This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft File: z9whc4iqfpAo3R4EumQpE1LWC-8.mft (raw, json) Hash identifier: EcltctCwNFTZMB3SP3QIQYJmtgEaETMcVpJd1XNCRZo= Subject key identifier: AA:F4:07:6F:09:3B:EF:8E:A9:87:4E:4E:4A:94:DC:C7:9F:C3:8E:C0 Authority key identifier: CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF Certificate issuer: /CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Certificate serial: 019C43592F239EEF627427B02718036B0519 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft Manifest number: 0477 Signing time: Mon 09 Feb 2026 17:00:44 +0000 Manifest this update: Mon 09 Feb 2026 17:00:44 +0000 Manifest next update: Tue 10 Feb 2026 17:00:44 +0000 Files and hashes: 1: 18mBvWMTzIGjuf0KvgUDpqaEgck.roa (hash: GFEk4/+4DhuQ+HzNstdRPkKFI3j7dtiSLG7Lkc2nCys=) 2: z9whc4iqfpAo3R4EumQpE1LWC-8.crl (hash: SlNMhy8SqSLPAGiBwQUms2pEshTn8PUP86FqrRHHIjg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:2f:23:9e:ef:62:74:27:b0:27:18:03:6b:05:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfdc217388aa7e9028dd1e04ba64291352d60bef Validity Not Before: Feb 9 17:00:44 2026 GMT Not After : Feb 10 17:00:44 2026 GMT Subject: CN=aaf4076f093bef8ea9874e4e4a94dcc79fc38ec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:1d:5a:b9:6f:9c:10:39:e7:9a:3e:c3:8b:6c: 5b:65:22:c8:55:14:4f:8c:6e:2a:d8:05:ba:94:36: 8a:90:26:53:9d:64:d2:26:15:6a:78:43:79:dc:14: 43:0b:a8:5a:e5:99:c2:ce:60:67:53:47:38:84:83: b0:43:31:fa:67:23:08:c8:bb:49:2e:e7:fb:d7:04: 80:30:a5:55:a5:62:fa:02:3b:96:bb:a6:62:f3:6f: 13:56:de:35:95:28:bf:40:8f:6d:73:b6:b1:c3:60: 0d:a8:d7:15:95:93:2f:a5:0e:17:91:ba:46:5b:4d: 4f:d6:67:64:cd:e2:da:c9:c3:5d:1c:c5:cb:06:15: dd:96:f7:5f:cd:c0:7e:ab:85:ec:ab:53:b6:a2:53: df:04:ea:91:b2:4e:50:07:be:0e:29:25:82:42:6f: aa:39:08:ad:f0:a3:54:64:40:81:ca:ad:f4:b1:90: 3d:ad:af:e7:53:ec:0e:6a:22:da:75:33:e9:f8:f6: d8:a9:d6:f6:59:a3:fd:23:a0:e2:88:a3:2b:45:e7: 0b:4e:64:94:d5:aa:6b:1c:37:68:04:7b:d3:95:75: 6f:d0:29:ac:bb:b3:c9:b6:ad:43:4e:03:dd:16:c3: a7:9b:fb:c9:91:7c:ae:35:71:ad:3b:43:71:f5:99: b1:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F4:07:6F:09:3B:EF:8E:A9:87:4E:4E:4A:94:DC:C7:9F:C3:8E:C0 X509v3 Authority Key Identifier: keyid:CF:DC:21:73:88:AA:7E:90:28:DD:1E:04:BA:64:29:13:52:D6:0B:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z9whc4iqfpAo3R4EumQpE1LWC-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d26026-1596-44d8-8af3-5e5a624d74b8/1/z9whc4iqfpAo3R4EumQpE1LWC-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:fa:90:34:36:0f:17:82:8a:2b:86:ea:ce:d2:31:34:7e:37: 1d:bc:38:df:e2:dc:03:9c:f7:a6:1a:9e:4e:73:3f:ed:21:bf: b4:0f:4f:d2:69:b7:47:0c:56:4f:b9:57:cd:69:ef:60:6f:3b: cc:9c:60:50:a7:f4:a8:b0:25:40:2a:cd:1c:62:05:14:48:d5: bf:1e:82:8e:51:4e:4e:21:17:ed:0d:f6:ec:e9:3e:38:bb:c2: 21:2e:f1:d9:62:3c:50:44:b5:5a:dd:70:f2:ac:96:08:e4:0f: e4:7d:c4:c8:74:c8:db:ff:d7:43:ab:b6:54:3e:7e:c8:11:03: c9:70:d5:86:2a:13:4c:6c:67:77:86:8f:2e:1c:2a:83:f5:59: 80:cb:b5:13:5d:10:a9:00:b3:a4:3d:f7:1c:77:f0:fb:c3:6d: 30:8a:76:54:f4:a5:d1:c5:70:23:dc:27:76:ff:78:87:e6:2a: b1:b0:d0:6b:e3:f0:47:87:8a:3e:46:94:50:48:16:f5:1b:eb: 48:16:09:c9:4c:02:d4:05:7a:23:6d:ee:5b:09:44:25:ec:83: cc:eb:7a:a7:fb:46:a2:30:25:02:29:5d:f3:03:d0:63:1c:d2: 43:69:5b:23:9f:99:6f:ea:f1:ed:d5:3a:7d:63:94:80:f0:78: f9:7f:05:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWS8jnu9idCewJxgDawUZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZGMyMTczODhhYTdlOTAyOGRkMWUwNGJhNjQyOTEzNTJk NjBiZWYwHhcNMjYwMjA5MTcwMDQ0WhcNMjYwMjEwMTcwMDQ0WjAzMTEwLwYDVQQD EyhhYWY0MDc2ZjA5M2JlZjhlYTk4NzRlNGU0YTk0ZGNjNzlmYzM4ZWMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR1auW+cEDnnmj7Di2xbZSLIVRRP jG4q2AW6lDaKkCZTnWTSJhVqeEN53BRDC6ha5ZnCzmBnU0c4hIOwQzH6ZyMIyLtJ Luf71wSAMKVVpWL6AjuWu6Zi828TVt41lSi/QI9tc7axw2ANqNcVlZMvpQ4XkbpG W01P1mdkzeLaycNdHMXLBhXdlvdfzcB+q4Xsq1O2olPfBOqRsk5QB74OKSWCQm+q OQit8KNUZECByq30sZA9ra/nU+wOaiLadTPp+PbYqdb2WaP9I6DiiKMrRecLTmSU 1aprHDdoBHvTlXVv0Cmsu7PJtq1DTgPdFsOnm/vJkXyuNXGtO0Nx9ZmxcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKr0B28JO++OqYdOTkqU3Mefw47AMB8GA1UdIwQY MBaAFM/cIXOIqn6QKN0eBLpkKRNS1gvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMt NWU1YTYyNGQ3NGI4LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9kMjYwMjYtMTU5Ni00NGQ4LThhZjMtNWU1YTYyNGQ3NGI4 LzEvejl3aGM0aXFmcEFvM1I0RXVtUXBFMUxXQy04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfqQNDYP F4KKK4bqztIxNH43Hbw43+LcA5z3phqeTnM/7SG/tA9P0mm3RwxWT7lXzWnvYG87 zJxgUKf0qLAlQCrNHGIFFEjVvx6CjlFOTiEX7Q327Ok+OLvCIS7x2WI8UES1Wt1w 8qyWCOQP5H3EyHTI2//XQ6u2VD5+yBEDyXDVhioTTGxnd4aPLhwqg/VZgMu1E10Q qQCzpD33HHfw+8NtMIp2VPSl0cVwI9wndv94h+YqsbDQa+PwR4eKPkaUUEgW9Rvr SBYJyUwC1AV6I23uWwlEJeyDzOt6p/tGojAlAild8wPQYxzSQ2lbI5+Zb+rx7dU6 fWOUgPB4+X8FhA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:04 2026 by rpki-client