This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft File: g-ZAPPcyIcEX6km8kjT-b0oR14A.mft (raw, json) Hash identifier: jhyiouieF1RfuA1yWlEhBLBmm3GxXN8FX+HOn7yJNrk= Subject key identifier: 3D:B6:6C:01:6F:51:B6:0D:68:ED:97:F8:2B:C9:90:6F:DA:63:67:B5 Authority key identifier: 83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 Certificate issuer: /CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Certificate serial: 019C4358DCB9A21AAE39967AD00A02C17E9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft Manifest number: 1304 Signing time: Mon 09 Feb 2026 17:00:22 +0000 Manifest this update: Mon 09 Feb 2026 17:00:22 +0000 Manifest next update: Tue 10 Feb 2026 17:00:22 +0000 Files and hashes: 1: g-ZAPPcyIcEX6km8kjT-b0oR14A.crl (hash: 9FS1pTv3tIq4LEliTZ4xNBK3/KxtfTZPJpUkXnrlhu8=) 2: kb5QsyYCWAXreqKDSNly_eUOWbs.roa (hash: R6T+O7UNp0e/weGB+lvgWkopq769WLtdhPDiexDGO0w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:dc:b9:a2:1a:ae:39:96:7a:d0:0a:02:c1:7e:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=83e6403cf73221c117ea49bc9234fe6f4a11d780 Validity Not Before: Feb 9 17:00:22 2026 GMT Not After : Feb 10 17:00:22 2026 GMT Subject: CN=3db66c016f51b60d68ed97f82bc9906fda6367b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:bd:ed:7b:16:a3:27:2c:05:32:f2:ac:1f: d4:d3:de:05:80:e7:60:7c:46:94:0a:9f:02:91:97: 09:34:c4:0d:ed:2c:82:3b:80:18:d2:4d:9f:ce:49: a7:b3:50:50:f8:b6:98:06:ba:81:6f:52:16:57:88: 00:81:eb:99:62:51:d7:80:00:1c:2b:5f:19:2f:28: d6:c8:f7:4b:7c:60:54:4e:5c:09:58:bd:ac:e1:e9: f7:00:32:e7:f9:37:22:bd:e3:51:50:ed:d4:c0:f3: c8:19:4e:6b:f0:04:6c:a9:24:03:ba:e7:cf:ce:9c: 12:3f:ed:d4:f3:ec:18:b9:24:47:14:c0:8e:dd:f0: 8c:38:ef:91:47:da:bc:71:ad:bc:af:38:7d:cc:49: 6a:3f:e9:fe:3e:97:00:11:6d:e6:49:93:a0:44:1a: 23:dd:fe:c5:a3:e5:8f:67:5f:e1:74:41:34:4f:7c: 49:45:71:ac:b2:68:75:93:61:03:ed:80:8b:2d:a7: 9c:25:67:8c:87:0d:2e:a2:e6:54:b6:f5:5d:e5:12: ab:65:c3:7e:1d:65:dc:c0:d0:de:43:67:e3:26:bc: bd:71:57:86:58:43:69:89:39:44:65:60:22:bc:06: 7c:ba:3d:32:5e:99:f8:65:c3:a4:00:18:ce:53:48: 6d:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B6:6C:01:6F:51:B6:0D:68:ED:97:F8:2B:C9:90:6F:DA:63:67:B5 X509v3 Authority Key Identifier: keyid:83:E6:40:3C:F7:32:21:C1:17:EA:49:BC:92:34:FE:6F:4A:11:D7:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g-ZAPPcyIcEX6km8kjT-b0oR14A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/09c3b1-72eb-433a-96cb-48777aa961e9/1/g-ZAPPcyIcEX6km8kjT-b0oR14A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:af:99:63:e4:30:06:e9:a7:48:bf:f8:74:36:ee:6b:6a:6a: a9:88:9e:81:f6:05:25:63:08:23:81:92:ca:9d:e7:56:8b:c3: 38:2d:5f:42:b5:38:87:2f:9d:b0:9e:4a:75:24:ab:40:3d:37: 03:38:f4:26:a2:6c:04:72:1b:7e:53:7f:c9:d4:d6:2c:29:df: 38:aa:32:d1:d6:00:90:d0:63:b9:0f:d0:86:5d:5f:d5:a7:6b: 93:fa:67:c6:37:18:20:ee:bc:3e:06:cc:7b:df:2e:6e:bb:64: 85:30:b1:97:65:c2:41:67:37:bf:bf:ec:88:92:96:5e:b5:c5: 5f:ae:18:99:77:c7:9f:1e:1e:c4:c0:4b:eb:eb:8e:d3:46:9b: 8e:cf:70:b4:1e:10:ac:df:df:fd:c1:b5:c4:be:30:b3:67:d2: 06:81:29:64:0d:d2:b1:8e:e0:ba:16:27:cb:84:0d:81:6a:97: e7:51:0c:e3:d7:a5:10:98:b1:86:51:3c:9e:81:d4:e5:12:8e: a4:86:cf:60:86:42:dd:7d:f5:ce:0f:31:cf:5e:0e:20:38:5a: 23:cc:ee:b4:90:f4:be:7b:1f:89:c6:e1:d5:7b:a4:bb:78:95: e8:6e:52:d5:e6:09:62:a1:b3:78:4a:e1:9b:7a:af:5d:30:23: ff:01:48:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWNy5ohquOZZ60AoCwX6aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzZTY0MDNjZjczMjIxYzExN2VhNDliYzkyMzRmZTZmNGEx MWQ3ODAwHhcNMjYwMjA5MTcwMDIyWhcNMjYwMjEwMTcwMDIyWjAzMTEwLwYDVQQD EygzZGI2NmMwMTZmNTFiNjBkNjhlZDk3ZjgyYmM5OTA2ZmRhNjM2N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobu97XsWoycsBTLyrB/U094FgOdg fEaUCp8CkZcJNMQN7SyCO4AY0k2fzkmns1BQ+LaYBrqBb1IWV4gAgeuZYlHXgAAc K18ZLyjWyPdLfGBUTlwJWL2s4en3ADLn+TciveNRUO3UwPPIGU5r8ARsqSQDuufP zpwSP+3U8+wYuSRHFMCO3fCMOO+RR9q8ca28rzh9zElqP+n+PpcAEW3mSZOgRBoj 3f7Fo+WPZ1/hdEE0T3xJRXGssmh1k2ED7YCLLaecJWeMhw0uouZUtvVd5RKrZcN+ HWXcwNDeQ2fjJry9cVeGWENpiTlEZWAivAZ8uj0yXpn4ZcOkABjOU0htpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD22bAFvUbYNaO2X+CvJkG/aY2e1MB8GA1UdIwQY MBaAFIPmQDz3MiHBF+pJvJI0/m9KEdeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2It NDg3NzdhYTk2MWU5LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy8wOWMzYjEtNzJlYi00MzNhLTk2Y2ItNDg3NzdhYTk2MWU5 LzEvZy1aQVBQY3lJY0VYNmttOGtqVC1iMG9SMTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQa+ZY+Qw BumnSL/4dDbua2pqqYiegfYFJWMII4GSyp3nVovDOC1fQrU4hy+dsJ5KdSSrQD03 Azj0JqJsBHIbflN/ydTWLCnfOKoy0dYAkNBjuQ/Qhl1f1adrk/pnxjcYIO68PgbM e98ubrtkhTCxl2XCQWc3v7/siJKWXrXFX64YmXfHnx4exMBL6+uO00abjs9wtB4Q rN/f/cG1xL4ws2fSBoEpZA3SsY7guhYny4QNgWqX51EM49elEJixhlE8noHU5RKO pIbPYIZC3X31zg8xz14OIDhaI8zutJD0vnsficbh1Xuku3iV6G5S1eYJYqGzeErh m3qvXTAj/wFIhA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:38 2026 by rpki-client