This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft File: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft (raw, json) Hash identifier: vD33DUfzYt8BsV5jIijNUncx8yMVD9ockC5LHKRpFGI= Subject key identifier: FD:D4:97:73:AA:CB:33:CD:81:C5:28:4B:57:D2:F9:40:45:D3:6D:86 Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4 Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4 Certificate serial: 019C44D99C5A83851F71D33FA84EEA674873 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft Manifest number: 1812 Signing time: Tue 10 Feb 2026 00:00:37 +0000 Manifest this update: Tue 10 Feb 2026 00:00:37 +0000 Manifest next update: Wed 11 Feb 2026 00:00:37 +0000 Files and hashes: 1: Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl (hash: oS9v+vL7eAG5qYqK2HlPfGyIQiKmnbiaaOs/M9KEY4k=) 2: tdQ-po1mf0fmrEdh4BYbzGed_z0.roa (hash: Bbx0eL21Kl5WXuJPJFJnrW0E5hgRPFpVxiADXt7nquo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:9c:5a:83:85:1f:71:d3:3f:a8:4e:ea:67:48:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4 Validity Not Before: Feb 10 00:00:37 2026 GMT Not After : Feb 11 00:00:37 2026 GMT Subject: CN=fdd49773aacb33cd81c5284b57d2f94045d36d86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d1:d3:a2:18:8a:3f:8d:c4:3c:12:60:a0:2b: 51:ef:c0:1c:f4:7d:8b:f2:ea:a2:63:53:6b:56:b9: 4a:0c:4d:c9:3b:16:cd:5c:5a:76:a4:f0:d2:27:42: b4:b0:27:3a:91:52:41:37:59:c7:64:93:90:f6:45: 5d:6b:79:ca:4a:6e:ad:7c:67:0a:86:c0:43:2a:85: b8:57:99:cb:47:9d:a6:fc:57:21:52:25:0a:98:b5: 5d:06:4a:89:db:4b:94:4d:52:9a:5c:c0:9d:47:d8: 03:d7:f7:e2:b1:0c:c6:03:17:56:42:4a:3f:5d:be: c1:59:a1:c7:4e:d6:8c:ee:36:b5:6b:8b:ae:be:5b: f7:6e:d2:a8:e1:d2:26:25:f8:c2:82:4f:d3:88:b8: 3b:34:86:43:06:1c:6b:ee:e7:6a:11:9e:10:10:56: 74:5b:20:e5:ef:5c:cc:42:e2:9b:58:3b:dc:77:8e: 61:18:54:62:a4:5c:e8:97:9f:00:ba:0e:ea:69:2e: e5:53:3e:3d:e2:d4:cb:11:dd:cf:21:e4:08:c2:d4: 68:4b:7e:b1:31:97:9c:25:c0:ba:23:dd:22:88:dc: a1:81:71:ea:63:94:27:8c:29:75:a2:6a:9d:35:ea: b6:2d:e5:61:ed:ee:98:f9:d1:92:aa:4a:bc:0f:e2: c7:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:D4:97:73:AA:CB:33:CD:81:C5:28:4B:57:D2:F9:40:45:D3:6D:86 X509v3 Authority Key Identifier: keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:25:57:c1:f2:eb:a3:66:bc:e7:81:6b:e5:3e:c9:b5:74:1d: b6:21:f7:d3:f7:83:f4:1f:9b:ce:ab:51:e3:5b:ed:8f:81:66: f7:33:7e:23:cd:56:27:60:88:ab:f4:fb:38:0e:ac:59:cd:1d: c1:ca:5e:ae:08:0a:c8:2c:34:8f:ca:ad:23:1c:7b:6a:ca:10: 4c:75:95:b0:4e:9d:34:6b:df:d9:30:3c:01:44:62:93:41:a6: 86:d4:d3:41:e6:01:00:46:70:7e:d8:6c:3d:0e:13:e1:3a:2b: de:06:90:4b:48:d5:90:d4:32:08:42:19:07:c3:61:aa:e7:1b: 74:74:68:78:55:10:c1:ee:98:4e:7a:9e:44:d3:1c:96:ad:4c: 5c:c6:cd:a6:bf:94:48:73:51:55:2b:31:f9:7c:ea:bd:d3:94: 53:7c:84:62:1c:11:e8:5c:64:94:f9:a4:3a:df:3d:a2:b8:47: 2c:1d:9c:60:7e:75:5b:0d:34:c8:50:f4:0e:54:d1:f1:7d:a9: 65:6e:38:3a:eb:2d:69:14:7b:f4:f9:a4:36:37:8f:d0:fa:88: eb:c6:84:87:b8:52:94:64:ab:b0:78:fd:7f:d1:f8:04:8c:63: 66:ca:52:44:95:15:67:e2:a7:17:44:b5:56:c8:82:20:52:43: 6e:15:3f:86 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2Zxag4UfcdM/qE7qZ0hzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0 OGExYzQwHhcNMjYwMjEwMDAwMDM3WhcNMjYwMjExMDAwMDM3WjAzMTEwLwYDVQQD EyhmZGQ0OTc3M2FhY2IzM2NkODFjNTI4NGI1N2QyZjk0MDQ1ZDM2ZDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9HTohiKP43EPBJgoCtR78Ac9H2L 8uqiY1NrVrlKDE3JOxbNXFp2pPDSJ0K0sCc6kVJBN1nHZJOQ9kVda3nKSm6tfGcK hsBDKoW4V5nLR52m/FchUiUKmLVdBkqJ20uUTVKaXMCdR9gD1/fisQzGAxdWQko/ Xb7BWaHHTtaM7ja1a4uuvlv3btKo4dImJfjCgk/TiLg7NIZDBhxr7udqEZ4QEFZ0 WyDl71zMQuKbWDvcd45hGFRipFzol58Aug7qaS7lUz494tTLEd3PIeQIwtRoS36x MZecJcC6I90iiNyhgXHqY5QnjCl1omqdNeq2LeVh7e6Y+dGSqkq8D+LHqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP3Ul3OqyzPNgcUoS1fS+UBF022GMB8GA1UdIwQY MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt ODA1MzJkZDc0ZDRkLzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCVXwfLr o2a854Fr5T7JtXQdtiH30/eD9B+bzqtR41vtj4Fm9zN+I81WJ2CIq/T7OA6sWc0d wcperggKyCw0j8qtIxx7asoQTHWVsE6dNGvf2TA8AURik0GmhtTTQeYBAEZwfths PQ4T4Tor3gaQS0jVkNQyCEIZB8NhqucbdHRoeFUQwe6YTnqeRNMclq1MXMbNpr+U SHNRVSsx+XzqvdOUU3yEYhwR6FxklPmkOt89orhHLB2cYH51Ww00yFD0DlTR8X2p ZW44OustaRR79PmkNjeP0PqI68aEh7hSlGSrsHj9f9H4BIxjZspSRJUVZ+KnF0S1 VsiCIFJDbhU/hg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:44 2026 by rpki-client