This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft File: ze5dkAYfoqckw2dCWGxinUceek0.mft (raw, json) Hash identifier: pkT5p5TtfcHOCJd5FrZnK8iC9i+IcBrw4eB3wukTtmI= Subject key identifier: 64:1E:05:43:75:9E:2C:C7:6E:E7:F3:93:28:1F:78:12:B4:7A:20:4D Authority key identifier: CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D Certificate issuer: /CN=cdee5d90061fa2a724c36742586c629d471e7a4d Certificate serial: 019C427DCC37469D4BA5A053DF9156694E2F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft Manifest number: 0D17 Signing time: Mon 09 Feb 2026 13:01:06 +0000 Manifest this update: Mon 09 Feb 2026 13:01:06 +0000 Manifest next update: Tue 10 Feb 2026 13:01:06 +0000 Files and hashes: 1: 8a76FAqMjieN7aLSC8xEAc3hgOU.roa (hash: pAPcnCH+A+mHZKWJuKSuBMT8TzG5YvvwYe+EaHI/zYI=) 2: ze5dkAYfoqckw2dCWGxinUceek0.crl (hash: +5FY5bWeQfToP7H23WksQQ9LnndTgN/RG1eVChdPfyk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:cc:37:46:9d:4b:a5:a0:53:df:91:56:69:4e:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdee5d90061fa2a724c36742586c629d471e7a4d Validity Not Before: Feb 9 13:01:06 2026 GMT Not After : Feb 10 13:01:06 2026 GMT Subject: CN=641e0543759e2cc76ee7f393281f7812b47a204d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:6e:8f:41:72:e3:23:fc:51:7b:c2:f0:2e:70: 2d:60:ac:e0:47:87:b4:eb:c9:7d:b8:46:9b:09:4d: c2:78:fe:ce:bc:ac:db:fe:c2:9d:38:9e:4e:0f:3e: c7:4e:02:03:65:2e:80:7a:cc:9f:a0:c2:78:0a:ca: a2:54:fd:f9:97:c8:13:75:55:c4:89:1e:a9:80:ca: 53:39:4e:40:01:ee:10:f2:1a:a7:80:70:22:d6:d7: b8:18:b5:a5:0c:d6:52:a7:80:a4:f5:d8:c0:1d:2f: 00:6e:e9:d9:95:a0:b3:c7:0b:9a:82:78:05:bd:1e: f6:50:d8:ed:2d:ea:3d:40:59:97:f7:b4:81:61:c3: cf:35:f9:ab:7a:85:87:d0:12:15:7b:5a:fd:82:53: c8:1d:67:bb:21:8e:f5:da:13:fa:46:c5:c4:28:bb: ec:d6:9e:3e:87:c3:3a:17:89:6d:08:be:2a:68:7c: ff:1a:e6:9e:3d:5c:6c:ce:f9:33:61:2e:4a:60:91: 91:25:bb:2a:ae:ee:10:50:33:c0:28:1b:b1:a0:1b: 82:88:5b:3e:0f:36:02:03:91:b5:a2:fd:fd:df:8e: 05:a2:43:08:6e:8d:d6:cb:47:e2:f5:57:12:b3:c4: 4d:a1:cc:fc:c9:b0:6c:84:1f:6a:cb:cd:4d:c2:a0: 8b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:1E:05:43:75:9E:2C:C7:6E:E7:F3:93:28:1F:78:12:B4:7A:20:4D X509v3 Authority Key Identifier: keyid:CD:EE:5D:90:06:1F:A2:A7:24:C3:67:42:58:6C:62:9D:47:1E:7A:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ze5dkAYfoqckw2dCWGxinUceek0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/6b1ea5-3f79-49ca-b985-57a5f3289992/1/ze5dkAYfoqckw2dCWGxinUceek0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:87:77:c4:9e:c9:1c:d4:1e:83:9d:5f:33:33:4d:50:3c:9a: a0:ef:ab:0e:72:a1:4c:29:17:30:ae:d6:90:7b:d5:af:13:25: aa:fb:b7:1c:05:d4:a2:1d:67:e4:05:53:53:e4:48:d9:5b:d4: 5e:1f:8d:ac:07:d9:a3:be:bb:ef:72:78:94:4e:e5:90:ec:e6: b5:2f:71:a6:e5:ea:be:ff:59:08:a7:f3:7c:01:a2:5c:0e:93: 64:9d:9a:98:44:26:8a:3d:91:c0:14:bb:81:35:cc:69:70:f6: 24:b7:4f:71:ee:44:a0:c9:fe:55:26:c1:4f:3f:13:1b:a6:e7: 4f:53:40:ec:ae:7a:05:89:52:c0:02:f2:5a:4b:2c:cb:2e:f3: 45:be:2a:ad:90:4d:70:a1:a9:ea:ec:34:be:fb:23:05:ce:84: 1a:0c:15:84:df:56:5a:e3:9b:21:77:f2:32:86:e1:32:b4:41: 59:26:69:65:13:7f:b1:0d:ed:69:ff:e2:4b:9f:14:6f:53:87: 40:9e:62:05:ff:4e:65:5b:27:14:f5:0f:24:cf:6f:18:01:49: c1:dd:87:5a:55:f4:eb:39:6d:7d:2b:a9:e8:47:45:91:f3:90: ee:06:da:e8:3d:6e:c9:33:ba:a5:36:23:4d:7c:e0:9e:94:e0: b3:e7:83:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfcw3Rp1LpaBT35FWaU4vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZWU1ZDkwMDYxZmEyYTcyNGMzNjc0MjU4NmM2MjlkNDcx ZTdhNGQwHhcNMjYwMjA5MTMwMTA2WhcNMjYwMjEwMTMwMTA2WjAzMTEwLwYDVQQD Eyg2NDFlMDU0Mzc1OWUyY2M3NmVlN2YzOTMyODFmNzgxMmI0N2EyMDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA526PQXLjI/xRe8LwLnAtYKzgR4e0 68l9uEabCU3CeP7OvKzb/sKdOJ5ODz7HTgIDZS6AesyfoMJ4CsqiVP35l8gTdVXE iR6pgMpTOU5AAe4Q8hqngHAi1te4GLWlDNZSp4Ck9djAHS8AbunZlaCzxwuagngF vR72UNjtLeo9QFmX97SBYcPPNfmreoWH0BIVe1r9glPIHWe7IY712hP6RsXEKLvs 1p4+h8M6F4ltCL4qaHz/GuaePVxszvkzYS5KYJGRJbsqru4QUDPAKBuxoBuCiFs+ DzYCA5G1ov39344FokMIbo3Wy0fi9VcSs8RNocz8ybBshB9qy81NwqCL/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGQeBUN1nizHbufzkygfeBK0eiBNMB8GA1UdIwQY MBaAFM3uXZAGH6KnJMNnQlhsYp1HHnpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUt NTdhNWYzMjg5OTkyLzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNS82YjFlYTUtM2Y3OS00OWNhLWI5ODUtNTdhNWYzMjg5OTky LzEvemU1ZGtBWWZvcWNrdzJkQ1dHeGluVWNlZWswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg4d3xJ7J HNQeg51fMzNNUDyaoO+rDnKhTCkXMK7WkHvVrxMlqvu3HAXUoh1n5AVTU+RI2VvU Xh+NrAfZo76773J4lE7lkOzmtS9xpuXqvv9ZCKfzfAGiXA6TZJ2amEQmij2RwBS7 gTXMaXD2JLdPce5EoMn+VSbBTz8TG6bnT1NA7K56BYlSwALyWkssyy7zRb4qrZBN cKGp6uw0vvsjBc6EGgwVhN9WWuObIXfyMobhMrRBWSZpZRN/sQ3taf/iS58Ub1OH QJ5iBf9OZVsnFPUPJM9vGAFJwd2HWlX06zltfSup6EdFkfOQ7gba6D1uyTO6pTYj TXzgnpTgs+eDJg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:58 2026 by rpki-client