This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft File: ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft (raw, json) Hash identifier: ucNz2XKdsuVWiHHrW2ejLY2puYugoJ49xvTxnE8Kmn0= Subject key identifier: BD:32:DF:9B:92:75:24:3F:5C:C5:92:6C:9F:FC:53:3A:8F:8A:71:AD Authority key identifier: 66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF Certificate issuer: /CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Certificate serial: 019C41A1AC5F0A9AE203616926B31F0E5FEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft Manifest number: 089A Signing time: Mon 09 Feb 2026 09:00:40 +0000 Manifest this update: Mon 09 Feb 2026 09:00:40 +0000 Manifest next update: Tue 10 Feb 2026 09:00:40 +0000 Files and hashes: 1: 101GWEnnLWkwzyk8ENv2dQzRn60.roa (hash: yVzCyeYeZjVprVmnGPCuIHM8bf9Sf5G4yOYjEy+HoJA=) 2: ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl (hash: CO0p40oeoEFW1/8rC9hkoBIMFt7sKBQNpiFH9PlVB1w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ac:5f:0a:9a:e2:03:61:69:26:b3:1f:0e:5f:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dac8a8f314ee879a6aa843b67ea47ab1e75def Validity Not Before: Feb 9 09:00:40 2026 GMT Not After : Feb 10 09:00:40 2026 GMT Subject: CN=bd32df9b9275243f5cc5926c9ffc533a8f8a71ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:61:cf:ba:c3:37:f6:23:97:49:ab:a2:21:1c: a7:a6:81:cc:df:e1:d2:e4:94:94:42:df:20:9a:ba: 5f:8f:3c:c3:43:57:81:07:1d:7c:0f:f8:87:cd:9a: 22:a7:de:fb:4b:1a:bd:19:25:8e:f6:c1:28:01:71: b5:bc:28:c8:df:38:14:c8:a6:6a:1f:af:f1:53:2a: 2f:7b:15:39:75:21:c2:ee:2d:93:19:6a:0e:32:75: 13:69:70:bf:10:04:b0:06:49:ae:2c:55:bf:42:0f: 2f:3e:33:e5:dd:58:6b:91:ad:35:7b:11:7b:f5:2d: 01:7f:ad:fa:47:28:54:ed:dd:7f:fe:f8:41:03:44: 51:7b:49:3d:52:4d:2d:dd:92:f4:ae:79:fd:3a:ab: 1f:32:6c:71:f2:8f:33:67:27:39:fc:5c:c5:30:ad: e6:0c:50:1e:c8:24:c0:57:19:84:24:75:b0:6a:43: 34:ba:ad:18:80:4b:b5:6e:ad:eb:8a:b5:93:cc:22: 4d:1d:df:14:1b:7d:79:c0:48:09:8f:4d:42:5c:ff: 42:41:6e:cf:cb:65:89:27:18:ae:b3:ca:6c:24:fd: f0:6c:8e:b4:a3:eb:2d:10:18:58:69:ea:47:47:f7: fb:ed:63:9b:39:50:a1:80:e6:c8:a0:8e:5f:f9:15: 5a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:32:DF:9B:92:75:24:3F:5C:C5:92:6C:9F:FC:53:3A:8F:8A:71:AD X509v3 Authority Key Identifier: keyid:66:DA:C8:A8:F3:14:EE:87:9A:6A:A8:43:B6:7E:A4:7A:B1:E7:5D:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtrIqPMU7oeaaqhDtn6kerHnXe8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8990c1-1d0f-4541-846e-c9bdce9c1a49/1/ZtrIqPMU7oeaaqhDtn6kerHnXe8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:99:6e:a1:28:11:4c:c3:5a:c8:2a:ea:fc:85:8e:8e:a1:a8: 1d:40:ac:a5:50:cf:71:ad:b9:be:6a:ad:18:9a:c7:82:a5:dc: 8c:4a:94:d6:49:c4:e4:20:22:92:90:c0:a0:d3:b4:4e:1d:3c: 5a:15:f8:9e:d3:b9:e3:82:57:cd:80:90:d9:6e:f1:88:dd:5d: ab:9c:40:f5:ba:07:2b:d1:ac:96:3c:f5:f3:af:06:8c:57:23: 2f:ad:82:48:e9:f8:98:cb:ad:3d:de:51:7a:ab:1d:69:a7:b5: 64:21:82:ff:97:47:67:d2:ae:18:79:3e:25:c9:88:93:69:a9: a3:2e:67:9e:c3:19:cd:f9:d0:d6:c7:43:8f:9a:77:fe:b5:e1: d5:07:90:ab:6e:04:0a:82:ae:b9:eb:9a:5e:ec:01:3e:4a:33: 68:20:27:cf:1f:1d:1b:74:e8:63:7a:00:47:49:0d:19:96:18: 28:43:d1:96:2f:fa:39:13:e9:fb:26:70:6f:0b:a1:37:b2:fd: 83:50:25:9e:bf:c8:a9:c9:8f:17:cc:d2:d9:72:d9:60:fc:48: 37:62:79:17:75:41:83:dc:02:a0:9c:f9:0c:dc:c5:54:db:5f: d0:78:45:5d:f3:56:62:12:7a:fe:11:97:21:47:e1:15:08:3c: 60:4b:93:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaxfCpriA2FpJrMfDl/rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZGFjOGE4ZjMxNGVlODc5YTZhYTg0M2I2N2VhNDdhYjFl NzVkZWYwHhcNMjYwMjA5MDkwMDQwWhcNMjYwMjEwMDkwMDQwWjAzMTEwLwYDVQQD EyhiZDMyZGY5YjkyNzUyNDNmNWNjNTkyNmM5ZmZjNTMzYThmOGE3MWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2HPusM39iOXSauiIRynpoHM3+HS 5JSUQt8gmrpfjzzDQ1eBBx18D/iHzZoip977Sxq9GSWO9sEoAXG1vCjI3zgUyKZq H6/xUyovexU5dSHC7i2TGWoOMnUTaXC/EASwBkmuLFW/Qg8vPjPl3Vhrka01exF7 9S0Bf636RyhU7d1//vhBA0RRe0k9Uk0t3ZL0rnn9OqsfMmxx8o8zZyc5/FzFMK3m DFAeyCTAVxmEJHWwakM0uq0YgEu1bq3rirWTzCJNHd8UG315wEgJj01CXP9CQW7P y2WJJxius8psJP3wbI60o+stEBhYaepHR/f77WObOVChgObIoI5f+RVafQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL0y35uSdSQ/XMWSbJ/8UzqPinGtMB8GA1UdIwQY MBaAFGbayKjzFO6HmmqoQ7Z+pHqx513vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUt YzliZGNlOWMxYTQ5LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC84OTkwYzEtMWQwZi00NTQxLTg0NmUtYzliZGNlOWMxYTQ5 LzEvWnRySXFQTVU3b2VhYXFoRHRuNmtlckhuWGU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV5luoSgR TMNayCrq/IWOjqGoHUCspVDPca25vmqtGJrHgqXcjEqU1knE5CAikpDAoNO0Th08 WhX4ntO544JXzYCQ2W7xiN1dq5xA9boHK9Gsljz1868GjFcjL62CSOn4mMutPd5R eqsdaae1ZCGC/5dHZ9KuGHk+JcmIk2mpoy5nnsMZzfnQ1sdDj5p3/rXh1QeQq24E CoKuueuaXuwBPkozaCAnzx8dG3ToY3oAR0kNGZYYKEPRli/6ORPp+yZwbwuhN7L9 g1Alnr/IqcmPF8zS2XLZYPxIN2J5F3VBg9wCoJz5DNzFVNtf0HhFXfNWYhJ6/hGX IUfhFQg8YEuTSA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:40 2026 by rpki-client