This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft File: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft (raw, json) Hash identifier: RRRJXC5Acycuys/umcO1npp8ijcrtBYTPRF2l0bl3zA= Subject key identifier: 81:DD:CD:BB:24:F8:DB:F6:E6:E9:2F:CC:A2:DA:A4:57:38:D5:59:EB Authority key identifier: 64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 Certificate issuer: /CN=64aec8024caa103a8412696c7e72f77803cd8695 Certificate serial: 019C427D5659FDCC8E0325BE90693DB7A6C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft Manifest number: 1250 Signing time: Mon 09 Feb 2026 13:00:36 +0000 Manifest this update: Mon 09 Feb 2026 13:00:36 +0000 Manifest next update: Tue 10 Feb 2026 13:00:36 +0000 Files and hashes: 1: SWC8q5CH8zumHrflzVp4e7i8dGY.roa (hash: z98d01QAmvPs9qVeEUxQJcsgJEzGZb8FADftU7i+UZw=) 2: ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl (hash: 5Zlm7kWNRQh6KvNse1l080nN86N+SIwiNJTV8DBGL4Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:56:59:fd:cc:8e:03:25:be:90:69:3d:b7:a6:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64aec8024caa103a8412696c7e72f77803cd8695 Validity Not Before: Feb 9 13:00:36 2026 GMT Not After : Feb 10 13:00:36 2026 GMT Subject: CN=81ddcdbb24f8dbf6e6e92fcca2daa45738d559eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:07:cd:19:03:6e:2e:20:65:d9:38:cc:37:b0: 01:d1:82:6a:ef:92:6c:a7:bd:ab:2e:c7:e9:05:0b: 88:79:7d:56:ae:ee:bf:7d:28:47:9e:70:fa:f3:1c: 7d:37:d3:cb:10:0a:cb:fe:2b:b9:88:0a:83:bf:31: 8a:ee:c4:a2:65:c6:b0:91:35:9a:04:fa:58:ce:74: f7:4d:3f:0c:13:09:d5:36:97:36:95:d6:13:34:94: e3:81:43:99:77:cc:da:6a:e0:c6:6e:39:d6:02:f0: 54:7a:3a:bc:90:39:d5:55:17:e4:9a:51:86:54:c7: c0:44:44:9c:29:c1:5d:a0:bd:aa:63:84:58:2b:fa: ec:c7:a3:4e:2f:4d:2a:16:eb:58:b1:cc:ca:17:10: e6:76:c5:16:e7:26:a7:2a:1f:29:5c:61:3e:c1:1c: 11:f2:ae:d3:5c:7d:5e:dd:e5:9c:b8:13:4c:0a:7e: f2:7f:9e:37:59:e4:14:28:87:f5:90:3e:52:14:42: 58:61:e5:20:ed:46:67:29:43:48:cb:0c:5c:d6:58: 7d:25:87:14:3d:bb:15:26:35:2c:76:98:d5:13:26: 67:bd:f2:fa:0c:e1:f0:cf:e1:1b:51:a8:77:aa:30: 8c:aa:19:2b:f9:02:3a:82:d1:c5:92:82:f7:3a:cf: 3b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:DD:CD:BB:24:F8:DB:F6:E6:E9:2F:CC:A2:DA:A4:57:38:D5:59:EB X509v3 Authority Key Identifier: keyid:64:AE:C8:02:4C:AA:10:3A:84:12:69:6C:7E:72:F7:78:03:CD:86:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0f24dd-ef4a-4dbf-b20d-b039c24b99ca/1/ZK7IAkyqEDqEEmlsfnL3eAPNhpU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:74:a0:99:a9:d2:c0:7f:54:e9:4c:5c:37:30:7f:05:51:6d: 15:10:67:54:cf:29:4b:b3:52:71:bb:47:51:d6:cb:58:58:13: 2e:42:d2:4d:54:a8:33:b8:f3:ec:7e:e0:f7:94:8f:15:cf:be: 6f:72:12:ac:5b:c2:51:88:3c:39:6f:43:04:68:ed:07:cb:d5: e8:60:ef:0e:01:a9:e4:a4:4e:82:75:7e:25:c9:8f:e5:e5:2d: 99:07:d0:83:39:b4:e4:e1:7c:b7:83:e6:a0:83:46:c1:83:c9: 98:3d:63:78:77:1b:9d:d3:9d:26:2a:e0:cc:0e:e9:1f:a4:d6: af:a5:22:b7:f9:27:fb:9a:ce:5b:71:f3:30:2f:72:62:4e:74: 8c:40:63:f9:8e:3f:84:34:98:66:08:0e:27:3f:b3:2f:6f:65: 77:3b:81:db:c5:80:4a:51:75:8d:f9:53:02:b4:52:94:0a:b9: c5:19:65:6d:63:31:e7:4c:38:29:03:92:d8:c4:d3:a1:cf:d9: e4:03:a0:35:05:d1:a7:56:a8:06:0e:80:f8:06:b0:53:f1:54: 4e:c8:e2:f2:1a:36:3a:d0:62:63:d7:34:a4:00:59:1a:30:9d: 84:80:f6:b5:2b:f0:d8:c7:0f:d9:6e:fe:eb:13:f6:96:5d:05: 71:8d:f8:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVZZ/cyOAyW+kGk9t6bFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YWVjODAyNGNhYTEwM2E4NDEyNjk2YzdlNzJmNzc4MDNj ZDg2OTUwHhcNMjYwMjA5MTMwMDM2WhcNMjYwMjEwMTMwMDM2WjAzMTEwLwYDVQQD Eyg4MWRkY2RiYjI0ZjhkYmY2ZTZlOTJmY2NhMmRhYTQ1NzM4ZDU1OWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwfNGQNuLiBl2TjMN7AB0YJq75Js p72rLsfpBQuIeX1Wru6/fShHnnD68xx9N9PLEArL/iu5iAqDvzGK7sSiZcawkTWa BPpYznT3TT8MEwnVNpc2ldYTNJTjgUOZd8zaauDGbjnWAvBUejq8kDnVVRfkmlGG VMfAREScKcFdoL2qY4RYK/rsx6NOL00qFutYsczKFxDmdsUW5yanKh8pXGE+wRwR 8q7TXH1e3eWcuBNMCn7yf543WeQUKIf1kD5SFEJYYeUg7UZnKUNIywxc1lh9JYcU PbsVJjUsdpjVEyZnvfL6DOHwz+EbUah3qjCMqhkr+QI6gtHFkoL3Os87wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIHdzbsk+Nv25ukvzKLapFc41VnrMB8GA1UdIwQY MBaAFGSuyAJMqhA6hBJpbH5y93gDzYaVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQt YjAzOWMyNGI5OWNhLzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS8wZjI0ZGQtZWY0YS00ZGJmLWIyMGQtYjAzOWMyNGI5OWNh LzEvWks3SUFreXFFRHFFRW1sc2ZuTDNlQVBOaHBVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnSgmanS wH9U6UxcNzB/BVFtFRBnVM8pS7NScbtHUdbLWFgTLkLSTVSoM7jz7H7g95SPFc++ b3ISrFvCUYg8OW9DBGjtB8vV6GDvDgGp5KROgnV+JcmP5eUtmQfQgzm05OF8t4Pm oINGwYPJmD1jeHcbndOdJirgzA7pH6TWr6Uit/kn+5rOW3HzMC9yYk50jEBj+Y4/ hDSYZggOJz+zL29ldzuB28WASlF1jflTArRSlAq5xRllbWMx50w4KQOS2MTToc/Z 5AOgNQXRp1aoBg6A+AawU/FUTsji8ho2OtBiY9c0pABZGjCdhID2tSvw2McP2W7+ 6xP2ll0FcY34OQ== -----END CERTIFICATE-----Generated at Mon Feb 9 23:52:24 2026 by rpki-client