This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json) Hash identifier: Gh09xkI7YsPzZUw7foWpaVun0dPexrIqbQbIQwkyLyg= Subject key identifier: 96:32:B6:F8:0B:24:32:BA:83:0A:8A:4E:54:91:B4:CE:12:06:FB:7B Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37 Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537 Certificate serial: 019C4321D697A77BDF7D93ABEE405F41B829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:00:16 +0000 Manifest this update: Mon 09 Feb 2026 16:00:16 +0000 Manifest next update: Tue 10 Feb 2026 16:00:16 +0000 Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: 21LqDCg2qL5ERrvyM/27Cz8vRjXw58nYn4CU1HFjsHk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d6:97:a7:7b:df:7d:93:ab:ee:40:5f:41:b8:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537 Validity Not Before: Feb 9 16:00:16 2026 GMT Not After : Feb 10 16:00:16 2026 GMT Subject: CN=9632b6f80b2432ba830a8a4e5491b4ce1206fb7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:17:93:f8:8d:51:a6:1c:c5:a0:2b:a7:86:e5: 00:3e:4d:45:45:3d:22:33:b7:01:a9:7c:4c:ba:f3: b8:c7:ef:74:01:fb:97:91:7b:43:cf:a0:24:76:bd: e7:5f:b4:c8:70:05:e3:bc:40:ce:e7:05:03:5e:09: f6:38:5e:15:a9:3f:75:cc:4e:a2:90:01:c5:9c:88: 8f:75:c9:38:fb:33:57:1e:24:c5:3a:ea:c1:7b:17: 23:f9:ae:28:16:cd:6e:8f:27:52:db:11:31:e8:fc: 4a:a5:d5:b2:eb:97:a2:24:61:df:3c:df:45:d3:6f: 04:f1:9b:f6:a4:d6:56:12:a4:2d:91:4e:50:31:5e: 4e:82:8b:0a:45:8a:a1:12:3c:33:3c:49:f8:2b:c9: 49:11:bc:c5:5a:0b:48:23:c5:d9:81:c1:23:63:64: 04:38:48:1a:82:8b:46:92:ad:d2:a0:58:75:60:98: 99:5e:c4:67:96:f8:71:78:22:5a:1a:08:e3:c2:54: 7c:62:5c:4d:51:f8:0f:0c:0d:48:51:0f:3c:a6:5d: 5f:67:a4:bf:57:23:31:3c:76:30:00:13:17:7c:92: d0:46:41:91:3f:20:38:23:c6:1a:ab:81:41:b5:50: 03:34:5a:5e:f4:53:12:15:c7:27:d4:0f:7e:ed:c8: 69:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:32:B6:F8:0B:24:32:BA:83:0A:8A:4E:54:91:B4:CE:12:06:FB:7B X509v3 Authority Key Identifier: keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:60:b6:0c:48:3d:15:0e:1a:e3:4b:9f:e3:44:37:9e:6e:50: 91:8c:ff:37:4d:d6:8c:a2:5f:68:ff:dd:82:ae:36:bd:ca:10: 7a:1c:77:0d:e3:1c:d2:c5:2f:dc:66:f9:d9:21:6e:59:14:66: 4b:ed:02:0d:19:02:01:e0:0e:94:d3:fd:01:65:bb:2a:f3:71: 3b:65:31:3f:6a:30:b3:2b:de:44:2e:9e:84:51:4c:ff:1d:62: 4b:01:7b:75:b4:10:b1:b6:57:3a:53:5f:94:fe:61:74:0b:7a: 80:6a:f4:b6:57:7a:36:ed:48:ad:6e:cf:f5:80:e8:bb:29:a7: d2:49:81:37:3d:df:5d:51:81:ee:4b:10:ec:f2:a8:2e:a7:76: 4f:23:fe:d6:83:dd:cb:01:c0:1a:39:c8:ce:53:59:92:cb:86: 43:05:2f:f3:ce:86:75:ab:31:bf:fd:36:a5:5f:51:e7:cb:73: a4:b8:dc:f2:78:d3:4e:3d:3b:e8:be:dd:0b:93:a9:1d:ed:ad: 5c:c0:81:21:42:89:46:e0:5d:53:5f:a3:72:a8:a1:38:71:66: c8:88:2c:09:cd:68:eb:bb:1b:f5:82:c4:6c:f0:7e:d8:c8:95: 5e:71:41:66:b3:60:e0:21:40:fc:b5:63:d7:01:31:07:2c:84: fe:33:3d:8f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdaXp3vffZOr7kBfQbgpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl OTY1MzcwHhcNMjYwMjA5MTYwMDE2WhcNMjYwMjEwMTYwMDE2WjAzMTEwLwYDVQQD Eyg5NjMyYjZmODBiMjQzMmJhODMwYThhNGU1NDkxYjRjZTEyMDZmYjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxheT+I1RphzFoCunhuUAPk1FRT0i M7cBqXxMuvO4x+90AfuXkXtDz6Akdr3nX7TIcAXjvEDO5wUDXgn2OF4VqT91zE6i kAHFnIiPdck4+zNXHiTFOurBexcj+a4oFs1ujydS2xEx6PxKpdWy65eiJGHfPN9F 028E8Zv2pNZWEqQtkU5QMV5OgosKRYqhEjwzPEn4K8lJEbzFWgtII8XZgcEjY2QE OEgagotGkq3SoFh1YJiZXsRnlvhxeCJaGgjjwlR8YlxNUfgPDA1IUQ88pl1fZ6S/ VyMxPHYwABMXfJLQRkGRPyA4I8Yaq4FBtVADNFpe9FMSFccn1A9+7chpjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJYytvgLJDK6gwqKTlSRtM4SBvt7MB8GA1UdIwQY MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF2C2DEg9 FQ4a40uf40Q3nm5QkYz/N03WjKJfaP/dgq42vcoQehx3DeMc0sUv3Gb52SFuWRRm S+0CDRkCAeAOlNP9AWW7KvNxO2UxP2owsyveRC6ehFFM/x1iSwF7dbQQsbZXOlNf lP5hdAt6gGr0tld6Nu1IrW7P9YDouymn0kmBNz3fXVGB7ksQ7PKoLqd2TyP+1oPd ywHAGjnIzlNZksuGQwUv886Gdasxv/02pV9R58tzpLjc8njTTj076L7dC5OpHe2t XMCBIUKJRuBdU1+jcqihOHFmyIgsCc1o67sb9YLEbPB+2MiVXnFBZrNg4CFA/LVj 1wExByyE/jM9jw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:52:51 2026 by rpki-client