This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft File: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft (raw, json) Hash identifier: EDGp/E4KhGFDXbTTzCTvUdYjBmhsD0aBoz9RUUM0Gz8= Subject key identifier: 3A:1D:CA:D6:37:10:6F:1C:65:E3:F4:2A:FA:1C:18:E8:43:91:15:B3 Authority key identifier: CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 Certificate issuer: /CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Certificate serial: 019C424689D2079CE08CE97669767238BFDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft Manifest number: 0423 Signing time: Mon 09 Feb 2026 12:00:44 +0000 Manifest this update: Mon 09 Feb 2026 12:00:44 +0000 Manifest next update: Tue 10 Feb 2026 12:00:44 +0000 Files and hashes: 1: PZvM7OV3HBSDzuz3mBSkNgZPzmc.roa (hash: kJSRxmzdiI7BIFbxUX/bJ1SrkVhLp4C99F6EL5K5kVE=) 2: zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl (hash: 5i8ovVEGuqp3FepuLd9f06Sc1p8W4dNWsmFtvSthkdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:89:d2:07:9c:e0:8c:e9:76:69:76:72:38:bf:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1280119f440eb99c1e64d735f2db1efcf93827 Validity Not Before: Feb 9 12:00:44 2026 GMT Not After : Feb 10 12:00:44 2026 GMT Subject: CN=3a1dcad637106f1c65e3f42afa1c18e8439115b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ea:cd:05:f6:bd:69:11:76:2d:a6:5f:c4:0e: 72:6c:fa:f4:68:08:ad:b5:fa:7d:e8:8c:63:4a:7f: 38:7c:f3:f9:e4:fd:17:97:96:19:b7:39:2b:a6:af: 9d:40:34:4f:2e:d6:9d:6f:02:e7:9c:c7:55:ce:7c: 24:01:e9:7e:4c:7b:54:f1:45:83:9a:38:27:9e:b9: 89:da:47:f7:28:c3:33:9d:83:bf:87:50:02:8b:fd: c9:83:3c:40:58:3c:41:01:79:14:62:1a:80:fe:17: 2d:9e:06:10:43:dc:49:d9:54:ab:e4:f1:5c:ea:2a: d7:7e:87:ca:95:6e:01:ff:4f:bd:24:26:02:40:a4: ed:f8:2a:38:53:04:95:6e:c8:43:27:8a:d2:02:bf: 19:6f:45:2c:e7:43:c4:2e:02:f9:56:ee:c8:83:22: 9a:9e:fc:99:5b:4c:0e:de:45:e4:85:cc:57:aa:11: f5:d5:4b:dc:ad:48:b8:29:7a:da:82:6f:db:49:00: 97:a8:1a:35:11:ef:f0:4f:60:8b:f3:cc:e7:b8:bb: 73:63:97:62:69:b8:dc:e1:49:46:39:65:aa:05:47: 02:c5:b8:70:1d:42:f0:7f:d7:94:84:f6:f1:de:4d: 1e:c6:e4:00:c4:e2:49:f8:96:77:b3:07:e9:a6:45: 86:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:1D:CA:D6:37:10:6F:1C:65:E3:F4:2A:FA:1C:18:E8:43:91:15:B3 X509v3 Authority Key Identifier: keyid:CF:12:80:11:9F:44:0E:B9:9C:1E:64:D7:35:F2:DB:1E:FC:F9:38:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1753bc-d276-4713-8ed2-d236d96cc2af/1/zxKAEZ9EDrmcHmTXNfLbHvz5OCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:63:12:e7:38:d0:a7:09:5c:c3:19:50:9c:e7:c7:fa:a8:3e: bf:b8:7d:34:0a:f1:87:97:8a:3b:5b:e0:1a:d6:08:3c:d4:9d: 06:f6:57:4b:d1:a1:60:bb:ee:81:ac:ea:6a:a3:a3:05:7b:68: 43:ee:fc:f8:c7:48:37:c6:46:c4:a0:b8:d0:8d:46:de:9c:36: b7:7c:af:3d:80:03:37:2d:f2:dc:b8:69:c2:47:b7:6e:cb:db: 81:ce:1c:e4:1d:76:2c:50:dd:09:0a:0b:98:d0:e5:08:89:25: bc:f8:53:79:c7:b1:b8:39:25:6b:12:6d:69:0e:89:fb:a4:3f: fe:4f:87:f5:00:14:c4:c2:48:60:62:b0:50:0d:28:21:e9:fc: 04:81:cf:92:2a:e1:34:e5:81:46:ce:a3:bd:2f:f2:ed:ee:b7: 86:a2:c3:0e:27:68:db:8b:04:d4:d6:12:df:d6:8f:e4:38:86: ad:51:82:f8:9e:6c:de:8b:a4:47:44:1c:fb:da:fe:7c:3c:ff: 7b:74:8d:37:f8:f5:27:9b:cc:c9:15:86:b3:a6:3c:65:ba:62: 08:12:b0:c7:0a:7a:fb:b4:3d:0a:29:e7:a1:54:1f:5f:8b:37: 60:d6:25:dc:13:6c:82:17:ec:ed:07:06:96:25:df:bc:be:a0: 1e:4e:6e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRonSB5zgjOl2aXZyOL/aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTI4MDExOWY0NDBlYjk5YzFlNjRkNzM1ZjJkYjFlZmNm OTM4MjcwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD EygzYTFkY2FkNjM3MTA2ZjFjNjVlM2Y0MmFmYTFjMThlODQzOTExNWIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsurNBfa9aRF2LaZfxA5ybPr0aAit tfp96IxjSn84fPP55P0Xl5YZtzkrpq+dQDRPLtadbwLnnMdVznwkAel+THtU8UWD mjgnnrmJ2kf3KMMznYO/h1ACi/3JgzxAWDxBAXkUYhqA/hctngYQQ9xJ2VSr5PFc 6irXfofKlW4B/0+9JCYCQKTt+Co4UwSVbshDJ4rSAr8Zb0Us50PELgL5Vu7IgyKa nvyZW0wO3kXkhcxXqhH11UvcrUi4KXragm/bSQCXqBo1Ee/wT2CL88znuLtzY5di abjc4UlGOWWqBUcCxbhwHULwf9eUhPbx3k0exuQAxOJJ+JZ3swfppkWGCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDodytY3EG8cZeP0KvocGOhDkRWzMB8GA1UdIwQY MBaAFM8SgBGfRA65nB5k1zXy2x78+TgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDIt ZDIzNmQ5NmNjMmFmLzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC8xNzUzYmMtZDI3Ni00NzEzLThlZDItZDIzNmQ5NmNjMmFm LzEvenhLQUVaOUVEcm1jSG1UWE5mTGJIdno1T0NjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2MS5zjQ pwlcwxlQnOfH+qg+v7h9NArxh5eKO1vgGtYIPNSdBvZXS9GhYLvugazqaqOjBXto Q+78+MdIN8ZGxKC40I1G3pw2t3yvPYADNy3y3Lhpwke3bsvbgc4c5B12LFDdCQoL mNDlCIklvPhTecexuDklaxJtaQ6J+6Q//k+H9QAUxMJIYGKwUA0oIen8BIHPkirh NOWBRs6jvS/y7e63hqLDDido24sE1NYS39aP5DiGrVGC+J5s3oukR0Qc+9r+fDz/ e3SNN/j1J5vMyRWGs6Y8ZbpiCBKwxwp6+7Q9CinnoVQfX4s3YNYl3BNsghfs7QcG liXfvL6gHk5uNg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:45 2026 by rpki-client