This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft File: DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft (raw, json) Hash identifier: 6MXVEwTMSwvEMqMJk6N9BGxp0mqqQjwR+q87ILbPOQg= Subject key identifier: D9:93:95:D2:12:28:49:92:78:A1:16:45:E7:E5:CC:1A:F0:63:8A:99 Authority key identifier: 0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C Certificate issuer: /CN=0c5cf70730512aefa70307662cf59288e8cd264c Certificate serial: 019C44D9A0BDD82E60E68E00434BAF6AC3BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft Manifest number: 0504 Signing time: Tue 10 Feb 2026 00:00:38 +0000 Manifest this update: Tue 10 Feb 2026 00:00:38 +0000 Manifest next update: Wed 11 Feb 2026 00:00:38 +0000 Files and hashes: 1: DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl (hash: uZlw1LthTOATW8KkxYUX9ruvi4bY6JkDweOsplwIOQM=) 2: w8wkCFScjGQvdttAQ8x_xzp50Xk.roa (hash: w/c38fhRy3be0XuDkxP9zkUOolRFgZszn3JD1Qb99Vw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:a0:bd:d8:2e:60:e6:8e:00:43:4b:af:6a:c3:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c5cf70730512aefa70307662cf59288e8cd264c Validity Not Before: Feb 10 00:00:38 2026 GMT Not After : Feb 11 00:00:38 2026 GMT Subject: CN=d99395d21228499278a11645e7e5cc1af0638a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:3c:d8:b4:f5:9b:a8:30:b9:05:db:cc:23: eb:72:de:02:3c:05:a3:33:44:3e:97:e2:cf:b8:ca: 94:8c:7c:1e:14:93:be:3b:0d:89:58:2e:2a:ba:f5: 91:21:47:05:04:87:57:75:3a:60:ba:1b:cc:d8:63: 21:71:fb:31:a7:1c:11:50:42:dc:0a:c8:db:19:7c: 60:63:19:3a:28:ca:74:9a:14:40:10:89:1a:a0:97: 1d:2d:80:16:ca:4b:aa:e4:d6:98:bf:45:a0:0a:b0: 00:44:a8:38:28:ce:06:8d:f4:dc:27:96:e8:77:d7: 87:7a:b0:25:e1:90:3c:69:b6:fa:80:5a:83:71:fe: 23:a4:6d:de:c7:f9:eb:7c:25:2b:6e:70:c0:fe:06: cd:47:65:86:31:d9:9f:68:ec:d5:d3:fb:98:56:df: 33:b3:2b:61:96:c2:dd:f4:aa:ec:eb:51:59:3f:d0: a4:18:3b:b9:ea:c6:6b:61:98:2e:66:b2:52:29:55: 0a:6c:15:86:b7:e0:75:39:4b:2a:67:14:58:3d:5e: 11:1c:c4:8a:79:4f:dc:17:41:cb:95:a5:8b:f9:6d: ad:04:e5:f8:d2:29:4f:c3:e5:02:56:2e:bf:5e:4f: da:51:14:28:34:0e:c2:1c:62:0b:6e:1b:e0:44:38: 5a:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:93:95:D2:12:28:49:92:78:A1:16:45:E7:E5:CC:1A:F0:63:8A:99 X509v3 Authority Key Identifier: keyid:0C:5C:F7:07:30:51:2A:EF:A7:03:07:66:2C:F5:92:88:E8:CD:26:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFz3BzBRKu-nAwdmLPWSiOjNJkw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/440217-c5af-44ac-95d3-adfc72ef0dfa/1/DFz3BzBRKu-nAwdmLPWSiOjNJkw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:40:a2:87:8d:dd:5b:ff:4e:a1:6a:9b:da:bb:4c:2e:00:74: a9:05:ee:37:6c:c8:19:36:ae:fd:f8:fb:de:92:32:43:3b:63: dd:5d:45:4e:78:d9:0c:68:5c:09:1c:a3:45:8e:fb:13:f2:14: f9:22:86:5b:2f:54:dd:0d:bf:31:21:f1:5d:fb:a6:fd:3f:d9: c0:99:bd:d9:1c:1d:46:cd:97:b0:83:6f:67:85:c4:c3:eb:03: 4a:81:b3:bd:16:a2:50:5f:dc:e5:c3:0a:12:f3:73:c8:82:e5: 77:92:ef:74:a4:3f:5b:09:c2:18:99:95:96:e3:32:1b:b7:a2: 75:88:06:5f:a2:62:2a:e2:6a:e5:77:c9:1c:a5:b9:1a:aa:b1: cb:17:cc:19:76:72:d1:3e:ea:bd:c0:96:d2:64:94:c7:13:c2: 07:9f:a4:0c:0c:f5:d2:41:62:1c:e5:db:5b:04:3e:ad:ee:d2: 85:56:ed:c1:fb:a0:c3:11:e9:2f:6c:cf:c9:ea:93:67:43:8a: c5:7f:f9:fb:0f:87:75:2c:64:1a:c1:db:0d:c3:a4:5f:c8:ca: e9:4a:9c:d3:57:01:4a:36:4d:d0:76:87:fb:1d:66:3c:e0:9e: 02:92:04:59:b5:08:5c:ac:b7:ba:f1:22:97:71:b2:42:1b:3a: c4:74:5b:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2aC92C5g5o4AQ0uvasO/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNWNmNzA3MzA1MTJhZWZhNzAzMDc2NjJjZjU5Mjg4ZThj ZDI2NGMwHhcNMjYwMjEwMDAwMDM4WhcNMjYwMjExMDAwMDM4WjAzMTEwLwYDVQQD EyhkOTkzOTVkMjEyMjg0OTkyNzhhMTE2NDVlN2U1Y2MxYWYwNjM4YTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwo482LT1m6gwuQXbzCPrct4CPAWj M0Q+l+LPuMqUjHweFJO+Ow2JWC4quvWRIUcFBIdXdTpguhvM2GMhcfsxpxwRUELc CsjbGXxgYxk6KMp0mhRAEIkaoJcdLYAWykuq5NaYv0WgCrAARKg4KM4GjfTcJ5bo d9eHerAl4ZA8abb6gFqDcf4jpG3ex/nrfCUrbnDA/gbNR2WGMdmfaOzV0/uYVt8z sythlsLd9Krs61FZP9CkGDu56sZrYZguZrJSKVUKbBWGt+B1OUsqZxRYPV4RHMSK eU/cF0HLlaWL+W2tBOX40ilPw+UCVi6/Xk/aURQoNA7CHGILbhvgRDhaswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNmTldISKEmSeKEWReflzBrwY4qZMB8GA1UdIwQY MBaAFAxc9wcwUSrvpwMHZiz1kojozSZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMt YWRmYzcyZWYwZGZhLzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi80NDAyMTctYzVhZi00NGFjLTk1ZDMtYWRmYzcyZWYwZGZh LzEvREZ6M0J6QlJLdS1uQXdkbUxQV1NpT2pOSmt3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmkCih43d W/9OoWqb2rtMLgB0qQXuN2zIGTau/fj73pIyQztj3V1FTnjZDGhcCRyjRY77E/IU +SKGWy9U3Q2/MSHxXfum/T/ZwJm92RwdRs2XsINvZ4XEw+sDSoGzvRaiUF/c5cMK EvNzyILld5LvdKQ/WwnCGJmVluMyG7eidYgGX6JiKuJq5XfJHKW5GqqxyxfMGXZy 0T7qvcCW0mSUxxPCB5+kDAz10kFiHOXbWwQ+re7ShVbtwfugwxHpL2zPyeqTZ0OK xX/5+w+HdSxkGsHbDcOkX8jK6Uqc01cBSjZN0HaH+x1mPOCeApIEWbUIXKy3uvEi l3GyQhs6xHRbWg== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:48 2026 by rpki-client