This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft File: dzKPMhPqJhROzLqQzV2DRIIfrzs.mft (raw, json) Hash identifier: dyiO1TL/qtzGZzNbrKZdDV2YwJJl1FvGAJbwQmVIxx8= Subject key identifier: 9C:CD:53:04:D7:C5:3B:43:0A:FA:51:EF:07:7A:24:52:EA:E9:93:D0 Authority key identifier: 77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B Certificate issuer: /CN=77328f3213ea26144eccba90cd5d8344821faf3b Certificate serial: 019C42EB8DDCC7E50BF5655C80A4138C63D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft Manifest number: 12DC Signing time: Mon 09 Feb 2026 15:00:59 +0000 Manifest this update: Mon 09 Feb 2026 15:00:59 +0000 Manifest next update: Tue 10 Feb 2026 15:00:59 +0000 Files and hashes: 1: cSKDwPxDVXXkk_flq4GHJup7ieU.roa (hash: W0F3HzF5Oug74ick2FDUWrm4omprJ/KY32MOgnvN5+U=) 2: dzKPMhPqJhROzLqQzV2DRIIfrzs.crl (hash: uKBzX6Lmm3Cp7cBwed6+cIB3m3qiz0NiCchjFnsJd+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:8d:dc:c7:e5:0b:f5:65:5c:80:a4:13:8c:63:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77328f3213ea26144eccba90cd5d8344821faf3b Validity Not Before: Feb 9 15:00:59 2026 GMT Not After : Feb 10 15:00:59 2026 GMT Subject: CN=9ccd5304d7c53b430afa51ef077a2452eae993d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:09:da:67:b4:1d:e5:57:68:12:29:ab:91:d6: d0:c9:64:b5:ab:28:65:79:14:1b:ff:81:78:6b:e1: a4:c5:03:9b:b9:27:f3:df:a7:d9:5a:80:1e:b5:eb: ab:fc:a0:3f:18:da:45:86:19:e1:a5:3d:50:0d:3b: 74:1a:59:0b:2c:8b:af:35:01:cd:f4:7c:6d:47:1c: a7:b4:47:54:e0:74:4d:92:5d:b2:68:ff:86:84:ed: ea:56:5b:ef:7e:8d:e2:42:e2:fa:8e:b9:52:8b:af: e8:df:2f:8f:0b:8a:30:30:2f:48:7c:03:31:24:48: 58:c5:c8:46:eb:cf:34:84:70:d8:58:4a:76:5b:8e: 52:f7:1e:98:05:f6:ea:90:8e:ff:96:43:b8:39:01: 8c:e0:24:b7:87:4d:2b:48:1c:1e:60:b3:af:c1:d3: 48:78:0f:da:80:3e:22:8c:87:1f:8f:7e:32:a6:0d: ba:c1:a5:b9:30:33:2f:20:af:66:01:79:d4:10:2b: 56:d5:5c:1c:14:66:a5:e2:df:b8:66:ee:d7:46:7d: d5:67:04:cf:a5:30:23:32:64:c9:42:f3:ea:20:41: 45:39:32:6f:6d:76:67:e8:40:4b:3d:6f:84:ca:44: a4:3f:ac:61:dd:96:16:67:3f:e0:bb:0b:fd:ea:c9: d3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CD:53:04:D7:C5:3B:43:0A:FA:51:EF:07:7A:24:52:EA:E9:93:D0 X509v3 Authority Key Identifier: keyid:77:32:8F:32:13:EA:26:14:4E:CC:BA:90:CD:5D:83:44:82:1F:AF:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dzKPMhPqJhROzLqQzV2DRIIfrzs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/926269-cb17-4cc2-8656-87827e571323/1/dzKPMhPqJhROzLqQzV2DRIIfrzs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:5a:8a:fa:3a:76:4e:81:ba:1c:93:4d:bb:74:6c:44:f6:ee: ba:48:5d:fb:0d:47:b7:bc:d1:ec:42:09:e4:df:16:a4:ba:e8: c0:8f:de:32:de:0f:48:5f:67:6a:0d:19:6b:de:64:60:a4:90: 6f:bd:98:ec:f8:35:a3:d7:ba:c8:00:30:82:bb:e6:c6:a7:d0: 5f:0e:0f:f9:ed:e5:9d:09:80:51:fd:61:87:76:78:5a:a4:56: e6:30:28:b6:e0:ad:e5:1d:87:0f:3d:b8:b9:cc:77:96:af:84: 76:f2:11:84:3f:e4:aa:55:6b:ad:ce:41:c7:f6:fc:2d:f4:f7: d0:5c:97:f6:c9:39:83:a5:e2:10:04:5d:c0:ed:71:02:61:44: d0:3f:4b:b4:db:4f:72:91:37:68:79:cd:61:81:86:b9:ec:19: 44:e0:ea:b9:21:95:e3:d3:72:01:f7:dd:ef:d9:44:c4:f9:76: 2c:39:19:ce:2e:3d:73:f3:45:31:22:0b:9c:46:85:93:36:bb: 90:18:3c:fb:e6:38:0f:23:c8:9d:0a:32:4d:c3:02:f9:8d:a4: 89:d2:fd:09:5d:13:cd:74:45:89:74:94:8c:32:ca:24:f5:60: aa:cb:95:bc:42:29:f1:c7:51:09:ff:0a:26:e6:d5:8f:a4:61: 60:ac:1a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC643cx+UL9WVcgKQTjGPTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MzI4ZjMyMTNlYTI2MTQ0ZWNjYmE5MGNkNWQ4MzQ0ODIx ZmFmM2IwHhcNMjYwMjA5MTUwMDU5WhcNMjYwMjEwMTUwMDU5WjAzMTEwLwYDVQQD Eyg5Y2NkNTMwNGQ3YzUzYjQzMGFmYTUxZWYwNzdhMjQ1MmVhZTk5M2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnaZ7Qd5VdoEimrkdbQyWS1qyhl eRQb/4F4a+GkxQObuSfz36fZWoAeteur/KA/GNpFhhnhpT1QDTt0GlkLLIuvNQHN 9HxtRxyntEdU4HRNkl2yaP+GhO3qVlvvfo3iQuL6jrlSi6/o3y+PC4owMC9IfAMx JEhYxchG6880hHDYWEp2W45S9x6YBfbqkI7/lkO4OQGM4CS3h00rSBweYLOvwdNI eA/agD4ijIcfj34ypg26waW5MDMvIK9mAXnUECtW1VwcFGal4t+4Zu7XRn3VZwTP pTAjMmTJQvPqIEFFOTJvbXZn6EBLPW+EykSkP6xh3ZYWZz/guwv96snTjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzNUwTXxTtDCvpR7wd6JFLq6ZPQMB8GA1UdIwQY MBaAFHcyjzIT6iYUTsy6kM1dg0SCH687MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS85MjYyNjktY2IxNy00Y2MyLTg2NTYt ODc4MjdlNTcxMzIzLzEvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS85MjYyNjktY2IxNy00Y2MyLTg2NTYtODc4MjdlNTcxMzIz LzEvZHpLUE1oUHFKaFJPekxxUXpWMkRSSUlmcnpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIlqK+jp2 ToG6HJNNu3RsRPbuukhd+w1Ht7zR7EIJ5N8WpLrowI/eMt4PSF9nag0Za95kYKSQ b72Y7Pg1o9e6yAAwgrvmxqfQXw4P+e3lnQmAUf1hh3Z4WqRW5jAotuCt5R2HDz24 ucx3lq+EdvIRhD/kqlVrrc5Bx/b8LfT30FyX9sk5g6XiEARdwO1xAmFE0D9LtNtP cpE3aHnNYYGGuewZRODquSGV49NyAffd79lExPl2LDkZzi49c/NFMSILnEaFkza7 kBg8++Y4DyPInQoyTcMC+Y2kidL9CV0TzXRFiXSUjDLKJPVgqsuVvEIp8cdRCf8K JubVj6RhYKwa4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:59 2026 by rpki-client