This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft File: da9OLDR4Dz2fUegKU7rDvm8yWUM.mft (raw, json) Hash identifier: LHltRxju921Y7oTBmt0cnXfFSatDW9621dgpftqR55c= Subject key identifier: 3F:7A:3F:09:7B:7F:CA:DF:68:4E:3C:3B:91:3D:C8:D8:2C:C2:67:E2 Authority key identifier: 75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 Certificate issuer: /CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Certificate serial: 019C44DA4EA43C641DE0C63F0160E90BD00D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft Manifest number: 10FB Signing time: Tue 10 Feb 2026 00:01:23 +0000 Manifest this update: Tue 10 Feb 2026 00:01:23 +0000 Manifest next update: Wed 11 Feb 2026 00:01:23 +0000 Files and hashes: 1: da9OLDR4Dz2fUegKU7rDvm8yWUM.crl (hash: XZBJgbd42dwTFAgh4gAdRCJdIlARlT6awrEvWatQ9ZU=) 2: oGvgPtzFT-aTFQ_B85J22DwDAck.roa (hash: 6nOejPxS/rpc0rhO5giVJoyCV3cG0CBp7/FNYjbRlys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:da:4e:a4:3c:64:1d:e0:c6:3f:01:60:e9:0b:d0:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75af4e2c34780f3d9f51e80a53bac3be6f325943 Validity Not Before: Feb 10 00:01:23 2026 GMT Not After : Feb 11 00:01:23 2026 GMT Subject: CN=3f7a3f097b7fcadf684e3c3b913dc8d82cc267e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8a:61:38:0e:fa:c7:ed:31:b1:35:43:6d:ec: 7b:7c:7d:fa:7d:0b:37:81:8e:a3:da:4c:8e:49:a3: f3:3f:9e:83:07:6f:93:9f:50:29:00:2a:72:67:3c: 17:cd:8d:b3:1d:e4:ee:18:c9:e6:70:bb:0e:53:6f: 1e:7f:40:ef:ae:09:17:ee:f0:8f:93:c1:fd:24:c3: 36:72:2a:85:db:1d:18:bb:68:d8:58:af:f8:28:8f: 67:2b:87:dc:43:a1:39:bb:d7:69:9e:3d:41:e2:43: d4:0d:75:8b:11:92:47:32:7d:c4:aa:f0:f3:e3:dd: 5b:b7:42:89:b7:85:f7:41:6f:46:e4:4d:c9:45:b9: be:53:66:58:2f:33:ed:07:8b:d2:7a:a9:88:80:9e: d7:11:d0:68:09:e9:59:55:09:e7:cf:67:94:e1:2a: ed:68:fc:ea:e9:c7:9a:60:b8:27:d1:82:fd:37:d0: 3d:b9:a7:f7:b1:83:1a:1b:c2:99:59:cf:8a:c4:87: 9d:9a:74:13:46:60:42:b8:ff:bc:68:28:c7:71:ea: a3:51:c2:d9:9e:dc:92:8f:a9:83:23:2e:c9:cc:eb: 63:8f:2a:67:51:04:6a:5f:43:54:e1:6a:e5:18:89: 06:f7:97:85:5b:7a:15:02:77:45:6b:3c:15:02:b3: af:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:7A:3F:09:7B:7F:CA:DF:68:4E:3C:3B:91:3D:C8:D8:2C:C2:67:E2 X509v3 Authority Key Identifier: keyid:75:AF:4E:2C:34:78:0F:3D:9F:51:E8:0A:53:BA:C3:BE:6F:32:59:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/da9OLDR4Dz2fUegKU7rDvm8yWUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/09239a-4f88-409b-a781-75330d4ce86e/1/da9OLDR4Dz2fUegKU7rDvm8yWUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:33:d2:42:62:7f:1f:06:2e:bb:ac:ba:86:36:b7:81:9a:cf: 1c:a2:e9:ee:42:ab:63:53:a2:ae:00:11:88:f2:43:29:d9:bc: 1e:d0:4e:49:82:e5:1b:a4:bc:ba:ef:2d:19:74:19:b1:80:e8: 4a:75:60:f3:fe:3f:af:85:64:bb:27:5f:fd:5e:9e:e4:ba:f8: 5c:69:8c:b2:a6:e4:22:e1:70:92:a6:cb:07:e0:3b:ab:74:b3: 7a:08:b3:82:a1:10:fe:dd:19:36:40:4c:37:e8:93:b3:1e:d2: 4d:33:57:45:9f:8a:e7:fe:d4:58:30:f7:41:59:e9:49:20:d8: c0:43:85:56:ff:77:7c:86:72:46:c8:f5:85:7d:8f:bf:69:f3: 71:33:b5:3f:2f:38:f5:69:63:42:d2:e7:34:10:e0:e7:2f:7c: f8:c2:f9:9e:4f:93:50:23:6c:83:3b:67:db:5a:0e:48:a2:70: 79:bd:49:d6:ff:4d:f8:5f:60:2d:2e:11:ee:64:fd:88:24:1d: 60:34:ff:91:65:1f:5e:bf:c4:65:76:7c:96:ec:ed:00:63:c4: 0b:72:4b:13:c1:95:6d:8c:56:d2:b0:9d:1c:0c:8c:22:87:1c: 38:26:21:ab:59:ff:09:8b:b4:bd:e1:c0:e4:4c:ce:db:d6:a9: 02:1b:c1:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2k6kPGQd4MY/AWDpC9ANMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1YWY0ZTJjMzQ3ODBmM2Q5ZjUxZTgwYTUzYmFjM2JlNmYz MjU5NDMwHhcNMjYwMjEwMDAwMTIzWhcNMjYwMjExMDAwMTIzWjAzMTEwLwYDVQQD EygzZjdhM2YwOTdiN2ZjYWRmNjg0ZTNjM2I5MTNkYzhkODJjYzI2N2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4phOA76x+0xsTVDbex7fH36fQs3 gY6j2kyOSaPzP56DB2+Tn1ApACpyZzwXzY2zHeTuGMnmcLsOU28ef0DvrgkX7vCP k8H9JMM2ciqF2x0Yu2jYWK/4KI9nK4fcQ6E5u9dpnj1B4kPUDXWLEZJHMn3EqvDz 491bt0KJt4X3QW9G5E3JRbm+U2ZYLzPtB4vSeqmIgJ7XEdBoCelZVQnnz2eU4Srt aPzq6ceaYLgn0YL9N9A9uaf3sYMaG8KZWc+KxIedmnQTRmBCuP+8aCjHceqjUcLZ ntySj6mDIy7JzOtjjypnUQRqX0NU4WrlGIkG95eFW3oVAndFazwVArOvnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD96Pwl7f8rfaE48O5E9yNgswmfiMB8GA1UdIwQY MBaAFHWvTiw0eA89n1HoClO6w75vMllDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEt NzUzMzBkNGNlODZlLzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC8wOTIzOWEtNGY4OC00MDliLWE3ODEtNzUzMzBkNGNlODZl LzEvZGE5T0xEUjREejJmVWVnS1U3ckR2bTh5V1VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjPSQmJ/ HwYuu6y6hja3gZrPHKLp7kKrY1OirgARiPJDKdm8HtBOSYLlG6S8uu8tGXQZsYDo SnVg8/4/r4Vkuydf/V6e5Lr4XGmMsqbkIuFwkqbLB+A7q3SzegizgqEQ/t0ZNkBM N+iTsx7STTNXRZ+K5/7UWDD3QVnpSSDYwEOFVv93fIZyRsj1hX2Pv2nzcTO1Py84 9WljQtLnNBDg5y98+ML5nk+TUCNsgztn21oOSKJweb1J1v9N+F9gLS4R7mT9iCQd YDT/kWUfXr/EZXZ8luztAGPEC3JLE8GVbYxW0rCdHAyMIoccOCYhq1n/CYu0veHA 5EzO29apAhvBNQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:18 2026 by rpki-client