This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft File: DWb-4PMIhlf7_SOngt9Xec-ROmM.mft (raw, json) Hash identifier: AWC20BgZfcx2H6vkx8M41GDYag9v7zVaCDQJZcaL9Fg= Subject key identifier: F8:DF:1D:22:B8:61:73:B0:B9:42:97:56:C5:C0:68:4D:10:59:0F:01 Authority key identifier: 0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63 Certificate issuer: /CN=0d66fee0f3088657fbfd23a782df5779cf913a63 Certificate serial: 019C4322CA1E76EB0B873BABEB1276012517 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft Manifest number: 10D0 Signing time: Mon 09 Feb 2026 16:01:19 +0000 Manifest this update: Mon 09 Feb 2026 16:01:19 +0000 Manifest next update: Tue 10 Feb 2026 16:01:19 +0000 Files and hashes: 1: DWb-4PMIhlf7_SOngt9Xec-ROmM.crl (hash: KfaRBiRR2Gj0LH7JzWHGL4QO2P+tXh0DR0rylv0QXnk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ca:1e:76:eb:0b:87:3b:ab:eb:12:76:01:25:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d66fee0f3088657fbfd23a782df5779cf913a63 Validity Not Before: Feb 9 16:01:19 2026 GMT Not After : Feb 10 16:01:19 2026 GMT Subject: CN=f8df1d22b86173b0b9429756c5c0684d10590f01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:01:27:8a:1c:3e:04:9a:9f:31:ea:7f:fb:79: c9:2d:9b:2f:62:d3:bd:6c:a1:27:e2:5a:0a:83:bd: 18:77:31:bf:34:94:d5:ad:6c:8e:62:97:6b:c0:b6: d7:ad:63:6a:99:08:bc:6f:1e:80:7e:6e:65:30:f8: 1d:24:6a:41:7f:8e:15:21:96:66:d4:4e:92:91:85: 40:d3:b2:83:24:80:ea:f2:ed:e5:99:18:8c:59:b8: 3e:1e:2b:70:2e:29:0d:d5:58:6b:9a:98:3a:ec:26: 80:bc:f0:5d:fb:03:e4:29:7d:17:bc:e8:27:4b:d3: 59:75:87:4b:6e:33:52:d9:ff:82:20:71:60:5f:e7: bc:97:14:99:c2:81:7c:c3:53:6d:94:fa:68:6e:bd: 49:85:28:b6:d3:b4:24:9a:a4:67:a9:d9:ab:2c:47: 92:4e:59:b9:cb:ad:d9:d4:26:8e:1c:be:7c:63:ab: 45:39:ab:f8:08:9b:40:52:55:9a:d8:be:9e:3d:1a: 85:dd:d9:a3:16:72:1c:44:83:0a:03:7f:d9:54:13: 6c:4e:86:23:c2:01:f2:70:83:68:9c:21:70:1c:c9: 5a:96:8b:8a:2d:84:04:dc:f5:39:23:50:ed:14:6a: c6:48:33:2b:4f:01:76:ae:90:1f:07:d0:65:e4:c3: 5c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:DF:1D:22:B8:61:73:B0:B9:42:97:56:C5:C0:68:4D:10:59:0F:01 X509v3 Authority Key Identifier: keyid:0D:66:FE:E0:F3:08:86:57:FB:FD:23:A7:82:DF:57:79:CF:91:3A:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DWb-4PMIhlf7_SOngt9Xec-ROmM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/cc76b4-e711-44a5-b823-8e6eff16a6f8/1/DWb-4PMIhlf7_SOngt9Xec-ROmM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:a5:77:b8:ae:ed:d1:5d:06:89:62:15:fe:7e:1c:b4:ff:a6: 62:91:b3:40:0a:ed:5c:c8:ff:d3:66:db:d5:50:0c:b9:20:36: b2:4a:44:4d:f2:b6:60:60:21:dd:89:a6:ec:30:f1:6a:08:b0: af:a1:53:6f:2d:4a:75:b1:07:92:b9:d0:98:d3:d9:bd:90:e9: 6c:29:9d:cf:98:be:84:6f:13:8b:f8:49:e2:f6:10:e8:d4:9b: b2:dd:89:fc:a5:dc:e6:15:0f:9b:db:a7:1a:0f:b7:73:d7:c8: e9:7b:d6:09:32:b5:07:84:c9:f8:f4:03:ea:77:c8:35:25:0f: 82:55:4f:f6:b4:c5:8c:37:23:81:fc:c7:ba:b1:8b:14:0c:2e: 39:a4:8a:d2:13:3a:84:41:66:8f:91:4a:b5:0c:f7:95:13:d3: 3d:3f:69:9b:ff:37:f9:8e:cc:9d:6f:56:40:b7:b0:70:a5:99: 54:9c:b5:86:49:39:41:cb:86:6c:76:43:18:43:0e:f2:cb:33: aa:af:aa:88:a6:8d:3c:23:f1:6c:a9:b9:2e:f4:79:d5:28:ce: 9f:21:6e:3a:ea:e6:58:b2:83:ee:5d:c5:77:13:6d:38:69:ad: 03:e3:fd:26:d9:8d:06:1c:a8:1d:89:14:17:06:e1:75:53:84: a1:5d:a8:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsoedusLhzur6xJ2ASUXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNjZmZWUwZjMwODg2NTdmYmZkMjNhNzgyZGY1Nzc5Y2Y5 MTNhNjMwHhcNMjYwMjA5MTYwMTE5WhcNMjYwMjEwMTYwMTE5WjAzMTEwLwYDVQQD EyhmOGRmMWQyMmI4NjE3M2IwYjk0Mjk3NTZjNWMwNjg0ZDEwNTkwZjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwEnihw+BJqfMep/+3nJLZsvYtO9 bKEn4loKg70YdzG/NJTVrWyOYpdrwLbXrWNqmQi8bx6Afm5lMPgdJGpBf44VIZZm 1E6SkYVA07KDJIDq8u3lmRiMWbg+HitwLikN1Vhrmpg67CaAvPBd+wPkKX0XvOgn S9NZdYdLbjNS2f+CIHFgX+e8lxSZwoF8w1NtlPpobr1JhSi207QkmqRnqdmrLEeS Tlm5y63Z1CaOHL58Y6tFOav4CJtAUlWa2L6ePRqF3dmjFnIcRIMKA3/ZVBNsToYj wgHycINonCFwHMlalouKLYQE3PU5I1DtFGrGSDMrTwF2rpAfB9Bl5MNcWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPjfHSK4YXOwuUKXVsXAaE0QWQ8BMB8GA1UdIwQY MBaAFA1m/uDzCIZX+/0jp4LfV3nPkTpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMt OGU2ZWZmMTZhNmY4LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy9jYzc2YjQtZTcxMS00NGE1LWI4MjMtOGU2ZWZmMTZhNmY4 LzEvRFdiLTRQTUlobGY3X1NPbmd0OVhlYy1ST21NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADqV3uK7t 0V0GiWIV/n4ctP+mYpGzQArtXMj/02bb1VAMuSA2skpETfK2YGAh3Ymm7DDxagiw r6FTby1KdbEHkrnQmNPZvZDpbCmdz5i+hG8Ti/hJ4vYQ6NSbst2J/KXc5hUPm9un Gg+3c9fI6XvWCTK1B4TJ+PQD6nfINSUPglVP9rTFjDcjgfzHurGLFAwuOaSK0hM6 hEFmj5FKtQz3lRPTPT9pm/83+Y7MnW9WQLewcKWZVJy1hkk5QcuGbHZDGEMO8ssz qq+qiKaNPCPxbKm5LvR51SjOnyFuOurmWLKD7l3FdxNtOGmtA+P9JtmNBhyoHYkU FwbhdVOEoV2oXw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:25 2026 by rpki-client