This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft File: dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft (raw, json) Hash identifier: ajhaAB3znpeKdVIuj3/iJPUtfJOjgvme0T3XydfZ8dE= Subject key identifier: 82:BC:B4:66:E9:CA:2D:5A:10:54:25:63:98:86:9E:7C:4D:61:67:91 Authority key identifier: 75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 Certificate issuer: /CN=759d27ce072ca336d3afaab8879f94ec63455669 Certificate serial: 019C420FB355D18D1C430A98A81BC12BEA0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft Manifest number: 08D1 Signing time: Mon 09 Feb 2026 11:00:50 +0000 Manifest this update: Mon 09 Feb 2026 11:00:50 +0000 Manifest next update: Tue 10 Feb 2026 11:00:50 +0000 Files and hashes: 1: dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl (hash: 3pMFTSzUyULk1oVqeg40cTNhInjp9TmLlJj2DEmufaQ=) 2: fSa9ZsWpt6cpzETcA7PiodhwAl0.roa (hash: JZ8+GnG0s73YtbrymyZrp39I9Tjd+XU3bo06GAVoOFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:b3:55:d1:8d:1c:43:0a:98:a8:1b:c1:2b:ea:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=759d27ce072ca336d3afaab8879f94ec63455669 Validity Not Before: Feb 9 11:00:50 2026 GMT Not After : Feb 10 11:00:50 2026 GMT Subject: CN=82bcb466e9ca2d5a1054256398869e7c4d616791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:a2:37:e8:ab:43:69:0d:e9:0f:16:cd:ab: f9:2e:23:cb:7b:3e:4d:b6:d3:bb:2c:2a:13:27:d7: cc:87:3f:34:87:39:a0:7a:72:1f:a5:e8:60:81:0d: 22:e0:69:bb:3a:e1:ba:ed:8b:71:8b:dd:2d:72:8b: 5f:f7:8e:73:78:dd:ae:f6:f0:fa:6f:6d:25:6b:df: df:ca:9b:7b:ac:0d:ec:58:78:e4:3f:ed:ea:94:84: 44:87:68:8e:4c:a3:f0:0f:eb:21:aa:6b:94:33:05: fa:be:22:90:3b:4e:30:04:87:02:79:6a:99:8f:35: 95:6c:68:13:27:b6:7d:1f:dc:bc:8c:cd:c5:f8:0d: af:fe:f1:3c:9e:a5:9c:8a:e6:40:35:ac:fc:81:ab: 6e:1f:e4:75:9c:72:3b:bc:61:49:ae:67:d3:be:4d: 37:10:29:7a:a5:35:b2:76:c2:c9:17:9e:6d:5f:6f: 58:35:57:a0:6f:bf:1a:57:3f:f2:18:8b:fd:fa:de: 51:c3:9f:63:b9:0d:01:34:ec:53:c7:e4:a9:f6:a5: ea:51:c5:a2:fe:8c:f0:b8:76:46:a8:ce:16:16:4e: e1:c3:72:80:ad:58:72:66:46:80:8f:5d:78:44:d4: ee:a6:1e:dd:50:af:4c:58:7b:e2:14:31:78:a6:e7: 26:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BC:B4:66:E9:CA:2D:5A:10:54:25:63:98:86:9E:7C:4D:61:67:91 X509v3 Authority Key Identifier: keyid:75:9D:27:CE:07:2C:A3:36:D3:AF:AA:B8:87:9F:94:EC:63:45:56:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ0nzgcsozbTr6q4h5-U7GNFVmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/f17a27-4599-45b5-a66e-70123f495110/1/dZ0nzgcsozbTr6q4h5-U7GNFVmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b6:4c:8f:29:fb:0b:a9:c6:04:15:ea:70:99:37:c6:a6:2e: ac:af:3b:9e:38:f3:ea:30:1d:ce:9f:51:f8:e2:ae:11:21:02: 99:ab:e0:e5:5e:ae:fe:f3:ef:7a:f7:2b:56:c7:fa:34:01:28: f1:3a:09:5d:dc:08:8c:d7:a0:ad:0e:98:50:ca:06:35:74:b7: b9:a4:07:25:0f:11:ff:88:a9:3b:d8:96:ab:46:2a:e4:cb:50: 4d:7b:c1:fc:13:82:3b:bc:f4:1f:91:bb:3a:66:dc:2a:68:b8: fe:54:bb:10:b2:f7:85:93:88:34:15:4f:43:c9:b8:0b:7a:ea: bb:5a:f2:b6:c7:5c:bb:29:ef:9e:6b:5f:01:bd:08:50:b3:db: 3b:bc:14:49:3d:62:d0:15:be:e7:88:46:13:7e:43:97:40:98: 35:89:5f:0a:f4:68:bc:4f:bc:37:25:b8:ce:50:f0:c6:da:55: ca:c1:f0:c5:3c:a8:18:1b:6d:d2:71:95:fd:75:b2:d7:5b:29: c0:cc:d4:6c:70:05:21:a4:89:a3:67:36:26:49:f7:5e:20:e5: e2:9a:ef:73:34:d9:7b:bd:cb:16:6a:4b:26:89:94:bb:55:58: 4a:0e:52:c4:bc:6a:a0:6c:43:83:4e:9a:8b:4e:7e:08:4a:04: 2f:4e:c8:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD7NV0Y0cQwqYqBvBK+oMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1OWQyN2NlMDcyY2EzMzZkM2FmYWFiODg3OWY5NGVjNjM0 NTU2NjkwHhcNMjYwMjA5MTEwMDUwWhcNMjYwMjEwMTEwMDUwWjAzMTEwLwYDVQQD Eyg4MmJjYjQ2NmU5Y2EyZDVhMTA1NDI1NjM5ODg2OWU3YzRkNjE2NzkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvW+iN+irQ2kN6Q8Wzav5LiPLez5N ttO7LCoTJ9fMhz80hzmgenIfpehggQ0i4Gm7OuG67Ytxi90tcotf945zeN2u9vD6 b20la9/fypt7rA3sWHjkP+3qlIREh2iOTKPwD+shqmuUMwX6viKQO04wBIcCeWqZ jzWVbGgTJ7Z9H9y8jM3F+A2v/vE8nqWciuZANaz8gatuH+R1nHI7vGFJrmfTvk03 ECl6pTWydsLJF55tX29YNVegb78aVz/yGIv9+t5Rw59juQ0BNOxTx+Sp9qXqUcWi /ozwuHZGqM4WFk7hw3KArVhyZkaAj114RNTuph7dUK9MWHviFDF4pucm9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIK8tGbpyi1aEFQlY5iGnnxNYWeRMB8GA1UdIwQY MBaAFHWdJ84HLKM206+quIeflOxjRVZpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUt NzAxMjNmNDk1MTEwLzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC9mMTdhMjctNDU5OS00NWI1LWE2NmUtNzAxMjNmNDk1MTEw LzEvZFowbnpnY3NvemJUcjZxNGg1LVU3R05GVm1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ7ZMjyn7 C6nGBBXqcJk3xqYurK87njjz6jAdzp9R+OKuESECmavg5V6u/vPvevcrVsf6NAEo 8ToJXdwIjNegrQ6YUMoGNXS3uaQHJQ8R/4ipO9iWq0Yq5MtQTXvB/BOCO7z0H5G7 OmbcKmi4/lS7ELL3hZOINBVPQ8m4C3rqu1rytsdcuynvnmtfAb0IULPbO7wUST1i 0BW+54hGE35Dl0CYNYlfCvRovE+8NyW4zlDwxtpVysHwxTyoGBtt0nGV/XWy11sp wMzUbHAFIaSJo2c2Jkn3XiDl4prvczTZe73LFmpLJomUu1VYSg5SxLxqoGxDg06a i05+CEoEL07IhQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:08 2026 by rpki-client