This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json) Hash identifier: Br+wR1lacqiselNnQXNvTAUfWgsG2uJbuJF8TtVUlG4= Subject key identifier: 32:28:28:E6:E5:F0:F3:F7:FF:D3:CC:C7:FB:4A:3D:E1:69:2C:20:27 Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Certificate serial: 019C44350393B04ECB74605BA04FE764856C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 21:00:50 +0000 Manifest this update: Mon 09 Feb 2026 21:00:50 +0000 Manifest next update: Tue 10 Feb 2026 21:00:50 +0000 Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: YmhD8srZhSrFB1pFWXUZZ0ecfh0p5i9Pbp/k6Vg8aOs=) 2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:03:93:b0:4e:cb:74:60:5b:a0:4f:e7:64:85:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59 Validity Not Before: Feb 9 21:00:50 2026 GMT Not After : Feb 10 21:00:50 2026 GMT Subject: CN=322828e6e5f0f3f7ffd3ccc7fb4a3de1692c2027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:9e:52:c6:af:c6:28:38:a7:21:db:3d:ec: 65:b0:ac:06:a4:61:98:1d:9f:7b:d5:65:88:5a:16: 4e:7c:e8:e2:f3:50:70:03:fc:ae:6e:10:88:a7:f5: 6c:a9:82:b3:ec:2e:52:b0:a8:3d:f4:a8:c7:3f:11: 17:3a:04:71:40:cc:ee:ee:2a:05:62:2c:fe:9c:5a: 24:0a:7c:2e:e9:26:19:bd:20:b4:67:ed:9b:36:ab: 44:9d:ba:b6:32:6b:4a:7c:42:38:3f:86:79:58:70: 50:db:58:36:a9:bc:2e:5e:05:2b:e7:e8:e5:b2:be: d0:56:c8:5c:ab:38:9d:d4:23:3a:4e:0d:61:d7:c4: 0c:8f:dd:fe:53:67:ab:27:27:e0:87:e0:6d:63:ad: d1:ed:99:e7:e5:50:a0:cc:01:1d:bb:02:0b:46:e0: 5c:ac:06:3a:f5:eb:50:85:37:67:66:6f:44:a6:8a: 32:43:14:41:bb:09:fa:f5:5c:87:78:4a:21:8c:da: 3d:a7:a9:8d:7a:cb:d1:cb:dc:b1:1c:e6:a9:d5:a9: 51:a7:24:61:75:9c:ba:93:35:29:e6:a1:a1:e2:4a: 4b:21:fa:96:5c:0f:f5:7e:60:a1:59:5e:e8:6d:b1: 13:02:a2:7a:88:e8:28:37:72:8d:f5:51:d5:9a:7b: 56:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:28:28:E6:E5:F0:F3:F7:FF:D3:CC:C7:FB:4A:3D:E1:69:2C:20:27 X509v3 Authority Key Identifier: keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:fd:8c:75:21:13:d9:98:d5:0a:55:cc:40:1d:c4:5c:e1:cd: 18:6a:ab:06:6e:2c:bf:42:27:fc:b3:46:1e:75:95:d8:ce:11: 62:cd:8c:74:27:1c:02:96:f9:32:b1:20:00:15:a5:b5:3f:6f: df:2d:d1:5f:0e:1b:f2:cc:a1:6d:64:3d:69:01:21:3d:3c:49: 73:24:7c:9b:e8:1b:42:69:5c:30:34:0f:a9:91:ae:02:30:a6: a8:74:eb:b4:fe:92:04:50:05:6d:3c:77:d4:fb:45:db:17:51: e4:f4:b9:5f:18:2e:24:b0:0d:1d:a0:f9:aa:ed:e0:a7:07:e6: b5:ea:7b:74:7a:7a:d3:0c:01:44:7d:82:1f:3d:c6:01:d5:b4: e7:cb:0c:08:18:f0:34:f1:78:41:7f:1c:33:9b:03:c3:0e:d3: f4:38:e2:58:89:5e:c5:37:c7:d5:f8:3b:0a:fa:36:62:21:3f: d6:a4:ff:b4:0c:81:c3:19:e4:22:46:43:c8:7c:cd:cd:09:41: d0:78:0e:bb:55:a2:af:d3:51:eb:64:36:87:8f:3a:23:d4:6c: 42:59:90:8d:ea:0a:f0:bf:ba:93:8d:4c:8e:8d:71:6b:c5:0f: 5a:5f:2d:01:08:66:16:52:db:84:2b:cc:cc:67:68:69:5d:04: 0f:4c:6a:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENQOTsE7LdGBboE/nZIVsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl ZjhhNTkwHhcNMjYwMjA5MjEwMDUwWhcNMjYwMjEwMjEwMDUwWjAzMTEwLwYDVQQD EygzMjI4MjhlNmU1ZjBmM2Y3ZmZkM2NjYzdmYjRhM2RlMTY5MmMyMDI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaCeUsavxig4pyHbPexlsKwGpGGY HZ971WWIWhZOfOji81BwA/yubhCIp/VsqYKz7C5SsKg99KjHPxEXOgRxQMzu7ioF Yiz+nFokCnwu6SYZvSC0Z+2bNqtEnbq2MmtKfEI4P4Z5WHBQ21g2qbwuXgUr5+jl sr7QVshcqzid1CM6Tg1h18QMj93+U2erJyfgh+BtY63R7Znn5VCgzAEduwILRuBc rAY69etQhTdnZm9EpooyQxRBuwn69VyHeEohjNo9p6mNesvRy9yxHOap1alRpyRh dZy6kzUp5qGh4kpLIfqWXA/1fmChWV7obbETAqJ6iOgoN3KN9VHVmntWsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIoKObl8PP3/9PMx/tKPeFpLCAnMB8GA1UdIwQY MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5 LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuf2MdSET 2ZjVClXMQB3EXOHNGGqrBm4sv0In/LNGHnWV2M4RYs2MdCccApb5MrEgABWltT9v 3y3RXw4b8syhbWQ9aQEhPTxJcyR8m+gbQmlcMDQPqZGuAjCmqHTrtP6SBFAFbTx3 1PtF2xdR5PS5XxguJLANHaD5qu3gpwfmtep7dHp60wwBRH2CHz3GAdW058sMCBjw NPF4QX8cM5sDww7T9DjiWIlexTfH1fg7Cvo2YiE/1qT/tAyBwxnkIkZDyHzNzQlB 0HgOu1Wir9NR62Q2h486I9RsQlmQjeoK8L+6k41Mjo1xa8UPWl8tAQhmFlLbhCvM zGdoaV0ED0xqCg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:48:35 2026 by rpki-client