This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft File: ZnKfnQeG9ooezVxakrw5LYaRl14.mft (raw, json) Hash identifier: alYYPL3pFqXKRrKNZySECmLkagdl7ix2Df+rN5upVFg= Subject key identifier: AE:3C:A9:4E:20:DE:AA:19:C3:27:41:2A:59:47:D5:C6:71:CC:7C:5B Authority key identifier: 66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E Certificate issuer: /CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Certificate serial: 019C42469175EA6F28D29A98E0FFFE200CDB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft Manifest number: 13F3 Signing time: Mon 09 Feb 2026 12:00:46 +0000 Manifest this update: Mon 09 Feb 2026 12:00:46 +0000 Manifest next update: Tue 10 Feb 2026 12:00:46 +0000 Files and hashes: 1: ZnKfnQeG9ooezVxakrw5LYaRl14.crl (hash: duNz9B4T2GORpHXrec+GU8wL99MEH8b4osQODNVc+pI=) 2: uoe5Gtg5RLHmca7orVX_kgMJ6LA.roa (hash: fAkGAUFUUGm9PtxJMnL3fGCs6QplpIcm9Vtk+9FgVDg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:91:75:ea:6f:28:d2:9a:98:e0:ff:fe:20:0c:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66729f9d0786f68a1ecd5c5a92bc392d8691975e Validity Not Before: Feb 9 12:00:46 2026 GMT Not After : Feb 10 12:00:46 2026 GMT Subject: CN=ae3ca94e20deaa19c327412a5947d5c671cc7c5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:87:21:52:22:46:8e:97:92:e9:43:8e:f8:11: e7:9c:03:4d:02:2b:42:1a:5e:c4:0b:1a:f2:60:f0: aa:fd:de:09:fc:d1:6b:9c:85:83:91:d9:fb:e7:85: 19:fd:20:dd:32:80:ef:08:50:0e:83:c3:c3:bf:96: 68:38:72:a4:39:22:f4:e9:6d:1d:0c:15:93:4a:3d: 3b:77:6c:2b:c1:e1:f3:4b:ba:e0:3a:a6:d8:ad:90: f7:af:c7:c4:04:4d:71:49:10:cd:04:b8:9f:78:cd: 4e:4e:47:16:c2:26:91:2c:4c:31:b8:27:55:15:ea: 10:a2:45:70:e6:05:bd:40:69:64:51:9f:af:83:a3: df:84:25:41:53:05:a6:3a:63:78:68:e5:c8:6f:ce: b6:c8:12:6d:6e:d8:55:16:57:d4:43:00:b5:0b:95: 55:69:f7:1b:08:de:b0:ea:c3:39:a0:a4:5d:88:1c: 3d:f1:bf:29:0f:2e:c5:b5:48:8a:b4:5b:8b:07:6d: 90:10:19:0d:99:25:02:7a:81:44:12:f3:fe:62:00: 3b:24:1b:27:98:3c:ca:c9:90:03:9d:81:69:be:1b: 7d:45:3c:00:39:b3:bb:7c:da:36:b9:fd:f4:04:42: ad:4c:c5:98:57:be:1b:c8:f2:2b:0e:25:e0:5c:84: 42:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:3C:A9:4E:20:DE:AA:19:C3:27:41:2A:59:47:D5:C6:71:CC:7C:5B X509v3 Authority Key Identifier: keyid:66:72:9F:9D:07:86:F6:8A:1E:CD:5C:5A:92:BC:39:2D:86:91:97:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnKfnQeG9ooezVxakrw5LYaRl14.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/384d03-f479-4bb2-a8ad-ad510e05da92/1/ZnKfnQeG9ooezVxakrw5LYaRl14.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8d:5e:73:00:b3:b4:12:24:30:37:4c:f1:78:ab:ed:af:f5: 64:17:32:3d:cd:d0:c6:2c:df:da:5f:8a:49:cf:6f:42:eb:d7: 44:64:20:62:9c:c3:8b:f0:13:34:3e:33:aa:31:d9:58:e7:07: 25:e4:d3:af:d1:5b:83:e6:7b:e0:0b:d9:e5:fd:24:5b:8b:6c: 47:3b:cc:2f:3f:9a:e4:c0:39:50:51:5d:be:db:8a:77:0a:4d: 28:35:8a:d0:e5:3d:f0:06:cf:8b:59:81:88:15:b7:98:ea:10: 05:b9:17:eb:1d:e0:ca:b7:6c:5b:93:86:7b:6b:59:69:82:d0: da:1c:19:a9:75:a7:7a:65:af:81:0e:3f:21:51:f5:e0:cb:a4: 96:6c:db:b7:06:61:89:85:3f:f1:26:63:0d:df:ef:e2:75:d2: 3a:aa:e7:3e:6e:91:a0:87:7a:12:d6:3a:fe:0f:9f:e7:b2:c9: 52:b4:2a:c5:03:bc:6c:95:fa:91:40:9f:5a:60:f0:70:22:b3: 29:77:a2:d5:1f:aa:e8:a4:1e:76:1c:db:d5:59:73:4f:48:a6: 58:70:cd:6d:e0:bd:f8:41:ff:0f:1d:85:8b:79:70:9a:c3:c7: e9:7c:73:ef:d2:39:25:87:d5:99:b4:46:f6:65:2f:bc:1c:ca: 21:66:c6:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRpF16m8o0pqY4P/+IAzbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NzI5ZjlkMDc4NmY2OGExZWNkNWM1YTkyYmMzOTJkODY5 MTk3NWUwHhcNMjYwMjA5MTIwMDQ2WhcNMjYwMjEwMTIwMDQ2WjAzMTEwLwYDVQQD EyhhZTNjYTk0ZTIwZGVhYTE5YzMyNzQxMmE1OTQ3ZDVjNjcxY2M3YzViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsochUiJGjpeS6UOO+BHnnANNAitC Gl7ECxryYPCq/d4J/NFrnIWDkdn754UZ/SDdMoDvCFAOg8PDv5ZoOHKkOSL06W0d DBWTSj07d2wrweHzS7rgOqbYrZD3r8fEBE1xSRDNBLifeM1OTkcWwiaRLEwxuCdV FeoQokVw5gW9QGlkUZ+vg6PfhCVBUwWmOmN4aOXIb862yBJtbthVFlfUQwC1C5VV afcbCN6w6sM5oKRdiBw98b8pDy7FtUiKtFuLB22QEBkNmSUCeoFEEvP+YgA7JBsn mDzKyZADnYFpvht9RTwAObO7fNo2uf30BEKtTMWYV74byPIrDiXgXIRC2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK48qU4g3qoZwydBKllH1cZxzHxbMB8GA1UdIwQY MBaAFGZyn50HhvaKHs1cWpK8OS2GkZdeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQt YWQ1MTBlMDVkYTkyLzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy8zODRkMDMtZjQ3OS00YmIyLWE4YWQtYWQ1MTBlMDVkYTky LzEvWm5LZm5RZUc5b29lelZ4YWtydzVMWWFSbDE0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAko1ecwCz tBIkMDdM8Xir7a/1ZBcyPc3Qxizf2l+KSc9vQuvXRGQgYpzDi/ATND4zqjHZWOcH JeTTr9Fbg+Z74AvZ5f0kW4tsRzvMLz+a5MA5UFFdvtuKdwpNKDWK0OU98AbPi1mB iBW3mOoQBbkX6x3gyrdsW5OGe2tZaYLQ2hwZqXWnemWvgQ4/IVH14MuklmzbtwZh iYU/8SZjDd/v4nXSOqrnPm6RoId6EtY6/g+f57LJUrQqxQO8bJX6kUCfWmDwcCKz KXei1R+q6KQedhzb1VlzT0imWHDNbeC9+EH/Dx2Fi3lwmsPH6Xxz79I5JYfVmbRG 9mUvvBzKIWbGug== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:00 2026 by rpki-client