This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json) Hash identifier: 0JVmh4Vej5BW8N0CDfsGfEg/JFo4DnyW0wdjOHqvOcg= Subject key identifier: 5A:76:86:BB:6E:16:3D:42:AC:80:5E:79:A3:47:68:3E:08:74:34:EE Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83 Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183 Certificate serial: 019C4434E07FDA3F77E7710FABE389CB816D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft Manifest number: 170C Signing time: Mon 09 Feb 2026 21:00:41 +0000 Manifest this update: Mon 09 Feb 2026 21:00:41 +0000 Manifest next update: Tue 10 Feb 2026 21:00:41 +0000 Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: GS2jue+kP1Psjef1kivsbaRc7bdVbcEDgTRIG8ml+N0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:e0:7f:da:3f:77:e7:71:0f:ab:e3:89:cb:81:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183 Validity Not Before: Feb 9 21:00:41 2026 GMT Not After : Feb 10 21:00:41 2026 GMT Subject: CN=5a7686bb6e163d42ac805e79a347683e087434ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:1a:a3:61:c9:61:1f:37:33:94:8e:22:b6:39: 73:81:0e:6e:cb:e7:a1:70:51:17:a0:58:1d:48:bd: ed:b0:59:04:f5:e7:7c:9d:97:36:3c:2f:df:bd:ee: a1:3c:a7:d0:d3:4f:d7:9e:9a:28:f7:7f:7a:85:38: 98:2d:45:5f:dc:8c:5f:b9:fd:c1:e7:e2:82:af:46: 47:7a:d1:d4:34:48:30:8d:af:d0:72:1b:21:ef:62: ac:a2:8f:7e:90:2f:ad:8c:83:90:8c:ae:77:52:df: d0:8b:8f:e5:cc:8f:11:63:fc:92:c4:65:23:fd:39: eb:a7:bb:1c:52:83:f6:fb:6b:4b:b5:5b:e6:96:a5: f8:9d:b1:11:5a:28:af:c6:3d:08:69:af:ae:46:b2: e9:04:96:14:bd:58:b3:1b:85:95:d9:3e:2a:1f:0d: 67:f0:ee:97:86:3e:99:ea:49:fc:be:54:39:fe:3d: 89:0c:15:a9:d8:89:3f:77:65:90:2f:f7:0a:1b:a5: f0:89:b3:5e:12:1b:52:a3:7d:0b:fd:02:70:91:4d: 7f:cd:3c:86:19:f0:1b:7c:da:0d:b8:15:49:cf:26: 2a:b8:87:59:3f:e6:d1:b9:84:54:1b:5b:94:46:f3: cb:3c:a4:70:ba:07:f9:02:47:16:bc:f7:6f:09:fe: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:76:86:BB:6E:16:3D:42:AC:80:5E:79:A3:47:68:3E:08:74:34:EE X509v3 Authority Key Identifier: keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:0d:b4:7c:da:9e:b0:fa:de:cc:aa:75:ac:19:ad:aa:50:cc: f1:0c:80:e8:cb:d0:1e:4b:bc:00:a0:e2:de:89:71:52:bc:b4: 7c:cf:f9:b0:6e:a8:6a:cc:9d:da:52:ea:e0:4c:40:0a:74:02: aa:10:68:78:c3:ce:52:3c:45:c2:66:8c:5e:40:87:b2:d5:9b: cf:ec:44:bd:a6:28:9d:1c:8a:10:6e:32:22:3f:2f:c6:c5:5a: f0:b8:60:aa:0c:08:90:9b:8f:3a:6b:c3:73:42:fb:c0:0d:43: c0:d7:9c:88:ec:b9:e1:b1:53:2e:72:e8:32:3b:f0:d4:e6:c6: f9:07:74:a8:61:17:38:ec:7c:72:2e:f6:af:34:79:ec:44:90: f7:92:57:c1:f1:bd:33:e9:f0:4f:8f:9c:c8:4e:41:fa:4d:26: dd:7f:c3:6b:8a:7d:a7:78:b6:c5:e2:a8:73:56:7e:71:3e:1f: b4:0c:f0:16:84:cf:97:c0:69:75:8e:d5:56:92:f4:6c:4d:74: b3:b7:3b:db:bb:01:d1:26:c6:c3:77:43:f8:16:f4:42:97:91: 69:8b:b3:68:0f:16:92:d1:f4:70:e1:9e:0f:6f:99:e6:17:e1: 4c:61:71:09:68:7c:4b:96:b8:5f:56:ce:fa:8a:50:c5:96:3f: 5b:70:be:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENOB/2j9353EPq+OJy4FtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl MjgxODMwHhcNMjYwMjA5MjEwMDQxWhcNMjYwMjEwMjEwMDQxWjAzMTEwLwYDVQQD Eyg1YTc2ODZiYjZlMTYzZDQyYWM4MDVlNzlhMzQ3NjgzZTA4NzQzNGVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BqjYclhHzczlI4itjlzgQ5uy+eh cFEXoFgdSL3tsFkE9ed8nZc2PC/fve6hPKfQ00/Xnpoo9396hTiYLUVf3Ixfuf3B 5+KCr0ZHetHUNEgwja/Qchsh72Ksoo9+kC+tjIOQjK53Ut/Qi4/lzI8RY/ySxGUj /Tnrp7scUoP2+2tLtVvmlqX4nbERWiivxj0Iaa+uRrLpBJYUvVizG4WV2T4qHw1n 8O6Xhj6Z6kn8vlQ5/j2JDBWp2Ik/d2WQL/cKG6XwibNeEhtSo30L/QJwkU1/zTyG GfAbfNoNuBVJzyYquIdZP+bRuYRUG1uURvPLPKRwugf5AkcWvPdvCf7nNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFp2hrtuFj1CrIBeeaNHaD4IdDTuMB8GA1UdIwQY MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1 LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVA20fNqe sPrezKp1rBmtqlDM8QyA6MvQHku8AKDi3olxUry0fM/5sG6oasyd2lLq4ExACnQC qhBoeMPOUjxFwmaMXkCHstWbz+xEvaYonRyKEG4yIj8vxsVa8LhgqgwIkJuPOmvD c0L7wA1DwNeciOy54bFTLnLoMjvw1ObG+Qd0qGEXOOx8ci72rzR57ESQ95JXwfG9 M+nwT4+cyE5B+k0m3X/Da4p9p3i2xeKoc1Z+cT4ftAzwFoTPl8BpdY7VVpL0bE10 s7c727sB0SbGw3dD+Bb0QpeRaYuzaA8WktH0cOGeD2+Z5hfhTGFxCWh8S5a4X1bO +opQxZY/W3C+gA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:16 2026 by rpki-client