This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft File: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft (raw, json) Hash identifier: 96xIjyof5mOSJcLygwNd8OBAam3umHfW9iLj78e5L1g= Subject key identifier: 9F:AE:12:83:AD:1D:F7:DA:EF:F5:AC:69:50:45:37:38:9F:02:93:C5 Authority key identifier: 65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C Certificate issuer: /CN=65a07d492468228aa306a66b056a0228c552ec5c Certificate serial: 019C4321C98C142984C0BF6E39E91AB956BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft Manifest number: 0F25 Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl (hash: ooags3Wx2rYUb2ABSSUzoLJbY+aNoAxGCBx/wU69lAI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:c9:8c:14:29:84:c0:bf:6e:39:e9:1a:b9:56:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65a07d492468228aa306a66b056a0228c552ec5c Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=9fae1283ad1df7daeff5ac69504537389f0293c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:c6:5c:c2:be:05:ad:c2:b4:04:46:c7:f4: 8e:a1:95:48:a5:b1:94:75:a9:7a:d5:e8:4f:2b:35: 06:17:af:b0:79:89:ad:c8:90:18:47:f3:67:ab:a9: 31:d5:71:ed:7e:75:59:ec:2a:19:7c:61:46:3d:ef: 03:b4:cd:58:0a:fd:53:e6:18:8f:44:fb:6f:a8:e7: 72:51:53:42:a8:ff:bb:c0:d1:9a:57:6d:25:e9:59: 7f:9c:ca:7b:07:60:62:fa:f2:a4:9c:08:83:4f:09: 96:c3:21:a1:2e:61:62:d2:43:74:30:8b:eb:98:16: 7d:13:5c:14:c7:92:52:32:e8:79:21:04:ec:54:07: 10:d0:ce:35:60:20:72:aa:55:a2:3e:dd:5f:d1:5f: c6:0f:d6:47:43:25:4e:8b:f3:b3:46:b9:13:d7:74: f7:be:f5:ae:05:a0:24:e4:33:3e:11:7f:d3:f0:18: 6e:7e:78:05:f0:11:08:cf:62:96:36:a2:e0:00:e2: ad:74:36:1e:c4:a6:d4:3c:56:ed:d2:23:d9:e2:60: 13:02:aa:b0:72:1d:a3:72:c3:ea:d1:73:a0:79:18: 2b:66:45:59:45:71:87:dc:52:4b:c1:b6:ea:25:5c: 57:ed:4c:b9:99:15:16:ba:72:b7:ae:39:af:4b:96: 02:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AE:12:83:AD:1D:F7:DA:EF:F5:AC:69:50:45:37:38:9F:02:93:C5 X509v3 Authority Key Identifier: keyid:65:A0:7D:49:24:68:22:8A:A3:06:A6:6B:05:6A:02:28:C5:52:EC:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/183298-fb99-4e8f-8264-eb03bba65a96/1/ZaB9SSRoIoqjBqZrBWoCKMVS7Fw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:43:33:f2:0d:52:43:04:08:0e:d9:e9:1e:be:63:a7:d1:78: 9e:29:9a:42:28:ef:50:43:6b:d1:d1:89:f0:a7:b2:3e:54:de: 76:6c:a4:71:14:fa:cb:47:59:48:5b:1c:8d:0d:52:cd:32:2e: ed:95:62:47:44:5a:79:7c:c8:b7:e7:29:b6:eb:eb:f9:dc:61: e6:47:fc:fa:e6:30:02:05:d8:38:98:b0:be:67:f3:99:7e:1c: f1:9a:36:c5:26:c6:fd:c2:94:05:05:ac:df:45:c6:c8:8b:f3: 05:72:ce:b2:e7:98:f5:a5:b6:7d:1c:e7:72:da:f5:4d:37:7d: bd:3f:25:97:14:ad:05:32:bc:de:50:19:da:1e:b8:0a:d5:2a: 82:52:68:2b:12:3f:5a:4e:af:e3:f6:be:02:da:37:e1:98:d5: 27:53:04:8e:2e:85:32:65:0b:89:fb:88:e2:6a:d5:81:72:1b: 6e:41:b5:6c:b1:4e:c1:ab:74:83:51:be:09:c6:b7:1b:c9:fc: 67:a5:ab:14:e0:fb:d8:d5:de:79:d5:45:5a:6a:3d:25:66:e5: 05:d3:b3:9c:ec:aa:06:cd:37:b9:f6:7b:8f:7b:f9:67:cb:2b: 7d:66:8a:45:bb:de:34:e3:95:44:98:0d:94:7b:bc:16:67:08: 7c:3a:7c:cc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcmMFCmEwL9uOekauVa7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YTA3ZDQ5MjQ2ODIyOGFhMzA2YTY2YjA1NmEwMjI4YzU1 MmVjNWMwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD Eyg5ZmFlMTI4M2FkMWRmN2RhZWZmNWFjNjk1MDQ1MzczODlmMDI5M2M1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XzGXMK+Ba3CtARGx/SOoZVIpbGU dal61ehPKzUGF6+weYmtyJAYR/Nnq6kx1XHtfnVZ7CoZfGFGPe8DtM1YCv1T5hiP RPtvqOdyUVNCqP+7wNGaV20l6Vl/nMp7B2Bi+vKknAiDTwmWwyGhLmFi0kN0MIvr mBZ9E1wUx5JSMuh5IQTsVAcQ0M41YCByqlWiPt1f0V/GD9ZHQyVOi/OzRrkT13T3 vvWuBaAk5DM+EX/T8BhufngF8BEIz2KWNqLgAOKtdDYexKbUPFbt0iPZ4mATAqqw ch2jcsPq0XOgeRgrZkVZRXGH3FJLwbbqJVxX7Uy5mRUWunK3rjmvS5YCSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+uEoOtHffa7/WsaVBFNzifApPFMB8GA1UdIwQY MBaAFGWgfUkkaCKKowamawVqAijFUuxcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQt ZWIwM2JiYTY1YTk2LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8xODMyOTgtZmI5OS00ZThmLTgyNjQtZWIwM2JiYTY1YTk2 LzEvWmFCOVNTUm9Jb3FqQnFackJXb0NLTVZTN0Z3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkMz8g1S QwQIDtnpHr5jp9F4nimaQijvUENr0dGJ8KeyPlTedmykcRT6y0dZSFscjQ1SzTIu 7ZViR0RaeXzIt+cptuvr+dxh5kf8+uYwAgXYOJiwvmfzmX4c8Zo2xSbG/cKUBQWs 30XGyIvzBXLOsueY9aW2fRznctr1TTd9vT8llxStBTK83lAZ2h64CtUqglJoKxI/ Wk6v4/a+Ato34ZjVJ1MEji6FMmULifuI4mrVgXIbbkG1bLFOwat0g1G+Cca3G8n8 Z6WrFOD72NXeedVFWmo9JWblBdOznOyqBs03ufZ7j3v5Z8srfWaKRbveNOOVRJgN lHu8FmcIfDp8zA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:46 2026 by rpki-client