This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json) Hash identifier: h3hpe4GN7I3GAU7F/nDsAvE3+hqowCFSQZVbNAWdZBI= Subject key identifier: 75:32:DF:7E:94:E2:99:DA:5C:10:C9:1F:5D:8F:D6:FF:E8:2F:47:43 Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d Certificate serial: 019C420F245BB47ECF554C7E94B269FB8DCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft Manifest number: 16EE Signing time: Mon 09 Feb 2026 11:00:14 +0000 Manifest this update: Mon 09 Feb 2026 11:00:14 +0000 Manifest next update: Tue 10 Feb 2026 11:00:14 +0000 Files and hashes: 1: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: mOk4z+GCoqK3ZyX8Th2n9rqKpXZVfihmy77sRZV5OYI=) 2: gM2StpLZVmvayJcUvILE4XZXuLw.roa (hash: KQMOAlvZrGCc1yTty62TEDax5SGCNvxrkbvizSS1atc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:24:5b:b4:7e:cf:55:4c:7e:94:b2:69:fb:8d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d Validity Not Before: Feb 9 11:00:14 2026 GMT Not After : Feb 10 11:00:14 2026 GMT Subject: CN=7532df7e94e299da5c10c91f5d8fd6ffe82f4743 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:68:49:ec:c5:07:62:ef:74:bf:3a:00:ba:d9: 1a:a8:7d:dc:20:08:16:f3:2d:7d:21:6c:37:d0:fb: 22:2f:e5:c1:1b:1c:a9:96:46:40:5f:30:a6:cc:16: 97:cd:98:24:4f:51:df:a2:e7:a1:8a:14:0c:db:e0: 09:f3:00:a1:98:0e:fe:11:9f:18:8d:d6:17:b4:a8: 06:25:6a:8a:ef:ab:37:fc:43:e0:7e:74:a7:0c:6a: 14:2c:26:03:1b:76:5b:e8:d5:13:29:0b:2d:27:cb: e9:a3:27:d3:1d:59:a2:22:ea:e3:1d:73:42:5c:26: d1:f1:03:ac:4e:dc:09:a2:a3:f3:e7:69:26:b9:ae: eb:48:c5:66:67:06:fa:db:81:57:65:d7:01:4b:67: 50:77:78:ea:5b:c4:8d:6a:fb:65:5c:15:e3:cb:5d: 71:eb:42:dc:8d:3b:ee:ec:38:b1:b9:9e:bd:7c:de: d6:0c:f0:cb:ea:80:23:da:40:1b:4c:a0:e3:c3:dd: 01:2b:58:d5:ae:a5:40:bb:3a:f6:7e:a0:36:0e:73: 56:5e:54:b1:40:5a:32:cc:9c:58:df:60:cb:ff:20: 1e:ea:01:e5:e4:30:a0:69:a7:7e:21:d8:0d:5a:c4: e9:50:a0:61:ff:c2:7c:09:65:f3:c4:86:91:91:a3: b0:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:32:DF:7E:94:E2:99:DA:5C:10:C9:1F:5D:8F:D6:FF:E8:2F:47:43 X509v3 Authority Key Identifier: keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:ae:74:c9:30:78:56:a8:11:d8:09:d1:00:5c:d6:57:59:51: 4b:f8:cc:fc:40:e3:46:f8:f8:0a:13:03:54:38:6f:69:5d:21: ce:2e:17:8c:f6:ab:de:8e:b7:35:94:54:7f:9e:0c:fe:ef:66: f4:9a:b3:0a:46:63:b0:7b:57:5a:3c:5d:bf:72:be:7f:58:2d: b7:92:7f:d5:fd:7c:9f:ce:6c:70:ac:56:12:fb:72:07:5a:13: b2:be:74:ad:5d:b5:ec:7a:79:52:3f:f1:54:ed:57:b5:5e:06: 66:e3:fc:88:74:95:5b:d5:f1:51:10:3e:8a:83:6e:e4:42:64: 9e:a1:d8:1b:ba:36:6b:3c:06:62:e6:65:4b:a3:de:d1:8c:a1: b5:70:e4:0b:f4:ab:e6:30:75:38:66:83:39:8f:73:b9:cc:c3: 5b:1e:dc:8f:94:a2:8f:b6:99:36:dd:8c:10:b7:01:83:ee:41: 1b:35:31:f7:80:7e:51:e6:57:da:e4:57:e5:4f:a6:24:c9:42: 22:fb:f4:a2:e3:0e:c8:87:d2:77:07:08:3d:01:ae:a7:38:1d: 2c:2a:07:21:03:dd:d2:3c:cf:ff:6d:53:ae:d8:00:b9:2f:9b: 66:96:97:b6:05:4a:48:ee:ed:04:f9:f7:64:f9:f7:f3:e3:89: 83:41:1e:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyRbtH7PVUx+lLJp+43LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi Yjg1MWQwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD Eyg3NTMyZGY3ZTk0ZTI5OWRhNWMxMGM5MWY1ZDhmZDZmZmU4MmY0NzQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mhJ7MUHYu90vzoAutkaqH3cIAgW 8y19IWw30PsiL+XBGxyplkZAXzCmzBaXzZgkT1HfouehihQM2+AJ8wChmA7+EZ8Y jdYXtKgGJWqK76s3/EPgfnSnDGoULCYDG3Zb6NUTKQstJ8vpoyfTHVmiIurjHXNC XCbR8QOsTtwJoqPz52kmua7rSMVmZwb624FXZdcBS2dQd3jqW8SNavtlXBXjy11x 60LcjTvu7DixuZ69fN7WDPDL6oAj2kAbTKDjw90BK1jVrqVAuzr2fqA2DnNWXlSx QFoyzJxY32DL/yAe6gHl5DCgaad+IdgNWsTpUKBh/8J8CWXzxIaRkaOwIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHUy336U4pnaXBDJH12P1v/oL0dDMB8GA1UdIwQY MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt NDNlNGQ1NmQ0MDQzLzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANK50yTB4 VqgR2AnRAFzWV1lRS/jM/EDjRvj4ChMDVDhvaV0hzi4XjPar3o63NZRUf54M/u9m 9JqzCkZjsHtXWjxdv3K+f1gtt5J/1f18n85scKxWEvtyB1oTsr50rV217Hp5Uj/x VO1XtV4GZuP8iHSVW9XxURA+ioNu5EJknqHYG7o2azwGYuZlS6Pe0YyhtXDkC/Sr 5jB1OGaDOY9zuczDWx7cj5Sij7aZNt2MELcBg+5BGzUx94B+UeZX2uRX5U+mJMlC Ivv0ouMOyIfSdwcIPQGupzgdLCoHIQPd0jzP/21TrtgAuS+bZpaXtgVKSO7tBPn3 ZPn38+OJg0EezA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:53 2026 by rpki-client