This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft File: Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft (raw, json) Hash identifier: cMfakeM5JatGYnU/1aesykWmp2XkF1jPGGy5izsXyyo= Subject key identifier: 42:A5:A8:E5:55:09:3A:B9:77:52:DC:35:91:E8:B4:0A:62:CB:D7:16 Authority key identifier: 67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D Certificate issuer: /CN=67846b84c7790512281f80c2481be4b30a65d08d Certificate serial: 019C41D8D36CD15264A1B051A383A79B0AA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft Manifest number: 0728 Signing time: Mon 09 Feb 2026 10:00:54 +0000 Manifest this update: Mon 09 Feb 2026 10:00:54 +0000 Manifest next update: Tue 10 Feb 2026 10:00:54 +0000 Files and hashes: 1: Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl (hash: W9CL2cpNfkzMcehzPv+NFDSNaH0n05t3vBLQh4bLC4Q=) 2: xL9ifbNR1mOs9uO93ZIkaaIy3p8.roa (hash: VzaUpnGlk6PWKD7kHafESlUjnLnbyjchehYl4PxFAp0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:d3:6c:d1:52:64:a1:b0:51:a3:83:a7:9b:0a:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67846b84c7790512281f80c2481be4b30a65d08d Validity Not Before: Feb 9 10:00:54 2026 GMT Not After : Feb 10 10:00:54 2026 GMT Subject: CN=42a5a8e555093ab97752dc3591e8b40a62cbd716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:2a:01:80:4c:60:60:a8:d8:74:a8:ee:3e:65: 72:e4:53:ce:a8:88:87:ff:f3:55:a7:38:8d:55:c8: 08:f5:62:a6:31:9c:90:ce:bd:ca:e5:ac:bd:ea:6b: 5a:ae:21:1e:33:d1:78:f9:48:1c:7e:9c:4d:a8:06: 05:5a:0e:2a:82:e0:1f:a6:4b:a1:b1:3f:9f:21:1e: 03:77:b0:20:1c:3d:67:e0:ea:21:e3:56:2e:48:03: 74:a2:b4:d6:02:39:e6:88:4d:95:28:52:8f:46:6a: 9d:36:55:bf:35:92:14:61:d0:fa:46:0d:db:73:af: cc:c7:24:f3:6a:24:97:be:c6:06:37:39:91:c3:29: 36:80:8d:47:47:97:98:6b:e8:3d:42:92:e4:c7:4c: 01:49:d4:c8:7d:7f:f1:41:fb:f9:33:fc:6b:a8:20: 47:4e:73:21:27:f4:1d:ea:ec:db:b0:46:c6:50:9c: 7f:81:e8:ac:4a:40:da:0e:5d:fe:89:11:48:a2:b1: 7c:b4:c7:49:91:95:88:29:9a:26:e2:ff:40:dc:2d: be:ee:d0:e1:79:b3:ab:3d:d8:3f:1f:15:64:49:1f: eb:bf:fd:3c:e3:24:36:2c:68:bd:ad:df:3b:03:eb: 4f:80:5c:da:04:b3:eb:10:da:f6:57:e8:8c:96:8b: e4:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A5:A8:E5:55:09:3A:B9:77:52:DC:35:91:E8:B4:0A:62:CB:D7:16 X509v3 Authority Key Identifier: keyid:67:84:6B:84:C7:79:05:12:28:1F:80:C2:48:1B:E4:B3:0A:65:D0:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4RrhMd5BRIoH4DCSBvkswpl0I0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f3b8a0-be43-44ee-8d54-85a0d1239923/1/Z4RrhMd5BRIoH4DCSBvkswpl0I0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:83:57:57:47:fc:4b:87:9f:99:22:e7:0d:ad:11:7d:9b:a1: 8b:00:97:26:83:ef:c9:bd:0c:03:26:50:fd:34:09:54:b9:d7: b0:4b:98:80:80:e4:12:07:e2:89:23:20:08:ff:e3:12:04:e0: 88:2f:0e:6f:d7:ec:92:86:36:a9:e2:89:39:91:b5:28:81:5b: ea:4e:d8:10:08:d1:8c:0d:94:68:b7:66:17:69:f0:3d:b0:1a: 41:9f:33:d2:53:cf:17:2d:72:ff:d4:fd:8d:15:a3:97:6e:0f: 2c:0a:d3:c2:14:90:31:a2:3f:4d:05:23:12:3f:91:9c:9f:8b: 0b:ce:55:07:b1:95:a1:23:96:2d:3b:6b:90:c7:d4:6d:a4:b6: eb:5e:2b:59:9c:98:f4:ee:c3:10:f3:7d:67:73:d0:99:03:10: 23:1b:a1:f0:39:46:54:95:b7:93:68:0c:ff:1a:6a:6a:55:bb: b2:3a:93:19:a1:52:41:db:ab:48:bd:51:42:1c:7d:5b:71:f2: a8:d8:ad:74:4d:bb:9f:c2:2b:90:7e:c7:33:a6:a9:70:e2:69: cc:4b:a1:81:af:c3:0b:37:de:b1:b5:1b:65:68:ef:a0:cd:d4: c3:ab:8c:d7:1a:1a:63:a1:4d:be:52:9f:69:04:7b:73:4e:5a: dc:52:83:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2NNs0VJkobBRo4OnmwqhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODQ2Yjg0Yzc3OTA1MTIyODFmODBjMjQ4MWJlNGIzMGE2 NWQwOGQwHhcNMjYwMjA5MTAwMDU0WhcNMjYwMjEwMTAwMDU0WjAzMTEwLwYDVQQD Eyg0MmE1YThlNTU1MDkzYWI5Nzc1MmRjMzU5MWU4YjQwYTYyY2JkNzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCoBgExgYKjYdKjuPmVy5FPOqIiH //NVpziNVcgI9WKmMZyQzr3K5ay96mtariEeM9F4+UgcfpxNqAYFWg4qguAfpkuh sT+fIR4Dd7AgHD1n4Ooh41YuSAN0orTWAjnmiE2VKFKPRmqdNlW/NZIUYdD6Rg3b c6/MxyTzaiSXvsYGNzmRwyk2gI1HR5eYa+g9QpLkx0wBSdTIfX/xQfv5M/xrqCBH TnMhJ/Qd6uzbsEbGUJx/geisSkDaDl3+iRFIorF8tMdJkZWIKZom4v9A3C2+7tDh ebOrPdg/HxVkSR/rv/084yQ2LGi9rd87A+tPgFzaBLPrENr2V+iMlovkewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKlqOVVCTq5d1LcNZHotApiy9cWMB8GA1UdIwQY MBaAFGeEa4THeQUSKB+Awkgb5LMKZdCNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQt ODVhMGQxMjM5OTIzLzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi9mM2I4YTAtYmU0My00NGVlLThkNTQtODVhMGQxMjM5OTIz LzEvWjRScmhNZDVCUklvSDREQ1NCdmtzd3BsMEkwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe4NXV0f8 S4efmSLnDa0RfZuhiwCXJoPvyb0MAyZQ/TQJVLnXsEuYgIDkEgfiiSMgCP/jEgTg iC8Ob9fskoY2qeKJOZG1KIFb6k7YEAjRjA2UaLdmF2nwPbAaQZ8z0lPPFy1y/9T9 jRWjl24PLArTwhSQMaI/TQUjEj+RnJ+LC85VB7GVoSOWLTtrkMfUbaS2614rWZyY 9O7DEPN9Z3PQmQMQIxuh8DlGVJW3k2gM/xpqalW7sjqTGaFSQdurSL1RQhx9W3Hy qNitdE27n8IrkH7HM6apcOJpzEuhga/DCzfesbUbZWjvoM3Uw6uM1xoaY6FNvlKf aQR7c05a3FKD5A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:36 2026 by rpki-client