This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft File: z7dRkZeIZvH8l_Ujx92kCoj353c.mft (raw, json) Hash identifier: zC8Mew/rZd62Za10w6OUVWFwNI94IoRTkQg9cVxp/zg= Subject key identifier: F9:90:48:80:EF:1A:A3:9F:4B:CF:A9:5C:20:FC:55:10:61:0E:44:A9 Authority key identifier: CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 Certificate issuer: /CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Certificate serial: 019C41D8328F3A55E04C16ACBAA73893D173 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft Manifest number: 1082 Signing time: Mon 09 Feb 2026 10:00:13 +0000 Manifest this update: Mon 09 Feb 2026 10:00:13 +0000 Manifest next update: Tue 10 Feb 2026 10:00:13 +0000 Files and hashes: 1: hT-So4aGOddQyRT0oPTXu7IXVdI.roa (hash: AkJbPF5CNSKe103pnrR7OvnuxlDRt9RWR677qdnMbMw=) 2: z7dRkZeIZvH8l_Ujx92kCoj353c.crl (hash: kCwYUVwDNO1EfnPw+orzAWkhVA+Cs3ruXv+7gITkXFU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:32:8f:3a:55:e0:4c:16:ac:ba:a7:38:93:d1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfb75191978866f1fc97f523c7dda40a88f7e777 Validity Not Before: Feb 9 10:00:13 2026 GMT Not After : Feb 10 10:00:13 2026 GMT Subject: CN=f9904880ef1aa39f4bcfa95c20fc5510610e44a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:99:64:46:73:9a:cf:4b:d5:a5:ce:24:75: 69:92:2b:dd:36:f9:c4:d0:1a:6d:a9:a3:b0:c7:01: 47:f4:a0:80:b6:4b:7e:3c:2b:4d:c5:6f:bb:62:40: 7b:f0:80:73:b7:12:75:cb:7f:c0:b0:d9:94:5d:49: b1:f7:31:1f:e3:38:fe:7d:1f:79:45:7f:66:49:b3: 8f:75:48:ef:ef:3c:94:95:4c:14:e1:0e:36:85:bb: 20:3f:5e:0d:19:66:84:f1:d5:6b:2f:bf:21:0e:eb: d0:6a:82:17:57:5c:3e:a9:e0:01:41:98:d3:dc:85: 5c:ea:e4:15:8d:b0:fb:69:4c:75:74:e9:c7:64:a5: a1:49:09:4d:9d:81:04:0d:57:fb:9e:7f:23:38:3a: 10:02:6c:8b:78:c3:5a:56:17:e5:16:5d:29:d1:1e: c5:e1:ea:10:dc:9a:12:b1:23:e9:09:ee:10:ba:56: 8c:76:4b:40:db:be:cd:31:26:63:d1:2e:7e:3e:21: e1:3c:61:a5:6f:91:8c:50:5e:58:5d:96:50:a4:67: df:36:5b:ae:bf:3d:c0:58:29:73:4a:90:80:42:2b: 79:1f:2c:47:a2:84:e5:cb:bd:34:90:db:4f:28:14: cd:70:59:77:cf:af:9f:6e:22:8c:aa:90:d7:56:87: 8a:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:90:48:80:EF:1A:A3:9F:4B:CF:A9:5C:20:FC:55:10:61:0E:44:A9 X509v3 Authority Key Identifier: keyid:CF:B7:51:91:97:88:66:F1:FC:97:F5:23:C7:DD:A4:0A:88:F7:E7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z7dRkZeIZvH8l_Ujx92kCoj353c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b9575b-b7c1-4c5c-9dab-c199c7b4cac2/1/z7dRkZeIZvH8l_Ujx92kCoj353c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:6e:8c:f4:c2:b2:a4:14:02:a8:3a:06:d7:21:e9:36:3a:4c: 86:0a:e0:80:a2:de:99:4b:54:1a:6c:fc:c5:8f:1e:0d:ba:bd: 2a:84:a0:2f:6a:b5:e9:51:06:14:13:1f:9c:17:6d:d2:a8:41: 02:09:9b:fb:a7:13:b5:e4:f1:de:72:88:0f:98:77:a1:47:ad: fe:9b:de:ba:00:37:8c:0b:e6:0f:58:85:5f:fa:b2:ee:ec:ba: ae:98:57:f9:8f:6d:b7:0a:07:55:2a:6f:d5:61:74:d5:eb:0a: 15:aa:16:40:eb:b7:71:ab:70:4d:1e:5a:0a:da:34:04:22:0a: aa:ef:45:0f:e5:f5:fa:a5:32:9f:5b:61:44:f6:42:5a:4c:12: 35:ca:8c:3a:75:34:99:d8:cd:f7:60:32:68:25:17:7d:82:2b: 66:58:db:7e:76:5c:ae:cf:3f:85:bd:83:6d:1e:b9:76:fb:6d: 90:ac:36:c7:21:3c:68:f9:dd:1b:20:89:05:85:45:d6:aa:32: c1:e3:52:59:af:bd:6c:0b:dd:4e:1b:6e:50:35:08:bd:d1:80: e2:64:ea:00:c5:a8:b7:81:d7:c2:4f:cd:1b:fd:04:5a:45:23: 52:b6:99:65:5e:40:79:b2:87:9f:43:d2:10:82:12:45:c0:12: e9:74:52:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DKPOlXgTBasuqc4k9FzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYjc1MTkxOTc4ODY2ZjFmYzk3ZjUyM2M3ZGRhNDBhODhm N2U3NzcwHhcNMjYwMjA5MTAwMDEzWhcNMjYwMjEwMTAwMDEzWjAzMTEwLwYDVQQD EyhmOTkwNDg4MGVmMWFhMzlmNGJjZmE5NWMyMGZjNTUxMDYxMGU0NGE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWSZZEZzms9L1aXOJHVpkivdNvnE 0BptqaOwxwFH9KCAtkt+PCtNxW+7YkB78IBztxJ1y3/AsNmUXUmx9zEf4zj+fR95 RX9mSbOPdUjv7zyUlUwU4Q42hbsgP14NGWaE8dVrL78hDuvQaoIXV1w+qeABQZjT 3IVc6uQVjbD7aUx1dOnHZKWhSQlNnYEEDVf7nn8jODoQAmyLeMNaVhflFl0p0R7F 4eoQ3JoSsSPpCe4QulaMdktA277NMSZj0S5+PiHhPGGlb5GMUF5YXZZQpGffNluu vz3AWClzSpCAQit5HyxHooTly700kNtPKBTNcFl3z6+fbiKMqpDXVoeKnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPmQSIDvGqOfS8+pXCD8VRBhDkSpMB8GA1UdIwQY MBaAFM+3UZGXiGbx/Jf1I8fdpAqI9+d3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWIt YzE5OWM3YjRjYWMyLzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS9iOTU3NWItYjdjMS00YzVjLTlkYWItYzE5OWM3YjRjYWMy LzEvejdkUmtaZUladkg4bF9Vang5MmtDb2ozNTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlm6M9MKy pBQCqDoG1yHpNjpMhgrggKLemUtUGmz8xY8eDbq9KoSgL2q16VEGFBMfnBdt0qhB Agmb+6cTteTx3nKID5h3oUet/pveugA3jAvmD1iFX/qy7uy6rphX+Y9ttwoHVSpv 1WF01esKFaoWQOu3catwTR5aCto0BCIKqu9FD+X1+qUyn1thRPZCWkwSNcqMOnU0 mdjN92AyaCUXfYIrZljbfnZcrs8/hb2DbR65dvttkKw2xyE8aPndGyCJBYVF1qoy weNSWa+9bAvdThtuUDUIvdGA4mTqAMWot4HXwk/NG/0EWkUjUraZZV5AebKHn0PS EIISRcAS6XRSdw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:40 2026 by rpki-client