This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json) Hash identifier: 2EU9O2jrjhd4g5Wv4DtgexC8ZjN5OmvOF0z8EGZ5t1s= Subject key identifier: 93:75:B6:7E:77:72:24:68:FF:41:49:59:E0:E9:10:ED:9F:83:2B:3A Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62 Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362 Certificate serial: 019C454765BF65D289EE3B265D0ED4DE3B42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft Manifest number: 0287 Signing time: Tue 10 Feb 2026 02:00:32 +0000 Manifest this update: Tue 10 Feb 2026 02:00:32 +0000 Manifest next update: Wed 11 Feb 2026 02:00:32 +0000 Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: 5hDB6I1TjLpMwn/wdNiqD2XNbdm5nW8iC0sn4HQvnEw=) 2: lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa (hash: DrpvieBQ5necGa8UgAY1dX15pTb/xIkr2RXMaR6ga9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:65:bf:65:d2:89:ee:3b:26:5d:0e:d4:de:3b:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362 Validity Not Before: Feb 10 02:00:32 2026 GMT Not After : Feb 11 02:00:32 2026 GMT Subject: CN=9375b67e77722468ff414959e0e910ed9f832b3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:80:a4:ac:3d:1a:37:3f:77:68:62:de:cc: 4e:53:79:db:8f:56:52:d2:58:f9:3a:c9:b7:a1:4d: 3f:83:a0:54:97:f0:d0:53:91:50:fa:70:ac:93:14: ce:18:6a:99:dc:fa:e1:31:9e:8b:1a:4e:8f:a8:75: 54:92:94:47:de:10:de:97:45:bd:11:1b:c9:d0:c2: d5:16:f3:35:19:e2:dc:7f:a4:cd:bf:fb:50:94:c5: 7e:05:00:8b:79:e0:71:d4:c6:c0:61:d7:42:fd:07: c8:3c:e1:0f:e0:5e:79:e5:f5:53:41:f6:7c:05:09: b2:e9:25:92:b0:89:36:f6:1d:dd:bc:e6:6b:63:68: ea:78:48:9b:93:c4:e0:c5:ae:4e:58:86:3b:08:ec: 4f:dd:e4:b5:40:20:9b:ec:fc:f0:5d:8c:84:2e:e3: 2e:d8:d0:ba:31:cf:23:e9:93:dc:cc:91:77:12:b5: d2:7d:fa:2d:f9:96:e6:12:ea:fb:46:48:16:2c:f3: 65:56:36:9d:21:a7:3f:9a:5c:ce:ba:22:b9:e0:e2: 7d:9d:28:30:b0:b3:db:08:e0:ee:1e:80:91:62:68: 96:1c:cb:e3:02:74:fe:9c:2f:0d:c9:be:1b:c5:39: de:3f:d2:c6:65:99:03:f9:c4:c7:d7:58:7a:23:46: 7d:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:75:B6:7E:77:72:24:68:FF:41:49:59:E0:E9:10:ED:9F:83:2B:3A X509v3 Authority Key Identifier: keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:74:34:e1:5d:ef:7f:60:05:46:05:4a:58:45:2c:4b:41:f0: 58:43:0d:e7:0f:58:7d:17:8a:56:99:b8:bd:76:75:68:85:4b: 85:28:eb:25:1e:d6:d3:da:95:ed:78:b1:ab:a2:7f:a9:e1:e3: 2f:8b:b5:bb:fe:e3:bb:fd:dc:67:b0:ba:3b:b8:86:f7:cb:96: d8:75:13:f1:45:03:2f:61:82:93:15:21:4a:b3:9f:8a:4f:46: fb:f2:f2:17:03:fc:d6:67:4a:d3:7f:57:79:16:9e:22:cb:b4: a3:a9:7c:6c:36:81:f3:65:ac:90:cf:9c:00:bd:af:c3:a7:98: da:30:a8:f4:43:e8:fc:83:1d:66:ad:d3:d5:39:9d:95:0d:eb: 9e:a6:53:2e:6e:b7:71:b0:01:3f:8c:a3:ec:92:d7:52:29:e5: d4:22:f4:05:e9:30:5f:b6:69:62:c5:2a:f5:9c:fd:e7:82:00: d5:77:1f:e8:b0:bf:cd:57:92:a1:a0:7d:ca:a5:8e:d3:fc:60: 12:a6:ee:1f:f4:a0:34:89:d3:2a:9f:0f:be:4c:c8:41:a1:e9: 8a:78:a8:22:92:03:87:88:43:e0:71:12:9f:d4:8b:67:3d:15: 21:30:8d:a2:96:ec:98:3a:9a:24:00:18:e0:a0:33:32:c8:ff: de:3f:d2:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFR2W/ZdKJ7jsmXQ7U3jtCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjY2Q0ZDQ5M2QzOTFjYTQ0NjhlNjEyY2U5MWI0N2YxYzgy ODMzNjIwHhcNMjYwMjEwMDIwMDMyWhcNMjYwMjExMDIwMDMyWjAzMTEwLwYDVQQD Eyg5Mzc1YjY3ZTc3NzIyNDY4ZmY0MTQ5NTllMGU5MTBlZDlmODMyYjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FmApKw9Gjc/d2hi3sxOU3nbj1ZS 0lj5Osm3oU0/g6BUl/DQU5FQ+nCskxTOGGqZ3PrhMZ6LGk6PqHVUkpRH3hDel0W9 ERvJ0MLVFvM1GeLcf6TNv/tQlMV+BQCLeeBx1MbAYddC/QfIPOEP4F555fVTQfZ8 BQmy6SWSsIk29h3dvOZrY2jqeEibk8Tgxa5OWIY7COxP3eS1QCCb7PzwXYyELuMu 2NC6Mc8j6ZPczJF3ErXSffot+ZbmEur7RkgWLPNlVjadIac/mlzOuiK54OJ9nSgw sLPbCODuHoCRYmiWHMvjAnT+nC8Nyb4bxTneP9LGZZkD+cTH11h6I0Z9qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJN1tn53ciRo/0FJWeDpEO2fgys6MB8GA1UdIwQY MBaAFAzNTUk9ORykRo5hLOkbR/HIKDNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQt NzUxMzdiMTI4NDJiLzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQtNzUxMzdiMTI4NDJi LzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW3Q04V3v f2AFRgVKWEUsS0HwWEMN5w9YfReKVpm4vXZ1aIVLhSjrJR7W09qV7Xixq6J/qeHj L4u1u/7ju/3cZ7C6O7iG98uW2HUT8UUDL2GCkxUhSrOfik9G+/LyFwP81mdK039X eRaeIsu0o6l8bDaB82WskM+cAL2vw6eY2jCo9EPo/IMdZq3T1TmdlQ3rnqZTLm63 cbABP4yj7JLXUinl1CL0BekwX7ZpYsUq9Zz954IA1Xcf6LC/zVeSoaB9yqWO0/xg EqbuH/SgNInTKp8PvkzIQaHpinioIpIDh4hD4HESn9SLZz0VITCNopbsmDqaJAAY 4KAzMsj/3j/SFw== -----END CERTIFICATE-----Generated at Tue Feb 10 04:22:29 2026 by rpki-client