This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft File: z8bMSnQYoJQhupgF52Tu80Lvjzg.mft (raw, json) Hash identifier: OGVV9miodEJTmPlnE3LPuiKXNYWD7RQ9y3Gkq5ZIqJY= Subject key identifier: D9:F8:53:54:24:E3:86:81:68:B5:07:4F:09:70:ED:17:F5:52:D3:FC Authority key identifier: CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 Certificate issuer: /CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Certificate serial: 019C42EADDDE01D98A03B313B2DB225BA136 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft Manifest number: 093D Signing time: Mon 09 Feb 2026 15:00:14 +0000 Manifest this update: Mon 09 Feb 2026 15:00:14 +0000 Manifest next update: Tue 10 Feb 2026 15:00:14 +0000 Files and hashes: 1: YwHwj8nGu01b4DGoJo7OQzmm9y0.roa (hash: GeDg67muROb7D4h2X9co29gZ5d0QPL0hSd4Vfj1zmeY=) 2: z8bMSnQYoJQhupgF52Tu80Lvjzg.crl (hash: 4HHhTaICPZqpFuBv9fzzYK37m1/ZSDUpKnoTBBH9o2M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:dd:de:01:d9:8a:03:b3:13:b2:db:22:5b:a1:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc6cc4a7418a09421ba9805e764eef342ef8f38 Validity Not Before: Feb 9 15:00:14 2026 GMT Not After : Feb 10 15:00:14 2026 GMT Subject: CN=d9f8535424e3868168b5074f0970ed17f552d3fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:41:ce:96:c5:a0:64:9e:49:31:26:73:58:0f: 48:68:4f:00:6f:e2:ef:47:9a:4e:b0:cd:c6:c3:19: 44:fe:23:49:51:55:f3:a1:01:0a:0f:1b:76:78:ad: 4d:c7:34:ab:e0:0a:c6:61:26:0a:66:37:4c:2b:0e: 37:93:4e:0d:b1:cd:3f:75:db:5c:44:0b:d2:78:f4: 46:b6:3b:7c:c5:26:c9:5e:00:45:2e:76:ff:42:b7: 3a:05:74:2d:3d:43:22:f4:83:9d:1f:25:30:b7:d3: 6f:cd:47:3b:ca:14:50:28:d2:8b:a0:62:1d:f0:d8: e8:84:43:38:3f:2a:c5:6e:05:3a:4e:24:12:02:49: a1:2b:3c:8a:7d:ad:11:41:9b:fa:38:1e:65:59:e4: 58:fc:08:88:54:eb:aa:e9:35:1b:c2:8e:3b:8c:8c: 20:ca:78:72:aa:e4:00:4b:cb:cc:9c:9b:a4:bb:50: 3e:b2:4a:31:eb:60:37:09:e2:d5:7e:78:d2:f1:73: a6:8b:6a:2b:1d:e2:a6:de:8e:24:f9:bf:75:0a:15: 6b:46:e6:14:18:83:a0:3f:09:19:f7:08:e9:ee:d1: 53:75:c9:40:a4:33:06:61:db:88:30:f7:a1:b4:6e: 05:a8:b3:bb:17:45:d3:ed:93:7c:c8:f0:27:ea:d3: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:F8:53:54:24:E3:86:81:68:B5:07:4F:09:70:ED:17:F5:52:D3:FC X509v3 Authority Key Identifier: keyid:CF:C6:CC:4A:74:18:A0:94:21:BA:98:05:E7:64:EE:F3:42:EF:8F:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8bMSnQYoJQhupgF52Tu80Lvjzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/00951f-2d5c-4f7a-9b72-4af1fb7438e7/1/z8bMSnQYoJQhupgF52Tu80Lvjzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:78:56:3a:94:6b:71:0c:4f:93:b6:97:58:27:27:b4:4b:3c: ec:48:4c:fe:df:3c:70:26:3b:c1:62:a0:34:8c:6c:d0:ac:e9: a5:6d:ea:8c:fc:06:d8:23:d1:01:f2:8a:be:fa:9f:43:ed:14: c1:05:1d:4e:6a:42:36:43:f2:2a:f3:ca:bc:f5:4a:36:2e:cf: d6:0c:1b:dd:0c:98:28:ec:ff:2c:27:49:f7:c2:4b:4d:17:ec: 85:da:8e:fd:19:8c:e7:60:7c:55:bd:af:b3:70:1e:30:b7:67: 2f:85:72:b6:53:18:8a:01:8d:ba:d6:3a:f0:2f:bd:c4:f8:f0: 55:51:c8:ef:90:a6:59:b6:a3:1c:68:72:58:01:0d:70:45:ae: 94:91:45:ab:47:48:0e:44:65:a9:dd:38:e2:ab:92:9c:2b:1b: 13:57:64:0d:9d:c3:bd:39:23:c4:f0:50:8f:b1:19:54:6d:02: b1:91:f3:d3:ea:cd:6f:4e:3d:ec:94:ca:56:a3:95:dd:ad:90: d0:91:c5:13:a5:c0:a4:c2:e2:5e:3a:dd:1d:57:34:79:58:bd: 54:2f:84:16:d5:0c:1b:2f:40:44:7d:a1:85:5a:06:a1:d5:99: 70:1a:3b:27:a2:20:2e:9e:cc:82:d9:2d:fa:cc:4d:ba:1c:5e: 22:c2:63:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6t3eAdmKA7MTstsiW6E2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzZjYzRhNzQxOGEwOTQyMWJhOTgwNWU3NjRlZWYzNDJl ZjhmMzgwHhcNMjYwMjA5MTUwMDE0WhcNMjYwMjEwMTUwMDE0WjAzMTEwLwYDVQQD EyhkOWY4NTM1NDI0ZTM4NjgxNjhiNTA3NGYwOTcwZWQxN2Y1NTJkM2ZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EHOlsWgZJ5JMSZzWA9IaE8Ab+Lv R5pOsM3GwxlE/iNJUVXzoQEKDxt2eK1NxzSr4ArGYSYKZjdMKw43k04Nsc0/ddtc RAvSePRGtjt8xSbJXgBFLnb/Qrc6BXQtPUMi9IOdHyUwt9NvzUc7yhRQKNKLoGId 8NjohEM4PyrFbgU6TiQSAkmhKzyKfa0RQZv6OB5lWeRY/AiIVOuq6TUbwo47jIwg ynhyquQAS8vMnJuku1A+skox62A3CeLVfnjS8XOmi2orHeKm3o4k+b91ChVrRuYU GIOgPwkZ9wjp7tFTdclApDMGYduIMPehtG4FqLO7F0XT7ZN8yPAn6tNcHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNn4U1Qk44aBaLUHTwlw7Rf1UtP8MB8GA1UdIwQY MBaAFM/GzEp0GKCUIbqYBedk7vNC7484MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzIt NGFmMWZiNzQzOGU3LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8wMDk1MWYtMmQ1Yy00ZjdhLTliNzItNGFmMWZiNzQzOGU3 LzEvejhiTVNuUVlvSlFodXBnRjUyVHU4MEx2anpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG3hWOpRr cQxPk7aXWCcntEs87EhM/t88cCY7wWKgNIxs0KzppW3qjPwG2CPRAfKKvvqfQ+0U wQUdTmpCNkPyKvPKvPVKNi7P1gwb3QyYKOz/LCdJ98JLTRfshdqO/RmM52B8Vb2v s3AeMLdnL4VytlMYigGNutY68C+9xPjwVVHI75CmWbajHGhyWAENcEWulJFFq0dI DkRlqd044quSnCsbE1dkDZ3DvTkjxPBQj7EZVG0CsZHz0+rNb0497JTKVqOV3a2Q 0JHFE6XApMLiXjrdHVc0eVi9VC+EFtUMGy9ARH2hhVoGodWZcBo7J6IgLp7Mgtkt +sxNuhxeIsJjWA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:16 2026 by rpki-client