This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft File: DETz4ku_xgSOX_pQw9zjZP_AErA.mft (raw, json) Hash identifier: LuRSmb+dhHOP+oie4GPNbspdd/i4WOvX2L3xknWqvmc= Subject key identifier: 66:1B:81:92:DA:AE:A8:80:AD:A8:E4:57:B9:07:7B:F7:64:27:D8:D2 Authority key identifier: 0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 Certificate issuer: /CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Certificate serial: 019C43902CB28B61487BC666C62FE79BF5CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft Manifest number: 14D7 Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: DETz4ku_xgSOX_pQw9zjZP_AErA.crl (hash: 7e5CUjNqdLqwgr9EzqQMIwFnMh9VW/jsKuRqbSSvFiE=) 2: Ki_V1gbeMTHzzb2sAJkjbiTIB4k.roa (hash: G8coFslA7SGGsh7OBwFjSWY/mTtlNbU81EsuVTVQlk4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2c:b2:8b:61:48:7b:c6:66:c6:2f:e7:9b:f5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c44f3e24bbfc6048e5ffa50c3dce364ffc012b0 Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=661b8192daaea880ada8e457b9077bf76427d8d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:af:f0:54:db:c4:81:cc:32:64:d7:76:ed:48: b8:28:59:75:fb:c1:c5:d2:6b:ef:f2:d4:9b:f1:ce: b3:57:a4:b4:eb:fe:bf:d6:7c:c1:35:ff:89:90:54: 7f:17:d2:dc:f8:48:b6:cc:d8:9c:a9:e8:91:86:12: a0:2d:6b:50:14:da:63:6f:fd:dc:08:c4:2b:05:b5: a1:12:2d:e2:12:04:d1:f8:c7:3b:f2:5c:27:e2:94: 2f:cc:75:82:b3:e6:b5:56:49:d6:6a:3b:a3:b7:80: 89:d9:6e:5d:94:14:15:b1:7f:b7:af:d3:21:da:60: c3:f0:d8:05:8b:f6:6c:72:a0:12:f7:4a:40:d0:c1: 95:41:0a:63:07:bc:20:da:c1:eb:b9:ce:88:b4:1a: 8f:53:6d:54:53:c1:da:be:14:13:1a:df:15:29:a7: 5f:06:fa:a3:5f:ae:44:a4:d6:c2:4e:eb:c7:6d:b1: e0:11:f8:91:b4:34:06:d9:c4:ca:76:cd:6f:01:b8: 33:05:a2:e8:77:9b:2b:cd:6f:b9:b9:97:c3:a6:d2: b8:11:8d:dc:d1:a0:3b:c1:aa:11:e1:50:ee:07:18: 10:0e:cb:30:81:d6:56:d5:c7:40:50:fa:28:e9:bd: ef:92:37:46:f7:0b:a4:42:50:c2:bc:a6:22:2c:29: 58:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1B:81:92:DA:AE:A8:80:AD:A8:E4:57:B9:07:7B:F7:64:27:D8:D2 X509v3 Authority Key Identifier: keyid:0C:44:F3:E2:4B:BF:C6:04:8E:5F:FA:50:C3:DC:E3:64:FF:C0:12:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DETz4ku_xgSOX_pQw9zjZP_AErA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9918aa-347d-4878-a16b-8ac7be46cc4b/1/DETz4ku_xgSOX_pQw9zjZP_AErA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:86:e7:b4:a4:ce:71:b1:c8:73:35:c5:cd:f0:7d:c8:05:4f: ed:44:0f:e4:63:dd:34:89:d7:05:26:86:69:07:0d:f3:30:62: c1:cc:30:1d:a4:2b:f3:ca:dc:0f:36:c2:7d:23:89:7e:fc:f3: fa:5c:92:64:aa:64:15:1f:8a:d1:57:52:6d:6a:20:40:38:32: 4c:74:e9:60:77:eb:c8:be:92:30:80:8b:e4:f6:a6:97:f3:3e: 88:e9:45:6b:da:a7:1c:16:3c:45:9b:09:3a:bc:74:8a:ea:df: 54:d0:e3:9b:5c:84:2a:56:04:89:36:46:52:0f:27:5c:dd:38: d6:43:b3:a2:f6:90:5e:0f:83:c0:5d:9c:9a:3f:cb:af:ac:48: 00:89:af:1f:21:06:64:71:dc:0d:79:2d:d4:46:cb:e9:7c:64: 44:f6:81:08:b6:d0:e9:77:08:ba:99:c5:68:42:02:fe:04:6b: 81:98:03:80:20:cc:f5:6f:fd:df:64:1a:5d:10:c6:02:8f:54: 3b:27:46:0a:be:1e:3e:0b:9c:33:77:77:d6:c6:c6:cc:bf:da: 87:ba:07:86:79:98:fa:80:1a:e4:8f:8e:f4:3b:c1:19:26:ee: 85:c9:cd:fa:ef:a9:3e:a3:73:e9:d8:68:21:a7:b7:4a:14:02: 62:6a:d5:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCyyi2FIe8Zmxi/nm/XOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDRmM2UyNGJiZmM2MDQ4ZTVmZmE1MGMzZGNlMzY0ZmZj MDEyYjAwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD Eyg2NjFiODE5MmRhYWVhODgwYWRhOGU0NTdiOTA3N2JmNzY0MjdkOGQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6/wVNvEgcwyZNd27Ui4KFl1+8HF 0mvv8tSb8c6zV6S06/6/1nzBNf+JkFR/F9Lc+Ei2zNicqeiRhhKgLWtQFNpjb/3c CMQrBbWhEi3iEgTR+Mc78lwn4pQvzHWCs+a1VknWajujt4CJ2W5dlBQVsX+3r9Mh 2mDD8NgFi/ZscqAS90pA0MGVQQpjB7wg2sHruc6ItBqPU21UU8HavhQTGt8VKadf BvqjX65EpNbCTuvHbbHgEfiRtDQG2cTKds1vAbgzBaLod5srzW+5uZfDptK4EY3c 0aA7waoR4VDuBxgQDsswgdZW1cdAUPoo6b3vkjdG9wukQlDCvKYiLClY4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYbgZLarqiArajkV7kHe/dkJ9jSMB8GA1UdIwQY MBaAFAxE8+JLv8YEjl/6UMPc42T/wBKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmIt OGFjN2JlNDZjYzRiLzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85OTE4YWEtMzQ3ZC00ODc4LWExNmItOGFjN2JlNDZjYzRi LzEvREVUejRrdV94Z1NPWF9wUXc5empaUF9BRXJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApYbntKTO cbHIczXFzfB9yAVP7UQP5GPdNInXBSaGaQcN8zBiwcwwHaQr88rcDzbCfSOJfvzz +lySZKpkFR+K0VdSbWogQDgyTHTpYHfryL6SMICL5Paml/M+iOlFa9qnHBY8RZsJ Orx0iurfVNDjm1yEKlYEiTZGUg8nXN041kOzovaQXg+DwF2cmj/Lr6xIAImvHyEG ZHHcDXkt1EbL6XxkRPaBCLbQ6XcIupnFaEIC/gRrgZgDgCDM9W/932QaXRDGAo9U OydGCr4ePgucM3d31sbGzL/ah7oHhnmY+oAa5I+O9DvBGSbuhcnN+u+pPqNz6dho Iae3ShQCYmrVSw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:04 2026 by rpki-client