This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft File: DEIZ0r8JtphczV1I_ZTSshuATsY.mft (raw, json) Hash identifier: Na1HRkPWebA/WrvP26j3+qXlUkL/s6hbPurg5Ja3GPM= Subject key identifier: 32:73:54:8C:9E:7B:75:C6:91:B5:45:13:39:B2:3B:43:77:B7:76:07 Authority key identifier: 0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6 Certificate issuer: /CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6 Certificate serial: 019C42461E2642275F1134F59ED8740ABDCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft Manifest number: 15 Signing time: Mon 09 Feb 2026 12:00:17 +0000 Manifest this update: Mon 09 Feb 2026 12:00:17 +0000 Manifest next update: Tue 10 Feb 2026 12:00:17 +0000 Files and hashes: 1: DEIZ0r8JtphczV1I_ZTSshuATsY.crl (hash: vqozxDPo6SOsp7xAi5+Buj30kfynV49yTu+Jq8MsVpA=) 2: GViLUpBKhpnABkhMhuMdD2J_oqw.roa (hash: 7Bdn6jISx+wiSsw/Erals+/gDIwz2wOl6w9gjca7wOc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:1e:26:42:27:5f:11:34:f5:9e:d8:74:0a:bd:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c4219d2bf09b6985ccd5d48fd94d2b21b804ec6 Validity Not Before: Feb 9 12:00:17 2026 GMT Not After : Feb 10 12:00:17 2026 GMT Subject: CN=3273548c9e7b75c691b5451339b23b4377b77607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:87:91:27:09:df:d5:fd:93:57:67:9c:ef:28: 41:60:0f:54:4f:0c:36:f5:4f:be:53:89:73:6c:6b: f8:68:e2:22:aa:05:0f:8e:54:24:a8:1e:69:2f:2b: 2b:de:66:a4:6f:41:37:5d:08:e1:50:2b:69:73:6d: 91:21:21:ae:84:7c:ad:85:d6:36:12:44:f2:fc:9c: 64:6c:77:37:dd:f9:2d:9e:dd:8a:d1:20:e8:92:4f: 2b:eb:55:e2:a3:93:ea:57:f6:86:38:22:87:fe:60: 33:3d:57:6c:6f:06:4a:df:8b:ec:a8:19:13:76:2c: eb:f4:52:45:bb:c7:b9:cc:fc:d8:d6:1e:00:a3:aa: 18:bf:9e:39:c7:2b:cb:70:d3:0d:c5:86:a6:1b:e6: 9c:c9:69:07:d1:05:bd:25:b5:a3:6c:20:c5:1e:10: 94:1d:85:62:67:a7:d8:48:92:17:cd:16:91:78:b6: 66:14:4d:ee:76:df:18:4d:c6:f1:e6:ae:66:d0:1c: 1b:20:14:c3:92:f7:3d:ef:ce:a7:e5:43:48:a1:78: 3c:d3:07:ac:03:7d:8e:c8:35:d1:04:55:87:f1:56: 9f:b4:57:c6:52:77:dd:ef:e0:44:37:50:86:89:5c: 71:db:32:8e:20:b6:01:75:33:23:d8:32:08:c8:02: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:73:54:8C:9E:7B:75:C6:91:B5:45:13:39:B2:3B:43:77:B7:76:07 X509v3 Authority Key Identifier: keyid:0C:42:19:D2:BF:09:B6:98:5C:CD:5D:48:FD:94:D2:B2:1B:80:4E:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEIZ0r8JtphczV1I_ZTSshuATsY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b70b86-5c07-4334-ac69-d1257e3759c6/1/DEIZ0r8JtphczV1I_ZTSshuATsY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:bd:89:49:25:14:3c:8b:f9:39:61:28:14:ac:59:86:97:91: 34:28:eb:69:22:a4:6c:55:b3:12:aa:83:3b:07:65:e3:34:60: d9:59:8e:e9:43:e6:00:96:d4:bd:3d:58:9c:49:14:df:db:b4: 54:49:ce:98:3c:ae:6a:6e:ea:1e:3d:94:90:78:33:31:b9:0e: 44:1e:dc:f2:57:b3:e0:09:d1:81:76:fe:4e:23:e6:02:87:2f: 13:7e:3e:c0:e2:9b:6f:3d:c9:8d:36:91:2a:ad:f2:63:cb:be: 9a:0f:c6:55:e0:ed:01:04:87:8e:53:4b:ad:01:c6:67:7d:0b: 5c:d4:d3:1d:75:ca:4e:10:b8:11:f2:d0:75:f4:54:05:1f:46: cc:1a:5d:b6:2a:aa:37:68:81:c3:1f:63:41:ba:43:8b:3a:d4: ef:3b:f0:52:2d:81:85:16:32:ea:56:f7:30:48:23:f3:42:a6: 95:27:e0:e6:50:9e:e9:b6:9f:90:e2:d3:68:5f:32:36:9f:43: 0d:43:7b:13:e7:ac:0d:92:73:a1:5a:58:01:ef:55:f1:d4:07: 62:61:56:be:82:d7:84:c7:b8:89:13:e2:c4:9c:93:a3:bb:a5: f5:05:d6:4d:e6:5a:58:d8:2e:c8:cd:87:39:27:da:1b:bb:6d: 38:d6:2e:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRh4mQidfETT1nth0Cr3LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBjNDIxOWQyYmYwOWI2OTg1Y2NkNWQ0OGZkOTRkMmIyMWI4 MDRlYzYwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD EygzMjczNTQ4YzllN2I3NWM2OTFiNTQ1MTMzOWIyM2I0Mzc3Yjc3NjA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYeRJwnf1f2TV2ec7yhBYA9UTww2 9U++U4lzbGv4aOIiqgUPjlQkqB5pLysr3makb0E3XQjhUCtpc22RISGuhHythdY2 EkTy/JxkbHc33fktnt2K0SDokk8r61Xio5PqV/aGOCKH/mAzPVdsbwZK34vsqBkT dizr9FJFu8e5zPzY1h4Ao6oYv545xyvLcNMNxYamG+acyWkH0QW9JbWjbCDFHhCU HYViZ6fYSJIXzRaReLZmFE3udt8YTcbx5q5m0BwbIBTDkvc9786n5UNIoXg80wes A32OyDXRBFWH8VaftFfGUnfd7+BEN1CGiVxx2zKOILYBdTMj2DIIyALxcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDJzVIyee3XGkbVFEzmyO0N3t3YHMB8GA1UdIwQY MBaAFAxCGdK/CbaYXM1dSP2U0rIbgE7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvREVJWjByOEp0cGhjelYxSV9aVFNzaHVBVHNZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNzBiODYtNWMwNy00MzM0LWFjNjkt ZDEyNTdlMzc1OWM2LzEvREVJWjByOEp0cGhjelYxSV9aVFNzaHVBVHNZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9iNzBiODYtNWMwNy00MzM0LWFjNjktZDEyNTdlMzc1OWM2 LzEvREVJWjByOEp0cGhjelYxSV9aVFNzaHVBVHNZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAir2JSSUU PIv5OWEoFKxZhpeRNCjraSKkbFWzEqqDOwdl4zRg2VmO6UPmAJbUvT1YnEkU39u0 VEnOmDyuam7qHj2UkHgzMbkORB7c8lez4AnRgXb+TiPmAocvE34+wOKbbz3JjTaR Kq3yY8u+mg/GVeDtAQSHjlNLrQHGZ30LXNTTHXXKThC4EfLQdfRUBR9GzBpdtiqq N2iBwx9jQbpDizrU7zvwUi2BhRYy6lb3MEgj80KmlSfg5lCe6bafkOLTaF8yNp9D DUN7E+esDZJzoVpYAe9V8dQHYmFWvoLXhMe4iRPixJyTo7ul9QXWTeZaWNguyM2H OSfaG7ttONYu3g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:23 2026 by rpki-client