This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft File: DtjJoWGXLWi0RTPg4x9R5NzlunU.mft (raw, json) Hash identifier: IjBG4xw8BmwcdK/O7fI4uRh0BU/58ztmbdzvdjbeI4I= Subject key identifier: FD:DD:26:AA:21:8F:CE:58:E0:C5:8A:63:1B:EC:AD:86:EE:F8:BA:E4 Authority key identifier: 0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75 Certificate issuer: /CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75 Certificate serial: 019C413377F7F932C7E95C6047B2E21B12D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft Manifest number: 180A Signing time: Mon 09 Feb 2026 07:00:17 +0000 Manifest this update: Mon 09 Feb 2026 07:00:17 +0000 Manifest next update: Tue 10 Feb 2026 07:00:17 +0000 Files and hashes: 1: DtjJoWGXLWi0RTPg4x9R5NzlunU.crl (hash: fGTmXgphR7Mt68RGMtOH3Sz+IBf+75FSenf9FKBrLSY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:77:f7:f9:32:c7:e9:5c:60:47:b2:e2:1b:12:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ed8c9a161972d68b44533e0e31f51e4dce5ba75 Validity Not Before: Feb 9 07:00:17 2026 GMT Not After : Feb 10 07:00:17 2026 GMT Subject: CN=fddd26aa218fce58e0c58a631becad86eef8bae4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:aa:19:92:e1:69:58:18:cd:5b:48:f0:ac:d2: 0c:6c:5f:2d:1a:4a:f9:55:03:9d:fe:ea:b0:18:16: 68:fa:66:49:03:cf:3c:04:92:14:44:52:11:85:13: 8d:28:34:c1:2c:02:d0:8d:53:e6:7a:10:8e:98:57: 74:79:af:c2:04:10:c0:b7:51:17:52:78:a6:d3:cf: 07:cf:d2:73:c9:30:d2:75:4a:c7:6f:03:a4:bf:e1: cc:89:a7:41:96:ea:ae:cc:13:df:08:03:39:68:31: 51:c1:9f:2f:dd:96:cc:df:b3:52:28:b3:f6:6d:f0: 51:c5:c7:00:ac:6c:f0:9d:95:a3:12:35:08:7f:08: 63:82:d4:96:d8:a3:32:41:99:f4:44:91:5e:64:9c: 92:cc:3c:6a:26:12:03:58:0e:4c:74:47:8c:84:3a: e3:dd:7e:4d:b9:2f:a6:3d:c1:cc:d4:b9:e8:87:83: 98:86:82:85:f4:55:90:69:32:80:55:d6:77:c2:b5: 57:9d:6f:29:a3:cf:16:75:e1:d7:93:5c:88:73:8e: 04:30:59:e1:24:ae:7a:48:8e:cc:57:69:fc:80:37: 9c:d5:1d:ee:64:ab:09:e4:4a:70:0f:0e:34:0b:f1: a9:79:95:aa:b6:f0:50:73:ad:7b:27:64:3f:8f:b6: b7:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:DD:26:AA:21:8F:CE:58:E0:C5:8A:63:1B:EC:AD:86:EE:F8:BA:E4 X509v3 Authority Key Identifier: keyid:0E:D8:C9:A1:61:97:2D:68:B4:45:33:E0:E3:1F:51:E4:DC:E5:BA:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DtjJoWGXLWi0RTPg4x9R5NzlunU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/742d35-8274-49af-bc12-da85c5732b85/1/DtjJoWGXLWi0RTPg4x9R5NzlunU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:94:3a:31:8e:2d:00:8e:06:80:15:ab:37:00:76:aa:23:0a: 91:4f:28:ba:30:db:03:05:c9:e4:31:cd:fb:18:a6:8e:a9:7f: 61:dd:55:96:6d:86:a1:da:74:97:23:f6:90:de:3c:1a:ee:5f: d6:e2:ec:93:19:e8:3e:58:f7:2b:92:8f:69:cd:bd:41:fc:6f: ce:88:22:b1:84:05:8a:ae:c5:46:da:5f:d0:05:3a:2d:cb:bc: 2d:a2:1c:37:87:b9:e2:3e:7c:71:7e:a1:7f:7e:59:ed:fd:f8: 8d:34:fe:18:1a:6b:b1:6e:a1:80:db:fa:14:b0:2d:28:14:d3: a7:32:1d:f1:19:8e:97:c7:74:06:8f:62:5b:db:23:db:4f:69: ee:c6:ed:64:63:82:1f:99:5a:72:66:57:d1:64:8b:00:e1:ce: 04:01:fc:e9:ce:ed:9b:53:02:a6:4e:2a:9a:8a:03:62:6c:f5: a1:e2:87:9e:16:69:b3:79:98:d1:de:95:0a:ec:9d:fa:01:e0: a1:87:84:44:f8:66:7c:ad:9e:d9:da:26:ec:66:11:22:a6:fc: d1:0f:d0:87:de:85:a1:97:7d:42:e6:43:90:23:a3:94:95:4c: a6:48:0e:e2:6d:5a:8b:6b:37:e9:ae:cf:5f:c0:c8:75:5c:68: ce:e2:03:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM3f3+TLH6VxgR7LiGxLRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZDhjOWExNjE5NzJkNjhiNDQ1MzNlMGUzMWY1MWU0ZGNl NWJhNzUwHhcNMjYwMjA5MDcwMDE3WhcNMjYwMjEwMDcwMDE3WjAzMTEwLwYDVQQD EyhmZGRkMjZhYTIxOGZjZTU4ZTBjNThhNjMxYmVjYWQ4NmVlZjhiYWU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqoZkuFpWBjNW0jwrNIMbF8tGkr5 VQOd/uqwGBZo+mZJA888BJIURFIRhRONKDTBLALQjVPmehCOmFd0ea/CBBDAt1EX Unim088Hz9JzyTDSdUrHbwOkv+HMiadBluquzBPfCAM5aDFRwZ8v3ZbM37NSKLP2 bfBRxccArGzwnZWjEjUIfwhjgtSW2KMyQZn0RJFeZJySzDxqJhIDWA5MdEeMhDrj 3X5NuS+mPcHM1Lnoh4OYhoKF9FWQaTKAVdZ3wrVXnW8po88WdeHXk1yIc44EMFnh JK56SI7MV2n8gDec1R3uZKsJ5EpwDw40C/GpeZWqtvBQc617J2Q/j7a3MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3dJqohj85Y4MWKYxvsrYbu+LrkMB8GA1UdIwQY MBaAFA7YyaFhly1otEUz4OMfUeTc5bp1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTIt ZGE4NWM1NzMyYjg1LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi83NDJkMzUtODI3NC00OWFmLWJjMTItZGE4NWM1NzMyYjg1 LzEvRHRqSm9XR1hMV2kwUlRQZzR4OVI1TnpsdW5VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5Q6MY4t AI4GgBWrNwB2qiMKkU8oujDbAwXJ5DHN+ximjql/Yd1Vlm2Godp0lyP2kN48Gu5f 1uLskxnoPlj3K5KPac29QfxvzogisYQFiq7FRtpf0AU6Lcu8LaIcN4e54j58cX6h f35Z7f34jTT+GBprsW6hgNv6FLAtKBTTpzId8RmOl8d0Bo9iW9sj209p7sbtZGOC H5lacmZX0WSLAOHOBAH86c7tm1MCpk4qmooDYmz1oeKHnhZps3mY0d6VCuyd+gHg oYeERPhmfK2e2dom7GYRIqb80Q/Qh96FoZd9QuZDkCOjlJVMpkgO4m1ai2s36a7P X8DIdVxozuIDjw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:07 2026 by rpki-client