9zBCkHfVw+3vAkK6hFnDnZXlGjJcGzfs= Subject key identifier: 13:D8:32:92:9C:CD:F7:95:52:F7:FC:E8:65:4B:8B:36:65:B9:6F:60 Authority key identifier: 74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17 Certificate issuer: /CN=742e571d0006fe7f660b0308ccc61a1699e34917 Certificate serial: 019C4133D811E2505F9CAD7222967635001B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 07:00:42 +0000 Manifest this update: Mon 09 Feb 2026 07:00:42 +0000 Manifest next update: Tue 10 Feb 2026 07:00:42 +0000 Files and hashes: 1: dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl (hash: RWSBSFfqnavUJhAXZDHldpUI9iW535mn4OcD9sAboGs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:d8:11:e2:50:5f:9c:ad:72:22:96:76:35:00:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=742e571d0006fe7f660b0308ccc61a1699e34917 Validity Not Before: Feb 9 07:00:42 2026 GMT Not After : Feb 10 07:00:42 2026 GMT Subject: CN=13d832929ccdf79552f7fce8654b8b3665b96f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:29:c3:01:ab:ea:29:21:15:da:c2:88:1b:cc: 23:f5:8f:d7:d6:f8:25:22:2b:59:59:de:ce:c0:31: a8:13:18:37:cd:f2:e8:d2:5b:bc:13:b2:a3:4f:fa: 48:7c:3e:5e:e3:04:70:f0:42:a0:de:d4:f2:2e:47: 80:f2:03:29:fc:cc:69:d0:02:66:94:7c:a3:48:7f: 90:a9:f4:0c:51:c3:08:7f:1a:56:3d:02:b4:7f:b3: d1:02:22:92:85:78:d1:7f:3a:62:5e:9f:43:bf:01: bb:69:04:9b:6a:c2:64:9e:04:94:26:d6:bd:7a:64: c1:eb:03:f9:04:77:5a:0a:41:ec:6b:a3:2f:2f:01: 66:44:54:b9:aa:b1:93:47:61:06:0e:f2:df:9e:36: 18:bf:45:12:e6:d8:a4:48:77:67:c4:e8:84:e7:de: 11:fd:0a:c9:5b:dc:9a:ce:dc:8c:6e:58:f0:c7:81: bd:50:9d:38:5c:53:05:43:4e:3e:35:32:b3:55:2e: 67:33:09:b5:32:9a:67:58:90:8f:81:2c:e5:69:10: a7:c7:5c:ec:10:3f:9d:0a:52:e1:27:33:d3:d6:62: e8:84:29:d9:9c:63:b3:63:f1:de:74:3e:23:5e:4e: 3c:4e:d5:86:e6:d0:f2:66:ff:0a:ee:51:88:8c:a7: 49:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:D8:32:92:9C:CD:F7:95:52:F7:FC:E8:65:4B:8B:36:65:B9:6F:60 X509v3 Authority Key Identifier: keyid:74:2E:57:1D:00:06:FE:7F:66:0B:03:08:CC:C6:1A:16:99:E3:49:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dC5XHQAG_n9mCwMIzMYaFpnjSRc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/2e03af-83a4-4c9f-911a-d5844b3c5177/1/dC5XHQAG_n9mCwMIzMYaFpnjSRc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:99:50:2f:09:d2:ac:56:e5:cf:96:37:2d:4a:1c:06:7e:77: d3:86:2e:5a:91:f4:8e:02:6e:10:90:ea:49:d9:81:23:11:0e: 03:3d:17:1e:06:c8:ec:e4:a0:3b:41:3d:58:8d:e1:16:ca:04: be:ff:58:4d:8a:c5:6e:75:58:96:21:5f:9a:03:c0:29:8b:91: b9:07:db:0f:63:1b:83:1e:3b:81:73:a6:ed:18:64:cb:dd:cd: a0:aa:9a:9f:9d:3f:10:9e:c0:ed:6e:5d:2e:42:6c:6b:2d:a7: cf:e3:99:4a:fd:a5:04:20:51:a9:04:27:f1:bb:94:05:b4:1d: a6:7e:f4:e7:c2:87:6c:69:e1:9c:eb:83:c2:95:87:78:45:a7: 3e:31:d4:19:21:42:5c:67:cb:5e:72:c7:2b:c0:b5:e7:3b:f1: ac:41:ae:1d:31:0c:21:7a:4c:64:f2:cf:6f:22:96:b9:35:92: 39:0e:f6:52:6f:28:f6:40:b0:11:c8:cf:1e:a9:32:a8:1c:46: 7d:f2:71:57:a0:bc:56:2e:d0:2e:65:27:1a:6f:9b:29:aa:e7: 28:fa:77:0d:d1:43:16:9c:1a:b2:f1:94:a7:14:6e:3a:cd:18: 30:ce:f7:0d:08:1a:80:42:62:aa:a8:56:1d:6a:0e:49:c9:46: b9:d6:81:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM9gR4lBfnK1yIpZ2NQAbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0MmU1NzFkMDAwNmZlN2Y2NjBiMDMwOGNjYzYxYTE2OTll MzQ5MTcwHhcNMjYwMjA5MDcwMDQyWhcNMjYwMjEwMDcwMDQyWjAzMTEwLwYDVQQD EygxM2Q4MzI5MjljY2RmNzk1NTJmN2ZjZTg2NTRiOGIzNjY1Yjk2ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSnDAavqKSEV2sKIG8wj9Y/X1vgl IitZWd7OwDGoExg3zfLo0lu8E7KjT/pIfD5e4wRw8EKg3tTyLkeA8gMp/Mxp0AJm lHyjSH+QqfQMUcMIfxpWPQK0f7PRAiKShXjRfzpiXp9DvwG7aQSbasJkngSUJta9 emTB6wP5BHdaCkHsa6MvLwFmRFS5qrGTR2EGDvLfnjYYv0US5tikSHdnxOiE594R /QrJW9yaztyMbljwx4G9UJ04XFMFQ04+NTKzVS5nMwm1MppnWJCPgSzlaRCnx1zs ED+dClLhJzPT1mLohCnZnGOzY/HedD4jXk48TtWG5tDyZv8K7lGIjKdJrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBPYMpKczfeVUvf86GVLizZluW9gMB8GA1UdIwQY MBaAFHQuVx0ABv5/ZgsDCMzGGhaZ40kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEt ZDU4NDRiM2M1MTc3LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8yZTAzYWYtODNhNC00YzlmLTkxMWEtZDU4NDRiM2M1MTc3 LzEvZEM1WEhRQUdfbjltQ3dNSXpNWWFGcG5qU1JjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJlQLwnS rFblz5Y3LUocBn5304YuWpH0jgJuEJDqSdmBIxEOAz0XHgbI7OSgO0E9WI3hFsoE vv9YTYrFbnVYliFfmgPAKYuRuQfbD2Mbgx47gXOm7Rhky93NoKqan50/EJ7A7W5d LkJsay2nz+OZSv2lBCBRqQQn8buUBbQdpn7058KHbGnhnOuDwpWHeEWnPjHUGSFC XGfLXnLHK8C15zvxrEGuHTEMIXpMZPLPbyKWuTWSOQ72Um8o9kCwEcjPHqkyqBxG ffJxV6C8Vi7QLmUnGm+bKarnKPp3DdFDFpwasvGUpxRuOs0YMM73DQgagEJiqqhW HWoOSclGudaBiw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:31 2026 by rpki-client