This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft File: dZ27tMoEMpvFCdbdHNULk1atiQY.mft (raw, json) Hash identifier: gTp+2s5G2gWIDpF+cJy92iWKJtYl5eyoPl09WFjQFuA= Subject key identifier: 98:0A:37:70:59:8D:C1:44:7D:F5:B6:12:88:9A:30:A7:95:A7:88:C2 Authority key identifier: 75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06 Certificate issuer: /CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906 Certificate serial: 019C439014C1C06142A74D36E5C745D2E9E3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft Manifest number: 0198 Signing time: Mon 09 Feb 2026 18:00:41 +0000 Manifest this update: Mon 09 Feb 2026 18:00:41 +0000 Manifest next update: Tue 10 Feb 2026 18:00:41 +0000 Files and hashes: 1: 5UQnHrIssl-L3tEs4ZaCR-OpgzU.roa (hash: aHEZnc6yTe0TRFc35pEnWkxNreWvfEne2GzfuKDiaPI=) 2: dZ27tMoEMpvFCdbdHNULk1atiQY.crl (hash: 0nCD1qae+MyRlrQQFZkl5aeByeRQ89DB0iIiJHKC5bY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:14:c1:c0:61:42:a7:4d:36:e5:c7:45:d2:e9:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759dbbb4ca04329bc509d6dd1cd50b9356ad8906 Validity Not Before: Feb 9 18:00:41 2026 GMT Not After : Feb 10 18:00:41 2026 GMT Subject: CN=980a3770598dc1447df5b612889a30a795a788c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:02:09:2e:0c:34:c5:fd:0e:1d:ec:e7:ea:67: 40:c8:f1:7e:3d:01:42:8c:9f:ba:3a:22:21:4c:9c: 0e:c5:28:4e:f0:b4:cd:96:9a:9f:fe:ec:d1:69:e6: 4a:6a:8c:ac:d0:f7:81:9d:76:1a:a2:e8:00:0f:8a: 79:73:0d:89:42:fd:26:a1:ee:4a:d6:98:b2:16:52: ea:2b:71:24:96:51:70:67:c1:f8:d9:98:d3:61:52: dd:48:9d:7c:e2:c2:fd:fd:1b:5c:ef:f3:03:56:5a: ae:78:e8:8f:3e:33:f9:57:4d:82:61:7d:55:d2:d5: 89:81:9b:90:81:05:e9:e2:e6:1c:c9:ae:5c:a7:b8: 7f:ac:cd:30:1b:65:e7:61:4a:37:e9:ef:20:95:81: 95:4b:1e:ba:b6:c0:44:23:17:e1:9f:da:4c:6b:3c: 33:3b:a2:b7:8d:d2:0b:3b:dd:cb:60:75:3e:b0:32: 17:8f:0f:cc:b4:c8:29:47:18:3f:c8:ed:b3:7d:cd: cd:94:be:76:de:21:90:e6:54:ee:d5:ec:d4:0c:45: f7:c9:44:e5:97:c6:27:d0:89:e6:46:e0:89:66:5f: f9:e4:5a:62:fb:a8:9a:21:41:a7:c1:d7:f5:78:b9: fd:85:91:4a:78:0b:d6:f3:99:2f:56:65:60:fc:4f: 7c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:0A:37:70:59:8D:C1:44:7D:F5:B6:12:88:9A:30:A7:95:A7:88:C2 X509v3 Authority Key Identifier: keyid:75:9D:BB:B4:CA:04:32:9B:C5:09:D6:DD:1C:D5:0B:93:56:AD:89:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ27tMoEMpvFCdbdHNULk1atiQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/3a44a2-7f37-4ef5-b034-a4fc67e1c2fb/1/dZ27tMoEMpvFCdbdHNULk1atiQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:1c:ce:54:3c:6c:45:cb:9d:a3:4a:e0:e0:27:90:54:c9:57: 7d:a0:b4:73:35:74:05:24:4b:f5:19:c9:f4:5b:23:ad:01:07: 85:07:d1:fd:8b:71:07:b3:0f:cf:b0:a6:7f:f0:8b:09:7b:5a: ba:6f:65:ba:71:74:09:53:bb:e6:29:ca:2e:8d:3c:8e:22:3b: 4b:c0:55:f4:e3:5a:e6:f4:1b:c2:bf:09:e1:40:c6:d0:79:c7: 43:df:f2:ed:e4:97:c2:a7:81:ee:0a:c4:57:15:02:37:79:a8: 06:ba:53:22:d6:cd:89:65:df:b0:cb:5a:67:21:65:69:57:d3: 1c:2a:38:a2:05:0d:d1:38:c3:d3:e3:4a:b2:0e:53:7c:44:02: 99:64:82:71:b5:e5:90:0f:34:a4:01:1f:88:a1:0b:0f:ff:0a: 24:d8:54:11:c9:df:84:7a:2e:08:c7:39:65:98:b5:03:dd:d6: e3:68:fc:72:9e:9e:69:07:41:ba:d8:b0:4a:a9:f1:5a:03:1e: bd:37:90:11:a6:54:a4:b4:29:a7:a9:84:2c:68:0d:d5:2b:07: f3:de:52:ae:33:ce:f6:40:ad:ff:08:41:1a:46:ab:95:cb:49: 02:9d:e7:30:19:8e:63:9d:7a:e3:04:dc:d1:5d:a1:6c:4d:7f: e9:54:eb:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkBTBwGFCp0025cdF0unjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWRiYmI0Y2EwNDMyOWJjNTA5ZDZkZDFjZDUwYjkzNTZh ZDg5MDYwHhcNMjYwMjA5MTgwMDQxWhcNMjYwMjEwMTgwMDQxWjAzMTEwLwYDVQQD Eyg5ODBhMzc3MDU5OGRjMTQ0N2RmNWI2MTI4ODlhMzBhNzk1YTc4OGMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgIJLgw0xf0OHezn6mdAyPF+PQFC jJ+6OiIhTJwOxShO8LTNlpqf/uzRaeZKaoys0PeBnXYaougAD4p5cw2JQv0moe5K 1piyFlLqK3EkllFwZ8H42ZjTYVLdSJ184sL9/Rtc7/MDVlqueOiPPjP5V02CYX1V 0tWJgZuQgQXp4uYcya5cp7h/rM0wG2XnYUo36e8glYGVSx66tsBEIxfhn9pMazwz O6K3jdILO93LYHU+sDIXjw/MtMgpRxg/yO2zfc3NlL523iGQ5lTu1ezUDEX3yUTl l8Yn0InmRuCJZl/55Fpi+6iaIUGnwdf1eLn9hZFKeAvW85kvVmVg/E98wQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJgKN3BZjcFEffW2EoiaMKeVp4jCMB8GA1UdIwQY MBaAFHWdu7TKBDKbxQnW3RzVC5NWrYkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFoyN3RNb0VNcHZGQ2RiZEhOVUxrMWF0aVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8zYTQ0YTItN2YzNy00ZWY1LWIwMzQt YTRmYzY3ZTFjMmZiLzEvZFoyN3RNb0VNcHZGQ2RiZEhOVUxrMWF0aVFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS8zYTQ0YTItN2YzNy00ZWY1LWIwMzQtYTRmYzY3ZTFjMmZi LzEvZFoyN3RNb0VNcHZGQ2RiZEhOVUxrMWF0aVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhzOVDxs Rcudo0rg4CeQVMlXfaC0czV0BSRL9RnJ9FsjrQEHhQfR/YtxB7MPz7Cmf/CLCXta um9lunF0CVO75inKLo08jiI7S8BV9ONa5vQbwr8J4UDG0HnHQ9/y7eSXwqeB7grE VxUCN3moBrpTItbNiWXfsMtaZyFlaVfTHCo4ogUN0TjD0+NKsg5TfEQCmWSCcbXl kA80pAEfiKELD/8KJNhUEcnfhHouCMc5ZZi1A93W42j8cp6eaQdButiwSqnxWgMe vTeQEaZUpLQpp6mELGgN1SsH895SrjPO9kCt/whBGkarlctJAp3nMBmOY5164wTc 0V2hbE1/6VTrmg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:10 2026 by rpki-client