This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft File: DvFUKKS1vl5z59IoK1HIGa6jj5s.mft (raw, json) Hash identifier: 8GeEHZCJQwOOeBCLAMfS7EczxQN7TC0ueVh1LmWOfWs= Subject key identifier: EB:41:2A:48:2B:DA:6D:D8:AB:D9:41:BF:5C:A3:2C:38:8E:19:39:35 Authority key identifier: 0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B Certificate issuer: /CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Certificate serial: 019C41D8F6BEB9F1471BB7F43CA8382A4A36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft Manifest number: 120A Signing time: Mon 09 Feb 2026 10:01:03 +0000 Manifest this update: Mon 09 Feb 2026 10:01:03 +0000 Manifest next update: Tue 10 Feb 2026 10:01:03 +0000 Files and hashes: 1: DvFUKKS1vl5z59IoK1HIGa6jj5s.crl (hash: yaD3lgI8XWUYlvFr12qakbkY9c3YXZfwrzQPz5BU3sA=) 2: N-AM4196SXnGQPm10SOwk3Kk_fQ.roa (hash: +8w6gH3OBa7d0A6n/57m2bB3Ovd8KSYObWMM+h3ENfM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f6:be:b9:f1:47:1b:b7:f4:3c:a8:38:2a:4a:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef15428a4b5be5e73e7d2282b51c819aea38f9b Validity Not Before: Feb 9 10:01:03 2026 GMT Not After : Feb 10 10:01:03 2026 GMT Subject: CN=eb412a482bda6dd8abd941bf5ca32c388e193935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:31:76:1f:70:b8:90:33:f8:d4:39:1b:65:4b: 46:84:b6:3d:6f:6b:c7:cd:2e:4c:46:c9:73:db:26: 01:a4:83:c5:41:5c:6a:10:d6:9a:64:0b:ca:61:31: 0d:d6:4a:63:6a:e9:46:45:8c:c3:ef:ec:aa:3a:5c: 4e:e9:35:90:f3:e5:c8:92:7e:04:e9:d3:75:20:d9: 11:aa:af:f2:41:9a:f9:78:08:a4:77:32:92:26:a0: ca:4d:bc:15:9d:a3:2b:b1:97:2c:75:5d:ef:df:2c: bd:0b:49:c0:ce:c0:c4:69:db:a2:ed:b1:7e:5e:33: 2e:7e:fe:9d:57:4b:6f:04:fb:58:60:f3:d6:2c:91: 24:41:84:89:ba:91:55:55:e1:2a:fa:ae:42:0e:f9: 99:ca:af:63:cc:ee:ae:0b:7a:a5:0f:e5:fc:b4:77: cf:61:16:b2:06:25:3c:a3:24:06:4b:7a:e7:d8:46: 0a:69:3f:45:b4:54:fe:02:27:c7:2e:40:da:f3:12: 33:81:f5:3a:98:0a:4a:4b:3e:59:fa:26:ae:5e:f1: d9:cc:2d:2b:71:ce:b1:e4:5e:8f:76:05:1e:d4:96: 21:bd:5c:f8:76:71:6d:ce:38:6f:a2:d7:a5:2b:3e: 1b:75:b9:be:f3:f9:da:27:ae:32:e0:2a:09:3d:fc: 1e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:41:2A:48:2B:DA:6D:D8:AB:D9:41:BF:5C:A3:2C:38:8E:19:39:35 X509v3 Authority Key Identifier: keyid:0E:F1:54:28:A4:B5:BE:5E:73:E7:D2:28:2B:51:C8:19:AE:A3:8F:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvFUKKS1vl5z59IoK1HIGa6jj5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/805356-959f-41c5-99b6-9274920dcaa1/1/DvFUKKS1vl5z59IoK1HIGa6jj5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:64:67:8a:9b:f4:9b:84:41:0a:16:0a:98:d4:33:4b:59:52: 05:24:4b:7c:6b:44:e6:e5:7d:42:06:38:63:54:b8:24:ee:9c: fd:0a:c0:c9:8d:5a:f6:f1:91:e7:50:aa:9c:b0:d6:b4:84:62: e4:5a:59:4c:7e:b0:40:ec:6c:de:a6:a9:f1:d1:ae:ae:cc:ab: c7:fb:d0:96:6f:af:fc:e1:d4:16:22:2b:77:52:5d:01:a0:8c: 12:88:75:d9:77:b3:9c:6f:47:5c:ad:d2:52:24:87:0b:76:5a: 2e:43:e6:05:5f:48:ff:dc:ca:25:fe:3b:5d:23:41:66:11:4e: 5c:2f:b0:4e:fd:49:d5:7a:c8:96:63:14:5f:5e:4d:69:b0:66: 7f:7b:82:91:57:87:7f:df:81:27:5b:33:4d:44:04:cc:56:72: 39:45:97:1f:fd:bd:eb:07:2a:35:85:da:82:bc:7a:83:fa:0e: e6:58:1e:45:fc:a9:a7:c1:9e:d7:10:c1:28:d2:5e:0a:15:67: f5:c2:53:da:82:c2:c1:91:4e:29:fe:5c:09:0f:86:22:a0:cc: 8d:1e:af:bd:b9:21:27:ed:4a:a5:83:46:ef:61:16:35:b1:6f: 2f:a7:69:68:01:61:83:42:91:3e:a3:56:4c:9e:6e:a7:57:0d: 28:21:88:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2Pa+ufFHG7f0PKg4Kko2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjE1NDI4YTRiNWJlNWU3M2U3ZDIyODJiNTFjODE5YWVh MzhmOWIwHhcNMjYwMjA5MTAwMTAzWhcNMjYwMjEwMTAwMTAzWjAzMTEwLwYDVQQD EyhlYjQxMmE0ODJiZGE2ZGQ4YWJkOTQxYmY1Y2EzMmMzODhlMTkzOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDF2H3C4kDP41DkbZUtGhLY9b2vH zS5MRslz2yYBpIPFQVxqENaaZAvKYTEN1kpjaulGRYzD7+yqOlxO6TWQ8+XIkn4E 6dN1INkRqq/yQZr5eAikdzKSJqDKTbwVnaMrsZcsdV3v3yy9C0nAzsDEadui7bF+ XjMufv6dV0tvBPtYYPPWLJEkQYSJupFVVeEq+q5CDvmZyq9jzO6uC3qlD+X8tHfP YRayBiU8oyQGS3rn2EYKaT9FtFT+AifHLkDa8xIzgfU6mApKSz5Z+iauXvHZzC0r cc6x5F6PdgUe1JYhvVz4dnFtzjhvotelKz4bdbm+8/naJ64y4CoJPfwe3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOtBKkgr2m3Yq9lBv1yjLDiOGTk1MB8GA1UdIwQY MBaAFA7xVCiktb5ec+fSKCtRyBmuo4+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYt OTI3NDkyMGRjYWExLzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOS84MDUzNTYtOTU5Zi00MWM1LTk5YjYtOTI3NDkyMGRjYWEx LzEvRHZGVUtLUzF2bDV6NTlJb0sxSElHYTZqajVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGmRnipv0 m4RBChYKmNQzS1lSBSRLfGtE5uV9QgY4Y1S4JO6c/QrAyY1a9vGR51CqnLDWtIRi 5FpZTH6wQOxs3qap8dGursyrx/vQlm+v/OHUFiIrd1JdAaCMEoh12XeznG9HXK3S UiSHC3ZaLkPmBV9I/9zKJf47XSNBZhFOXC+wTv1J1XrIlmMUX15NabBmf3uCkVeH f9+BJ1szTUQEzFZyOUWXH/296wcqNYXagrx6g/oO5lgeRfypp8Ge1xDBKNJeChVn 9cJT2oLCwZFOKf5cCQ+GIqDMjR6vvbkhJ+1KpYNG72EWNbFvL6dpaAFhg0KRPqNW TJ5up1cNKCGIlA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:44 2026 by rpki-client