This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft File: 1cZc2ktjD3K_ZA0WtB9y9aD511E.mft (raw, json) Hash identifier: yQfwFdqOTcT9uDStaQ0Syor/XdKGAIauqzEMmkaWLro= Subject key identifier: 3A:68:CD:D2:A6:8D:59:ED:8A:40:78:EB:3A:B8:C4:2A:7B:F0:48:3B Authority key identifier: D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 Certificate issuer: /CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Certificate serial: 019C42EB9055DFD277C4B2DEE8718ACC30F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft Manifest number: 100B Signing time: Mon 09 Feb 2026 15:00:59 +0000 Manifest this update: Mon 09 Feb 2026 15:00:59 +0000 Manifest next update: Tue 10 Feb 2026 15:00:59 +0000 Files and hashes: 1: 1cZc2ktjD3K_ZA0WtB9y9aD511E.crl (hash: 11ROEya4bq2mgb3yj9sok2oHUN9dsUg04RAKQOkqnJI=) 2: pNlley5H_9TvcEcVei0jRvY3Yrg.roa (hash: QEIb7mVWibyhq5IzgmoR4hHBvXp2za6yX/i3UZRSIgk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:90:55:df:d2:77:c4:b2:de:e8:71:8a:cc:30:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5c65cda4b630f72bf640d16b41f72f5a0f9d751 Validity Not Before: Feb 9 15:00:59 2026 GMT Not After : Feb 10 15:00:59 2026 GMT Subject: CN=3a68cdd2a68d59ed8a4078eb3ab8c42a7bf0483b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f2:b9:d2:96:36:e3:13:6d:b6:1c:db:72:fe: 4f:d6:0b:97:1a:0a:57:7f:86:bc:57:bf:70:14:e3: 7a:f8:f5:a6:df:97:2a:bb:b6:cb:0f:08:25:04:c3: 00:4f:1d:ad:f1:8e:bb:fc:49:2d:b6:9e:38:7e:e1: c0:d5:d1:a0:24:2f:6d:37:c2:54:0b:2f:86:fc:12: 54:00:bf:68:e8:0b:5a:e2:17:73:77:49:73:1e:4d: c1:48:64:59:68:bb:69:1f:fb:31:48:f6:45:28:71: eb:63:88:06:d8:19:81:e8:93:66:db:d4:31:ba:03: 9e:fc:b8:13:55:f5:77:35:8e:25:55:a9:ff:65:79: ed:60:05:c1:6c:18:76:40:c3:16:73:aa:6a:d0:f9: a1:c0:b4:c4:bd:30:33:c0:5b:41:d2:42:e1:dd:bd: 0c:ff:3c:bf:d0:f2:18:ca:80:35:e8:2a:74:03:4d: 5a:d0:a5:13:dd:68:0e:0c:45:76:e6:75:cd:6c:61: a8:1c:a1:2c:8c:ac:fb:9a:4f:65:4e:37:51:c9:da: 09:c6:46:06:6b:0e:c7:6a:3d:51:c2:73:f8:36:95: de:d2:61:8f:3e:e0:6d:7d:b4:59:f1:c9:eb:38:b0: 32:bd:60:7a:8b:2c:ac:21:45:d8:30:8f:94:10:35: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:68:CD:D2:A6:8D:59:ED:8A:40:78:EB:3A:B8:C4:2A:7B:F0:48:3B X509v3 Authority Key Identifier: keyid:D5:C6:5C:DA:4B:63:0F:72:BF:64:0D:16:B4:1F:72:F5:A0:F9:D7:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1cZc2ktjD3K_ZA0WtB9y9aD511E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/6387c8-c248-425f-ba40-cd6555fcd82e/1/1cZc2ktjD3K_ZA0WtB9y9aD511E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:81:72:34:4d:67:b7:db:a3:65:d5:67:87:99:5c:f5:62:94: 53:ff:e8:04:21:9a:23:ca:cf:88:aa:4e:f0:a4:dc:be:ef:af: 41:0d:42:75:a5:91:bf:23:35:9a:0f:38:d5:7e:ef:4a:89:1e: c4:bc:0e:d5:01:c2:b6:2d:8b:be:3a:24:aa:df:db:b0:f6:3d: 8b:cb:e2:10:40:8e:14:d4:ab:d6:42:9f:1e:76:b9:97:03:8a: 8e:a9:f6:24:a7:2d:cc:19:32:80:11:48:fd:d4:6e:a6:77:68: 84:13:55:cf:3b:20:5b:81:3b:3d:1a:84:8c:39:fa:5b:00:38: f6:3f:d9:49:b1:ac:ee:2b:9a:e3:69:bf:0d:25:f6:c5:d3:f2: 53:88:93:ee:9c:87:db:ec:d2:00:37:f6:b3:f1:28:6f:1e:6c: b0:b9:0a:9d:2e:c5:c5:5d:05:c0:09:21:cb:0b:11:67:53:8f: 09:6e:22:d6:bf:69:95:1c:b4:0c:d6:7d:0c:f0:a9:d0:0e:45: 98:7b:c3:58:86:d6:f1:df:1e:8f:95:77:23:0b:a4:fe:de:a6: 7f:0d:99:b1:6d:84:26:e6:37:d9:5e:4c:d6:a5:46:92:44:c1: 5d:41:d5:7b:62:f9:cd:81:b5:bb:a9:22:62:5a:dd:7e:e6:5d: 03:10:9a:46 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65BV39J3xLLe6HGKzDD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1YzY1Y2RhNGI2MzBmNzJiZjY0MGQxNmI0MWY3MmY1YTBm OWQ3NTEwHhcNMjYwMjA5MTUwMDU5WhcNMjYwMjEwMTUwMDU5WjAzMTEwLwYDVQQD EygzYTY4Y2RkMmE2OGQ1OWVkOGE0MDc4ZWIzYWI4YzQyYTdiZjA0ODNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/K50pY24xNtthzbcv5P1guXGgpX f4a8V79wFON6+PWm35cqu7bLDwglBMMATx2t8Y67/Ekttp44fuHA1dGgJC9tN8JU Cy+G/BJUAL9o6Ata4hdzd0lzHk3BSGRZaLtpH/sxSPZFKHHrY4gG2BmB6JNm29Qx ugOe/LgTVfV3NY4lVan/ZXntYAXBbBh2QMMWc6pq0PmhwLTEvTAzwFtB0kLh3b0M /zy/0PIYyoA16Cp0A01a0KUT3WgODEV25nXNbGGoHKEsjKz7mk9lTjdRydoJxkYG aw7Haj1RwnP4NpXe0mGPPuBtfbRZ8cnrOLAyvWB6iyysIUXYMI+UEDWRxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDpozdKmjVntikB46zq4xCp78Eg7MB8GA1UdIwQY MBaAFNXGXNpLYw9yv2QNFrQfcvWg+ddRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAt Y2Q2NTU1ZmNkODJlLzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi82Mzg3YzgtYzI0OC00MjVmLWJhNDAtY2Q2NTU1ZmNkODJl LzEvMWNaYzJrdGpEM0tfWkEwV3RCOXk5YUQ1MTFFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYFyNE1n t9ujZdVnh5lc9WKUU//oBCGaI8rPiKpO8KTcvu+vQQ1CdaWRvyM1mg841X7vSoke xLwO1QHCti2Lvjokqt/bsPY9i8viEECOFNSr1kKfHna5lwOKjqn2JKctzBkygBFI /dRupndohBNVzzsgW4E7PRqEjDn6WwA49j/ZSbGs7iua42m/DSX2xdPyU4iT7pyH 2+zSADf2s/Eobx5ssLkKnS7FxV0FwAkhywsRZ1OPCW4i1r9plRy0DNZ9DPCp0A5F mHvDWIbW8d8ej5V3Iwuk/t6mfw2ZsW2EJuY32V5M1qVGkkTBXUHVe2L5zYG1u6ki YlrdfuZdAxCaRg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:10 2026 by rpki-client