This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft File: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft (raw, json) Hash identifier: meNq3fX4AZMrRPN9CvTltRX2c1pq37LJORQ27wvsjl0= Subject key identifier: 29:DF:11:42:B3:1E:28:B5:D2:74:25:3C:46:A5:29:C5:60:C7:E2:BF Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Certificate serial: 019C427E2904C78D653AFF3575E2C4D07BDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft Manifest number: 120D Signing time: Mon 09 Feb 2026 13:01:30 +0000 Manifest this update: Mon 09 Feb 2026 13:01:30 +0000 Manifest next update: Tue 10 Feb 2026 13:01:30 +0000 Files and hashes: 1: 07j9_n6AVXDopfWR8BaInw48NMc.roa (hash: WakDlcBYUCEpu1IOY+fCJocQGM48pGFR8nk3j6rRYQM=) 2: 2agacPd_HSeo5iWC2CnXaC2xZe8.roa (hash: YHI/nftFWmJRoE6pDGv7uv3rVMoTsI26akPX3i6AVgc=) 3: 3tDgZldpwVKudiZgfUwgKb4zld4.roa (hash: kPvU5pGV0e7Ywu28DoML3GY9UgWxXdJkZJTnwzyFHKc=) 4: 8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl (hash: d0oirdLPsE0oHaJnJk8f5SIndpshS8VbnR0VINhTCJU=) 5: bMpmoetZ6thuISe4pMSH_gzG5_0.roa (hash: Z0iA9uRqcsuyxbdf8SH9tPOJ9Xmro4LCj/1NhGY5J7c=) 6: ioNRHlUjrXZXGwM3yHXyNTZdMx0.roa (hash: BWD5RHei2js3p7ixFJ0GF6nZuII80HgQOTS+8kZsqzo=) 7: pXJZQxbSBDqofTDE9vannCeqPHU.roa (hash: ukAqHZV/xMM8uN5SZsafy/GsPc0EqLT+NakATV+Zg88=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:29:04:c7:8d:65:3a:ff:35:75:e2:c4:d0:7b:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8 Validity Not Before: Feb 9 13:01:30 2026 GMT Not After : Feb 10 13:01:30 2026 GMT Subject: CN=29df1142b31e28b5d274253c46a529c560c7e2bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f1:b4:b7:c2:a9:30:ea:16:f5:b5:80:4f:62: cb:ca:bb:de:70:f0:9e:24:41:f1:e7:ca:24:67:c8: a4:5f:82:c4:af:e2:52:38:1a:d7:8b:81:4c:68:3f: 9b:8b:9d:52:31:87:23:d7:88:4c:f4:cb:19:99:df: a4:c6:42:55:70:4b:ed:66:ae:37:cd:02:4a:62:5e: c7:c8:d8:7c:5b:c4:1f:64:c2:55:d3:3d:40:65:bc: ab:2c:3c:59:73:10:06:ee:68:cd:6d:f8:d7:58:3d: e4:df:96:27:c7:ed:cf:c8:86:38:06:f2:1c:47:c4: 9f:c9:81:a4:a8:45:25:ba:df:36:d5:bd:0e:17:c6: d3:8d:6c:b4:94:72:f4:d9:46:d4:3a:ca:60:69:d5: c1:2f:db:10:f3:e3:58:5c:84:b7:1d:e7:a4:ce:07: cc:75:67:57:a4:66:f6:71:e1:30:3d:04:61:8a:90: 28:d6:80:50:8b:ef:84:74:41:87:5c:fc:b6:14:41: ff:5f:2e:d4:d2:4c:4f:7b:f7:2b:53:8c:f7:cc:43: 3b:41:d9:cc:10:5f:7a:76:c4:26:ad:bd:5f:82:7c: 1c:1e:39:48:1c:c3:57:d9:ca:11:c6:0e:7e:de:5a: ec:93:83:87:1c:a5:8b:b8:4f:ba:bd:93:be:11:5c: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DF:11:42:B3:1E:28:B5:D2:74:25:3C:46:A5:29:C5:60:C7:E2:BF X509v3 Authority Key Identifier: keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ba:0e:1c:67:a7:c2:12:7c:9f:ba:5d:5b:e5:a9:18:cb:62: cf:83:90:c4:a5:07:1a:11:b5:ff:ed:30:3a:80:b6:92:cd:1e: a2:2d:5b:bd:d3:f2:e2:f7:42:66:23:cc:4b:8b:35:33:8f:40: 4c:85:17:e5:68:2a:65:7d:1e:29:41:e9:82:98:7c:52:5f:0a: b5:c1:b2:dd:00:28:c5:8e:25:86:5d:bc:d6:34:9c:88:a8:7d: 8a:3a:e3:c2:d2:41:de:55:ee:39:68:f7:3f:d7:5d:87:60:d8: b7:25:4a:1d:c1:f9:9b:d5:ca:bd:75:55:9c:1e:dd:be:51:99: ab:a6:6c:49:34:13:8e:0d:8b:59:22:d8:e6:24:42:17:9d:0d: 26:c4:05:57:77:33:3d:16:7d:fc:44:42:24:f9:f3:c1:d1:54: f2:ab:e8:6c:40:65:56:2b:59:0f:1b:6c:2e:05:64:74:a9:4c: fb:38:d5:52:15:c4:1e:71:31:6e:7d:9e:6c:6c:6d:80:5c:e6: d5:77:38:32:aa:1f:ac:7e:56:0d:f5:8d:30:b3:21:70:b9:6f: b7:9d:3f:47:4f:ef:40:f1:50:99:42:1d:05:5e:61:87:37:5c: 5b:e7:66:7c:b5:56:8c:f8:26:32:88:89:b5:ba:c1:7d:1f:c3: 59:e5:ca:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfikEx41lOv81deLE0HvbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw YTY4YjgwHhcNMjYwMjA5MTMwMTMwWhcNMjYwMjEwMTMwMTMwWjAzMTEwLwYDVQQD EygyOWRmMTE0MmIzMWUyOGI1ZDI3NDI1M2M0NmE1MjljNTYwYzdlMmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofG0t8KpMOoW9bWAT2LLyrvecPCe JEHx58okZ8ikX4LEr+JSOBrXi4FMaD+bi51SMYcj14hM9MsZmd+kxkJVcEvtZq43 zQJKYl7HyNh8W8QfZMJV0z1AZbyrLDxZcxAG7mjNbfjXWD3k35Ynx+3PyIY4BvIc R8SfyYGkqEUlut821b0OF8bTjWy0lHL02UbUOspgadXBL9sQ8+NYXIS3HeekzgfM dWdXpGb2ceEwPQRhipAo1oBQi++EdEGHXPy2FEH/Xy7U0kxPe/crU4z3zEM7QdnM EF96dsQmrb1fgnwcHjlIHMNX2coRxg5+3lrsk4OHHKWLuE+6vZO+EVx6LQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnfEUKzHii10nQlPEalKcVgx+K/MB8GA1UdIwQY MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt MzEzZWZlYjBiMTlkLzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcroOHGen whJ8n7pdW+WpGMtiz4OQxKUHGhG1/+0wOoC2ks0eoi1bvdPy4vdCZiPMS4s1M49A TIUX5WgqZX0eKUHpgph8Ul8KtcGy3QAoxY4lhl281jSciKh9ijrjwtJB3lXuOWj3 P9ddh2DYtyVKHcH5m9XKvXVVnB7dvlGZq6ZsSTQTjg2LWSLY5iRCF50NJsQFV3cz PRZ9/ERCJPnzwdFU8qvobEBlVitZDxtsLgVkdKlM+zjVUhXEHnExbn2ebGxtgFzm 1Xc4MqofrH5WDfWNMLMhcLlvt50/R0/vQPFQmUIdBV5hhzdcW+dmfLVWjPgmMoiJ tbrBfR/DWeXK0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 23:00:25 2026 by rpki-client