This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft File: RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft (raw, json) Hash identifier: HS3YNX2/rzMcFpNUSZGaB1LPJnH7zGKKz1IhL0Nxp0g= Subject key identifier: CF:8A:81:1E:A4:6D:62:9E:F1:F9:5F:7B:6B:8F:A0:34:BF:CC:A3:18 Authority key identifier: 47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 Certificate issuer: /CN=473469a966f4df3cf28171d87c74780fc472f979 Certificate serial: 019C4246C87D34A43D990784883E453B8611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft Manifest number: 0B18 Signing time: Mon 09 Feb 2026 12:01:00 +0000 Manifest this update: Mon 09 Feb 2026 12:01:00 +0000 Manifest next update: Tue 10 Feb 2026 12:01:00 +0000 Files and hashes: 1: DNxT4KfUnSN5D5Pb2TXRMl9CQRk.roa (hash: U4JVcc+2nFb5M82ma1QdMgZr3eKXlGDJ6qSOPbU6n2I=) 2: RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl (hash: fU3pR0HJhJ8TVaDQ+vIggBYpWPoCH0EqABfi5Y6qdHM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:c8:7d:34:a4:3d:99:07:84:88:3e:45:3b:86:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473469a966f4df3cf28171d87c74780fc472f979 Validity Not Before: Feb 9 12:01:00 2026 GMT Not After : Feb 10 12:01:00 2026 GMT Subject: CN=cf8a811ea46d629ef1f95f7b6b8fa034bfcca318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:96:05:96:1e:6c:c9:59:bc:0c:47:51:25:e7: 19:c0:0d:e5:ea:3a:88:04:a4:8b:ba:a3:cd:7c:20: 58:90:7e:de:40:3c:ac:7f:c4:58:1a:7f:40:13:0e: 05:51:22:b4:a1:73:f0:d0:4b:d6:f1:32:67:75:e4: 99:f2:5a:2a:20:68:2d:ba:c0:e6:95:e4:ed:f4:55: c8:56:80:93:a4:e7:66:76:d8:f7:b8:5b:35:ed:77: fe:25:8f:73:06:ca:b0:91:65:a2:ec:80:d3:24:49: ec:04:b6:d1:90:d7:db:99:7e:99:cf:d2:af:43:cb: 2f:62:35:24:b0:e5:a0:75:27:6d:ee:91:bf:4c:29: 35:65:17:a5:42:ac:10:32:d7:a2:e1:85:27:7c:13: 8e:94:fe:15:ec:82:ec:e7:73:5e:31:ad:53:0e:53: 18:a9:38:63:56:ed:b8:7a:70:9d:d3:a4:59:32:1b: b1:35:ec:40:4a:b6:a6:d2:a2:80:1f:c1:b1:c1:bd: b3:79:27:d4:1b:5f:2a:e3:bc:bc:87:6a:54:47:26: 3a:4a:7f:28:52:de:55:7e:f6:14:71:ba:48:75:70: 0e:b2:2f:ee:72:24:83:95:8e:01:53:46:5d:1a:a0: 66:b9:d1:94:03:22:62:ab:62:3a:83:11:6a:58:1f: 54:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:8A:81:1E:A4:6D:62:9E:F1:F9:5F:7B:6B:8F:A0:34:BF:CC:A3:18 X509v3 Authority Key Identifier: keyid:47:34:69:A9:66:F4:DF:3C:F2:81:71:D8:7C:74:78:0F:C4:72:F9:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzRpqWb03zzygXHYfHR4D8Ry-Xk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1efbe6-a014-417c-9685-583920f5f05b/1/RzRpqWb03zzygXHYfHR4D8Ry-Xk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:a0:6f:4f:4e:c6:1d:e7:90:72:7d:a0:b5:a3:50:19:36:c4: b0:e4:d3:2a:7d:06:ca:e0:2b:46:2c:74:5c:ff:b9:4f:e7:a1: 98:84:30:c7:c7:9e:9a:d0:1b:8a:38:07:7c:48:c2:0e:11:9e: ad:40:f6:f2:eb:98:7f:3e:d9:5e:f8:8d:24:9c:1d:79:b4:a3: b4:4c:d4:3f:c7:4f:72:d2:00:5b:06:58:18:be:5a:af:ee:5f: 26:fe:97:7f:81:56:57:6a:9d:8f:c5:dd:52:dc:63:7b:b7:98: 33:1b:37:6a:46:26:67:87:14:ba:6b:96:06:a4:8c:25:08:6b: 26:d3:eb:d3:c5:68:f7:15:32:76:11:3a:15:89:b4:a8:d8:23: ff:11:2e:38:05:e0:c7:d2:ab:07:f1:f8:a2:2e:38:58:39:f7: d4:c6:19:32:39:8e:17:fb:1a:64:a1:0e:84:9d:ee:02:f0:b2: 9b:a3:ff:f1:83:da:6a:6e:6a:01:d7:84:cd:5b:70:40:14:3d: 05:a0:18:89:48:72:3a:48:e6:3c:e4:cf:27:99:fe:c1:73:19: 6a:84:df:e5:35:e4:53:cb:af:75:cd:c3:77:22:14:75:15:0c: 20:ea:7a:4f:86:70:de:8b:a5:a1:4a:6e:ca:58:93:2b:66:22: 7a:ab:c1:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRsh9NKQ9mQeEiD5FO4YRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3MzQ2OWE5NjZmNGRmM2NmMjgxNzFkODdjNzQ3ODBmYzQ3 MmY5NzkwHhcNMjYwMjA5MTIwMTAwWhcNMjYwMjEwMTIwMTAwWjAzMTEwLwYDVQQD EyhjZjhhODExZWE0NmQ2MjllZjFmOTVmN2I2YjhmYTAzNGJmY2NhMzE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ZYFlh5syVm8DEdRJecZwA3l6jqI BKSLuqPNfCBYkH7eQDysf8RYGn9AEw4FUSK0oXPw0EvW8TJndeSZ8loqIGgtusDm leTt9FXIVoCTpOdmdtj3uFs17Xf+JY9zBsqwkWWi7IDTJEnsBLbRkNfbmX6Zz9Kv Q8svYjUksOWgdSdt7pG/TCk1ZRelQqwQMtei4YUnfBOOlP4V7ILs53NeMa1TDlMY qThjVu24enCd06RZMhuxNexASram0qKAH8Gxwb2zeSfUG18q47y8h2pURyY6Sn8o Ut5VfvYUcbpIdXAOsi/uciSDlY4BU0ZdGqBmudGUAyJiq2I6gxFqWB9UeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM+KgR6kbWKe8flfe2uPoDS/zKMYMB8GA1UdIwQY MBaAFEc0aalm9N888oFx2Hx0eA/Ecvl5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUt NTgzOTIwZjVmMDViLzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8xZWZiZTYtYTAxNC00MTdjLTk2ODUtNTgzOTIwZjVmMDVi LzEvUnpScHFXYjAzenp5Z1hIWWZIUjREOFJ5LVhrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARKBvT07G HeeQcn2gtaNQGTbEsOTTKn0GyuArRix0XP+5T+ehmIQwx8eemtAbijgHfEjCDhGe rUD28uuYfz7ZXviNJJwdebSjtEzUP8dPctIAWwZYGL5ar+5fJv6Xf4FWV2qdj8Xd Utxje7eYMxs3akYmZ4cUumuWBqSMJQhrJtPr08Vo9xUydhE6FYm0qNgj/xEuOAXg x9KrB/H4oi44WDn31MYZMjmOF/saZKEOhJ3uAvCym6P/8YPaam5qAdeEzVtwQBQ9 BaAYiUhyOkjmPOTPJ5n+wXMZaoTf5TXkU8uvdc3DdyIUdRUMIOp6T4Zw3ouloUpu yliTK2YieqvB0g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:41 2026 by rpki-client