This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft File: z13l9P7Bb1FvC8TWMcJidmP5BfM.mft (raw, json) Hash identifier: eEjxE30qxH+Rox4ooxP9ZSD9rTZOpUAw7FUROgiwLNE= Subject key identifier: 44:19:0B:77:60:A5:14:12:72:E2:1B:94:1B:DF:A1:0C:2B:72:FD:F5 Authority key identifier: CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 Certificate issuer: /CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Certificate serial: 019C427E0FCFCCD9DBD23EC5EAB983D53DC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: 3QNCUyziq2NCQzag95T2-uqk5kk.roa (hash: p0EolByolBbZ5LQrfo9cgFCeGxE7C5y0TvaxEkMa+Dc=) 2: z13l9P7Bb1FvC8TWMcJidmP5BfM.crl (hash: kn81QGNEqbxg7C7VbAPNZZRbrYHFMCP8gA9WKvlFBqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0f:cf:cc:d9:db:d2:3e:c5:ea:b9:83:d5:3d:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf5de5f4fec16f516f0bc4d631c2627663f905f3 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=44190b7760a5141272e21b941bdfa10c2b72fdf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7a:b1:0a:72:2e:ee:b8:3f:0f:57:fc:c3:89: f2:f9:b0:2c:57:a8:4a:e5:82:15:4d:03:26:d2:78: 3f:ed:eb:0b:e9:0c:79:82:31:70:87:65:0c:ff:79: 79:16:a5:98:17:34:f7:b9:c0:72:e8:b4:e4:59:1b: d3:ff:86:a8:e2:fe:d8:34:00:16:6f:09:1e:3b:1e: 48:bf:84:5a:e6:b9:e1:b1:db:19:07:85:c0:7d:bf: a0:25:81:18:c0:e1:88:b1:b1:c4:a8:e2:94:11:6d: 79:83:9e:1b:e2:7a:ef:d0:7c:4e:ed:d4:84:a7:00: 75:b6:48:95:27:fa:6f:2a:65:f1:e7:d8:d5:9a:e9: 80:5f:f6:29:60:6e:26:5f:e9:75:0b:85:3b:bc:7e: 97:d6:5e:d2:15:fb:20:2d:e2:40:13:5a:b4:f7:bf: 8b:1f:9a:75:f7:ab:28:52:61:d1:a4:99:22:54:66: f9:8f:64:02:06:19:81:06:b2:de:ca:f1:aa:2e:f1: a6:18:1e:3a:6d:6c:83:01:e8:8d:ea:05:50:e5:09: 26:8e:af:6e:07:8b:b0:80:ad:d5:65:74:e1:a3:b8: c1:88:01:77:c0:53:dc:ae:62:12:16:93:4e:3e:81: 46:69:f7:f1:f4:b6:ec:b7:d4:34:4c:95:f1:60:87: f6:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:19:0B:77:60:A5:14:12:72:E2:1B:94:1B:DF:A1:0C:2B:72:FD:F5 X509v3 Authority Key Identifier: keyid:CF:5D:E5:F4:FE:C1:6F:51:6F:0B:C4:D6:31:C2:62:76:63:F9:05:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z13l9P7Bb1FvC8TWMcJidmP5BfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1e670-626a-4c15-a669-6fe1494fbc2c/1/z13l9P7Bb1FvC8TWMcJidmP5BfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:79:b7:08:ff:b2:10:33:19:7e:65:14:30:49:45:81:a2:68: d8:05:d6:57:82:14:57:42:76:7e:e5:30:c4:af:ba:c8:aa:85: 2b:8c:4d:fd:2e:35:0d:21:9e:39:73:1e:00:76:a1:62:43:31: 5e:2a:9b:7c:4b:82:46:c5:cd:1a:2b:41:4a:a0:39:d9:66:35: c0:23:d5:ab:45:43:d6:64:47:7b:ac:6b:67:b2:26:b0:12:3c: 4d:43:41:f8:4a:83:42:b7:11:4f:ca:d5:35:60:32:35:fa:d5: e9:09:58:23:65:6c:66:2e:28:ef:37:fe:91:56:f4:de:2d:53: fb:5c:0d:13:34:1a:c3:ce:69:1d:07:a0:3b:9c:03:09:8b:1f: 59:d8:ad:ab:fa:d3:39:3d:f3:44:df:24:77:4f:29:21:f6:25: 03:00:6f:07:22:cc:33:b0:ef:43:88:99:9e:6e:1e:53:d6:65: fe:40:20:d7:42:5a:ea:ac:4c:96:f3:23:3d:23:78:c5:bb:b9: 29:f5:59:70:fa:81:84:d9:7d:4e:77:fa:8c:15:6c:c4:b1:a9: f1:43:b3:d5:94:de:79:71:ab:44:bc:23:cc:24:62:d3:b8:d9: b5:b7:b7:8c:bc:42:e2:ea:14:54:d0:a1:89:0a:d5:79:57:61: 5b:e9:0a:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfg/PzNnb0j7F6rmD1T3EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNWRlNWY0ZmVjMTZmNTE2ZjBiYzRkNjMxYzI2Mjc2NjNm OTA1ZjMwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD Eyg0NDE5MGI3NzYwYTUxNDEyNzJlMjFiOTQxYmRmYTEwYzJiNzJmZGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3qxCnIu7rg/D1f8w4ny+bAsV6hK 5YIVTQMm0ng/7esL6Qx5gjFwh2UM/3l5FqWYFzT3ucBy6LTkWRvT/4ao4v7YNAAW bwkeOx5Iv4Ra5rnhsdsZB4XAfb+gJYEYwOGIsbHEqOKUEW15g54b4nrv0HxO7dSE pwB1tkiVJ/pvKmXx59jVmumAX/YpYG4mX+l1C4U7vH6X1l7SFfsgLeJAE1q097+L H5p196soUmHRpJkiVGb5j2QCBhmBBrLeyvGqLvGmGB46bWyDAeiN6gVQ5Qkmjq9u B4uwgK3VZXTho7jBiAF3wFPcrmISFpNOPoFGaffx9Lbst9Q0TJXxYIf2WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQZC3dgpRQScuIblBvfoQwrcv31MB8GA1UdIwQY MBaAFM9d5fT+wW9RbwvE1jHCYnZj+QXzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2Njkt NmZlMTQ5NGZiYzJjLzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMWU2NzAtNjI2YS00YzE1LWE2NjktNmZlMTQ5NGZiYzJj LzEvejEzbDlQN0JiMUZ2QzhUV01jSmlkbVA1QmZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF3m3CP+y EDMZfmUUMElFgaJo2AXWV4IUV0J2fuUwxK+6yKqFK4xN/S41DSGeOXMeAHahYkMx XiqbfEuCRsXNGitBSqA52WY1wCPVq0VD1mRHe6xrZ7ImsBI8TUNB+EqDQrcRT8rV NWAyNfrV6QlYI2VsZi4o7zf+kVb03i1T+1wNEzQaw85pHQegO5wDCYsfWditq/rT OT3zRN8kd08pIfYlAwBvByLMM7DvQ4iZnm4eU9Zl/kAg10Ja6qxMlvMjPSN4xbu5 KfVZcPqBhNl9Tnf6jBVsxLGp8UOz1ZTeeXGrRLwjzCRi07jZtbe3jLxC4uoUVNCh iQrVeVdhW+kKgQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:23 2026 by rpki-client