This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft File: DK1CcwlNNxCBbc4tEASmJYUB9ts.mft (raw, json) Hash identifier: AF4SZ/Xcd+Iw0bn7ae33bv4dn9NumKSWKrxNnYW9sTw= Subject key identifier: 80:DD:FC:3B:E9:44:E3:38:0E:CF:DA:D7:9B:82:DB:94:8D:60:D1:86 Authority key identifier: 0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB Certificate issuer: /CN=0cad4273094d3710816dce2d1004a6258501f6db Certificate serial: 019C1C14BB0225BE7F43F12BE5C11444CA2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft Manifest number: 64 Signing time: Mon 02 Feb 2026 02:00:46 +0000 Manifest this update: Mon 02 Feb 2026 02:00:46 +0000 Manifest next update: Tue 03 Feb 2026 02:00:46 +0000 Files and hashes: 1: DK1CcwlNNxCBbc4tEASmJYUB9ts.crl (hash: R1HDv+dym9ZfHPFGSrvPKgjIuO68fdz0ccaxSGt53fY=) 2: Uiic3PMU7XK3RnFp2kF5hh7-Bkc.asa (hash: ZStz8VWjv9JWorKywmlp8CUIrtYl6f6S3mkhtfoiopc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 21:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:14:bb:02:25:be:7f:43:f1:2b:e5:c1:14:44:ca:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cad4273094d3710816dce2d1004a6258501f6db Validity Not Before: Feb 2 02:00:46 2026 GMT Not After : Feb 3 02:00:46 2026 GMT Subject: CN=80ddfc3be944e3380ecfdad79b82db948d60d186 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:52:b9:d1:c5:ab:14:f4:24:3c:b5:25:ea:3b: 26:35:b5:10:81:9c:2b:ca:1c:db:df:57:0b:96:75: 38:68:33:2b:30:26:cc:59:31:8d:3c:9b:e5:86:e3: 31:fc:9c:8a:3c:c6:43:2e:8a:ba:56:29:22:20:ed: 90:b9:c2:46:0c:d5:fb:21:9b:59:17:46:98:5f:b6: 4a:f8:18:ef:9c:ab:d3:75:96:38:b0:b3:b2:fd:77: ad:ed:c8:e2:dd:6b:84:cc:8b:a8:ed:c5:33:50:2e: 59:12:52:97:bf:8e:90:71:0c:2a:a0:b0:36:9a:b9: a2:c8:08:fe:d0:56:83:0b:9a:3d:98:8e:7a:99:b7: 7c:0d:9a:0d:bc:61:2b:e2:20:e3:e6:1d:67:b4:2c: 27:9c:fe:3c:8c:de:56:67:4d:0a:53:a9:8d:4a:b0: c8:00:83:7e:39:59:a3:c1:11:fb:2d:70:33:5f:fc: 1f:4b:93:0b:4a:50:cf:ad:f1:a0:02:99:58:b6:7f: 0a:9e:ef:fc:8a:7b:51:86:41:84:2d:8c:3d:8b:d4: 82:09:50:a0:9a:e2:a2:d2:da:2b:7f:34:44:be:07: ab:b7:36:dd:70:0d:67:4e:fd:04:a1:bb:7b:8f:b1: 23:d7:b6:69:7b:bd:e7:1c:b8:92:3a:9c:90:2a:51: 99:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DD:FC:3B:E9:44:E3:38:0E:CF:DA:D7:9B:82:DB:94:8D:60:D1:86 X509v3 Authority Key Identifier: keyid:0C:AD:42:73:09:4D:37:10:81:6D:CE:2D:10:04:A6:25:85:01:F6:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DK1CcwlNNxCBbc4tEASmJYUB9ts.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4859c9-b391-497f-9a7a-25c374ceccda/1/DK1CcwlNNxCBbc4tEASmJYUB9ts.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:81:04:00:02:19:e3:1f:b6:0f:2e:c0:5d:83:0f:be:34:94: eb:f7:cb:36:e2:5c:a4:03:95:a1:bb:26:d2:98:fb:10:c0:8c: 56:d0:ae:14:9f:1f:18:86:79:e4:a4:7f:3f:52:d4:20:7a:ca: b6:f3:0a:12:d9:f4:bb:45:4a:0d:11:24:f3:ec:8f:cf:d4:af: 84:9f:56:99:ff:02:79:0a:38:21:f4:39:cf:77:64:3c:90:64: 0c:59:8f:7d:3d:88:0a:24:d7:80:e0:df:cb:2b:79:4f:7d:d5: 6f:44:90:48:66:8f:72:d8:13:f6:6e:8d:6e:c2:e7:76:85:d3: a2:40:63:47:d8:e9:db:64:3f:5c:a8:39:5f:4f:49:52:98:af: 67:2c:91:77:61:c2:b4:c7:3b:ad:f6:40:c0:3b:2f:3f:45:4a: 1e:71:7f:aa:a7:07:1a:24:db:97:d7:87:a6:0e:0c:12:b2:06: 10:7b:f6:52:5d:02:ba:f9:f6:ad:eb:4f:0a:1c:50:ba:45:8c: c0:48:a2:42:67:51:fc:f2:3b:b3:80:9c:81:01:14:55:18:18: 5e:52:1c:de:ed:20:e0:3b:5e:88:53:c8:4c:87:15:59:e1:de: 81:14:52:0b:e3:4a:4c:b2:cb:83:0d:da:54:cd:5e:f6:bb:39: b0:6f:4e:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwcFLsCJb5/Q/Er5cEURMosMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjYWQ0MjczMDk0ZDM3MTA4MTZkY2UyZDEwMDRhNjI1ODUw MWY2ZGIwHhcNMjYwMjAyMDIwMDQ2WhcNMjYwMjAzMDIwMDQ2WjAzMTEwLwYDVQQD Eyg4MGRkZmMzYmU5NDRlMzM4MGVjZmRhZDc5YjgyZGI5NDhkNjBkMTg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFK50cWrFPQkPLUl6jsmNbUQgZwr yhzb31cLlnU4aDMrMCbMWTGNPJvlhuMx/JyKPMZDLoq6VikiIO2QucJGDNX7IZtZ F0aYX7ZK+BjvnKvTdZY4sLOy/Xet7cji3WuEzIuo7cUzUC5ZElKXv46QcQwqoLA2 mrmiyAj+0FaDC5o9mI56mbd8DZoNvGEr4iDj5h1ntCwnnP48jN5WZ00KU6mNSrDI AIN+OVmjwRH7LXAzX/wfS5MLSlDPrfGgAplYtn8Knu/8intRhkGELYw9i9SCCVCg muKi0torfzREvgertzbdcA1nTv0Eobt7j7Ej17Zpe73nHLiSOpyQKlGZoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDd/DvpROM4Ds/a15uC25SNYNGGMB8GA1UdIwQY MBaAFAytQnMJTTcQgW3OLRAEpiWFAfbbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2Et MjVjMzc0Y2VjY2RhLzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODU5YzktYjM5MS00OTdmLTlhN2EtMjVjMzc0Y2VjY2Rh LzEvREsxQ2N3bE5OeENCYmM0dEVBU21KWVVCOXRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABoEEAAIZ 4x+2Dy7AXYMPvjSU6/fLNuJcpAOVobsm0pj7EMCMVtCuFJ8fGIZ55KR/P1LUIHrK tvMKEtn0u0VKDREk8+yPz9SvhJ9Wmf8CeQo4IfQ5z3dkPJBkDFmPfT2ICiTXgODf yyt5T33Vb0SQSGaPctgT9m6NbsLndoXTokBjR9jp22Q/XKg5X09JUpivZyyRd2HC tMc7rfZAwDsvP0VKHnF/qqcHGiTbl9eHpg4MErIGEHv2Ul0Cuvn2retPChxQukWM wEiiQmdR/PI7s4CcgQEUVRgYXlIc3u0g4DteiFPITIcVWeHegRRSC+NKTLLLgw3a VM1e9rs5sG9OBw== -----END CERTIFICATE-----Generated at Mon Feb 2 07:57:15 2026 by rpki-client