This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft File: DcIGFAWVaZPMY6YNsPljUl01dzE.mft (raw, json) Hash identifier: 1w7a8MlcUt0dqbXk4npiTW+i1WNNrL8yQZckLWT3F5s= Subject key identifier: 6F:EC:42:1B:13:B1:89:ED:1C:9E:72:AF:7B:EC:CA:BD:10:0B:3A:0F Authority key identifier: 0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 Certificate issuer: /CN=0dc2061405956993cc63a60db0f963525d357731 Certificate serial: 019C4321DA70AAC4F99E9D75F133C62A879A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: DcIGFAWVaZPMY6YNsPljUl01dzE.crl (hash: gQ7V5NVpfqaEjkT44T5BCB+N1r86jhDSv+QcfU4pTro=) 2: NxS44xqtw9wnJjtyrxmTBDUCj5c.roa (hash: HUNSDs/gJPWUN3iy9W3sRGZH+ajPQ9ZIuVJ3VIFyz4M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:da:70:aa:c4:f9:9e:9d:75:f1:33:c6:2a:87:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0dc2061405956993cc63a60db0f963525d357731 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=6fec421b13b189ed1c9e72af7beccabd100b3a0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:2a:be:73:db:3d:00:c0:e4:1d:f1:09:e9:20: 35:50:62:22:99:e0:0f:31:d8:a6:7c:af:f9:f5:d3: 5a:5b:5b:67:1d:cf:f6:1a:6f:10:9f:3b:dd:91:f5: b0:04:08:88:47:73:12:0d:58:e4:67:04:a9:74:30: 6c:54:56:a9:cd:6c:89:94:7c:b7:ae:1d:66:34:fd: 68:84:d8:73:27:c9:74:4f:94:9c:22:43:31:25:8d: 05:19:00:12:2a:6d:cb:cd:82:97:04:a0:ca:2e:12: d4:f1:dd:58:f1:95:bb:ad:5c:54:c5:34:3e:47:95: 8a:80:63:be:8c:f0:55:bd:7d:bb:23:05:9e:9d:b5: 7c:14:40:65:4f:8d:52:c4:4d:1e:96:de:da:39:95: f3:07:b5:90:62:7d:23:27:8b:93:ed:8c:7c:eb:b1: 29:2b:57:ea:be:0a:b6:4a:e8:db:4b:84:99:b0:df: c8:14:21:cd:8a:ee:65:aa:18:66:84:40:9d:fa:91: c5:f5:c2:3b:fa:97:28:ec:8a:1f:25:84:b4:7e:e6: 9c:8d:35:0e:51:d2:a1:7b:ac:26:6a:1d:12:4d:68: d8:07:04:34:d9:61:96:e2:b5:0f:11:f3:ca:e7:c8: 46:44:28:c4:4f:f2:6a:3b:e9:6e:12:af:e5:09:ff: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:EC:42:1B:13:B1:89:ED:1C:9E:72:AF:7B:EC:CA:BD:10:0B:3A:0F X509v3 Authority Key Identifier: keyid:0D:C2:06:14:05:95:69:93:CC:63:A6:0D:B0:F9:63:52:5D:35:77:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DcIGFAWVaZPMY6YNsPljUl01dzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9de767-3a28-49ab-ae28-2348ba6fb4c3/1/DcIGFAWVaZPMY6YNsPljUl01dzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:0e:c5:e3:8b:3d:67:b1:57:f4:97:f1:5b:31:af:5c:fa:fe: 90:f9:fd:29:19:62:4d:c8:3c:64:62:87:d8:82:66:1b:27:dd: 4e:f2:25:93:16:e9:a9:74:be:4d:f1:a6:22:e6:77:78:57:f9: 46:59:38:4c:d3:c2:c3:82:11:5b:35:41:9b:db:bd:2f:27:ad: 6e:c3:7f:5d:3f:92:7f:29:cd:28:95:c4:c1:03:62:8e:9d:2b: 0b:20:64:ce:de:62:5b:cc:08:e4:be:a6:60:1b:d4:9c:13:13: 42:88:20:8b:fb:8c:a3:3e:48:d7:77:57:0a:ec:b5:05:d2:97: c8:14:35:8c:69:c4:ad:5a:cf:9a:81:f4:d4:8b:9d:1a:94:0a: 9a:8f:85:95:51:c2:8d:54:3b:26:89:f5:bb:d1:55:6b:b1:a2: 45:fd:9b:8f:e1:71:20:00:fc:01:09:1a:0c:d9:61:2a:52:de: cb:3e:2f:30:f6:a8:44:0e:68:92:70:00:15:aa:60:63:d8:10: 7e:dc:84:19:23:bc:1e:94:8f:f1:d4:26:a4:45:47:c5:80:5b: 4d:44:45:c2:a9:bb:df:3b:47:3c:06:a8:c9:8e:a6:6a:9d:a3: ab:74:d1:04:ab:de:81:9c:2a:9d:e0:1d:52:51:f0:3d:f7:0c: 62:d4:93:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdpwqsT5np118TPGKoeaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYzIwNjE0MDU5NTY5OTNjYzYzYTYwZGIwZjk2MzUyNWQz NTc3MzEwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD Eyg2ZmVjNDIxYjEzYjE4OWVkMWM5ZTcyYWY3YmVjY2FiZDEwMGIzYTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiq+c9s9AMDkHfEJ6SA1UGIimeAP MdimfK/59dNaW1tnHc/2Gm8QnzvdkfWwBAiIR3MSDVjkZwSpdDBsVFapzWyJlHy3 rh1mNP1ohNhzJ8l0T5ScIkMxJY0FGQASKm3LzYKXBKDKLhLU8d1Y8ZW7rVxUxTQ+ R5WKgGO+jPBVvX27IwWenbV8FEBlT41SxE0elt7aOZXzB7WQYn0jJ4uT7Yx867Ep K1fqvgq2SujbS4SZsN/IFCHNiu5lqhhmhECd+pHF9cI7+pco7IofJYS0fuacjTUO UdKhe6wmah0STWjYBwQ02WGW4rUPEfPK58hGRCjET/JqO+luEq/lCf+v9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/sQhsTsYntHJ5yr3vsyr0QCzoPMB8GA1UdIwQY MBaAFA3CBhQFlWmTzGOmDbD5Y1JdNXcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgt MjM0OGJhNmZiNGMzLzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy85ZGU3NjctM2EyOC00OWFiLWFlMjgtMjM0OGJhNmZiNGMz LzEvRGNJR0ZBV1ZhWlBNWTZZTnNQbGpVbDAxZHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApw7F44s9 Z7FX9JfxWzGvXPr+kPn9KRliTcg8ZGKH2IJmGyfdTvIlkxbpqXS+TfGmIuZ3eFf5 Rlk4TNPCw4IRWzVBm9u9LyetbsN/XT+SfynNKJXEwQNijp0rCyBkzt5iW8wI5L6m YBvUnBMTQoggi/uMoz5I13dXCuy1BdKXyBQ1jGnErVrPmoH01IudGpQKmo+FlVHC jVQ7Jon1u9FVa7GiRf2bj+FxIAD8AQkaDNlhKlLeyz4vMPaoRA5oknAAFapgY9gQ ftyEGSO8HpSP8dQmpEVHxYBbTURFwqm73ztHPAaoyY6map2jq3TRBKvegZwqneAd UlHwPfcMYtST2g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:16 2026 by rpki-client