This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft File: z5dREMc5t0-E1BcDxIgoMnJ73cw.mft (raw, json) Hash identifier: lJzBnVD5D+FIm/bwpBaUcbJ2y/gG7lbhvd3D7qDAxTg= Subject key identifier: 45:D9:39:38:D6:8B:6E:28:B2:4D:37:F1:71:6A:1A:1C:B4:45:00:67 Authority key identifier: CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC Certificate issuer: /CN=cf975110c739b74f84d41703c4882832727bddcc Certificate serial: 019C4322BF6EC329719FF5F3C76295054B3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft Manifest number: 179D Signing time: Mon 09 Feb 2026 16:01:16 +0000 Manifest this update: Mon 09 Feb 2026 16:01:16 +0000 Manifest next update: Tue 10 Feb 2026 16:01:16 +0000 Files and hashes: 1: z5dREMc5t0-E1BcDxIgoMnJ73cw.crl (hash: YlM3ZDR9muFouZyud0A3KZGePcVf44hXZVoMHM5XZKU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:bf:6e:c3:29:71:9f:f5:f3:c7:62:95:05:4b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf975110c739b74f84d41703c4882832727bddcc Validity Not Before: Feb 9 16:01:16 2026 GMT Not After : Feb 10 16:01:16 2026 GMT Subject: CN=45d93938d68b6e28b24d37f1716a1a1cb4450067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:4c:23:c1:7e:92:a9:96:a0:ac:d4:8b:b6:f6: 0b:16:4f:f6:3a:f1:63:db:d4:1d:c4:23:5d:66:76: ba:e6:b5:97:ff:a1:4f:be:59:e3:ee:84:a7:3b:f7: 9e:c3:13:ba:04:06:f9:41:4d:fe:11:05:b7:4d:90: fe:80:69:35:1a:13:d5:dc:f6:d7:ac:5e:ae:c3:84: 30:fb:52:9a:a2:14:4a:74:ba:0d:a2:19:3e:72:da: 14:a4:f5:8b:fa:ea:6e:19:b7:84:6e:42:ff:2f:a4: a7:8f:4f:ca:98:d8:b2:47:8f:9c:d0:39:68:a2:db: b4:b3:e9:b2:4b:98:cd:1f:dd:3c:dd:6d:0e:f1:93: c7:19:a0:cc:d5:c6:e7:8f:a2:6b:0d:bb:da:01:c9: fc:bd:5a:38:7c:7c:a9:f8:b1:91:60:a7:44:58:88: 9c:d4:b1:c4:d9:77:da:1b:22:77:b7:77:51:ca:67: 06:2d:ad:b4:ea:8d:b3:8c:78:2b:04:c6:17:99:86: 9a:78:27:11:17:91:aa:50:7e:0b:8e:d1:5b:07:c2: d0:b2:63:a6:1d:19:27:e0:93:31:63:1e:89:f0:c0: 9e:92:59:a2:94:f7:8e:3f:65:1e:21:70:09:ed:4d: 81:c5:7a:a7:37:14:ff:10:be:0e:32:02:8b:4a:9b: 1f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D9:39:38:D6:8B:6E:28:B2:4D:37:F1:71:6A:1A:1C:B4:45:00:67 X509v3 Authority Key Identifier: keyid:CF:97:51:10:C7:39:B7:4F:84:D4:17:03:C4:88:28:32:72:7B:DD:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z5dREMc5t0-E1BcDxIgoMnJ73cw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/78764b-95eb-40c0-ad04-dab68fd8786b/1/z5dREMc5t0-E1BcDxIgoMnJ73cw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:ce:b6:7f:ae:cd:7b:6c:1d:0f:e8:82:27:16:6d:e6:eb:10: c5:28:20:28:59:46:ed:1b:aa:9f:f5:a2:34:44:43:b7:92:b2: a9:08:32:78:e3:31:74:1f:f2:b5:b2:12:98:99:5d:2d:43:6a: 5e:fe:64:65:7b:3f:c7:cb:c0:36:21:1c:9c:39:b9:3f:43:8c: 12:23:ea:0f:f6:3d:16:c5:83:e9:ae:46:54:e0:9f:2e:ec:b7: 36:86:e8:1a:e3:71:6e:4a:57:35:cd:17:ef:42:bc:36:2f:fa: 30:a4:51:36:e3:68:dc:76:cf:85:98:18:6b:9f:85:de:2e:99: 1a:44:3b:33:0c:ad:98:c9:84:6e:3a:2a:5f:00:d4:e9:15:17: 8a:f6:57:a1:e8:04:d9:ab:ae:cd:7a:80:80:a1:df:ec:16:ed: 51:ee:8e:80:fb:0c:7e:6d:89:ac:2a:1b:f5:ca:c6:dc:e6:88: 46:93:74:d2:bd:56:04:62:ae:4d:eb:19:e6:40:94:2e:20:64: 74:a1:35:88:00:09:00:d7:c2:9a:a4:f2:b5:2a:d8:ee:ad:59: de:24:5b:24:51:30:29:be:bb:7e:c4:39:ae:7c:53:28:37:e5: 9b:4a:e9:37:e9:58:a2:ee:29:85:37:5a:f0:ce:e9:d5:55:ac: 03:89:7c:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIr9uwylxn/Xzx2KVBUs/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmOTc1MTEwYzczOWI3NGY4NGQ0MTcwM2M0ODgyODMyNzI3 YmRkY2MwHhcNMjYwMjA5MTYwMTE2WhcNMjYwMjEwMTYwMTE2WjAzMTEwLwYDVQQD Eyg0NWQ5MzkzOGQ2OGI2ZTI4YjI0ZDM3ZjE3MTZhMWExY2I0NDUwMDY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkwjwX6SqZagrNSLtvYLFk/2OvFj 29QdxCNdZna65rWX/6FPvlnj7oSnO/eewxO6BAb5QU3+EQW3TZD+gGk1GhPV3PbX rF6uw4Qw+1KaohRKdLoNohk+ctoUpPWL+upuGbeEbkL/L6Snj0/KmNiyR4+c0Dlo otu0s+myS5jNH9083W0O8ZPHGaDM1cbnj6JrDbvaAcn8vVo4fHyp+LGRYKdEWIic 1LHE2XfaGyJ3t3dRymcGLa206o2zjHgrBMYXmYaaeCcRF5GqUH4LjtFbB8LQsmOm HRkn4JMxYx6J8MCeklmilPeOP2UeIXAJ7U2BxXqnNxT/EL4OMgKLSpsfaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEXZOTjWi24osk038XFqGhy0RQBnMB8GA1UdIwQY MBaAFM+XURDHObdPhNQXA8SIKDJye93MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQt ZGFiNjhmZDg3ODZiLzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy83ODc2NGItOTVlYi00MGMwLWFkMDQtZGFiNjhmZDg3ODZi LzEvejVkUkVNYzV0MC1FMUJjRHhJZ29Nbko3M2N3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX862f67N e2wdD+iCJxZt5usQxSggKFlG7Ruqn/WiNERDt5KyqQgyeOMxdB/ytbISmJldLUNq Xv5kZXs/x8vANiEcnDm5P0OMEiPqD/Y9FsWD6a5GVOCfLuy3NoboGuNxbkpXNc0X 70K8Ni/6MKRRNuNo3HbPhZgYa5+F3i6ZGkQ7MwytmMmEbjoqXwDU6RUXivZXoegE 2auuzXqAgKHf7BbtUe6OgPsMfm2JrCob9crG3OaIRpN00r1WBGKuTesZ5kCULiBk dKE1iAAJANfCmqTytSrY7q1Z3iRbJFEwKb67fsQ5rnxTKDflm0rpN+lYou4phTda 8M7p1VWsA4l8Kw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:25 2026 by rpki-client