This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft File: DOu_quwkA5tB66VrscqlFnfSHHA.mft (raw, json) Hash identifier: qvFGFrSW0jODSgtBTKbwUli90iLRRlPUZ7zfAbz7wwM= Subject key identifier: 97:F5:AB:A2:12:69:EA:1C:87:61:4A:80:62:09:22:E3:22:52:E1:81 Authority key identifier: 0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 Certificate issuer: /CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Certificate serial: 019C42B49A1BD064CDD88DCE52CCB92B268B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft Manifest number: 15E3 Signing time: Mon 09 Feb 2026 14:00:57 +0000 Manifest this update: Mon 09 Feb 2026 14:00:57 +0000 Manifest next update: Tue 10 Feb 2026 14:00:57 +0000 Files and hashes: 1: 0HigbbPnkZoyonq1yyfi617xeII.roa (hash: MUaxT3D+6K8H+XJRqIFEKgk/lwlHeolFKwuvBRyzNa8=) 2: DOu_quwkA5tB66VrscqlFnfSHHA.crl (hash: OgbNymXWKEZeKiaE9OHCbb+RQjEWxHys8Kk1J1Zby3Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:9a:1b:d0:64:cd:d8:8d:ce:52:cc:b9:2b:26:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cebbfaaec24039b41eba56bb1caa51677d21c70 Validity Not Before: Feb 9 14:00:57 2026 GMT Not After : Feb 10 14:00:57 2026 GMT Subject: CN=97f5aba21269ea1c87614a80620922e32252e181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:79:6e:ff:a1:28:2c:9d:63:b3:4e:b0:91:cb: 26:4a:9d:56:e9:b1:21:d3:e1:93:a4:e6:43:50:97: fa:34:b1:9a:9c:ab:17:38:ab:f9:cb:f7:b3:96:24: 24:30:44:8a:e5:1e:1f:e7:12:9e:c0:45:f6:20:06: 35:08:cf:41:33:fb:f1:20:1c:7b:6a:7a:8a:89:2c: 64:93:22:9c:cd:48:3f:f7:96:ca:1e:fa:bd:d6:cf: 0b:cc:98:f1:2d:92:e4:0c:de:e7:cf:b5:f1:ba:c2: 62:ce:6f:01:76:e6:d3:0e:86:b7:0f:90:72:6a:e6: b5:5a:b5:62:2b:6a:62:bb:21:54:c7:52:b1:1b:43: 66:1e:32:6c:8e:4e:2d:9a:a2:61:33:ce:99:5b:44: 91:43:61:2e:07:5d:a6:9a:15:63:dc:de:30:a5:03: 72:63:80:56:e7:6b:83:84:eb:9c:42:96:00:81:27: e1:9b:60:c8:37:1f:91:2a:88:4e:4a:c2:73:5f:7b: 31:3b:c1:9a:29:76:3a:28:39:45:83:9c:35:53:91: e6:0e:88:93:5f:30:23:d0:85:43:47:8c:77:45:3b: 32:1b:12:04:61:da:45:ff:5d:09:2f:28:a3:b2:e0: 15:4f:6a:03:8f:11:82:97:88:b4:5d:b2:a0:1c:fc: 77:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:F5:AB:A2:12:69:EA:1C:87:61:4A:80:62:09:22:E3:22:52:E1:81 X509v3 Authority Key Identifier: keyid:0C:EB:BF:AA:EC:24:03:9B:41:EB:A5:6B:B1:CA:A5:16:77:D2:1C:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOu_quwkA5tB66VrscqlFnfSHHA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/c23ca3-b327-4ed2-a5bb-b16e683dbe27/1/DOu_quwkA5tB66VrscqlFnfSHHA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:38:88:b0:27:30:40:df:85:2e:09:1a:23:f9:48:4c:13:70: 56:ab:63:62:78:21:33:93:1f:78:b1:b9:f3:0b:6a:2a:9e:86: fc:ae:64:d0:52:b0:4b:a6:d3:4a:bc:87:ed:72:da:76:01:55: 51:d0:a4:16:fa:dc:39:e3:8f:fc:b6:ad:d0:57:c1:0a:21:08: 7f:d4:3f:3c:6d:10:b2:71:54:47:b5:c3:77:cc:a0:56:f8:d1: 76:93:81:01:f7:e5:bd:2b:41:9e:e9:63:83:7e:e4:7f:bd:e9: 54:83:b1:6a:41:43:7b:79:b7:72:bb:f9:61:34:cf:31:46:e7: 92:de:10:3f:ee:67:7b:29:0e:37:c1:0d:36:0f:48:ec:1b:74: fa:ee:50:77:1f:53:2e:66:2a:7c:8f:38:d8:78:1e:f4:12:6f: 1d:4e:a0:58:d3:5f:9f:cf:67:79:72:77:e6:b2:b3:a4:e7:65: ee:bd:8d:27:cf:46:40:f2:39:17:30:07:6f:70:59:54:71:c5: ed:cb:02:c6:56:9e:f0:9e:0e:4f:d7:6f:bf:57:6a:20:bc:6f: 02:5b:49:33:8b:57:6a:14:6e:e0:c5:37:2b:51:ad:4d:95:b0: 6d:c9:8e:b0:b4:c0:78:d5:16:45:24:e4:c3:3e:cc:e8:5c:a1: bc:7a:f0:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJob0GTN2I3OUsy5KyaLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjZWJiZmFhZWMyNDAzOWI0MWViYTU2YmIxY2FhNTE2Nzdk MjFjNzAwHhcNMjYwMjA5MTQwMDU3WhcNMjYwMjEwMTQwMDU3WjAzMTEwLwYDVQQD Eyg5N2Y1YWJhMjEyNjllYTFjODc2MTRhODA2MjA5MjJlMzIyNTJlMTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3lu/6EoLJ1js06wkcsmSp1W6bEh 0+GTpOZDUJf6NLGanKsXOKv5y/ezliQkMESK5R4f5xKewEX2IAY1CM9BM/vxIBx7 anqKiSxkkyKczUg/95bKHvq91s8LzJjxLZLkDN7nz7XxusJizm8BdubTDoa3D5By aua1WrViK2piuyFUx1KxG0NmHjJsjk4tmqJhM86ZW0SRQ2EuB12mmhVj3N4wpQNy Y4BW52uDhOucQpYAgSfhm2DINx+RKohOSsJzX3sxO8GaKXY6KDlFg5w1U5HmDoiT XzAj0IVDR4x3RTsyGxIEYdpF/10JLyijsuAVT2oDjxGCl4i0XbKgHPx3gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJf1q6ISaeoch2FKgGIJIuMiUuGBMB8GA1UdIwQY MBaAFAzrv6rsJAObQeula7HKpRZ30hxwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmIt YjE2ZTY4M2RiZTI3LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9jMjNjYTMtYjMyNy00ZWQyLWE1YmItYjE2ZTY4M2RiZTI3 LzEvRE91X3F1d2tBNXRCNjZWcnNjcWxGbmZTSEhBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVTiIsCcw QN+FLgkaI/lITBNwVqtjYnghM5MfeLG58wtqKp6G/K5k0FKwS6bTSryH7XLadgFV UdCkFvrcOeOP/Lat0FfBCiEIf9Q/PG0QsnFUR7XDd8ygVvjRdpOBAfflvStBnulj g37kf73pVIOxakFDe3m3crv5YTTPMUbnkt4QP+5neykON8ENNg9I7Bt0+u5Qdx9T LmYqfI842Hge9BJvHU6gWNNfn89neXJ35rKzpOdl7r2NJ89GQPI5FzAHb3BZVHHF 7csCxlae8J4OT9dvv1dqILxvAltJM4tXahRu4MU3K1GtTZWwbcmOsLTAeNUWRSTk wz7M6FyhvHrw7g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:59 2026 by rpki-client