This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft File: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft (raw, json) Hash identifier: XF5lOBzKIyiVT/drqo2PcAn5yA/NFiskypBwwz33q2o= Subject key identifier: 78:0E:46:E9:E9:93:9E:36:DC:BD:14:E2:95:A5:5D:8C:6E:4E:93:AC Authority key identifier: CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B Certificate issuer: /CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Certificate serial: 019C43591A513B2289A61D703081DA035213 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft Manifest number: 0529 Signing time: Mon 09 Feb 2026 17:00:38 +0000 Manifest this update: Mon 09 Feb 2026 17:00:38 +0000 Manifest next update: Tue 10 Feb 2026 17:00:38 +0000 Files and hashes: 1: L4Nkof_0pZhXN5_BFlFOSMgeaiY.roa (hash: bde5kTukmqHATGWW/dQkhnT+bwSXC3+2TUXQVaF4eRk=) 2: zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl (hash: BasQD+Gc5+3NY8KKEjk5tXL546Md1v5gyw5MWQq8eYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:1a:51:3b:22:89:a6:1d:70:30:81:da:03:52:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd7cb97b523c73f1406d63c767c73d9c957d433b Validity Not Before: Feb 9 17:00:38 2026 GMT Not After : Feb 10 17:00:38 2026 GMT Subject: CN=780e46e9e9939e36dcbd14e295a55d8c6e4e93ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:59:75:ca:b1:30:5b:50:ed:55:bd:e7:6a:c1: ee:32:b7:57:e1:72:76:a4:bc:e8:d2:62:66:03:a7: fc:91:aa:bb:f6:40:d0:55:87:19:94:c9:71:02:71: c4:4a:5d:b7:8f:3a:5d:98:de:b5:f5:76:4f:cc:b6: 81:9f:0b:96:93:de:5e:08:45:8c:66:62:51:f1:1b: 3d:c8:80:5c:59:8d:a6:86:e5:dc:ab:94:b3:e3:0b: 81:d2:1f:cb:e8:ff:71:a9:6a:18:5d:8c:34:28:d3: 50:b9:4a:23:9c:cb:ab:62:3e:f7:d4:03:ff:84:a4: 12:b7:27:18:96:cb:6b:54:12:62:a0:2c:a6:10:b5: a1:36:e6:33:12:98:0b:bc:4b:a3:c3:d1:90:1f:e3: 9c:72:be:0f:d7:64:0c:45:fe:ef:78:27:2f:f3:ea: a1:67:f1:ee:c2:89:3a:d2:56:a7:da:2f:44:53:bb: 35:be:ee:25:1d:3f:e4:1d:ff:ef:d0:e9:b9:33:26: 97:0b:70:34:17:ad:9d:db:dc:e5:c2:b8:da:11:4f: 7e:c4:7f:78:30:52:e9:16:db:4f:e5:8e:fa:85:26: 6a:64:67:4d:15:91:bc:70:cf:94:9a:8c:bd:11:ff: fe:50:29:84:3e:d5:3d:02:aa:76:dc:46:4c:3d:82: fa:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:0E:46:E9:E9:93:9E:36:DC:BD:14:E2:95:A5:5D:8C:6E:4E:93:AC X509v3 Authority Key Identifier: keyid:CD:7C:B9:7B:52:3C:73:F1:40:6D:63:C7:67:C7:3D:9C:95:7D:43:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c2e18c-c63f-4dd3-8921-05116c9f8aef/1/zXy5e1I8c_FAbWPHZ8c9nJV9Qzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:26:5a:bd:78:ad:9f:a5:d6:39:e3:be:52:e2:70:8d:30:76: 69:91:8e:c4:60:17:f1:ed:79:d9:77:99:8f:37:54:31:b9:84: ca:5d:e8:5a:69:74:45:ae:ab:b8:dd:9c:46:ba:14:8a:d9:d5: 55:3a:c6:69:36:ac:4e:4b:8d:af:d7:de:d8:f1:53:18:6e:66: 86:df:a8:fe:65:be:72:58:03:30:a1:55:db:58:23:db:9a:7d: db:d5:69:57:72:c0:65:2e:6f:78:14:a9:80:1d:c7:b4:9c:7c: da:96:31:5e:59:85:d4:e7:a6:c5:3e:49:ce:90:ff:16:9e:c5: 2f:74:43:4f:ce:7f:60:d7:a6:3d:3e:9a:87:ca:e9:93:82:6d: c5:0e:54:d9:27:3b:75:e4:95:12:a7:2b:43:bb:f0:3d:d1:ea: 97:6c:bb:4b:bb:22:a8:b5:3f:f0:57:fa:3f:5f:2a:97:f1:13: d8:16:c2:dd:d2:10:e8:fb:38:ae:1b:a2:b5:c7:73:cf:f1:10: df:d2:b7:64:78:db:57:8b:09:21:6c:ff:12:6d:a4:5a:8e:9f: 07:f7:8d:b3:b0:7e:ff:9e:c0:d9:7e:35:1b:f2:7f:c6:28:d2: 65:a2:f4:6d:9b:61:be:cc:16:6c:aa:25:c8:3d:af:1e:24:94: 00:0f:5a:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWRpROyKJph1wMIHaA1ITMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkN2NiOTdiNTIzYzczZjE0MDZkNjNjNzY3YzczZDljOTU3 ZDQzM2IwHhcNMjYwMjA5MTcwMDM4WhcNMjYwMjEwMTcwMDM4WjAzMTEwLwYDVQQD Eyg3ODBlNDZlOWU5OTM5ZTM2ZGNiZDE0ZTI5NWE1NWQ4YzZlNGU5M2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ll1yrEwW1DtVb3nasHuMrdX4XJ2 pLzo0mJmA6f8kaq79kDQVYcZlMlxAnHESl23jzpdmN619XZPzLaBnwuWk95eCEWM ZmJR8Rs9yIBcWY2mhuXcq5Sz4wuB0h/L6P9xqWoYXYw0KNNQuUojnMurYj731AP/ hKQStycYlstrVBJioCymELWhNuYzEpgLvEujw9GQH+Occr4P12QMRf7veCcv8+qh Z/Huwok60lan2i9EU7s1vu4lHT/kHf/v0Om5MyaXC3A0F62d29zlwrjaEU9+xH94 MFLpFttP5Y76hSZqZGdNFZG8cM+Umoy9Ef/+UCmEPtU9Aqp23EZMPYL6pQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHgORunpk5423L0U4pWlXYxuTpOsMB8GA1UdIwQY MBaAFM18uXtSPHPxQG1jx2fHPZyVfUM7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEt MDUxMTZjOWY4YWVmLzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS9jMmUxOGMtYzYzZi00ZGQzLTg5MjEtMDUxMTZjOWY4YWVm LzEvelh5NWUxSThjX0ZBYldQSFo4YzluSlY5UXpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQSZavXit n6XWOeO+UuJwjTB2aZGOxGAX8e152XeZjzdUMbmEyl3oWml0Ra6ruN2cRroUitnV VTrGaTasTkuNr9fe2PFTGG5mht+o/mW+clgDMKFV21gj25p929VpV3LAZS5veBSp gB3HtJx82pYxXlmF1OemxT5JzpD/Fp7FL3RDT85/YNemPT6ah8rpk4JtxQ5U2Sc7 deSVEqcrQ7vwPdHql2y7S7siqLU/8Ff6P18ql/ET2BbC3dIQ6Ps4rhuitcdzz/EQ 39K3ZHjbV4sJIWz/Em2kWo6fB/eNs7B+/57A2X41G/J/xijSZaL0bZthvswWbKol yD2vHiSUAA9aHw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:18 2026 by rpki-client