This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json) Hash identifier: X22A34XnALZ8TzmMZRi5Cbcj3XmYirqZxGJSI2+3his= Subject key identifier: 04:C3:90:CF:46:D4:99:72:01:76:7E:AF:E7:72:88:65:E9:BD:12:77 Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Certificate serial: 019C420F30A312FB6913889790B0001AB52E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft Manifest number: 0EF5 Signing time: Mon 09 Feb 2026 11:00:17 +0000 Manifest this update: Mon 09 Feb 2026 11:00:17 +0000 Manifest next update: Tue 10 Feb 2026 11:00:17 +0000 Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: XI7Sblw9fiPZnhIMghJpTrDui0mLkyUfRFzQvvHmu0M=) 2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:30:a3:12:fb:69:13:88:97:90:b0:00:1a:b5:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4 Validity Not Before: Feb 9 11:00:17 2026 GMT Not After : Feb 10 11:00:17 2026 GMT Subject: CN=04c390cf46d4997201767eafe7728865e9bd1277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:21:ea:82:19:23:e9:a0:5b:38:0d:5e:fc:c9: 27:a1:8f:99:1a:cb:66:f8:8a:32:1d:47:1e:23:45: 12:22:51:f8:d7:13:ee:74:7a:32:e2:a1:ed:8e:c5: 68:d6:62:d8:f6:ae:11:06:a4:ab:b3:c0:db:8a:a1: f7:98:69:97:54:95:18:86:2c:36:f4:8e:8d:ea:34: 44:5f:64:4e:51:85:1c:70:a5:19:43:3c:8f:98:cd: 67:ab:19:66:6c:c7:4e:c0:d2:27:bc:93:17:e3:9d: 19:5c:9e:64:09:96:ee:6d:3d:22:2d:37:f2:f9:f3: ed:28:c8:e3:99:e1:8f:cc:28:f8:f5:d9:bf:f1:c1: a8:6c:26:c4:78:9f:d2:12:ae:ac:f5:aa:b8:05:63: 85:0c:6a:9b:fa:84:c4:09:22:0e:32:d4:7f:6c:39: 10:f8:fd:35:d6:ac:93:e3:70:9f:8a:a2:62:60:57: ca:76:78:c8:31:53:91:66:52:8d:0b:36:64:70:ec: 1f:c0:27:6a:ca:d2:89:ed:11:6e:ca:80:36:ff:be: bc:8a:c0:a3:a5:4e:f1:57:e1:45:b7:16:e5:5a:31: 0a:d8:d1:5a:4d:38:16:4e:03:5c:cf:c6:c9:15:91: 2e:02:47:51:a6:c0:99:02:c3:0c:40:3f:0b:d5:ab: b3:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C3:90:CF:46:D4:99:72:01:76:7E:AF:E7:72:88:65:E9:BD:12:77 X509v3 Authority Key Identifier: keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:09:93:a9:68:ec:ce:42:3e:e6:40:e7:77:d1:bf:f9:d4:e1: 05:e6:b6:4d:6a:a6:80:39:3d:65:0b:53:c6:d4:3c:e8:ab:25: 96:3f:dd:96:8d:6d:66:43:6b:40:87:a5:72:ce:b9:62:6c:74: 00:bb:d3:0e:38:8a:4e:f7:6b:98:00:a8:c3:5e:e2:cb:31:f5: 1b:19:d5:9d:79:1b:0b:9d:dd:31:ee:35:1b:31:be:6e:07:f6: c9:4d:bb:1d:6f:90:8e:56:35:fb:40:63:02:fb:5c:b5:ef:a0: 3b:fe:22:1f:36:66:37:60:0b:75:57:b0:cc:a8:fd:5f:ba:da: c7:4b:7f:30:d9:b5:64:68:05:12:24:12:4b:bc:9e:ca:c3:2b: 92:d6:27:60:bc:18:c0:cb:8f:83:f6:0f:26:94:93:6c:39:75: 6e:00:e2:3b:7a:af:dc:82:4a:b6:2c:f5:41:bd:7b:e6:60:0a: d5:1e:c1:cf:34:2c:4c:24:f3:0e:b5:5b:2b:d7:87:fe:a8:4c: 99:e9:da:e0:bf:98:09:7f:26:67:4d:98:f5:2d:ce:e0:59:12: ef:ae:20:a4:12:25:2e:71:b8:dd:a7:40:18:c4:3f:6d:d0:1d: 7c:76:6a:17:5c:f0:f4:22:bf:35:9b:4b:aa:90:c8:46:d1:b8: 93:33:a0:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzCjEvtpE4iXkLAAGrUuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZmUxMDU4YTMxZTNjMTg5NGJjZjA2NGM3ZTgzNzBiYmE2 Y2Y4ZTQwHhcNMjYwMjA5MTEwMDE3WhcNMjYwMjEwMTEwMDE3WjAzMTEwLwYDVQQD EygwNGMzOTBjZjQ2ZDQ5OTcyMDE3NjdlYWZlNzcyODg2NWU5YmQxMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiHqghkj6aBbOA1e/MknoY+ZGstm +IoyHUceI0USIlH41xPudHoy4qHtjsVo1mLY9q4RBqSrs8DbiqH3mGmXVJUYhiw2 9I6N6jREX2ROUYUccKUZQzyPmM1nqxlmbMdOwNInvJMX450ZXJ5kCZbubT0iLTfy +fPtKMjjmeGPzCj49dm/8cGobCbEeJ/SEq6s9aq4BWOFDGqb+oTECSIOMtR/bDkQ +P011qyT43CfiqJiYFfKdnjIMVORZlKNCzZkcOwfwCdqytKJ7RFuyoA2/768isCj pU7xV+FFtxblWjEK2NFaTTgWTgNcz8bJFZEuAkdRpsCZAsMMQD8L1auz5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFATDkM9G1JlyAXZ+r+dyiGXpvRJ3MB8GA1UdIwQY MBaAFAz+EFijHjwYlLzwZMfoNwu6bPjkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMt N2NlOGM5NzA0Y2YwLzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi85MjFkZjEtZmE3ZC00MzA3LWI5YzMtN2NlOGM5NzA0Y2Yw LzEvRFA0UVdLTWVQQmlVdlBCa3gtZzNDN3BzLU9RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQmTqWjs zkI+5kDnd9G/+dThBea2TWqmgDk9ZQtTxtQ86Ksllj/dlo1tZkNrQIelcs65Ymx0 ALvTDjiKTvdrmACow17iyzH1GxnVnXkbC53dMe41GzG+bgf2yU27HW+QjlY1+0Bj Avtcte+gO/4iHzZmN2ALdVewzKj9X7rax0t/MNm1ZGgFEiQSS7yeysMrktYnYLwY wMuPg/YPJpSTbDl1bgDiO3qv3IJKtiz1Qb175mAK1R7BzzQsTCTzDrVbK9eH/qhM mena4L+YCX8mZ02Y9S3O4FkS764gpBIlLnG43adAGMQ/bdAdfHZqF1zw9CK/NZtL qpDIRtG4kzOgng== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:38 2026 by rpki-client