This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft File: zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft (raw, json) Hash identifier: OxAoi6es3lv+WAa3TJ1OmxTSbCVDMDdUjl5nNak8i5c= Subject key identifier: 20:FF:C7:9A:73:D2:0F:B3:96:64:6B:81:1A:40:7E:B4:FA:81:6E:D3 Authority key identifier: CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F Certificate issuer: /CN=cd9de08b3053bac61713c46b43d4093818c2046f Certificate serial: 019C427D4E3275DC338A8AB30E94290E9957 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft Manifest number: 0599 Signing time: Mon 09 Feb 2026 13:00:34 +0000 Manifest this update: Mon 09 Feb 2026 13:00:34 +0000 Manifest next update: Tue 10 Feb 2026 13:00:34 +0000 Files and hashes: 1: OCWMjUbV-RFWWbEAfOnnKmG-Ygw.roa (hash: wVP7cqC9QuE0DdbIuexkFJhonHykfMO7bJmfVohZyAM=) 2: zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl (hash: z2VQleTBzyAobT3c/eEvio2OsE7gJFynE2j6HLWtOok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:4e:32:75:dc:33:8a:8a:b3:0e:94:29:0e:99:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9de08b3053bac61713c46b43d4093818c2046f Validity Not Before: Feb 9 13:00:34 2026 GMT Not After : Feb 10 13:00:34 2026 GMT Subject: CN=20ffc79a73d20fb396646b811a407eb4fa816ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:03:3d:92:3a:1a:30:11:b6:49:33:a5:7e:34: 19:59:16:5d:16:48:7f:f2:7a:10:cc:dc:27:00:0d: 1b:aa:4c:cb:e9:d3:5c:9b:84:a9:6a:ba:83:ee:c4: 75:69:40:26:1c:eb:51:bd:63:f1:57:88:ef:08:39: fb:ca:ab:66:76:6f:18:61:2d:9f:16:50:da:52:7c: 5c:47:e3:3c:31:cd:cc:b8:28:1d:3a:8c:2a:c2:4e: f6:16:a2:32:7d:56:b1:b7:d9:62:be:5d:43:1b:c2: 75:c7:40:76:1c:63:d5:30:04:20:bd:d4:11:a6:94: ed:26:98:6d:74:32:2b:7f:23:7c:d6:36:da:bc:7d: a7:af:3e:00:09:0a:be:14:3a:2e:31:56:21:b7:20: bc:86:73:c1:98:e5:2e:a0:0d:99:56:27:27:18:5d: 5c:a8:21:f2:0b:24:4a:94:ad:05:31:a5:5a:a9:01: eb:b8:66:ee:4f:0b:f2:e4:26:8c:ed:e1:fd:93:c0: 87:9f:5a:46:53:a2:2e:8e:0c:c2:c1:64:2b:37:d0: 9e:dc:5e:14:bb:5a:a3:13:cc:4a:e0:df:4a:de:bc: 70:dd:4b:aa:e8:7b:d0:88:59:a7:ff:aa:21:a8:48: f2:86:66:76:ce:1a:19:f9:c7:22:0f:72:95:c5:a4: f7:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:C7:9A:73:D2:0F:B3:96:64:6B:81:1A:40:7E:B4:FA:81:6E:D3 X509v3 Authority Key Identifier: keyid:CD:9D:E0:8B:30:53:BA:C6:17:13:C4:6B:43:D4:09:38:18:C2:04:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZ3gizBTusYXE8RrQ9QJOBjCBG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/34bff3-39da-4877-b75c-5016ce92f122/1/zZ3gizBTusYXE8RrQ9QJOBjCBG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:32:47:39:b0:3f:e1:17:a0:21:2b:fd:4d:35:dc:78:f6:b2: ef:f5:12:b8:5d:1f:b6:08:47:1a:5b:2c:64:b4:c0:b1:f6:fb: b7:5b:5d:dc:02:cb:7f:e5:11:36:7b:7a:84:9e:81:4e:5d:e8: 98:f1:66:0c:38:2e:04:c3:e7:4b:81:22:ab:a5:ba:7b:1b:6f: b5:8c:83:41:4c:d6:af:6d:07:53:a3:b0:16:da:03:cb:03:83: 2d:ef:e7:ea:79:61:67:3a:af:b0:ed:31:f6:b1:b7:d0:fc:78: 1f:36:cc:20:29:54:9f:55:45:be:d9:5f:14:56:6c:11:9b:93: e1:5a:8f:a7:9e:a3:10:63:bb:a6:63:52:c2:e9:28:60:23:bf: 8f:c7:61:cb:05:65:3e:c6:67:09:cc:de:18:76:98:4e:a2:fb: 4a:1d:33:a3:ac:b4:84:e9:87:40:39:59:4e:77:05:8f:df:63: e3:c4:db:17:e7:e4:8e:af:7d:89:7c:30:84:aa:6e:4c:dd:7f: 66:e2:97:92:51:e6:3f:70:4d:8a:c3:45:bc:7e:92:31:08:87: 31:5c:56:e7:79:e2:ff:30:b8:75:8b:a8:77:be:5f:6a:70:97: 8f:71:76:3e:ad:2c:05:18:48:61:6a:0d:28:c5:f8:1d:fc:b8: 96:d3:69:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfU4yddwzioqzDpQpDplXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOWRlMDhiMzA1M2JhYzYxNzEzYzQ2YjQzZDQwOTM4MThj MjA0NmYwHhcNMjYwMjA5MTMwMDM0WhcNMjYwMjEwMTMwMDM0WjAzMTEwLwYDVQQD EygyMGZmYzc5YTczZDIwZmIzOTY2NDZiODExYTQwN2ViNGZhODE2ZWQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wM9kjoaMBG2STOlfjQZWRZdFkh/ 8noQzNwnAA0bqkzL6dNcm4SparqD7sR1aUAmHOtRvWPxV4jvCDn7yqtmdm8YYS2f FlDaUnxcR+M8Mc3MuCgdOowqwk72FqIyfVaxt9livl1DG8J1x0B2HGPVMAQgvdQR ppTtJphtdDIrfyN81jbavH2nrz4ACQq+FDouMVYhtyC8hnPBmOUuoA2ZVicnGF1c qCHyCyRKlK0FMaVaqQHruGbuTwvy5CaM7eH9k8CHn1pGU6IujgzCwWQrN9Ce3F4U u1qjE8xK4N9K3rxw3Uuq6HvQiFmn/6ohqEjyhmZ2zhoZ+cciD3KVxaT33QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCD/x5pz0g+zlmRrgRpAfrT6gW7TMB8GA1UdIwQY MBaAFM2d4IswU7rGFxPEa0PUCTgYwgRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMt NTAxNmNlOTJmMTIyLzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi8zNGJmZjMtMzlkYS00ODc3LWI3NWMtNTAxNmNlOTJmMTIy LzEvelozZ2l6QlR1c1lYRThSclE5UUpPQmpDQkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzJHObA/ 4RegISv9TTXcePay7/USuF0ftghHGlssZLTAsfb7t1td3ALLf+URNnt6hJ6BTl3o mPFmDDguBMPnS4Eiq6W6extvtYyDQUzWr20HU6OwFtoDywODLe/n6nlhZzqvsO0x 9rG30Px4HzbMIClUn1VFvtlfFFZsEZuT4VqPp56jEGO7pmNSwukoYCO/j8dhywVl PsZnCczeGHaYTqL7Sh0zo6y0hOmHQDlZTncFj99j48TbF+fkjq99iXwwhKpuTN1/ ZuKXklHmP3BNisNFvH6SMQiHMVxW53ni/zC4dYuod75fanCXj3F2Pq0sBRhIYWoN KMX4Hfy4ltNp+Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:06 2026 by rpki-client