This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft File: dODVhfGshfVEks_JXh3OD8L3lw8.mft (raw, json) Hash identifier: 76OQEx56P6XOtgv/kwdiAOygO0u/WXpAufWfejZbx+Q= Subject key identifier: 6D:35:60:F6:0B:AA:51:F6:D5:CC:5F:45:6F:1F:CF:E9:D0:0A:15:45 Authority key identifier: 74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F Certificate issuer: /CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Certificate serial: 019C42B44CD48CC8AAE4B4AEB8AB3B7D0615 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft Manifest number: 0458 Signing time: Mon 09 Feb 2026 14:00:38 +0000 Manifest this update: Mon 09 Feb 2026 14:00:38 +0000 Manifest next update: Tue 10 Feb 2026 14:00:38 +0000 Files and hashes: 1: dODVhfGshfVEks_JXh3OD8L3lw8.crl (hash: /fg1+eXDf+b+R97Nm1KOkqsRJw8f7Vf6FBUg0uxym2Y=) 2: iw2hZNABaxf3BqGSoH50zlpBmZo.roa (hash: FEmu0jxWn7X0gK1R2H3JsdW7Vd44llV6L5PVfKQuGIw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:4c:d4:8c:c8:aa:e4:b4:ae:b8:ab:3b:7d:06:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e0d585f1ac85f54492cfc95e1dce0fc2f7970f Validity Not Before: Feb 9 14:00:38 2026 GMT Not After : Feb 10 14:00:38 2026 GMT Subject: CN=6d3560f60baa51f6d5cc5f456f1fcfe9d00a1545 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:46:e3:4e:fa:7e:c1:c4:c5:2b:ee:01:43:ae: 49:89:0a:d2:6f:f6:a2:bf:c9:78:c1:91:ca:dc:65: 78:83:a0:b7:53:07:c4:41:95:7b:7c:d2:47:6e:3d: f4:ba:e5:11:4d:a5:f1:41:ee:cb:ce:e8:17:c9:82: c3:5a:0e:ff:06:31:bf:9e:49:7a:0c:39:c3:54:35: 8a:01:80:c2:b0:8e:a1:49:cc:9c:01:37:0b:ac:cb: 7f:cd:44:5e:f2:74:a1:68:1e:ce:64:2f:b3:ea:b2: 94:58:eb:ca:ba:b1:c3:9c:fb:22:83:8f:e9:ea:1f: f5:3e:dd:8e:4f:9a:83:b6:73:ce:62:e1:0c:07:8a: 82:66:54:10:94:27:80:1b:94:ec:09:16:c3:72:3b: 25:c5:13:2a:db:af:4d:ef:d2:14:49:07:bd:06:db: 93:d6:e5:b8:cc:60:a9:b4:f4:9a:6f:8b:29:42:f4: 0d:a7:22:28:77:16:28:c1:59:3d:66:aa:92:1a:71: 03:e0:11:5a:87:df:07:b1:fd:82:a0:97:f6:e1:af: 6e:b0:17:23:bb:72:cb:14:00:04:ab:4d:00:ca:44: cf:50:1a:5a:a9:9a:c9:a0:99:6a:71:35:d2:75:ac: eb:2f:fb:c5:12:83:67:63:a4:71:ec:f4:b7:f1:bc: 74:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:35:60:F6:0B:AA:51:F6:D5:CC:5F:45:6F:1F:CF:E9:D0:0A:15:45 X509v3 Authority Key Identifier: keyid:74:E0:D5:85:F1:AC:85:F5:44:92:CF:C9:5E:1D:CE:0F:C2:F7:97:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dODVhfGshfVEks_JXh3OD8L3lw8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fe0bf2-f838-408b-9843-6598910202a2/1/dODVhfGshfVEks_JXh3OD8L3lw8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:0e:70:bd:dd:f2:fe:e5:fb:36:a3:fd:eb:fe:70:17:13:d4: e5:f9:ad:93:4a:3b:c1:cd:78:d1:c8:72:51:24:4d:af:bd:e7: 3d:e1:43:57:a8:80:60:50:27:0f:1e:7b:14:97:3a:46:90:67: 23:24:71:da:ae:03:16:4e:8b:79:17:7b:38:23:19:01:12:a9: 23:0c:b3:25:df:d1:a8:5d:30:4e:80:25:94:0b:92:f3:c3:e2: b9:36:d6:3f:bc:48:f4:dd:81:03:01:56:ce:78:6b:60:ea:9b: c4:11:91:34:e8:53:1f:ec:9c:b8:df:47:77:75:e5:ee:fc:09: d7:e0:57:a0:c6:d0:47:f3:0b:ac:fa:9a:eb:1a:f9:e9:53:af: 73:71:7e:24:2a:8f:49:20:f9:4d:d6:a2:4e:fe:64:e5:38:17: 79:93:0e:83:8f:d9:6a:7f:46:72:3c:2c:fd:ec:a5:35:1b:6e: f0:b2:65:48:f7:f2:f9:e7:03:cc:7a:cf:6f:9b:a9:7b:57:33: 4e:24:15:88:e6:3c:72:6a:c9:60:65:6a:83:7d:8e:5b:17:58: 54:a5:78:3c:d7:5e:89:ec:b8:47:d5:10:f7:23:a3:97:0a:a5: bf:17:5d:54:a3:bf:dd:23:10:d2:d3:ad:54:b2:31:c4:10:53: 5a:dd:13:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEzUjMiq5LSuuKs7fQYVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTBkNTg1ZjFhYzg1ZjU0NDkyY2ZjOTVlMWRjZTBmYzJm Nzk3MGYwHhcNMjYwMjA5MTQwMDM4WhcNMjYwMjEwMTQwMDM4WjAzMTEwLwYDVQQD Eyg2ZDM1NjBmNjBiYWE1MWY2ZDVjYzVmNDU2ZjFmY2ZlOWQwMGExNTQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkbjTvp+wcTFK+4BQ65JiQrSb/ai v8l4wZHK3GV4g6C3UwfEQZV7fNJHbj30uuURTaXxQe7LzugXyYLDWg7/BjG/nkl6 DDnDVDWKAYDCsI6hScycATcLrMt/zURe8nShaB7OZC+z6rKUWOvKurHDnPsig4/p 6h/1Pt2OT5qDtnPOYuEMB4qCZlQQlCeAG5TsCRbDcjslxRMq269N79IUSQe9BtuT 1uW4zGCptPSab4spQvQNpyIodxYowVk9ZqqSGnED4BFah98Hsf2CoJf24a9usBcj u3LLFAAEq00AykTPUBpaqZrJoJlqcTXSdazrL/vFEoNnY6Rx7PS38bx0uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG01YPYLqlH21cxfRW8fz+nQChVFMB8GA1UdIwQY MBaAFHTg1YXxrIX1RJLPyV4dzg/C95cPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMt NjU5ODkxMDIwMmEyLzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC9mZTBiZjItZjgzOC00MDhiLTk4NDMtNjU5ODkxMDIwMmEy LzEvZE9EVmhmR3NoZlZFa3NfSlhoM09EOEwzbHc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAg5wvd3y /uX7NqP96/5wFxPU5fmtk0o7wc140chyUSRNr73nPeFDV6iAYFAnDx57FJc6RpBn IyRx2q4DFk6LeRd7OCMZARKpIwyzJd/RqF0wToAllAuS88PiuTbWP7xI9N2BAwFW znhrYOqbxBGRNOhTH+ycuN9Hd3Xl7vwJ1+BXoMbQR/MLrPqa6xr56VOvc3F+JCqP SSD5TdaiTv5k5TgXeZMOg4/Zan9Gcjws/eylNRtu8LJlSPfy+ecDzHrPb5upe1cz TiQViOY8cmrJYGVqg32OWxdYVKV4PNdeiey4R9UQ9yOjlwqlvxddVKO/3SMQ0tOt VLIxxBBTWt0T+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:15 2026 by rpki-client