This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft File: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft (raw, json) Hash identifier: JLiwIo6wPo2FEz86gU60UnWFxbwnRGwtMTLUUfS+frw= Subject key identifier: CA:20:F5:3A:2F:4F:E4:4E:D9:44:5A:B3:73:F3:79:0C:7D:7B:06:FE Authority key identifier: AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 Certificate issuer: /CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Certificate serial: 019C439065F423F580EC920D8C224CDB4FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft Manifest number: 1553 Signing time: Mon 09 Feb 2026 18:01:02 +0000 Manifest this update: Mon 09 Feb 2026 18:01:02 +0000 Manifest next update: Tue 10 Feb 2026 18:01:02 +0000 Files and hashes: 1: ldB1ccba1eVWxNgUlrtHodR40IY.roa (hash: /jl6IvaIt6KPatpRGzV51YKDjVrmO0TQhFPcR45WfF4=) 2: rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl (hash: dV0X62bHHdLph8jgL3kcyVYc5XE7vlCn/vS8ZuRHDBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:65:f4:23:f5:80:ec:92:0d:8c:22:4c:db:4f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad9d45f0292d312fd060a2740bd1e52750bb8c25 Validity Not Before: Feb 9 18:01:02 2026 GMT Not After : Feb 10 18:01:02 2026 GMT Subject: CN=ca20f53a2f4fe44ed9445ab373f3790c7d7b06fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:13:f5:62:89:07:78:3b:96:cc:a3:18:d5:97: 50:fd:f2:e6:0c:b6:27:b0:cc:d2:95:9a:a5:3a:3e: 46:84:e1:0f:77:46:71:b4:ee:6c:43:81:67:19:4c: 2e:49:7e:eb:42:1c:b4:74:55:fa:d7:0f:62:bd:e0: 27:bd:be:7f:64:83:e6:33:a9:f2:5f:d2:6b:18:bf: cf:7e:94:f0:c8:5d:46:e7:4a:af:05:2c:bc:b0:16: ea:7a:72:d0:cd:25:ee:8c:77:17:5c:96:e8:50:5d: 72:5b:b2:0b:57:30:d7:38:21:60:6a:c1:8b:7d:18: 1e:db:89:61:a7:f4:fd:44:71:95:1b:f9:8c:03:38: 33:20:16:5c:95:50:78:8f:fb:b7:5e:78:f0:8d:0b: 28:2a:70:2f:f1:bc:39:6d:b0:6f:65:42:2b:a6:11: e5:27:73:81:ef:32:f3:ad:e1:c0:f4:2e:2c:b5:09: fa:29:10:47:ae:bb:d3:8e:a7:ac:3d:c2:fd:48:3a: db:26:fe:c5:4d:05:70:4c:75:55:32:5d:49:06:d2: dd:e1:8f:f3:45:58:1a:11:09:28:4c:d8:1b:6c:c5: a4:ee:5b:d5:cf:8f:84:3c:8f:25:e7:0c:34:f1:3f: 91:71:5a:ff:9b:4d:c9:70:a1:eb:6e:f4:da:a2:f8: f5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:20:F5:3A:2F:4F:E4:4E:D9:44:5A:B3:73:F3:79:0C:7D:7B:06:FE X509v3 Authority Key Identifier: keyid:AD:9D:45:F0:29:2D:31:2F:D0:60:A2:74:0B:D1:E5:27:50:BB:8C:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/c10cd5-251a-476d-89dc-79497ee25984/1/rZ1F8CktMS_QYKJ0C9HlJ1C7jCU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:79:3c:a4:6e:e8:9a:87:62:8c:6f:65:e5:3b:65:6f:48:2e: 3e:5f:3a:6b:15:8f:ba:8e:96:9f:c3:dd:b2:1c:b6:c3:0b:c7: c1:bb:b7:0e:2b:83:02:af:4f:11:63:1a:88:a9:92:5d:39:ba: 8e:0f:19:b4:bd:87:3e:71:7f:13:bb:29:c3:b6:33:d6:6d:a2: 9a:82:d3:be:38:ca:50:1a:dc:ee:ab:0b:6b:e3:af:c4:30:9f: 86:e7:4b:13:9b:88:b8:7f:f5:0c:06:6d:ac:c8:ca:5f:f1:5c: 54:f2:92:fc:d4:03:d5:84:df:5e:7e:ac:be:54:99:2c:c7:e2: 27:cc:70:93:e3:dd:b6:75:b2:e5:74:6e:ef:39:e7:6f:08:d3: e6:95:da:98:72:aa:a6:24:af:f8:b0:1b:1d:c8:0d:2f:a0:7b: f2:c3:bf:87:bb:c9:9e:45:90:97:3f:81:e4:38:42:4f:6a:06: 36:bf:ef:a8:ac:e1:85:49:00:2f:9a:fe:74:55:1b:cf:24:c6: 14:e6:ca:73:68:a6:6a:d1:42:ff:c7:32:de:4c:5c:a4:99:fa: 3c:21:b7:f9:43:9a:35:8c:5d:43:c4:f8:39:cd:fc:62:e7:83: a2:1f:d5:e3:b2:d7:d4:6d:28:de:c1:95:a4:14:a5:ce:f1:8f: bc:a7:93:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGX0I/WA7JINjCJM20/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkOWQ0NWYwMjkyZDMxMmZkMDYwYTI3NDBiZDFlNTI3NTBi YjhjMjUwHhcNMjYwMjA5MTgwMTAyWhcNMjYwMjEwMTgwMTAyWjAzMTEwLwYDVQQD EyhjYTIwZjUzYTJmNGZlNDRlZDk0NDVhYjM3M2YzNzkwYzdkN2IwNmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyRP1YokHeDuWzKMY1ZdQ/fLmDLYn sMzSlZqlOj5GhOEPd0ZxtO5sQ4FnGUwuSX7rQhy0dFX61w9iveAnvb5/ZIPmM6ny X9JrGL/PfpTwyF1G50qvBSy8sBbqenLQzSXujHcXXJboUF1yW7ILVzDXOCFgasGL fRge24lhp/T9RHGVG/mMAzgzIBZclVB4j/u3XnjwjQsoKnAv8bw5bbBvZUIrphHl J3OB7zLzreHA9C4stQn6KRBHrrvTjqesPcL9SDrbJv7FTQVwTHVVMl1JBtLd4Y/z RVgaEQkoTNgbbMWk7lvVz4+EPI8l5ww08T+RcVr/m03JcKHrbvTaovj1fwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMog9TovT+RO2URas3PzeQx9ewb+MB8GA1UdIwQY MBaAFK2dRfApLTEv0GCidAvR5SdQu4wlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMt Nzk0OTdlZTI1OTg0LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9jMTBjZDUtMjUxYS00NzZkLTg5ZGMtNzk0OTdlZTI1OTg0 LzEvcloxRjhDa3RNU19RWUtKMEM5SGxKMUM3akNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArXk8pG7o modijG9l5Ttlb0guPl86axWPuo6Wn8Pdshy2wwvHwbu3DiuDAq9PEWMaiKmSXTm6 jg8ZtL2HPnF/E7spw7Yz1m2imoLTvjjKUBrc7qsLa+OvxDCfhudLE5uIuH/1DAZt rMjKX/FcVPKS/NQD1YTfXn6svlSZLMfiJ8xwk+PdtnWy5XRu7znnbwjT5pXamHKq piSv+LAbHcgNL6B78sO/h7vJnkWQlz+B5DhCT2oGNr/vqKzhhUkAL5r+dFUbzyTG FObKc2imatFC/8cy3kxcpJn6PCG3+UOaNYxdQ8T4Oc38YueDoh/V47LX1G0o3sGV pBSlzvGPvKeTUg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:07 2026 by rpki-client