This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft File: ztMMJRFB3bZI0FosKEszyHxRdSU.mft (raw, json) Hash identifier: zIwkS+myxr1zfx0Q278799nAbFBqTZ3bgR9xMxNTa+c= Subject key identifier: F5:37:84:F4:E5:30:82:49:72:E9:F5:44:AF:67:C6:77:63:41:09:5D Authority key identifier: CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 Certificate issuer: /CN=ced30c251141ddb648d05a2c284b33c87c517525 Certificate serial: 019C42468639DDDC7946F0CDDE416DBFAEA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft Manifest number: 1559 Signing time: Mon 09 Feb 2026 12:00:44 +0000 Manifest this update: Mon 09 Feb 2026 12:00:44 +0000 Manifest next update: Tue 10 Feb 2026 12:00:44 +0000 Files and hashes: 1: ds5L-nmZbsAF1MPdSY8tRjraU5Y.roa (hash: fDpAtLsxJawEMxiSb4C7tAx2OdBkgN/gABVjU5t3l/s=) 2: ztMMJRFB3bZI0FosKEszyHxRdSU.crl (hash: MtGDdzWtDznaUXvG7NivUJan+KC36QFJFqmzAnpgHQ8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:86:39:dd:dc:79:46:f0:cd:de:41:6d:bf:ae:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced30c251141ddb648d05a2c284b33c87c517525 Validity Not Before: Feb 9 12:00:44 2026 GMT Not After : Feb 10 12:00:44 2026 GMT Subject: CN=f53784f4e530824972e9f544af67c6776341095d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:30:5f:1c:e0:46:af:13:23:76:8d:f4:fd:dc: 87:39:f7:bb:de:2c:bd:a3:83:d2:dc:c3:4f:fb:38: c8:5e:f8:c4:8e:70:36:34:7c:9b:01:a6:16:ac:15: 38:a8:27:68:b4:f6:23:7d:d2:ff:ec:b7:76:f5:65: 4e:dc:a4:a2:5d:94:c0:94:91:3f:0d:18:d6:da:53: 4a:02:2f:44:65:9e:76:c7:1f:60:c6:fe:c2:50:7a: f1:89:bb:40:34:96:50:0d:da:b6:a7:36:cc:bd:1f: 21:6c:a3:ed:3b:40:41:b9:39:83:dd:e4:4e:58:7d: 04:bf:55:b1:b1:dc:6b:c7:64:56:da:3e:26:97:2d: 8f:32:1f:9f:43:25:5b:0c:2a:6f:c0:95:e9:2f:eb: cd:5b:3a:0f:3d:b0:40:ab:03:95:9c:72:44:6a:92: 45:9b:cc:98:f4:0b:46:76:3d:ed:a1:91:49:f5:fe: 9e:14:01:40:eb:86:dc:49:38:a3:1e:e7:ff:a4:8d: e4:df:88:6e:87:80:67:6c:23:56:a2:74:9d:70:5b: 06:83:18:1a:98:a4:4b:61:d7:41:24:5f:80:14:84: cb:76:4d:c0:31:5f:d0:6a:15:56:9e:c5:68:62:d3: 05:47:6a:51:7c:c6:13:b8:3e:78:aa:aa:de:c7:24: dc:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:37:84:F4:E5:30:82:49:72:E9:F5:44:AF:67:C6:77:63:41:09:5D X509v3 Authority Key Identifier: keyid:CE:D3:0C:25:11:41:DD:B6:48:D0:5A:2C:28:4B:33:C8:7C:51:75:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztMMJRFB3bZI0FosKEszyHxRdSU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2430fb-412e-44c4-8fd3-5166b39a3e18/1/ztMMJRFB3bZI0FosKEszyHxRdSU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:7c:cd:ed:1a:7b:db:10:0f:00:1b:49:5e:a5:6d:18:4c:22: 4d:36:45:0e:f0:09:ff:8f:70:37:00:00:c0:ec:3a:d8:d5:84: 70:68:56:ca:d6:9a:93:6e:b7:9d:ca:37:eb:8d:14:08:4f:69: 64:b6:57:51:c8:1d:f7:1d:d4:ad:8d:1b:14:d4:7f:68:e8:1d: 0c:83:f8:af:67:b8:01:bf:a6:67:ad:27:5e:f5:64:a8:b0:e1: a1:a1:71:4b:26:9e:1d:c8:9a:2b:30:01:0a:e3:d8:da:1a:20: 56:a2:54:0c:fc:07:f4:94:c5:c9:f4:a1:78:72:94:b9:76:27: b6:86:5b:ec:0e:20:cb:ba:6b:11:7c:c6:e8:a1:aa:9b:29:b4: 5d:46:6b:21:bd:da:88:77:cb:80:49:7d:c5:2d:4b:10:2d:20: e9:87:56:a1:c4:93:39:71:3c:53:68:6f:69:f0:24:f3:ab:14: 3d:dc:f1:05:ab:13:c8:51:68:21:30:a2:6d:fc:78:1e:dd:d5: 93:77:b1:5b:f3:41:8a:d2:fb:57:eb:03:56:07:19:59:01:e7: bf:3e:22:c1:8d:55:fc:be:1d:ec:2a:5e:04:68:ea:aa:2d:12: 86:6f:1f:08:8e:0e:83:75:4c:73:ae:c7:84:a2:33:9b:e2:36: 4c:78:86:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoY53dx5RvDN3kFtv66mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDMwYzI1MTE0MWRkYjY0OGQwNWEyYzI4NGIzM2M4N2M1 MTc1MjUwHhcNMjYwMjA5MTIwMDQ0WhcNMjYwMjEwMTIwMDQ0WjAzMTEwLwYDVQQD EyhmNTM3ODRmNGU1MzA4MjQ5NzJlOWY1NDRhZjY3YzY3NzYzNDEwOTVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjBfHOBGrxMjdo30/dyHOfe73iy9 o4PS3MNP+zjIXvjEjnA2NHybAaYWrBU4qCdotPYjfdL/7Ld29WVO3KSiXZTAlJE/ DRjW2lNKAi9EZZ52xx9gxv7CUHrxibtANJZQDdq2pzbMvR8hbKPtO0BBuTmD3eRO WH0Ev1Wxsdxrx2RW2j4mly2PMh+fQyVbDCpvwJXpL+vNWzoPPbBAqwOVnHJEapJF m8yY9AtGdj3toZFJ9f6eFAFA64bcSTijHuf/pI3k34huh4BnbCNWonSdcFsGgxga mKRLYddBJF+AFITLdk3AMV/QahVWnsVoYtMFR2pRfMYTuD54qqrexyTcawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPU3hPTlMIJJcun1RK9nxndjQQldMB8GA1UdIwQY MBaAFM7TDCURQd22SNBaLChLM8h8UXUlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMt NTE2NmIzOWEzZTE4LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8yNDMwZmItNDEyZS00NGM0LThmZDMtNTE2NmIzOWEzZTE4 LzEvenRNTUpSRkIzYlpJMEZvc0tFc3p5SHhSZFNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnzN7Rp7 2xAPABtJXqVtGEwiTTZFDvAJ/49wNwAAwOw62NWEcGhWytaak263nco3640UCE9p ZLZXUcgd9x3UrY0bFNR/aOgdDIP4r2e4Ab+mZ60nXvVkqLDhoaFxSyaeHciaKzAB CuPY2hogVqJUDPwH9JTFyfSheHKUuXYntoZb7A4gy7prEXzG6KGqmym0XUZrIb3a iHfLgEl9xS1LEC0g6YdWocSTOXE8U2hvafAk86sUPdzxBasTyFFoITCibfx4Ht3V k3exW/NBitL7V+sDVgcZWQHnvz4iwY1V/L4d7CpeBGjqqi0Shm8fCI4Og3VMc67H hKIzm+I2THiGbg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:26 2026 by rpki-client