This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json) Hash identifier: kv3zjqbsWdRtG31DxKwRVWTmO6V0yD8MN7UaTez8u6g= Subject key identifier: 79:D7:CF:2A:10:CD:F9:9B:8E:95:43:7A:DE:51:85:FC:F1:3C:67:07 Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04 Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104 Certificate serial: 019C438FF6FCFA70C2505424A3F1AE2EB844 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft Manifest number: 0DEA Signing time: Mon 09 Feb 2026 18:00:34 +0000 Manifest this update: Mon 09 Feb 2026 18:00:34 +0000 Manifest next update: Tue 10 Feb 2026 18:00:34 +0000 Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: ns+cycTKfbFksYLTneqJLsZni0xTyQPF2ToFOGDeAt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:f6:fc:fa:70:c2:50:54:24:a3:f1:ae:2e:b8:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104 Validity Not Before: Feb 9 18:00:34 2026 GMT Not After : Feb 10 18:00:34 2026 GMT Subject: CN=79d7cf2a10cdf99b8e95437ade5185fcf13c6707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:ce:64:58:46:09:97:22:7e:64:9d:02:48: 79:b0:04:48:a7:2d:64:2f:94:db:98:0d:ad:6e:60: 7a:1f:fa:0b:c0:a4:5b:21:b9:6e:b0:0e:0d:37:28: e5:bf:aa:7c:0d:41:38:13:ab:d9:0c:85:1d:13:f7: cd:fd:9d:bb:74:63:5d:e1:13:70:81:33:3c:b1:c6: 20:f5:3d:0a:0b:6e:58:f0:01:5c:6a:06:0a:c3:01: 4e:04:82:65:06:9c:0d:0c:6d:5b:d0:10:1d:ef:04: 28:53:09:47:27:af:5b:5b:fe:06:fe:4e:65:fd:51: 89:e6:76:f5:ed:d5:af:45:c3:0c:f1:85:26:8f:d2: cb:6c:c9:40:a3:27:b2:68:ee:20:4e:be:2c:92:d7: 27:92:6d:96:1b:07:73:67:0d:ed:e9:f0:b5:88:f0: b9:e6:af:fc:da:02:68:04:76:29:73:d5:97:f4:03: 88:bb:85:f0:d7:98:11:b2:84:87:33:24:fa:9a:e6: 1e:b9:eb:28:d9:7a:f5:a9:dd:f9:7b:29:08:07:bc: 4a:1b:b1:e7:53:4c:a5:94:c2:44:ea:f6:ed:83:58: ec:3e:29:9b:28:db:a5:85:54:3b:56:76:27:3a:7d: ef:ab:6b:81:c8:94:bb:2f:59:9a:50:c4:a9:4a:fc: 61:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:D7:CF:2A:10:CD:F9:9B:8E:95:43:7A:DE:51:85:FC:F1:3C:67:07 X509v3 Authority Key Identifier: keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:8a:ad:0e:9c:4a:21:6c:cb:7b:7d:62:a7:7e:04:e3:65:03: aa:54:8f:6e:4e:68:48:5b:e8:51:9b:ef:9e:00:05:d8:a5:84: e8:4a:9d:b2:8b:cb:86:2f:0b:b8:f1:01:31:18:5b:2c:33:ee: 68:e4:e1:d3:e6:61:7d:ac:f6:85:73:78:b5:34:69:31:f9:bb: 15:b9:d0:9a:7b:1b:72:ff:1a:e9:b7:df:09:b8:5c:b6:2c:6e: 9e:ea:04:5d:58:f0:44:d3:71:00:ed:72:46:23:3f:a1:08:37: 7e:05:9c:7d:ec:6c:5a:b2:d5:25:38:b5:39:33:43:94:95:cc: d9:d4:4a:89:b7:44:3c:44:cd:53:c0:44:b6:13:bf:25:04:09: 79:ed:8a:9f:4a:94:1e:d4:4e:20:cb:6c:96:d8:cf:a8:89:d8: 69:bc:16:4f:77:3e:d6:2b:17:62:b2:00:9c:da:a4:d3:c2:b1: 8a:db:a0:8f:62:b6:69:d1:8e:f7:54:cb:45:6f:e3:01:3f:a2: b0:38:70:20:4c:1c:c3:91:2b:eb:d8:c0:80:c5:44:74:f8:a8: fe:ea:5a:27:7b:a6:87:e2:7d:b5:5f:00:87:ba:c6:53:27:cb: af:ea:8d:26:85:4f:15:9f:f1:cb:8d:2d:72:4d:97:1c:85:71: 0a:30:77:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj/b8+nDCUFQko/GuLrhEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIxZGU1OTQ3ZDliZGY2YjA4MTU2YTkzOWJkMjBkOTM0OTJj NzExMDQwHhcNMjYwMjA5MTgwMDM0WhcNMjYwMjEwMTgwMDM0WjAzMTEwLwYDVQQD Eyg3OWQ3Y2YyYTEwY2RmOTliOGU5NTQzN2FkZTUxODVmY2YxM2M2NzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolrOZFhGCZcifmSdAkh5sARIpy1k L5TbmA2tbmB6H/oLwKRbIblusA4NNyjlv6p8DUE4E6vZDIUdE/fN/Z27dGNd4RNw gTM8scYg9T0KC25Y8AFcagYKwwFOBIJlBpwNDG1b0BAd7wQoUwlHJ69bW/4G/k5l /VGJ5nb17dWvRcMM8YUmj9LLbMlAoyeyaO4gTr4sktcnkm2WGwdzZw3t6fC1iPC5 5q/82gJoBHYpc9WX9AOIu4Xw15gRsoSHMyT6muYeueso2Xr1qd35eykIB7xKG7Hn U0yllMJE6vbtg1jsPimbKNulhVQ7VnYnOn3vq2uByJS7L1maUMSpSvxhIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHnXzyoQzfmbjpVDet5RhfzxPGcHMB8GA1UdIwQY MBaAFCHeWUfZvfawgVapOb0g2TSSxxEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQt NDgyMzMxMTcxNzhjLzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQtNDgyMzMxMTcxNzhj LzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoqtDpxK IWzLe31ip34E42UDqlSPbk5oSFvoUZvvngAF2KWE6EqdsovLhi8LuPEBMRhbLDPu aOTh0+Zhfaz2hXN4tTRpMfm7FbnQmnsbcv8a6bffCbhctixunuoEXVjwRNNxAO1y RiM/oQg3fgWcfexsWrLVJTi1OTNDlJXM2dRKibdEPETNU8BEthO/JQQJee2Kn0qU HtROIMtsltjPqInYabwWT3c+1isXYrIAnNqk08Kxitugj2K2adGO91TLRW/jAT+i sDhwIEwcw5Er69jAgMVEdPio/upaJ3umh+J9tV8Ah7rGUyfLr+qNJoVPFZ/xy40t ck2XHIVxCjB3vA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:12 2026 by rpki-client