This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft File: RzC917vMVv6TebEYysfh-SBSp64.mft (raw, json) Hash identifier: EwtaMyLUvIYzHMlI+v5Oat0z9x5ZHwH5eU4kDUSPbQ4= Subject key identifier: 1C:B6:1A:9C:33:12:8D:77:BE:48:29:01:94:64:9D:B6:67:8A:8B:9F Authority key identifier: 47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE Certificate issuer: /CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae Certificate serial: 019C42B49E77F378F11A513B184E1910E1EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft Manifest number: 05CE Signing time: Mon 09 Feb 2026 14:00:59 +0000 Manifest this update: Mon 09 Feb 2026 14:00:59 +0000 Manifest next update: Tue 10 Feb 2026 14:00:59 +0000 Files and hashes: 1: O2TJIvTx_voT0YHcBveB5ME3HxU.roa (hash: iQiLUq3IFvglKvs6Hy5MwuxHRRp9rkkjwK4qxW0zxvg=) 2: RzC917vMVv6TebEYysfh-SBSp64.crl (hash: ISd6IYNA0MVFz/6NcSBuJXK7TKyEm2CHBOJcvUboJRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:9e:77:f3:78:f1:1a:51:3b:18:4e:19:10:e1:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4730bdd7bbcc56fe9379b118cac7e1f92052a7ae Validity Not Before: Feb 9 14:00:59 2026 GMT Not After : Feb 10 14:00:59 2026 GMT Subject: CN=1cb61a9c33128d77be48290194649db6678a8b9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:23:51:93:33:e5:5c:64:bb:19:89:cf:09:e5: 05:a3:8d:90:49:f1:81:27:c6:ca:cd:5e:f3:fd:96: 1c:49:df:ca:95:ee:ea:d2:82:ba:d2:eb:9a:cd:6e: 67:62:44:f9:27:2c:45:ee:95:89:1a:12:ef:bb:eb: 40:0d:cc:8d:81:9c:8b:83:80:44:5b:43:69:f6:02: 37:b8:1f:5e:81:27:73:81:93:59:49:fb:15:b8:dd: c0:a3:16:e1:c4:e8:9f:54:3d:93:a2:df:27:93:65: e1:7b:10:e4:58:60:c7:3a:61:c3:da:85:c1:c2:7c: bf:f6:fc:7c:ba:d0:d5:0b:91:32:4f:4d:f9:e7:ea: a3:2c:30:42:0c:14:10:41:f4:01:eb:1a:6c:cb:56: 2e:55:04:9a:cc:f8:c7:25:8f:14:b1:00:d2:14:80: 9b:9d:36:5e:d5:e8:48:18:0e:67:73:4e:06:14:70: 05:45:ac:01:dd:d9:ae:72:89:69:43:21:eb:ab:98: 26:bb:51:86:d7:c1:13:a1:a1:fa:e6:cd:ae:3b:0d: fd:25:44:67:ed:27:51:39:5a:73:3f:c1:b6:a6:f3: c3:52:bb:14:db:c9:59:e3:a7:96:4f:b0:e9:11:d7: 5d:47:9f:bc:a1:97:55:24:ed:2f:6c:42:da:7e:2e: 44:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:1A:9C:33:12:8D:77:BE:48:29:01:94:64:9D:B6:67:8A:8B:9F X509v3 Authority Key Identifier: keyid:47:30:BD:D7:BB:CC:56:FE:93:79:B1:18:CA:C7:E1:F9:20:52:A7:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzC917vMVv6TebEYysfh-SBSp64.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ff9cf6-c690-4c44-9f63-db1b63a0a8c1/1/RzC917vMVv6TebEYysfh-SBSp64.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6f:6c:c7:18:4b:d0:c5:be:b0:8e:96:cd:02:70:fc:17:de: 7a:28:02:04:16:e0:0f:84:41:eb:c0:63:e8:88:26:e8:de:a9: 65:1a:3b:a8:f1:b1:61:b7:ea:66:1e:a2:2d:11:42:7d:01:c9: 57:4a:99:1a:ae:ef:6e:52:c5:a6:4c:8d:78:40:3b:22:c9:71: eb:14:ab:9c:7b:90:76:b7:5e:91:bd:5c:d9:41:e9:3c:c8:87: c2:f9:5d:bf:a8:f2:c4:a5:33:82:05:ef:5c:f8:74:b4:dd:71: f9:e9:f7:39:3e:05:56:3a:a6:df:a2:50:29:fd:41:5f:05:2d: ff:82:bf:3d:d4:a8:af:ac:a4:3c:1e:8f:59:01:74:f7:ed:8a: 9d:65:07:b8:a1:c1:c0:b8:ad:82:18:13:e6:d8:f5:a6:a9:f7: bf:cc:5b:08:ad:c9:a0:6d:ed:ff:18:05:34:03:66:14:4f:8e: 75:51:3d:44:75:ab:1a:1b:ec:10:e6:8f:1a:42:f7:51:77:bf: 9a:3a:db:41:38:65:b2:0a:63:d1:15:c1:00:bc:2a:5a:e8:90: 72:47:8b:8a:9a:c8:0f:ae:7e:bc:d5:d0:8a:53:54:ac:ab:c6: d9:8d:9b:ca:fe:81:14:49:83:0d:40:74:5d:87:6a:59:d9:84: 10:1e:43:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJ5383jxGlE7GE4ZEOHqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzBiZGQ3YmJjYzU2ZmU5Mzc5YjExOGNhYzdlMWY5MjA1 MmE3YWUwHhcNMjYwMjA5MTQwMDU5WhcNMjYwMjEwMTQwMDU5WjAzMTEwLwYDVQQD EygxY2I2MWE5YzMzMTI4ZDc3YmU0ODI5MDE5NDY0OWRiNjY3OGE4YjlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyNRkzPlXGS7GYnPCeUFo42QSfGB J8bKzV7z/ZYcSd/Kle7q0oK60uuazW5nYkT5JyxF7pWJGhLvu+tADcyNgZyLg4BE W0Np9gI3uB9egSdzgZNZSfsVuN3AoxbhxOifVD2Tot8nk2XhexDkWGDHOmHD2oXB wny/9vx8utDVC5EyT0355+qjLDBCDBQQQfQB6xpsy1YuVQSazPjHJY8UsQDSFICb nTZe1ehIGA5nc04GFHAFRawB3dmucolpQyHrq5gmu1GG18EToaH65s2uOw39JURn 7SdROVpzP8G2pvPDUrsU28lZ46eWT7DpEdddR5+8oZdVJO0vbELafi5EnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBy2GpwzEo13vkgpAZRknbZnioufMB8GA1UdIwQY MBaAFEcwvde7zFb+k3mxGMrH4fkgUqeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMt ZGIxYjYzYTBhOGMxLzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9mZjljZjYtYzY5MC00YzQ0LTlmNjMtZGIxYjYzYTBhOGMx LzEvUnpDOTE3dk1WdjZUZWJFWXlzZmgtU0JTcDY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG9sxxhL 0MW+sI6WzQJw/BfeeigCBBbgD4RB68Bj6Igm6N6pZRo7qPGxYbfqZh6iLRFCfQHJ V0qZGq7vblLFpkyNeEA7Islx6xSrnHuQdrdekb1c2UHpPMiHwvldv6jyxKUzggXv XPh0tN1x+en3OT4FVjqm36JQKf1BXwUt/4K/PdSor6ykPB6PWQF09+2KnWUHuKHB wLitghgT5tj1pqn3v8xbCK3JoG3t/xgFNANmFE+OdVE9RHWrGhvsEOaPGkL3UXe/ mjrbQThlsgpj0RXBALwqWuiQckeLiprID65+vNXQilNUrKvG2Y2byv6BFEmDDUB0 XYdqWdmEEB5DvA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:43 2026 by rpki-client