This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json) Hash identifier: FfXdp8fBP7SNa9mTS70PawObsE/0lQLD3P+CGglSyt4= Subject key identifier: 21:7B:53:C1:66:8B:B8:FC:2C:94:DD:81:17:4B:FE:33:FB:2E:21:E7 Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Certificate serial: 019C41D8F1C5C5D57AD85C631FB17F5D7417 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 10:01:02 +0000 Manifest this update: Mon 09 Feb 2026 10:01:02 +0000 Manifest next update: Tue 10 Feb 2026 10:01:02 +0000 Files and hashes: 1: 2fZ1bQhJblUq5fcVHhL0C_-Td54.roa (hash: pAu1H6XJd6QLNwtCItbi85jUBgZSBz8c5zchsEegiak=) 2: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: 8g3Zt0Ppncgq5z5RrgXGB1MJmDjEa7iUc8jI5iduY3k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:f1:c5:c5:d5:7a:d8:5c:63:1f:b1:7f:5d:74:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef Validity Not Before: Feb 9 10:01:02 2026 GMT Not After : Feb 10 10:01:02 2026 GMT Subject: CN=217b53c1668bb8fc2c94dd81174bfe33fb2e21e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1e:e4:a2:f3:62:9f:cb:2f:75:12:86:ac:b3: 64:a3:81:90:9d:2b:12:25:7e:63:50:1b:e4:43:fe: 95:17:62:b5:60:d3:01:0c:65:d5:cd:69:f0:5c:4f: 82:b7:68:2c:48:e3:e1:76:4b:4c:b4:66:92:71:e3: 93:8b:4d:62:6e:2b:39:51:52:ae:db:58:b3:58:3b: dc:5c:a0:48:1e:01:c8:c8:8b:15:7f:0c:c0:dd:46: 7a:89:0b:18:7b:20:97:47:9f:7e:69:13:f7:75:1d: 4b:53:0a:e1:e6:bd:53:56:5c:e0:f4:1c:75:bd:e1: c4:2f:f7:ab:01:62:f2:d0:52:0e:c6:52:5f:f6:ac: f3:ff:ed:6d:18:d4:38:ce:f5:c7:d7:56:94:66:ba: ba:07:c1:3b:05:cb:bd:2d:cf:91:e6:dc:c7:40:62: 3b:c5:86:3c:2c:fd:16:cd:35:e0:c8:48:2e:dc:23: 03:20:65:aa:30:3e:da:cb:fe:2c:41:3d:5d:7a:11: 52:b5:0e:b9:15:39:82:4e:03:8d:79:ab:5e:e3:fd: 93:f3:5e:40:33:ac:f5:97:7f:4f:f6:b5:d0:e1:c3: 17:d1:ff:7d:4d:ad:ff:e7:37:1d:c0:68:02:63:78: c4:98:50:0c:c7:bc:80:b5:76:3e:48:68:cb:59:9e: 59:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:53:C1:66:8B:B8:FC:2C:94:DD:81:17:4B:FE:33:FB:2E:21:E7 X509v3 Authority Key Identifier: keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:12:50:a7:29:82:5b:32:3c:b0:5a:52:14:fb:3e:4a:b8:bb: 1e:bc:08:cd:6b:4b:61:e2:e9:85:e2:35:f9:ff:6d:7b:0d:76: 16:94:cd:a9:a0:e0:8e:4c:10:5d:9a:cd:20:dd:b0:5c:3e:cd: a4:72:82:d0:2f:e9:03:30:ba:ff:79:14:4f:ed:07:d9:7e:95: 14:ba:e5:5c:7d:3e:81:68:34:b7:6f:39:ab:f0:f2:eb:7b:c4: 0e:c3:c5:49:49:93:0a:9f:72:68:cb:d8:73:79:50:76:65:bf: 8e:82:54:20:a9:2a:ea:7b:45:6b:b8:4e:66:5a:64:7c:e7:84: 20:59:43:4c:16:09:a5:4f:d6:6e:8c:8e:cd:02:90:3d:eb:40: 3c:86:f0:02:98:2c:d9:c1:9e:30:f3:d7:13:71:38:5e:c8:f5: 8c:21:4f:c8:3c:49:96:87:f5:f6:08:ef:0a:f4:c4:eb:bc:5c: 61:75:a7:21:72:47:83:2e:83:c9:43:12:38:dd:22:a8:81:bb: 55:b1:97:41:73:71:21:d8:d4:6c:04:09:60:3e:54:dd:59:f8: 85:bd:0b:00:52:68:6d:b2:ea:4c:98:e5:3e:01:10:93:06:f0: 88:20:d2:ba:56:cb:49:8d:4a:8a:f5:07:1e:52:b2:65:81:71: 9c:32:9b:6d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2PHFxdV62FxjH7F/XXQXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmM2VkM2Q0ZDQ3YjhlODI1ZmJmZDA3OTQ4MmY3YTBjMjFk YzkxZWYwHhcNMjYwMjA5MTAwMTAyWhcNMjYwMjEwMTAwMTAyWjAzMTEwLwYDVQQD EygyMTdiNTNjMTY2OGJiOGZjMmM5NGRkODExNzRiZmUzM2ZiMmUyMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR7kovNin8svdRKGrLNko4GQnSsS JX5jUBvkQ/6VF2K1YNMBDGXVzWnwXE+Ct2gsSOPhdktMtGaSceOTi01ibis5UVKu 21izWDvcXKBIHgHIyIsVfwzA3UZ6iQsYeyCXR59+aRP3dR1LUwrh5r1TVlzg9Bx1 veHEL/erAWLy0FIOxlJf9qzz/+1tGNQ4zvXH11aUZrq6B8E7Bcu9Lc+R5tzHQGI7 xYY8LP0WzTXgyEgu3CMDIGWqMD7ay/4sQT1dehFStQ65FTmCTgONeate4/2T815A M6z1l39P9rXQ4cMX0f99Ta3/5zcdwGgCY3jEmFAMx7yAtXY+SGjLWZ5ZkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF7U8Fmi7j8LJTdgRdL/jP7LiHnMB8GA1UdIwQY MBaAFP8+09TUe46CX7/QeUgvegwh3JHvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2Mzct NWIwOWE2NzQzMzc1LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82MWVjN2QtOGRmNi00ZmZlLWI2MzctNWIwOWE2NzQzMzc1 LzEvX3o3VDFOUjdqb0pmdjlCNVNDOTZEQ0hja2U4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhJQpymC WzI8sFpSFPs+Sri7HrwIzWtLYeLpheI1+f9tew12FpTNqaDgjkwQXZrNIN2wXD7N pHKC0C/pAzC6/3kUT+0H2X6VFLrlXH0+gWg0t285q/Dy63vEDsPFSUmTCp9yaMvY c3lQdmW/joJUIKkq6ntFa7hOZlpkfOeEIFlDTBYJpU/WboyOzQKQPetAPIbwApgs 2cGeMPPXE3E4Xsj1jCFPyDxJlof19gjvCvTE67xcYXWnIXJHgy6DyUMSON0iqIG7 VbGXQXNxIdjUbAQJYD5U3Vn4hb0LAFJobbLqTJjlPgEQkwbwiCDSulbLSY1KivUH HlKyZYFxnDKbbQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:42 2026 by rpki-client