This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft File: dKjYRykGwgOKrshMez5Wwglr6GA.mft (raw, json) Hash identifier: 27n1F33MfybBseJbf9moBYnO3Qh7ea3MekpmPhRKvn8= Subject key identifier: BF:40:66:5D:6E:83:C7:F5:7D:C2:FF:21:90:1E:DD:05:20:DE:64:23 Authority key identifier: 74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 Certificate issuer: /CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Certificate serial: 019C42466DAFCF4ABB375B3A8ECF879B4AA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft Manifest number: 1527 Signing time: Mon 09 Feb 2026 12:00:37 +0000 Manifest this update: Mon 09 Feb 2026 12:00:37 +0000 Manifest next update: Tue 10 Feb 2026 12:00:37 +0000 Files and hashes: 1: dKjYRykGwgOKrshMez5Wwglr6GA.crl (hash: wmL9owGqaWAytxhuCPLHVoKyFDUxizSN+McIITXwquc=) 2: oQCJF4siUdcpboMPfHP2EbeM0ps.roa (hash: IesKj0DCrmac38Ifbjs7D9byS/qB5f4vRUYllQm6ZFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:6d:af:cf:4a:bb:37:5b:3a:8e:cf:87:9b:4a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74a8d8472906c2038aaec84c7b3e56c2096be860 Validity Not Before: Feb 9 12:00:37 2026 GMT Not After : Feb 10 12:00:37 2026 GMT Subject: CN=bf40665d6e83c7f57dc2ff21901edd0520de6423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c1:f8:59:31:b0:86:a9:52:04:0c:89:0b:5a: 76:31:82:08:41:a3:a3:18:23:be:92:1e:c9:fe:53: 00:72:6e:3b:e3:cb:a0:8a:b9:29:70:51:b9:3b:e4: 43:98:84:af:bd:da:b1:4c:ce:8f:ef:02:c8:6d:95: 73:96:b6:c9:d8:c2:20:64:9a:a3:ac:8d:91:50:12: 94:7d:87:63:04:5d:8f:cb:20:66:66:e5:3e:fa:ad: c7:39:d0:fb:5a:2a:dd:19:4f:c0:39:60:2f:2e:c9: aa:9c:e4:ad:13:80:3a:c1:76:6e:75:c1:6e:16:80: 96:75:9e:da:fb:0d:b5:5d:93:dd:e1:65:a4:00:b2: e5:1e:00:ac:9e:61:8e:75:13:90:93:13:39:56:a6: cc:00:0d:73:fb:50:ce:60:6e:32:88:20:1b:dd:34: 7e:bc:00:42:6c:95:8e:c2:82:b0:28:a8:4d:d8:78: 2b:0c:5b:b1:55:d5:ae:a9:e0:ba:f9:88:65:00:0f: 77:11:2a:48:0d:e3:68:d5:19:30:4b:1f:b1:9d:b1: c7:06:d4:1b:7e:05:30:a4:c6:34:f0:1a:16:02:53: 0f:c8:15:9c:f6:40:91:dd:0f:95:f9:9b:74:1b:29: b7:40:dd:9b:f2:08:ac:95:28:2d:3e:28:1e:f6:56: 6f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:40:66:5D:6E:83:C7:F5:7D:C2:FF:21:90:1E:DD:05:20:DE:64:23 X509v3 Authority Key Identifier: keyid:74:A8:D8:47:29:06:C2:03:8A:AE:C8:4C:7B:3E:56:C2:09:6B:E8:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKjYRykGwgOKrshMez5Wwglr6GA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d4d519-e774-415a-93ab-3956e56c1835/1/dKjYRykGwgOKrshMez5Wwglr6GA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:b4:a1:c1:1b:07:ed:46:04:c9:59:b2:3c:9e:69:0a:04:3d: cf:7b:ad:7e:e3:d2:8a:0d:7e:91:be:05:9c:1a:40:65:fe:da: c1:4d:3a:d8:9c:e1:ad:3d:c8:f7:37:22:3c:27:fb:98:22:31: d9:66:e3:48:0f:e8:5f:0c:9b:14:23:1d:3b:c9:d0:2a:31:84: 7d:be:09:36:b0:fd:af:b3:76:d3:0a:8a:d0:aa:ad:12:c2:1f: 90:e8:74:ca:3e:01:9b:86:03:57:71:22:71:14:6e:7f:3c:f8: 80:96:1c:10:2c:fa:39:b1:e3:f0:98:ff:f1:69:91:fb:aa:02: 98:af:e2:fb:1a:bb:ae:a3:2b:ba:2d:7b:9f:c9:95:61:3b:bf: 8d:80:0b:8b:e5:0d:f9:d9:3f:a3:78:f8:f0:b4:41:88:eb:aa: 38:7b:2d:c5:55:6f:48:c3:51:ab:50:dc:86:e8:ba:ff:b4:8f: 8b:fa:15:f8:8a:79:16:08:36:ec:61:04:ea:9b:d2:3c:7e:63: 79:6c:b9:79:99:a2:b9:5f:a6:b3:b8:21:a9:a2:99:44:71:f9: 72:ed:3e:ce:01:ed:ce:9d:bf:33:87:40:00:d7:e5:23:11:3b: 82:b3:9b:44:16:1f:16:b9:e1:4d:33:94:cd:a3:6f:1d:16:15: 45:4c:cc:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRm2vz0q7N1s6js+Hm0qmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0YThkODQ3MjkwNmMyMDM4YWFlYzg0YzdiM2U1NmMyMDk2 YmU4NjAwHhcNMjYwMjA5MTIwMDM3WhcNMjYwMjEwMTIwMDM3WjAzMTEwLwYDVQQD EyhiZjQwNjY1ZDZlODNjN2Y1N2RjMmZmMjE5MDFlZGQwNTIwZGU2NDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsH4WTGwhqlSBAyJC1p2MYIIQaOj GCO+kh7J/lMAcm4748ugirkpcFG5O+RDmISvvdqxTM6P7wLIbZVzlrbJ2MIgZJqj rI2RUBKUfYdjBF2PyyBmZuU++q3HOdD7WirdGU/AOWAvLsmqnOStE4A6wXZudcFu FoCWdZ7a+w21XZPd4WWkALLlHgCsnmGOdROQkxM5VqbMAA1z+1DOYG4yiCAb3TR+ vABCbJWOwoKwKKhN2HgrDFuxVdWuqeC6+YhlAA93ESpIDeNo1RkwSx+xnbHHBtQb fgUwpMY08BoWAlMPyBWc9kCR3Q+V+Zt0Gym3QN2b8gislSgtPige9lZvywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL9AZl1ug8f1fcL/IZAe3QUg3mQjMB8GA1UdIwQY MBaAFHSo2EcpBsIDiq7ITHs+VsIJa+hgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWIt Mzk1NmU1NmMxODM1LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNC9kNGQ1MTktZTc3NC00MTVhLTkzYWItMzk1NmU1NmMxODM1 LzEvZEtqWVJ5a0d3Z09LcnNoTWV6NVd3Z2xyNkdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcLShwRsH 7UYEyVmyPJ5pCgQ9z3utfuPSig1+kb4FnBpAZf7awU062JzhrT3I9zciPCf7mCIx 2WbjSA/oXwybFCMdO8nQKjGEfb4JNrD9r7N20wqK0KqtEsIfkOh0yj4Bm4YDV3Ei cRRufzz4gJYcECz6ObHj8Jj/8WmR+6oCmK/i+xq7rqMrui17n8mVYTu/jYALi+UN +dk/o3j48LRBiOuqOHstxVVvSMNRq1Dchui6/7SPi/oV+Ip5Fgg27GEE6pvSPH5j eWy5eZmiuV+ms7ghqaKZRHH5cu0+zgHtzp2/M4dAANflIxE7grObRBYfFrnhTTOU zaNvHRYVRUzMcg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:28 2026 by rpki-client