This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft File: 0zDcrR41MkVJwcmhlBerak0JreA.mft (raw, json) Hash identifier: Lj9oxTMBlfZJqAfbUGaSeSkTdqIF6xCYq9ng9gA6hQM= Subject key identifier: DA:6A:6F:EC:CE:14:E5:DD:A4:14:60:C7:6B:B0:AC:36:C9:B6:1A:78 Authority key identifier: D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 Certificate issuer: /CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Certificate serial: 019C40FD3438B8D4674ED99F51031296AA9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft Manifest number: 0EE4 Signing time: Mon 09 Feb 2026 06:01:01 +0000 Manifest this update: Mon 09 Feb 2026 06:01:01 +0000 Manifest next update: Tue 10 Feb 2026 06:01:01 +0000 Files and hashes: 1: 0zDcrR41MkVJwcmhlBerak0JreA.crl (hash: 6gg39zFy/iDmpSfuDTfhRBlpa5oKDUbpPIDVTuzDZiw=) 2: 5yHtrBRoK5Q4zbFAHbMdThNdZIE.roa (hash: uoMSiABNR17F9m6eX/S3mZE2twR2jgvrbl3hf1Zk98s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 06:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:40:fd:34:38:b8:d4:67:4e:d9:9f:51:03:12:96:aa:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d330dcad1e35324549c1c9a19417ab6a4d09ade0 Validity Not Before: Feb 9 06:01:01 2026 GMT Not After : Feb 10 06:01:01 2026 GMT Subject: CN=da6a6fecce14e5dda41460c76bb0ac36c9b61a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:31:60:03:fc:bd:5c:31:f7:97:34:40:72: 10:cb:a8:fa:6e:f3:b9:20:6c:fc:3b:53:b0:24:d6: 39:dd:9f:ef:9b:bc:23:76:db:54:06:f3:59:f6:27: e2:4d:17:20:13:57:2b:ac:50:4a:b5:92:bb:93:f5: 5e:49:04:59:5e:29:34:61:a8:7a:84:4c:16:f9:ea: a9:4f:f8:d0:1a:e6:47:11:8a:ef:6e:c0:92:a9:00: cd:31:2f:f0:25:0c:f6:33:de:aa:05:19:56:7d:6f: 2c:8e:9a:5c:c9:d9:af:3e:54:d9:f5:59:91:22:dc: a2:30:41:6a:33:4c:85:f4:6e:14:5f:c9:07:3b:ba: db:60:15:66:63:0a:bb:7b:3b:48:00:35:12:70:10: 95:25:96:6c:a0:37:fa:4b:76:6d:71:1d:5c:28:56: ee:73:2d:7a:2f:19:4a:ca:88:e6:c1:6f:99:7c:89: 86:df:61:da:a6:53:46:3e:c4:9c:ed:d5:ff:ab:ff: 90:3e:52:d7:bb:9b:2f:a9:7c:36:8a:d9:c3:9c:dd: b7:9c:24:67:f7:93:73:cd:ce:c2:7a:4f:80:2f:b8: df:1d:19:93:0e:11:ad:ab:42:4b:d9:ef:26:30:7e: 9b:70:0b:6d:21:47:0e:f9:66:27:56:bf:d5:c7:40: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:6A:6F:EC:CE:14:E5:DD:A4:14:60:C7:6B:B0:AC:36:C9:B6:1A:78 X509v3 Authority Key Identifier: keyid:D3:30:DC:AD:1E:35:32:45:49:C1:C9:A1:94:17:AB:6A:4D:09:AD:E0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zDcrR41MkVJwcmhlBerak0JreA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f80dd4-f184-45a8-b58d-66517a3ac19d/1/0zDcrR41MkVJwcmhlBerak0JreA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:35:e4:d2:40:4c:88:b8:f4:0c:7c:13:20:1b:0c:21:07:62: 20:29:9a:db:77:e9:f7:f9:84:08:a6:b5:eb:b9:6e:de:b2:cf: 4b:ac:88:60:50:3b:50:1b:29:3d:a9:13:06:73:3d:e0:4d:42: 51:2a:47:9c:fd:9c:02:b4:20:df:69:cf:50:74:96:90:21:78: f1:df:8f:a8:2c:1b:a8:2a:19:06:0b:af:02:b0:6c:e2:b1:49: 4d:66:4c:30:c5:b7:4c:32:db:1c:30:f9:57:26:82:8f:6f:48: 7f:6b:1c:41:d1:48:29:3d:f5:28:d5:da:87:c7:35:d5:60:b0: f2:4d:a1:5d:56:09:ec:4f:fa:8b:ac:84:57:8b:65:1d:a3:48: 26:d2:c5:66:47:d9:a8:69:b0:73:2c:5c:51:ee:87:33:ad:45: 41:ca:2b:5e:f1:6a:39:1a:dc:9d:90:4c:a3:3c:49:dc:da:44: be:fa:96:5d:d8:cd:19:cf:24:1e:22:81:74:b8:7a:96:d1:6f: a3:bd:bf:12:5c:59:35:93:48:87:67:8a:42:0d:f3:3c:3c:d3: 38:b6:fa:6c:cc:d5:9d:85:89:c8:4b:a2:2e:36:26:79:c2:51: ab:19:10:2f:1d:17:5d:0a:c8:ab:07:a6:cd:91:41:b1:fd:f8: 2d:4f:0a:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxA/TQ4uNRnTtmfUQMSlqqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzMzBkY2FkMWUzNTMyNDU0OWMxYzlhMTk0MTdhYjZhNGQw OWFkZTAwHhcNMjYwMjA5MDYwMTAxWhcNMjYwMjEwMDYwMTAxWjAzMTEwLwYDVQQD EyhkYTZhNmZlY2NlMTRlNWRkYTQxNDYwYzc2YmIwYWMzNmM5YjYxYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqYxYAP8vVwx95c0QHIQy6j6bvO5 IGz8O1OwJNY53Z/vm7wjdttUBvNZ9ifiTRcgE1crrFBKtZK7k/VeSQRZXik0Yah6 hEwW+eqpT/jQGuZHEYrvbsCSqQDNMS/wJQz2M96qBRlWfW8sjppcydmvPlTZ9VmR ItyiMEFqM0yF9G4UX8kHO7rbYBVmYwq7eztIADUScBCVJZZsoDf6S3ZtcR1cKFbu cy16LxlKyojmwW+ZfImG32HaplNGPsSc7dX/q/+QPlLXu5svqXw2itnDnN23nCRn 95Nzzc7Cek+AL7jfHRmTDhGtq0JL2e8mMH6bcAttIUcO+WYnVr/Vx0Cb5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpqb+zOFOXdpBRgx2uwrDbJthp4MB8GA1UdIwQY MBaAFNMw3K0eNTJFScHJoZQXq2pNCa3gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQt NjY1MTdhM2FjMTlkLzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMy9mODBkZDQtZjE4NC00NWE4LWI1OGQtNjY1MTdhM2FjMTlk LzEvMHpEY3JSNDFNa1ZKd2NtaGxCZXJhazBKcmVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDXk0kBM iLj0DHwTIBsMIQdiICma23fp9/mECKa167lu3rLPS6yIYFA7UBspPakTBnM94E1C USpHnP2cArQg32nPUHSWkCF48d+PqCwbqCoZBguvArBs4rFJTWZMMMW3TDLbHDD5 VyaCj29If2scQdFIKT31KNXah8c11WCw8k2hXVYJ7E/6i6yEV4tlHaNIJtLFZkfZ qGmwcyxcUe6HM61FQcorXvFqORrcnZBMozxJ3NpEvvqWXdjNGc8kHiKBdLh6ltFv o72/ElxZNZNIh2eKQg3zPDzTOLb6bMzVnYWJyEuiLjYmecJRqxkQLx0XXQrIqwem zZFBsf34LU8KHA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:47 2026 by rpki-client