This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft File: DNLKvrHXJOekjdYemn4MUKTpv1A.mft (raw, json) Hash identifier: AubD0Y0ijhkIswMwEmNdlfbKBuFg950TRca+/Jecp5E= Subject key identifier: 4B:1D:14:25:8B:F8:B2:4C:34:90:A4:5C:B6:16:2B:BC:FD:AE:EB:CB Authority key identifier: 0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 Certificate issuer: /CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Certificate serial: 019C42B48F8954564058947F1DA156CAF337 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft Manifest number: 08E0 Signing time: Mon 09 Feb 2026 14:00:55 +0000 Manifest this update: Mon 09 Feb 2026 14:00:55 +0000 Manifest next update: Tue 10 Feb 2026 14:00:55 +0000 Files and hashes: 1: 1--Z6Q8BarjYadI1h8WmhE35LM8U.roa (hash: pUDJuTCmc9bQJt1IcbDsRbQfB75IO5Jl60DjnzyNbKQ=) 2: DNLKvrHXJOekjdYemn4MUKTpv1A.crl (hash: LdaTDhJsanh8ebDNUSC8H9TqR4x4grZno3qIcTuzf6A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:8f:89:54:56:40:58:94:7f:1d:a1:56:ca:f3:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cd2cabeb1d724e7a48dd61e9a7e0c50a4e9bf50 Validity Not Before: Feb 9 14:00:55 2026 GMT Not After : Feb 10 14:00:55 2026 GMT Subject: CN=4b1d14258bf8b24c3490a45cb6162bbcfdaeebcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cb:b0:2b:23:2c:1b:eb:b8:41:bf:06:3c:88: c5:44:6c:4a:6c:44:a8:65:f7:0a:8f:63:c3:96:6b: 45:fb:4a:ec:76:64:67:4f:64:c2:9c:af:ad:6a:a1: 77:d1:ad:52:84:b1:59:20:b1:b7:60:7e:b1:9f:da: 5f:20:8f:31:1d:91:3f:b0:5c:14:23:a4:c1:8d:cb: f4:83:8c:dd:d8:62:82:73:4b:df:f1:c6:68:f7:06: 05:84:ba:66:06:e5:db:13:9f:f5:e8:aa:8a:b0:23: 82:c7:76:84:05:a1:c2:2c:1f:cd:41:42:7e:4b:59: e9:76:ae:65:ce:0a:ba:78:6f:56:37:f3:3a:b6:a0: 69:99:43:ac:fa:f4:d1:63:a7:94:9d:e7:77:09:cf: 3b:dc:ed:dc:74:45:9a:73:a5:30:87:e2:3e:78:a7: c9:15:5f:d1:72:1f:44:42:e2:87:4c:61:e7:06:5f: d4:5d:88:6d:74:a3:fc:25:11:d4:56:93:92:8e:8d: 6b:62:63:aa:52:d0:93:f4:fc:46:e0:db:a9:47:ca: 83:26:b6:cd:d7:6e:df:36:4f:8d:6d:7f:5c:54:3d: 2a:50:f8:34:54:a8:d5:90:cc:db:43:2d:11:8e:75: 30:84:da:df:dd:25:4d:1c:dd:57:00:10:f4:8e:d6: 67:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1D:14:25:8B:F8:B2:4C:34:90:A4:5C:B6:16:2B:BC:FD:AE:EB:CB X509v3 Authority Key Identifier: keyid:0C:D2:CA:BE:B1:D7:24:E7:A4:8D:D6:1E:9A:7E:0C:50:A4:E9:BF:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNLKvrHXJOekjdYemn4MUKTpv1A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b79777-4a04-4dab-a1dc-25374494ceee/1/DNLKvrHXJOekjdYemn4MUKTpv1A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:64:cd:bf:e1:55:b8:d0:c5:49:7b:cb:8d:80:4a:c2:0b:31: 21:fe:e4:2b:bc:a9:f1:41:70:26:3e:13:28:ab:b0:95:9a:68: 3b:90:85:dd:4b:87:8d:dd:b0:ef:52:d0:49:bb:5a:25:be:b2: cd:b5:f1:14:a4:25:03:bb:28:8e:38:b9:a0:34:41:30:1e:24: 91:95:46:e7:79:01:5c:ca:42:b6:cc:67:ee:90:67:76:c5:7c: 26:98:46:8c:92:ec:5b:29:4c:1c:17:d6:01:46:df:6b:47:f1: 91:a5:6d:6b:05:e0:57:73:9e:f0:ef:fd:33:34:4e:0c:64:6d: cc:de:b3:97:7c:e4:93:e9:04:c2:ce:d9:e1:91:4d:60:7c:43: 58:6a:a7:44:2d:56:b0:30:0e:6b:69:4f:26:fd:5c:72:3a:7a: 2a:d2:ed:11:59:d3:af:10:bf:98:28:29:cd:e2:3e:8b:22:0b: 4b:32:7d:0b:33:9d:b4:46:8d:0e:c3:9c:3a:4e:39:47:17:0e: 36:3b:31:21:1b:ef:29:55:ec:4d:ac:2f:5e:d3:52:a0:c1:be: a6:0b:e5:d0:5a:b0:77:64:84:e8:eb:5e:16:c1:6a:0e:f9:95: 1b:52:f6:6c:b9:69:f3:60:f4:e3:10:f5:14:c8:c6:43:30:a5: 0a:7b:ef:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtI+JVFZAWJR/HaFWyvM3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZDJjYWJlYjFkNzI0ZTdhNDhkZDYxZTlhN2UwYzUwYTRl OWJmNTAwHhcNMjYwMjA5MTQwMDU1WhcNMjYwMjEwMTQwMDU1WjAzMTEwLwYDVQQD Eyg0YjFkMTQyNThiZjhiMjRjMzQ5MGE0NWNiNjE2MmJiY2ZkYWVlYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx8uwKyMsG+u4Qb8GPIjFRGxKbESo ZfcKj2PDlmtF+0rsdmRnT2TCnK+taqF30a1ShLFZILG3YH6xn9pfII8xHZE/sFwU I6TBjcv0g4zd2GKCc0vf8cZo9wYFhLpmBuXbE5/16KqKsCOCx3aEBaHCLB/NQUJ+ S1npdq5lzgq6eG9WN/M6tqBpmUOs+vTRY6eUned3Cc873O3cdEWac6Uwh+I+eKfJ FV/Rch9EQuKHTGHnBl/UXYhtdKP8JRHUVpOSjo1rYmOqUtCT9PxG4NupR8qDJrbN 127fNk+NbX9cVD0qUPg0VKjVkMzbQy0RjnUwhNrf3SVNHN1XABD0jtZn8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEsdFCWL+LJMNJCkXLYWK7z9ruvLMB8GA1UdIwQY MBaAFAzSyr6x1yTnpI3WHpp+DFCk6b9QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMt MjUzNzQ0OTRjZWVlLzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9iNzk3NzctNGEwNC00ZGFiLWExZGMtMjUzNzQ0OTRjZWVl LzEvRE5MS3ZySFhKT2VramRZZW1uNE1VS1RwdjFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxGTNv+FV uNDFSXvLjYBKwgsxIf7kK7yp8UFwJj4TKKuwlZpoO5CF3UuHjd2w71LQSbtaJb6y zbXxFKQlA7sojji5oDRBMB4kkZVG53kBXMpCtsxn7pBndsV8JphGjJLsWylMHBfW AUbfa0fxkaVtawXgV3Oe8O/9MzRODGRtzN6zl3zkk+kEws7Z4ZFNYHxDWGqnRC1W sDAOa2lPJv1ccjp6KtLtEVnTrxC/mCgpzeI+iyILSzJ9CzOdtEaNDsOcOk45RxcO NjsxIRvvKVXsTawvXtNSoMG+pgvl0Fqwd2SE6OteFsFqDvmVG1L2bLlp82D04xD1 FMjGQzClCnvvjg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:32 2026 by rpki-client