This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft File: z4l1dGy_H_dd3sbNuArMhSGBhM4.mft (raw, json) Hash identifier: Z8r8AVsSKps6ZOgOwycRP9mTnZI2cWBLXUiXEB3GDr0= Subject key identifier: B6:7C:8B:EC:A7:DA:31:8D:CF:2F:E2:07:4D:58:3C:C4:69:24:E5:69 Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Certificate serial: 019C427D1C3FDC13F6F6BA3A75345D7DB9A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft Manifest number: 17A1 Signing time: Mon 09 Feb 2026 13:00:21 +0000 Manifest this update: Mon 09 Feb 2026 13:00:21 +0000 Manifest next update: Tue 10 Feb 2026 13:00:21 +0000 Files and hashes: 1: f8pXdTunsFienw12OWOwkjd9_Sg.roa (hash: D84B6IFhxTwUljKKeuMD7kN/I53xCeCr1djjSkG38Ek=) 2: z4l1dGy_H_dd3sbNuArMhSGBhM4.crl (hash: 9wSgd+BO7kwpb5+AiQGt/2dp9lNkTBsC+nXT158cSak=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:1c:3f:dc:13:f6:f6:ba:3a:75:34:5d:7d:b9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce Validity Not Before: Feb 9 13:00:21 2026 GMT Not After : Feb 10 13:00:21 2026 GMT Subject: CN=b67c8beca7da318dcf2fe2074d583cc46924e569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:99:a2:70:b2:cb:47:1c:85:86:75:64:fe:58: fa:20:f5:a1:ab:cf:d4:1c:0f:3d:05:b1:b2:62:36: 12:86:3b:56:c3:02:5b:d3:f6:ad:d8:6c:df:1f:4b: 0e:e9:d9:c7:4e:c3:e3:2c:a2:69:98:11:e1:88:d2: 98:74:cf:d5:5d:de:1f:b6:ac:70:ed:39:94:cd:24: 3e:2f:8f:c5:cf:88:f4:98:05:93:d1:3a:51:c9:c2: c3:44:3e:ea:cf:26:78:18:dc:91:09:c1:0b:e6:3b: ce:28:5e:46:07:83:ad:05:e2:79:33:c0:11:a8:f5: 94:8d:e8:93:a3:3a:d0:e1:dd:3c:da:1a:43:1d:4e: fc:a7:31:99:4f:be:93:cb:d1:19:d3:c7:3e:22:f2: 8d:1a:fd:15:0e:61:ba:d1:d9:6c:4b:82:22:e0:4e: 22:3f:72:26:9d:b2:90:1d:94:2c:58:be:ff:f1:55: 6e:7d:d2:6e:d1:f1:48:05:a1:74:06:69:a0:d9:23: cb:3b:a6:2f:02:81:53:82:5e:d1:83:a8:74:de:b7: 6f:4a:9d:80:22:33:2e:9f:89:b8:11:4c:85:f4:9d: 44:fa:49:d8:f2:dd:76:7e:7b:09:9f:cb:b8:5d:0d: 3e:e3:53:44:d6:65:02:a1:06:77:49:de:49:5e:98: 2a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7C:8B:EC:A7:DA:31:8D:CF:2F:E2:07:4D:58:3C:C4:69:24:E5:69 X509v3 Authority Key Identifier: keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:ad:17:b9:38:10:d5:e8:cc:c5:b9:d7:a4:2b:e4:3b:96:9f: 26:d0:d5:c6:45:aa:92:ca:d4:32:66:9d:72:2b:f3:9e:6c:a7: 0c:68:bd:be:a0:24:17:bd:dd:1d:b1:17:5e:a8:54:b8:61:8c: cb:ef:bf:9d:48:bf:4e:2c:f6:52:8b:37:9e:24:19:42:3e:a7: 97:10:71:1b:5e:a3:97:5c:1f:e0:aa:24:98:66:67:72:da:64: f2:6f:65:5e:20:28:e5:5b:bd:f6:66:96:33:32:70:6e:58:6a: 6d:d1:5d:f8:e6:73:ce:60:2d:28:7c:86:4d:65:14:73:a6:c4: db:b9:79:56:b6:11:5e:1e:d0:02:07:f9:86:66:53:e5:a4:a0: 36:0f:03:85:78:0a:8f:58:d7:97:9e:eb:24:96:25:8b:8b:28: cf:1d:5c:14:b3:ca:c3:5b:1f:12:2a:05:82:88:0c:1e:6c:11: 19:73:78:67:02:9e:6d:d7:73:3b:9f:42:8f:dc:49:20:f1:f7: de:92:fe:68:a1:a1:97:59:87:d9:9a:ef:84:29:79:f6:57:2f: 23:97:b0:ee:22:24:b7:04:e2:6b:29:e1:e8:a9:5d:9b:0e:49: 33:5c:33:fe:27:fe:ac:f8:cd:2f:94:d7:fa:8e:28:f8:00:6b: e3:7b:4a:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfRw/3BP29ro6dTRdfbmoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4 MTg0Y2UwHhcNMjYwMjA5MTMwMDIxWhcNMjYwMjEwMTMwMDIxWjAzMTEwLwYDVQQD EyhiNjdjOGJlY2E3ZGEzMThkY2YyZmUyMDc0ZDU4M2NjNDY5MjRlNTY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppmicLLLRxyFhnVk/lj6IPWhq8/U HA89BbGyYjYShjtWwwJb0/at2GzfH0sO6dnHTsPjLKJpmBHhiNKYdM/VXd4ftqxw 7TmUzSQ+L4/Fz4j0mAWT0TpRycLDRD7qzyZ4GNyRCcEL5jvOKF5GB4OtBeJ5M8AR qPWUjeiTozrQ4d082hpDHU78pzGZT76Ty9EZ08c+IvKNGv0VDmG60dlsS4Ii4E4i P3ImnbKQHZQsWL7/8VVufdJu0fFIBaF0Bmmg2SPLO6YvAoFTgl7Rg6h03rdvSp2A IjMun4m4EUyF9J1E+knY8t12fnsJn8u4XQ0+41NE1mUCoQZ3Sd5JXpgqHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZ8i+yn2jGNzy/iB01YPMRpJOVpMB8GA1UdIwQY MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt OWU3OTJiNmYyMzVkLzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO60XuTgQ 1ejMxbnXpCvkO5afJtDVxkWqksrUMmadcivznmynDGi9vqAkF73dHbEXXqhUuGGM y++/nUi/Tiz2Uos3niQZQj6nlxBxG16jl1wf4KokmGZnctpk8m9lXiAo5Vu99maW MzJwblhqbdFd+OZzzmAtKHyGTWUUc6bE27l5VrYRXh7QAgf5hmZT5aSgNg8DhXgK j1jXl57rJJYli4sozx1cFLPKw1sfEioFgogMHmwRGXN4ZwKebddzO59Cj9xJIPH3 3pL+aKGhl1mH2ZrvhCl59lcvI5ew7iIktwTiaynh6Kldmw5JM1wz/if+rPjNL5TX +o4o+ABr43tKSw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:41 2026 by rpki-client