This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json) Hash identifier: axObmaJnoZUrxAmGgHOVfNhG0uba22CVZlV9bI0PEr8= Subject key identifier: 59:C6:EF:B0:64:7E:C9:54:41:05:0E:49:86:B3:24:8B:21:80:C1:DF Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Certificate serial: 019C4434AD24CBA1FF20375A6949DEA8C77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 21:00:28 +0000 Manifest this update: Mon 09 Feb 2026 21:00:28 +0000 Manifest next update: Tue 10 Feb 2026 21:00:28 +0000 Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=) 2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: DTbwnCtR9TBw7Odu4bRTKmipahxhB2F9Pb8mGJQFK/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:ad:24:cb:a1:ff:20:37:5a:69:49:de:a8:c7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914 Validity Not Before: Feb 9 21:00:28 2026 GMT Not After : Feb 10 21:00:28 2026 GMT Subject: CN=59c6efb0647ec95441050e4986b3248b2180c1df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:9b:e6:e1:3f:3d:d3:71:da:03:ed:33:24: 55:8f:3b:0f:3e:2a:39:cb:45:bf:8c:8e:67:6a:22: 89:ae:ce:0f:5f:26:8d:d7:f6:7d:ea:b8:b4:7d:75: 9f:87:4b:13:a3:ab:c5:24:fc:b9:4f:63:d4:3b:02: 30:6c:cc:75:df:5f:ab:91:dd:af:76:e4:19:68:ec: 35:1c:e3:02:dc:90:e3:0a:80:79:9c:dc:28:0d:d3: c5:87:7f:d0:cd:2a:4e:9b:d0:d8:a6:08:92:af:12: 19:9e:2c:c8:75:4b:a0:d6:9f:8b:9d:cd:f3:f9:63: c5:a4:33:8a:d0:40:7b:cc:25:99:a4:6d:a8:70:c1: 52:22:c8:0d:78:de:a7:3b:19:19:35:8c:95:7a:f7: 2c:27:88:fe:1e:99:ea:54:56:e7:e1:94:82:02:21: 37:f7:4c:15:79:84:9c:34:9a:78:9e:9e:62:0d:0a: ba:6d:db:f1:43:15:71:f2:ea:a1:a8:3a:ec:f3:a3: ea:8e:cb:fd:9c:23:7a:9c:b8:b8:ae:02:b2:2b:2a: d8:78:c6:69:1e:d3:00:e3:c6:cb:49:57:7e:c9:d4: 1c:ca:5b:7a:07:14:a9:65:6e:4b:b2:e4:49:10:17: 6b:9f:cb:a0:51:35:21:ed:31:44:1a:60:c3:e0:23: ba:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:C6:EF:B0:64:7E:C9:54:41:05:0E:49:86:B3:24:8B:21:80:C1:DF X509v3 Authority Key Identifier: keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e2:30:05:8e:11:bc:88:0d:48:ff:ef:a5:bd:16:16:0e:e6: 37:70:85:61:7b:e9:18:f5:b3:70:fb:aa:96:de:53:8a:13:94: 77:f2:de:0b:85:e7:8f:6a:b2:c4:f6:a3:d5:81:3c:15:57:95: ac:fd:e9:a3:9f:51:c5:c0:ea:8a:01:72:10:2a:e2:85:29:e5: 86:08:93:f1:a6:2e:3f:94:9e:42:ac:5d:73:88:55:a1:89:29: d7:7b:df:cf:c1:0b:ef:9b:c6:fc:a2:35:c4:ca:b3:52:4b:9f: 1d:d9:f5:fd:c6:98:3e:91:25:05:9d:2c:b6:75:b9:9f:ba:12: 57:95:56:e3:2e:b9:97:9c:8f:9c:98:0a:91:63:6e:87:63:52: 99:c1:60:e7:40:bc:07:f7:3c:05:73:04:5c:a5:b5:f9:0a:ce: 5d:7a:c5:68:66:de:3d:85:72:e2:ee:e6:7e:a4:94:8b:e5:56: ad:70:d1:3b:6c:ea:1f:34:03:d8:ce:a3:51:51:dd:27:5c:2e: 1f:03:f8:8f:5e:3f:6f:0d:33:12:e7:40:0b:b4:78:e9:cd:df: 68:50:e2:bc:91:78:84:70:5f:ac:74:f5:8a:3a:0a:be:c4:73: 7b:63:09:35:70:de:20:60:39:41:77:ad:9c:c2:43:52:7d:a5: 9f:e1:9d:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENK0ky6H/IDdaaUneqMd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1 NTY5MTQwHhcNMjYwMjA5MjEwMDI4WhcNMjYwMjEwMjEwMDI4WjAzMTEwLwYDVQQD Eyg1OWM2ZWZiMDY0N2VjOTU0NDEwNTBlNDk4NmIzMjQ4YjIxODBjMWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur+b5uE/PdNx2gPtMyRVjzsPPio5 y0W/jI5naiKJrs4PXyaN1/Z96ri0fXWfh0sTo6vFJPy5T2PUOwIwbMx131+rkd2v duQZaOw1HOMC3JDjCoB5nNwoDdPFh3/QzSpOm9DYpgiSrxIZnizIdUug1p+Lnc3z +WPFpDOK0EB7zCWZpG2ocMFSIsgNeN6nOxkZNYyVevcsJ4j+HpnqVFbn4ZSCAiE3 90wVeYScNJp4np5iDQq6bdvxQxVx8uqhqDrs86Pqjsv9nCN6nLi4rgKyKyrYeMZp HtMA48bLSVd+ydQcylt6BxSpZW5LsuRJEBdrn8ugUTUh7TFEGmDD4CO6ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnG77BkfslUQQUOSYazJIshgMHfMB8GA1UdIwQY MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3 LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+IwBY4R vIgNSP/vpb0WFg7mN3CFYXvpGPWzcPuqlt5TihOUd/LeC4Xnj2qyxPaj1YE8FVeV rP3po59RxcDqigFyECrihSnlhgiT8aYuP5SeQqxdc4hVoYkp13vfz8EL75vG/KI1 xMqzUkufHdn1/caYPpElBZ0stnW5n7oSV5VW4y65l5yPnJgKkWNuh2NSmcFg50C8 B/c8BXMEXKW1+QrOXXrFaGbePYVy4u7mfqSUi+VWrXDRO2zqHzQD2M6jUVHdJ1wu HwP4j14/bw0zEudAC7R46c3faFDivJF4hHBfrHT1ijoKvsRze2MJNXDeIGA5QXet nMJDUn2ln+Gdpw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:59 2026 by rpki-client