This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft File: dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft (raw, json) Hash identifier: /2pXZYEBFxL+2MdkTfSWdV5pQQKrnMyAkOMor0E2KHE= Subject key identifier: 4C:BB:7F:73:50:FB:4B:F5:7B:14:4E:50:3C:DA:B2:07:BD:04:D5:D0 Authority key identifier: 75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 Certificate issuer: /CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Certificate serial: 019C42EAD981C48B7C78E7F4551A9E6ABC83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 15:00:13 +0000 Manifest this update: Mon 09 Feb 2026 15:00:13 +0000 Manifest next update: Tue 10 Feb 2026 15:00:13 +0000 Files and hashes: 1: dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl (hash: HUQydyPlYRwMpWBohLaOD7si8KusQETMe+C2C+pvGQo=) 2: ufSzeyDtwqyX2VcVaLd_bm70odg.roa (hash: mOh78oLKMhO8N2vOwgRV00Yf6t8BsMyPRhqMpzfai3o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:d9:81:c4:8b:7c:78:e7:f4:55:1a:9e:6a:bc:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75facb07f2ccb92eeba87854c94240e4f5ac8f52 Validity Not Before: Feb 9 15:00:13 2026 GMT Not After : Feb 10 15:00:13 2026 GMT Subject: CN=4cbb7f7350fb4bf57b144e503cdab207bd04d5d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2c:fb:bd:4e:5c:c4:fc:0f:55:8f:1b:5b:5e: 9b:de:f2:b5:2c:57:9a:f2:a6:7c:94:98:fc:d4:70: e2:12:d4:e1:20:55:f2:04:3d:44:d4:4f:ca:43:4d: 8d:9b:37:9e:b9:51:f0:11:04:0e:7a:15:ac:7c:f0: e0:f0:bb:d2:50:47:55:ce:c5:89:d3:ad:17:df:57: 3f:ad:d8:63:14:79:ab:0a:b4:0c:60:e0:e3:5d:bc: 7a:09:fe:7f:86:9b:a4:9c:e1:ad:f8:19:3d:38:fe: a2:e2:86:ca:cd:4d:ad:53:8f:77:64:65:5f:02:a2: 33:15:bb:7d:9b:f3:f7:4a:f5:4d:42:58:7e:da:af: 61:32:f2:79:07:b5:6a:90:96:80:80:26:98:ad:0d: 3a:af:a0:25:33:38:ca:aa:d2:a2:5b:c5:cb:76:7c: 16:c4:e6:7e:0e:a5:14:ea:7f:19:aa:02:39:14:00: 4c:7f:89:e5:c4:98:45:c1:f4:bc:ed:63:fb:06:f8: b0:06:01:79:5b:06:2e:2a:f1:03:74:62:5b:1e:e3: 64:2e:95:42:51:4b:44:51:b4:30:b5:49:65:53:f4: 7d:25:4e:d3:9c:3a:dd:aa:79:3b:ae:a2:21:43:51: 49:63:f2:78:ab:83:7e:ec:fb:ea:db:10:38:1c:a4: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BB:7F:73:50:FB:4B:F5:7B:14:4E:50:3C:DA:B2:07:BD:04:D5:D0 X509v3 Authority Key Identifier: keyid:75:FA:CB:07:F2:CC:B9:2E:EB:A8:78:54:C9:42:40:E4:F5:AC:8F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dfrLB_LMuS7rqHhUyUJA5PWsj1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/900cbf-477b-46be-8f5d-c911483da78c/1/dfrLB_LMuS7rqHhUyUJA5PWsj1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:35:8b:e0:9a:33:d1:c0:18:d2:59:50:9f:e9:18:b4:e6:83: 3c:ef:a0:ab:9b:33:33:c6:8b:2d:aa:3c:b3:4c:0e:ce:8f:1d: c4:81:77:c1:29:6a:d3:f1:18:04:64:91:f5:ec:96:6d:d4:24: df:2a:fe:63:54:44:75:43:25:b4:21:ea:f7:11:51:61:72:bb: 2e:c5:7c:dd:ad:16:b5:e5:9f:a5:61:79:54:43:34:ed:80:8c: be:31:a5:82:ba:28:24:97:de:c1:a1:72:38:73:17:ac:13:00: f7:da:fc:fe:57:13:98:4e:50:3a:d8:ef:2c:00:50:b1:4f:2d: 2f:a0:77:c6:54:38:db:ef:ee:4e:f5:39:ee:f5:3a:cf:b2:7e: 4d:13:9f:17:35:a1:8b:a4:e4:b3:aa:91:fd:e1:80:9e:f3:d9: 3f:a2:67:d0:3a:07:eb:7f:0a:8e:ba:7e:dc:94:df:53:ec:8e: f6:06:1b:24:ba:d6:41:51:a2:e9:67:ba:31:f6:ea:02:2d:d7: 51:f1:d2:2e:fd:7b:f5:eb:a5:03:14:d7:52:72:7d:c5:c0:df: e8:42:8b:03:ae:1c:30:80:10:ae:03:7c:c7:16:68:ea:02:31: ea:35:33:b9:d2:8a:2b:43:88:c8:2d:8b:4f:7c:85:64:c7:b4: 2c:70:11:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6tmBxIt8eOf0VRqearyDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1ZmFjYjA3ZjJjY2I5MmVlYmE4Nzg1NGM5NDI0MGU0ZjVh YzhmNTIwHhcNMjYwMjA5MTUwMDEzWhcNMjYwMjEwMTUwMDEzWjAzMTEwLwYDVQQD Eyg0Y2JiN2Y3MzUwZmI0YmY1N2IxNDRlNTAzY2RhYjIwN2JkMDRkNWQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiz7vU5cxPwPVY8bW16b3vK1LFea 8qZ8lJj81HDiEtThIFXyBD1E1E/KQ02NmzeeuVHwEQQOehWsfPDg8LvSUEdVzsWJ 060X31c/rdhjFHmrCrQMYODjXbx6Cf5/hpuknOGt+Bk9OP6i4obKzU2tU493ZGVf AqIzFbt9m/P3SvVNQlh+2q9hMvJ5B7VqkJaAgCaYrQ06r6AlMzjKqtKiW8XLdnwW xOZ+DqUU6n8ZqgI5FABMf4nlxJhFwfS87WP7BviwBgF5WwYuKvEDdGJbHuNkLpVC UUtEUbQwtUllU/R9JU7TnDrdqnk7rqIhQ1FJY/J4q4N+7Pvq2xA4HKQzBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEy7f3NQ+0v1exROUDzasge9BNXQMB8GA1UdIwQY MBaAFHX6ywfyzLku66h4VMlCQOT1rI9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQt YzkxMTQ4M2RhNzhjLzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC85MDBjYmYtNDc3Yi00NmJlLThmNWQtYzkxMTQ4M2RhNzhj LzEvZGZyTEJfTE11UzdycUhoVXlVSkE1UFdzajFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUDWL4Joz 0cAY0llQn+kYtOaDPO+gq5szM8aLLao8s0wOzo8dxIF3wSlq0/EYBGSR9eyWbdQk 3yr+Y1REdUMltCHq9xFRYXK7LsV83a0WteWfpWF5VEM07YCMvjGlgrooJJfewaFy OHMXrBMA99r8/lcTmE5QOtjvLABQsU8tL6B3xlQ42+/uTvU57vU6z7J+TROfFzWh i6Tks6qR/eGAnvPZP6Jn0DoH638Kjrp+3JTfU+yO9gYbJLrWQVGi6We6MfbqAi3X UfHSLv179eulAxTXUnJ9xcDf6EKLA64cMIAQrgN8xxZo6gIx6jUzudKKK0OIyC2L T3yFZMe0LHARBg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:36 2026 by rpki-client