This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft File: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft (raw, json) Hash identifier: H8MRTJ61nGngufudmsw9EJKlLBTHLjVJ+fTZYhQ3xD0= Subject key identifier: 4A:8E:72:07:A9:61:03:70:55:31:9E:DC:00:9B:C3:07:48:94:0F:D3 Authority key identifier: 0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA Certificate issuer: /CN=0f516df64b3941b046743411ed86ea6030d72fba Certificate serial: 019C427DD6D2D71A252BE006486A47D9E8F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft Manifest number: 1633 Signing time: Mon 09 Feb 2026 13:01:09 +0000 Manifest this update: Mon 09 Feb 2026 13:01:09 +0000 Manifest next update: Tue 10 Feb 2026 13:01:09 +0000 Files and hashes: 1: D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl (hash: /YG6Rh/CIhvJs68WjE+x0pCgMY0bPvsd4OWOifTKzp4=) 2: dOFQf5AeWGROir3bR0l9oDiF_LY.roa (hash: NCU9gdpQPYAW35UhF4+gLu5Dhpwg+184qJ8TDUdFqxY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d6:d2:d7:1a:25:2b:e0:06:48:6a:47:d9:e8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f516df64b3941b046743411ed86ea6030d72fba Validity Not Before: Feb 9 13:01:09 2026 GMT Not After : Feb 10 13:01:09 2026 GMT Subject: CN=4a8e7207a961037055319edc009bc30748940fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:64:97:a6:1f:fc:ba:15:30:fc:ff:31:34:02: 93:08:11:6b:2b:d6:8b:26:83:ab:b7:79:ed:9a:49: 8f:9f:23:3a:8c:35:ea:27:4c:39:5d:4d:07:ac:f3: 94:50:37:c4:74:e0:f1:e0:ac:11:88:92:6e:11:1d: d1:ae:c7:5d:8c:9e:4e:52:a7:2b:61:c6:51:25:23: fa:03:05:de:91:4e:9b:5d:f4:c6:d8:59:52:22:79: a0:b8:b5:1b:8f:cc:31:07:d9:99:12:b4:3e:d4:de: fa:f5:10:2f:9c:08:16:c2:e5:65:99:c3:74:a7:08: e9:fc:0d:1c:a8:1e:b8:0f:de:0d:b3:ad:23:1b:b5: 6c:bb:b9:ea:48:ac:fa:ab:f9:91:ef:5d:52:64:e5: 37:75:54:ef:23:89:3f:d8:3e:33:26:3f:6c:5f:ff: 6e:3a:dd:55:ff:52:ea:83:eb:f4:3c:25:fb:32:2e: 2f:87:92:15:b5:62:e1:6b:09:a0:ae:a8:ee:4f:f9: b3:3e:15:2f:f8:08:0e:51:9d:c5:23:3e:40:ae:1e: 68:9b:0f:b0:b1:52:0a:a8:64:1d:9a:55:ba:f7:d9: 85:0e:48:38:85:77:15:f9:be:0f:0b:e3:80:ff:e5: d1:2c:8c:ea:5b:c5:fe:e3:c3:92:81:f4:c5:f2:ae: 97:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8E:72:07:A9:61:03:70:55:31:9E:DC:00:9B:C3:07:48:94:0F:D3 X509v3 Authority Key Identifier: keyid:0F:51:6D:F6:4B:39:41:B0:46:74:34:11:ED:86:EA:60:30:D7:2F:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/acdf4f-f10a-4323-893a-ba102cdb2397/1/D1Ft9ks5QbBGdDQR7YbqYDDXL7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f9:65:0d:9e:6a:36:ec:8e:a8:44:58:b4:48:b0:84:bc:0f: dc:7b:f9:80:b8:39:fd:74:2d:ac:2d:ef:ea:93:11:33:83:26: 34:c5:33:20:64:e2:76:2a:90:06:48:09:4b:42:f0:db:c8:6b: d5:99:ed:af:16:e0:56:64:1b:ac:0a:d5:e0:97:f3:21:aa:ba: 40:88:8f:d1:3f:60:2f:99:1b:de:18:26:35:c2:48:48:12:c2: 6c:99:bc:c6:61:a7:70:8a:ec:b9:c1:92:c9:d2:fc:80:d0:61: 99:f7:4a:65:a1:02:dc:6a:83:d4:13:a7:70:93:04:aa:a9:5f: e3:63:a3:05:25:40:42:8b:24:43:bb:b1:e5:ae:13:d3:3b:eb: 40:92:52:ed:08:7c:e9:3a:1d:8f:68:a9:81:8d:66:e6:4f:35: 92:9e:3f:f5:14:8f:10:48:07:bc:5f:36:79:79:66:bf:69:1a: 9f:54:4b:e5:9b:3d:66:6f:19:d2:eb:6f:d4:76:65:67:ec:a7: 28:07:f3:d4:80:89:46:71:b1:ad:45:e2:e6:1c:65:ce:1a:e6: b3:dc:2b:70:1c:97:80:44:e6:b1:8b:f5:49:99:39:89:b3:30: 3e:b2:3f:e8:15:1e:6c:4e:dc:1f:c4:4c:3e:c4:68:07:c8:76: 10:e2:eb:2d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdbS1xolK+AGSGpH2ejxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNTE2ZGY2NGIzOTQxYjA0Njc0MzQxMWVkODZlYTYwMzBk NzJmYmEwHhcNMjYwMjA5MTMwMTA5WhcNMjYwMjEwMTMwMTA5WjAzMTEwLwYDVQQD Eyg0YThlNzIwN2E5NjEwMzcwNTUzMTllZGMwMDliYzMwNzQ4OTQwZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWSXph/8uhUw/P8xNAKTCBFrK9aL JoOrt3ntmkmPnyM6jDXqJ0w5XU0HrPOUUDfEdODx4KwRiJJuER3RrsddjJ5OUqcr YcZRJSP6AwXekU6bXfTG2FlSInmguLUbj8wxB9mZErQ+1N769RAvnAgWwuVlmcN0 pwjp/A0cqB64D94Ns60jG7Vsu7nqSKz6q/mR711SZOU3dVTvI4k/2D4zJj9sX/9u Ot1V/1Lqg+v0PCX7Mi4vh5IVtWLhawmgrqjuT/mzPhUv+AgOUZ3FIz5Arh5omw+w sVIKqGQdmlW699mFDkg4hXcV+b4PC+OA/+XRLIzqW8X+48OSgfTF8q6XiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEqOcgepYQNwVTGe3ACbwwdIlA/TMB8GA1UdIwQY MBaAFA9RbfZLOUGwRnQ0Ee2G6mAw1y+6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2Et YmExMDJjZGIyMzk3LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi9hY2RmNGYtZjEwYS00MzIzLTg5M2EtYmExMDJjZGIyMzk3 LzEvRDFGdDlrczVRYkJHZERRUjdZYnFZRERYTDdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/llDZ5q NuyOqERYtEiwhLwP3Hv5gLg5/XQtrC3v6pMRM4MmNMUzIGTidiqQBkgJS0Lw28hr 1ZntrxbgVmQbrArV4JfzIaq6QIiP0T9gL5kb3hgmNcJISBLCbJm8xmGncIrsucGS ydL8gNBhmfdKZaEC3GqD1BOncJMEqqlf42OjBSVAQoskQ7ux5a4T0zvrQJJS7Qh8 6Todj2ipgY1m5k81kp4/9RSPEEgHvF82eXlmv2kan1RL5Zs9Zm8Z0utv1HZlZ+yn KAfz1ICJRnGxrUXi5hxlzhrms9wrcByXgETmsYv1SZk5ibMwPrI/6BUebE7cH8RM PsRoB8h2EOLrLQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:03 2026 by rpki-client