This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft File: zCdTGtmZttWgRBt1-up9V4ZT5Co.mft (raw, json) Hash identifier: M6EavwLknGam/6C7JsAGrCpieN73ADxhIboYzea0S7E= Subject key identifier: 3D:FA:60:D8:07:2C:C6:1C:90:A9:5E:71:00:39:95:88:4E:11:8A:AC Authority key identifier: CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A Certificate issuer: /CN=cc27531ad999b6d5a0441b75faea7d578653e42a Certificate serial: 019C43C7497D4D326F9CCED3C2EB1B94ECF5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 19:00:59 +0000 Manifest this update: Mon 09 Feb 2026 19:00:59 +0000 Manifest next update: Tue 10 Feb 2026 19:00:59 +0000 Files and hashes: 1: k212pOftYaKL3__dZMrFZE2MH5E.roa (hash: PKolWasV9tkUQ7UVtjo0IH2y7lrM7NWS9+jgOePyuP8=) 2: zCdTGtmZttWgRBt1-up9V4ZT5Co.crl (hash: RztB4UncK9ubcY0UQvpQkT6rtl+6qWU3IKk9NU8SXvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:49:7d:4d:32:6f:9c:ce:d3:c2:eb:1b:94:ec:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc27531ad999b6d5a0441b75faea7d578653e42a Validity Not Before: Feb 9 19:00:59 2026 GMT Not After : Feb 10 19:00:59 2026 GMT Subject: CN=3dfa60d8072cc61c90a95e71003995884e118aac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a8:93:61:a1:c5:58:cd:c9:8b:77:50:fa:55: a2:3f:ed:40:74:73:62:db:da:f1:43:61:4f:c5:71: 41:eb:1e:63:21:83:67:4c:69:09:b7:12:10:30:5c: 74:79:fe:63:88:da:53:ad:8e:e8:74:f7:bd:1d:61: ad:fd:f9:df:89:77:c1:24:8c:1c:c8:fa:fa:61:19: 72:05:86:91:e7:55:65:a6:24:65:05:72:39:35:83: e5:01:58:da:3e:e3:bc:2b:98:3c:06:7c:8f:4d:c7: 7b:a9:17:25:50:d9:b9:22:86:c3:80:00:54:db:33: cc:24:89:7e:06:3e:22:9e:e8:49:88:b2:fe:60:f8: 43:79:05:4d:5c:9c:c3:d9:38:1e:e4:3c:78:da:c5: 24:81:dd:ee:e7:aa:0b:02:2d:a7:3f:d0:d7:82:c9: 0d:83:8f:fe:7b:bb:97:e1:c4:e6:ab:62:21:b3:e6: 87:84:3d:5d:45:3b:9b:31:e2:b8:6e:d9:e7:46:f9: db:26:d3:a4:c6:97:21:84:d0:31:8d:e7:28:db:7f: 6f:f0:e7:dc:f2:fb:72:c5:e5:a8:5d:d4:e6:bc:a6: 91:b1:0a:ee:ac:cb:85:88:97:07:e6:72:48:c9:94: f3:db:68:d0:b9:a9:ff:78:37:30:62:00:cb:a9:7b: 41:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:FA:60:D8:07:2C:C6:1C:90:A9:5E:71:00:39:95:88:4E:11:8A:AC X509v3 Authority Key Identifier: keyid:CC:27:53:1A:D9:99:B6:D5:A0:44:1B:75:FA:EA:7D:57:86:53:E4:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zCdTGtmZttWgRBt1-up9V4ZT5Co.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/9252e2-45de-4bcc-8f58-fa4117db1555/1/zCdTGtmZttWgRBt1-up9V4ZT5Co.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:4b:c2:67:56:c6:5d:50:bf:eb:aa:7c:12:bd:8b:f6:e1:50: 56:2b:f2:f8:53:b6:95:10:56:10:74:c1:e8:04:ed:5e:2b:2c: 05:60:2b:15:26:cd:f5:d7:d1:25:4c:73:8d:1a:0b:bc:69:7e: 97:2b:e3:36:3a:f8:0f:3e:e7:b5:5b:ca:45:47:f5:79:05:f8: 23:2a:a3:87:5f:97:d1:f2:9d:46:aa:c3:23:bc:33:bd:96:e4: 6a:b9:2c:06:32:bf:30:1a:e8:e0:de:d5:78:f0:1e:cf:d9:6a: 3e:82:c8:74:e9:f5:79:dc:e4:f4:81:ec:56:b7:61:3c:f7:29: d0:ae:e4:d1:8c:04:4c:ec:ef:72:55:f6:5a:26:15:c1:20:8b: 2e:2f:a9:ec:c4:d0:11:99:64:40:e4:f2:95:db:00:3e:e5:d8: 5a:d3:de:ed:b6:1b:0e:f4:24:60:12:f9:1d:1f:c7:a9:0b:e1: 42:fd:32:99:ee:ae:1b:99:5e:dc:c0:ad:2f:bd:cf:85:de:aa: 99:d7:60:0d:a4:c7:cb:24:d9:04:ce:17:e6:83:bb:30:4e:74: 16:76:8a:10:49:76:b0:d0:91:0a:83:89:ae:5a:f0:87:7b:dc: 3c:ec:7e:c9:29:e1:30:a3:65:f8:17:de:9d:b8:0c:22:c6:5a: 5f:58:67:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx0l9TTJvnM7TwusblOz1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMjc1MzFhZDk5OWI2ZDVhMDQ0MWI3NWZhZWE3ZDU3ODY1 M2U0MmEwHhcNMjYwMjA5MTkwMDU5WhcNMjYwMjEwMTkwMDU5WjAzMTEwLwYDVQQD EygzZGZhNjBkODA3MmNjNjFjOTBhOTVlNzEwMDM5OTU4ODRlMTE4YWFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6iTYaHFWM3Ji3dQ+lWiP+1AdHNi 29rxQ2FPxXFB6x5jIYNnTGkJtxIQMFx0ef5jiNpTrY7odPe9HWGt/fnfiXfBJIwc yPr6YRlyBYaR51VlpiRlBXI5NYPlAVjaPuO8K5g8BnyPTcd7qRclUNm5IobDgABU 2zPMJIl+Bj4inuhJiLL+YPhDeQVNXJzD2Tge5Dx42sUkgd3u56oLAi2nP9DXgskN g4/+e7uX4cTmq2Ihs+aHhD1dRTubMeK4btnnRvnbJtOkxpchhNAxjeco239v8Ofc 8vtyxeWoXdTmvKaRsQrurMuFiJcH5nJIyZTz22jQuan/eDcwYgDLqXtBUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD36YNgHLMYckKlecQA5lYhOEYqsMB8GA1UdIwQY MBaAFMwnUxrZmbbVoEQbdfrqfVeGU+QqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgt ZmE0MTE3ZGIxNTU1LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC85MjUyZTItNDVkZS00YmNjLThmNTgtZmE0MTE3ZGIxNTU1 LzEvekNkVEd0bVp0dFdnUkJ0MS11cDlWNFpUNUNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA5UvCZ1bG XVC/66p8Er2L9uFQVivy+FO2lRBWEHTB6ATtXissBWArFSbN9dfRJUxzjRoLvGl+ lyvjNjr4Dz7ntVvKRUf1eQX4Iyqjh1+X0fKdRqrDI7wzvZbkarksBjK/MBro4N7V ePAez9lqPoLIdOn1edzk9IHsVrdhPPcp0K7k0YwETOzvclX2WiYVwSCLLi+p7MTQ EZlkQOTyldsAPuXYWtPe7bYbDvQkYBL5HR/HqQvhQv0yme6uG5le3MCtL73Phd6q mddgDaTHyyTZBM4X5oO7ME50FnaKEEl2sNCRCoOJrlrwh3vcPOx+ySnhMKNl+Bfe nbgMIsZaX1hnxQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:43 2026 by rpki-client