This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json) Hash identifier: au8awecoeyD8UYOrwTUcPgHvvAwKEOC5fQbcV5ozX34= Subject key identifier: 22:D1:09:8F:7B:EE:B0:89:73:4F:0D:B6:5A:EA:AA:CB:60:B7:13:93 Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Certificate serial: 019C41D85F6155C7171802210FA69EF31E0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft Manifest number: 0E17 Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: ARvHC35mwQKQSHNS1J2UcxIOXhk.roa (hash: I+P0+0NUkpAeizIJ4ocanrSBj4ovLyBDmtkFNJ1PWfg=) 2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: /YkuDC9F2QrnGo9wd16FNMeX959x+pFOVg+Aqgnad78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:5f:61:55:c7:17:18:02:21:0f:a6:9e:f3:1e:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=22d1098f7beeb089734f0db65aeaaacb60b71393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9c:80:79:f8:70:6c:9a:ae:9f:2c:3e:2f:54: 89:d6:c8:32:e3:7c:4f:f6:08:a3:10:db:f6:4b:d7: 20:ee:3f:86:66:81:8a:04:a8:31:81:5a:66:79:2a: 01:75:f7:84:73:c6:be:12:44:ee:22:57:a4:c9:6f: 47:e0:52:c7:e3:4a:bf:4e:e4:ac:1c:4a:57:41:23: 2f:23:51:14:86:44:52:95:58:4a:7e:4a:13:3b:9b: f5:89:67:fd:0a:e5:8e:02:d5:69:99:6e:4d:16:8f: 52:d8:fd:2f:f8:3c:63:e7:af:b6:1d:4f:88:94:01: 2c:56:c7:05:16:14:b6:3b:03:c6:f3:2d:8b:52:4b: 83:5d:79:8b:89:bc:4d:02:81:67:af:32:93:cb:50: 71:e5:d1:f7:65:4e:a7:35:3e:78:bb:09:e5:8d:c7: a0:be:a4:ca:eb:e9:bc:27:0c:ea:2a:20:eb:f6:98: b3:2b:5b:18:a5:3b:c3:87:74:3d:b4:42:3b:5d:d8: 21:2e:18:84:c2:51:e7:d8:c2:a3:97:77:cc:ab:db: 72:d1:d6:d1:03:0a:c2:d9:39:57:57:b5:78:c4:c5: 05:67:6a:64:d6:fd:fa:7f:db:a7:7a:b7:5d:3a:a8: 29:8f:5f:00:ea:9e:ca:15:db:b0:39:94:62:0e:ea: a4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D1:09:8F:7B:EE:B0:89:73:4F:0D:B6:5A:EA:AA:CB:60:B7:13:93 X509v3 Authority Key Identifier: keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:71:6e:31:a9:70:6a:43:fb:d6:6a:f4:55:10:06:98:f3:ee: 13:c9:92:2a:62:b9:17:b5:a6:a8:fa:a9:2c:2c:3b:6f:75:0e: 59:70:f0:2a:59:9c:7c:a1:c7:57:ce:ca:62:9d:4f:3b:2a:19: 62:37:57:f2:ad:b2:8f:b2:c0:c6:2f:23:fe:c3:5f:84:73:02: 2c:3f:6c:66:84:19:e3:fa:20:0a:a3:a6:6a:35:57:88:e0:56: c8:50:c1:fd:cd:5e:80:ca:c7:8f:c3:17:6b:25:cc:4d:9a:c0: 39:0d:a1:2a:ac:a8:b3:f2:09:4d:60:21:5b:f5:bc:01:13:1c: fa:cf:a3:7c:8a:93:02:34:c0:28:83:f8:3b:ce:ae:8f:c1:95: e2:35:d1:9d:9e:a4:e0:2e:c5:d2:62:07:07:be:e5:87:e8:10: 53:3a:49:d0:9a:af:4a:3b:53:38:2b:d6:dd:aa:b0:1d:0e:75: 48:7a:15:ef:54:88:39:2d:2a:d0:d0:4c:4a:b3:34:40:81:06: 63:b9:9d:ac:ce:00:e6:f2:b3:3a:95:22:0a:31:08:5b:1e:79: 86:91:43:ff:fc:93:fa:e6:d8:62:b8:27:15:33:c5:e8:b1:18: 59:99:cc:d2:20:1b:45:69:de:46:37:dc:a1:f3:97:62:b2:34: 10:bd:1f:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2F9hVccXGAIhD6ae8x4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3 ZGEyY2EwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD EygyMmQxMDk4ZjdiZWViMDg5NzM0ZjBkYjY1YWVhYWFjYjYwYjcxMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopyAefhwbJqunyw+L1SJ1sgy43xP 9gijENv2S9cg7j+GZoGKBKgxgVpmeSoBdfeEc8a+EkTuIlekyW9H4FLH40q/TuSs HEpXQSMvI1EUhkRSlVhKfkoTO5v1iWf9CuWOAtVpmW5NFo9S2P0v+Dxj56+2HU+I lAEsVscFFhS2OwPG8y2LUkuDXXmLibxNAoFnrzKTy1Bx5dH3ZU6nNT54uwnljceg vqTK6+m8JwzqKiDr9pizK1sYpTvDh3Q9tEI7XdghLhiEwlHn2MKjl3fMq9ty0dbR AwrC2TlXV7V4xMUFZ2pk1v36f9unerddOqgpj18A6p7KFduwOZRiDuqkywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLRCY977rCJc08NtlrqqstgtxOTMB8GA1UdIwQY MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3 LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtXFuMalw akP71mr0VRAGmPPuE8mSKmK5F7WmqPqpLCw7b3UOWXDwKlmcfKHHV87KYp1POyoZ YjdX8q2yj7LAxi8j/sNfhHMCLD9sZoQZ4/ogCqOmajVXiOBWyFDB/c1egMrHj8MX ayXMTZrAOQ2hKqyos/IJTWAhW/W8ARMc+s+jfIqTAjTAKIP4O86uj8GV4jXRnZ6k 4C7F0mIHB77lh+gQUzpJ0JqvSjtTOCvW3aqwHQ51SHoV71SIOS0q0NBMSrM0QIEG Y7mdrM4A5vKzOpUiCjEIWx55hpFD//yT+ubYYrgnFTPF6LEYWZnM0iAbRWneRjfc ofOXYrI0EL0fCw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:51 2026 by rpki-client