This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft File: _5zoM1_DdnayDsFlXFPWfbyG6LM.mft (raw, json) Hash identifier: 4ehFX9YEg1I57uAaTB88LPsIfqD7B5knUOj7lVJvB/w= Subject key identifier: 43:68:E6:61:22:DC:60:8E:C8:9B:54:2E:91:11:85:B2:D4:BE:D8:A4 Authority key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3 Certificate issuer: /CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3 Certificate serial: 019C427DFA8BD185F8ACC9DB84D3EFF089F7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft Manifest number: 108A Signing time: Mon 09 Feb 2026 13:01:18 +0000 Manifest this update: Mon 09 Feb 2026 13:01:18 +0000 Manifest next update: Tue 10 Feb 2026 13:01:18 +0000 Files and hashes: 1: _5zoM1_DdnayDsFlXFPWfbyG6LM.crl (hash: vvc4o8447YQQGOUNAiaTgjJCoiJquHRXsd3JAK/m6gw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:fa:8b:d1:85:f8:ac:c9:db:84:d3:ef:f0:89:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3 Validity Not Before: Feb 9 13:01:18 2026 GMT Not After : Feb 10 13:01:18 2026 GMT Subject: CN=4368e66122dc608ec89b542e911185b2d4bed8a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8d:9b:08:cd:e4:c8:e9:cc:6c:99:6c:84:f0: 17:f5:27:aa:9a:fb:50:36:b9:cd:8f:58:4d:c3:27: 42:57:c0:a4:7d:93:79:cf:ce:2a:8e:e4:c2:15:8b: 26:f5:be:4c:70:59:ca:5e:7a:49:a8:9c:4f:f2:f2: a7:e7:57:ef:6c:9b:23:60:cc:60:31:fa:59:eb:da: 13:d9:55:37:1a:a6:76:a2:69:1d:bb:f4:77:86:c0: 2d:3f:56:91:f1:c4:96:ad:1a:3f:dc:88:16:0b:c2: 2d:ac:26:8d:6b:41:5e:7b:22:23:a0:1e:a0:12:43: 2a:0b:6e:77:7e:6d:78:6f:a4:8d:46:18:1e:a0:c5: 7f:99:fb:cb:df:a2:5f:93:b6:c0:8c:79:db:2b:fc: 71:d6:bf:2d:3f:98:75:10:0e:86:94:c2:44:88:d9: ce:40:18:b1:c7:b9:13:9b:e9:a8:7e:e0:14:d0:bb: 9d:71:4a:19:f9:9b:2a:d2:22:f8:3e:b2:6b:a1:11: ba:e2:3a:2d:bd:42:d2:c8:eb:95:72:ac:6c:50:54: 90:16:5b:c2:b7:61:4d:ad:ea:d5:1a:61:40:18:83: 2b:ab:64:0d:9d:5e:a2:4c:45:b6:6f:88:cc:f2:83: b1:d4:9c:1c:66:28:5b:a5:63:d4:ba:3d:39:cc:8c: 5e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:68:E6:61:22:DC:60:8E:C8:9B:54:2E:91:11:85:B2:D4:BE:D8:A4 X509v3 Authority Key Identifier: keyid:FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:01:09:a3:1a:42:bb:a0:5d:db:ff:46:ca:36:8e:ff:9a:ed: 0f:e6:61:ea:1c:7a:57:fd:63:e4:bb:f7:41:e7:f2:7a:c0:01: 74:dc:c3:93:f3:c7:e9:36:f8:57:32:d2:a2:9c:cc:2e:11:c0: 18:a0:f2:6c:93:8a:7a:8f:db:86:d7:f2:70:80:00:01:f4:d9: 53:72:28:ca:f7:ed:5c:18:56:b2:55:db:fc:ad:43:90:0b:77: c5:9e:80:6b:bc:5d:32:d6:e9:17:8b:31:fa:ab:37:0c:11:36: 5d:ef:bd:b5:f0:50:1e:a0:74:84:7a:45:6a:e1:40:6b:ab:45: 70:9c:c2:d3:9e:d8:4a:0b:f3:8f:3a:d9:36:af:46:45:60:dc: 3f:37:bd:aa:d2:b9:8a:15:75:38:ae:82:d0:d4:2e:b0:32:6a: 54:c4:90:9e:56:35:eb:c3:45:a7:24:5f:29:c9:f5:c0:29:a0: 0e:80:e3:20:4d:e9:31:8e:3d:be:fc:17:1a:7f:3a:91:6b:d3: df:2d:79:23:14:a7:f9:9a:7e:b9:2b:4e:26:c2:74:9b:32:40: f8:f5:09:df:f4:98:41:df:9e:5f:d9:1c:cd:74:cd:62:11:39: 33:ef:d5:7d:f2:a7:40:57:88:04:fa:ee:a7:88:cb:6b:a4:02: 69:ad:5c:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCffqL0YX4rMnbhNPv8In3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmOWNlODMzNWZjMzc2NzZiMjBlYzE2NTVjNTNkNjdkYmM4 NmU4YjMwHhcNMjYwMjA5MTMwMTE4WhcNMjYwMjEwMTMwMTE4WjAzMTEwLwYDVQQD Eyg0MzY4ZTY2MTIyZGM2MDhlYzg5YjU0MmU5MTExODViMmQ0YmVkOGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp42bCM3kyOnMbJlshPAX9SeqmvtQ NrnNj1hNwydCV8CkfZN5z84qjuTCFYsm9b5McFnKXnpJqJxP8vKn51fvbJsjYMxg MfpZ69oT2VU3GqZ2omkdu/R3hsAtP1aR8cSWrRo/3IgWC8ItrCaNa0FeeyIjoB6g EkMqC253fm14b6SNRhgeoMV/mfvL36Jfk7bAjHnbK/xx1r8tP5h1EA6GlMJEiNnO QBixx7kTm+mofuAU0LudcUoZ+Zsq0iL4PrJroRG64jotvULSyOuVcqxsUFSQFlvC t2FNrerVGmFAGIMrq2QNnV6iTEW2b4jM8oOx1JwcZihbpWPUuj05zIxeVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFENo5mEi3GCOyJtULpERhbLUvtikMB8GA1UdIwQY MBaAFP+c6DNfw3Z2sg7BZVxT1n28huizMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMt MjllNTNlZGE2ZTFjLzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZC9kNzM1NDEtM2I0ZC00NGE5LTgyYWMtMjllNTNlZGE2ZTFj LzEvXzV6b00xX0RkbmF5RHNGbFhGUFdmYnlHNkxNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnAEJoxpC u6Bd2/9GyjaO/5rtD+Zh6hx6V/1j5Lv3QefyesABdNzDk/PH6Tb4VzLSopzMLhHA GKDybJOKeo/bhtfycIAAAfTZU3IoyvftXBhWslXb/K1DkAt3xZ6Aa7xdMtbpF4sx +qs3DBE2Xe+9tfBQHqB0hHpFauFAa6tFcJzC057YSgvzjzrZNq9GRWDcPze9qtK5 ihV1OK6C0NQusDJqVMSQnlY168NFpyRfKcn1wCmgDoDjIE3pMY49vvwXGn86kWvT 3y15IxSn+Zp+uStOJsJ0mzJA+PUJ3/SYQd+eX9kczXTNYhE5M+/VffKnQFeIBPru p4jLa6QCaa1coA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:42 2026 by rpki-client