This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft File: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft (raw, json) Hash identifier: w/U6ulwcRv1hpLrVs2XDSyEfM0i1afbss/1NcuOY+vM= Subject key identifier: AD:FB:13:2E:CD:5E:90:44:EF:1D:6E:2B:A5:C5:EF:70:AE:4D:F9:0F Authority key identifier: 0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66 Certificate issuer: /CN=0e1dd539525a39d847014e8fea3c641d973cc866 Certificate serial: 019C41D8E9D20B7EECFE53C603416019D48A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft Manifest number: 0793 Signing time: Mon 09 Feb 2026 10:01:00 +0000 Manifest this update: Mon 09 Feb 2026 10:01:00 +0000 Manifest next update: Tue 10 Feb 2026 10:01:00 +0000 Files and hashes: 1: Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl (hash: iOcsO7zJdE9Cdgc4Vi5BLuBFYNL7lQnM0ggt3xH5ccA=) 2: wWu-RpwUyxS5-QEBD4scp9HUjmY.roa (hash: Vz+DIxi0X/mIEqFNyd8Fjt4ub221xLszyBI1vupEUnQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e9:d2:0b:7e:ec:fe:53:c6:03:41:60:19:d4:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e1dd539525a39d847014e8fea3c641d973cc866 Validity Not Before: Feb 9 10:01:00 2026 GMT Not After : Feb 10 10:01:00 2026 GMT Subject: CN=adfb132ecd5e9044ef1d6e2ba5c5ef70ae4df90f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:89:ab:bd:47:77:c7:c6:c1:16:52:d3:fd:07: 65:cf:26:3f:42:a2:90:d8:cd:e5:1a:63:cc:49:07: e7:b9:9c:c7:e3:85:4c:1c:09:6f:b7:93:2f:92:76: 6f:6b:8c:dc:51:17:dc:e5:67:76:3f:8a:56:8a:39: d9:02:46:df:7b:94:be:ca:13:15:6f:97:dd:64:76: 91:b0:b1:01:c7:2b:89:b8:22:68:62:ac:03:bc:34: 43:d5:bb:43:e9:b5:1c:b2:39:ca:4a:0c:93:1b:b5: d0:f4:31:be:d4:e2:6a:84:76:28:d6:81:9f:1c:db: 76:62:cf:43:f3:3e:92:49:4d:13:b2:b2:3a:81:e8: 1d:b1:ea:d5:12:67:c8:12:cc:7c:e0:88:f0:f1:c8: ac:6c:16:77:58:da:0b:d4:22:6c:ac:98:e7:3e:fd: 8e:41:40:55:d6:5a:ff:56:d5:1d:60:90:d6:85:2f: 83:aa:6d:dc:be:e9:61:48:7f:23:e4:24:1e:64:a2: a9:77:c5:3d:7c:a7:c4:d3:65:b7:18:53:11:4c:4c: 6a:24:df:e8:32:18:7d:70:5e:d5:95:6f:9a:5a:e6: 5c:89:ac:5a:02:7e:68:1e:a9:3b:b0:bf:29:f2:69: 56:7d:45:38:be:37:58:35:bd:05:f7:c2:af:df:61: f2:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:FB:13:2E:CD:5E:90:44:EF:1D:6E:2B:A5:C5:EF:70:AE:4D:F9:0F X509v3 Authority Key Identifier: keyid:0E:1D:D5:39:52:5A:39:D8:47:01:4E:8F:EA:3C:64:1D:97:3C:C8:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/450b29-40d6-4da3-90b0-929893081866/1/Dh3VOVJaOdhHAU6P6jxkHZc8yGY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:eb:42:d3:fb:a3:0c:4c:af:d1:ba:e6:af:9b:76:b0:46:15: 53:c4:28:c5:21:50:52:14:71:95:56:ad:a6:63:b1:7f:3a:b2: d0:15:3d:de:6a:60:38:08:44:19:0a:92:55:b4:88:82:73:02: 79:55:de:94:19:1d:88:da:57:52:83:b3:9d:f3:a6:3e:5c:1f: 9a:01:79:28:5b:f6:5b:2a:d7:4e:0d:86:02:e8:0c:73:73:43: b2:ac:92:fd:d7:29:db:07:be:d3:52:9b:f8:80:91:39:18:ef: 8e:b5:d2:33:46:56:8d:8c:04:5e:f0:40:81:03:fb:7a:1b:55: 0a:7b:16:c4:aa:ec:a9:f0:d1:9f:d6:fe:eb:8e:28:f0:63:38: ac:2c:18:be:fe:f3:b7:8a:16:e4:24:4d:a2:df:a1:27:47:58: da:00:9b:0a:98:04:9e:37:60:b4:20:17:a6:bb:a6:a3:dc:e3: 1a:e9:11:09:89:d8:d5:19:1a:09:41:c8:8d:4d:a4:22:81:e1: 87:02:97:1e:fd:e9:48:e6:5f:fb:45:52:29:3d:4b:09:09:a5: de:05:30:26:b9:b8:dc:8f:f8:6f:3e:97:7b:52:0c:ff:ba:23: ab:7b:11:1c:97:fd:00:17:5e:19:4b:49:72:42:d5:0a:5d:1c: 8b:78:2f:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OnSC37s/lPGA0FgGdSKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlMWRkNTM5NTI1YTM5ZDg0NzAxNGU4ZmVhM2M2NDFkOTcz Y2M4NjYwHhcNMjYwMjA5MTAwMTAwWhcNMjYwMjEwMTAwMTAwWjAzMTEwLwYDVQQD EyhhZGZiMTMyZWNkNWU5MDQ0ZWYxZDZlMmJhNWM1ZWY3MGFlNGRmOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArImrvUd3x8bBFlLT/QdlzyY/QqKQ 2M3lGmPMSQfnuZzH44VMHAlvt5MvknZva4zcURfc5Wd2P4pWijnZAkbfe5S+yhMV b5fdZHaRsLEBxyuJuCJoYqwDvDRD1btD6bUcsjnKSgyTG7XQ9DG+1OJqhHYo1oGf HNt2Ys9D8z6SSU0TsrI6gegdserVEmfIEsx84Ijw8cisbBZ3WNoL1CJsrJjnPv2O QUBV1lr/VtUdYJDWhS+Dqm3cvulhSH8j5CQeZKKpd8U9fKfE02W3GFMRTExqJN/o Mhh9cF7VlW+aWuZciaxaAn5oHqk7sL8p8mlWfUU4vjdYNb0F98Kv32HyPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK37Ey7NXpBE7x1uK6XF73CuTfkPMB8GA1UdIwQY MBaAFA4d1TlSWjnYRwFOj+o8ZB2XPMhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAt OTI5ODkzMDgxODY2LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS80NTBiMjktNDBkNi00ZGEzLTkwYjAtOTI5ODkzMDgxODY2 LzEvRGgzVk9WSmFPZGhIQVU2UDZqeGtIWmM4eUdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+tC0/uj DEyv0brmr5t2sEYVU8QoxSFQUhRxlVatpmOxfzqy0BU93mpgOAhEGQqSVbSIgnMC eVXelBkdiNpXUoOznfOmPlwfmgF5KFv2WyrXTg2GAugMc3NDsqyS/dcp2we+01Kb +ICRORjvjrXSM0ZWjYwEXvBAgQP7ehtVCnsWxKrsqfDRn9b+644o8GM4rCwYvv7z t4oW5CRNot+hJ0dY2gCbCpgEnjdgtCAXprumo9zjGukRCYnY1RkaCUHIjU2kIoHh hwKXHv3pSOZf+0VSKT1LCQml3gUwJrm43I/4bz6Xe1IM/7ojq3sRHJf9ABdeGUtJ ckLVCl0ci3gvWw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:33 2026 by rpki-client