This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft File: zr-Nbew5ILxz8Jf99WyvELUttFU.mft (raw, json) Hash identifier: U7SJUKoSGopZPgOehBrHeCugbXWA1ghV7vdLM2soA78= Subject key identifier: 44:2F:18:E4:49:95:69:87:5A:F1:E6:E0:D0:D7:3D:B5:EE:62:45:E1 Authority key identifier: CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 Certificate issuer: /CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Certificate serial: 019C41A18B184DD6FDDDA82553F03D5B7178 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft Manifest number: 1813 Signing time: Mon 09 Feb 2026 09:00:31 +0000 Manifest this update: Mon 09 Feb 2026 09:00:31 +0000 Manifest next update: Tue 10 Feb 2026 09:00:31 +0000 Files and hashes: 1: qb_7krEk2T7S9jRpJ5MSFDtkffo.roa (hash: lIEMjy8AMkagBEJxT4ffs+QK3qsE1qpnuVxbq8dmbpY=) 2: zr-Nbew5ILxz8Jf99WyvELUttFU.crl (hash: TKVMr2pWl8E539U1Ju87YJ+mzS238+kB29WhtavJtKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:8b:18:4d:d6:fd:dd:a8:25:53:f0:3d:5b:71:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf8d6dec3920bc73f097fdf56caf10b52db455 Validity Not Before: Feb 9 09:00:31 2026 GMT Not After : Feb 10 09:00:31 2026 GMT Subject: CN=442f18e4499569875af1e6e0d0d73db5ee6245e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:84:ff:33:e4:61:5e:d6:2c:da:90:18:fe:cb: df:7d:ce:00:e4:bd:d6:07:56:26:18:5d:00:12:db: 0b:98:5d:c1:ed:64:a8:8b:f3:19:78:65:5d:2c:59: 0c:5c:af:56:ba:b9:ed:62:85:ed:a2:74:3b:76:69: 06:2c:71:e6:34:b0:b1:63:90:d3:b2:b7:a0:bb:93: 10:7f:fb:1e:2d:9a:18:3e:cf:5f:50:1f:32:d3:29: da:7a:4c:d5:04:2e:77:44:15:3c:a9:9e:e6:fd:c6: c4:7e:dd:df:4c:1e:63:50:c8:b0:6f:d2:56:f1:41: 87:61:bb:b9:f3:0c:a0:7f:63:98:ac:7f:14:0f:10: a2:ce:a4:41:9d:a1:74:71:d8:4e:ad:2c:17:15:9f: ef:20:2c:d2:73:07:97:80:b2:5e:73:23:2a:d6:8f: 51:bc:db:7a:6e:b7:4a:d1:74:d1:7e:a5:10:8a:01: 5b:96:91:f3:a7:bf:99:ba:1b:31:1c:ae:5c:e4:e9: 4e:29:45:10:5c:21:31:6a:71:e9:ae:04:23:ba:45: 8d:d5:98:ab:82:d6:0f:80:25:4b:1a:1a:80:d5:fe: 4b:b2:f1:07:c2:41:01:d3:3b:72:d6:c6:27:a2:8f: fe:26:6f:6a:68:f2:1e:83:64:47:25:0b:ba:69:70: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2F:18:E4:49:95:69:87:5A:F1:E6:E0:D0:D7:3D:B5:EE:62:45:E1 X509v3 Authority Key Identifier: keyid:CE:BF:8D:6D:EC:39:20:BC:73:F0:97:FD:F5:6C:AF:10:B5:2D:B4:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr-Nbew5ILxz8Jf99WyvELUttFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/5b6768-4b5f-4430-bff1-b5e5700fc774/1/zr-Nbew5ILxz8Jf99WyvELUttFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cd:0d:fc:f5:e4:76:33:a8:24:fe:c7:82:3d:3e:b5:ea:67: 2f:0c:2a:2a:32:e2:70:b6:ba:7b:f5:cb:3e:22:b3:c4:a4:c6: 3b:35:a6:55:c3:cd:e5:86:66:8d:27:2a:9e:2a:78:48:17:ca: 57:c9:f0:1f:7e:41:ed:87:89:47:76:a8:4c:72:50:76:58:89: 3d:81:03:57:bf:15:97:85:5d:61:b4:4b:aa:7c:02:de:63:c3: 0e:b4:d7:85:72:d6:f0:2a:90:78:08:6c:a6:6b:24:e1:38:9a: fb:cb:47:15:71:ef:08:24:aa:53:b6:71:ee:e0:52:a1:67:92: d1:f1:33:a3:67:64:40:9c:a8:51:c1:ce:07:1f:0e:56:cc:32: 45:31:1c:6f:ce:91:0e:51:46:ed:0d:5a:be:c7:4d:2c:ba:86: 51:0b:b3:87:60:b4:f5:cc:3e:b8:9a:38:3d:92:ff:69:eb:ec: af:66:8a:d1:d3:0e:1b:08:5a:fc:c2:06:62:4a:b4:d6:79:5c: 8f:37:90:c2:c3:b9:98:3a:f9:bd:4d:64:e4:44:68:21:7f:74: f6:71:2f:fa:81:e2:86:34:2b:5f:e4:90:8b:cb:ec:2f:bd:f3: 95:b2:b4:f0:ae:2f:35:0f:c2:fd:31:c9:a1:d6:dc:bb:1c:5b: 85:57:4b:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoYsYTdb93aglU/A9W3F4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY4ZDZkZWMzOTIwYmM3M2YwOTdmZGY1NmNhZjEwYjUy ZGI0NTUwHhcNMjYwMjA5MDkwMDMxWhcNMjYwMjEwMDkwMDMxWjAzMTEwLwYDVQQD Eyg0NDJmMThlNDQ5OTU2OTg3NWFmMWU2ZTBkMGQ3M2RiNWVlNjI0NWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYT/M+RhXtYs2pAY/svffc4A5L3W B1YmGF0AEtsLmF3B7WSoi/MZeGVdLFkMXK9WurntYoXtonQ7dmkGLHHmNLCxY5DT sregu5MQf/seLZoYPs9fUB8y0ynaekzVBC53RBU8qZ7m/cbEft3fTB5jUMiwb9JW 8UGHYbu58wygf2OYrH8UDxCizqRBnaF0cdhOrSwXFZ/vICzScweXgLJecyMq1o9R vNt6brdK0XTRfqUQigFblpHzp7+ZuhsxHK5c5OlOKUUQXCExanHprgQjukWN1Zir gtYPgCVLGhqA1f5LsvEHwkEB0zty1sYnoo/+Jm9qaPIeg2RHJQu6aXCHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEQvGORJlWmHWvHm4NDXPbXuYkXhMB8GA1UdIwQY MBaAFM6/jW3sOSC8c/CX/fVsrxC1LbRVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEt YjVlNTcwMGZjNzc0LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZi81YjY3NjgtNGI1Zi00NDMwLWJmZjEtYjVlNTcwMGZjNzc0 LzEvenItTmJldzVJTHh6OEpmOTlXeXZFTFV0dEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmM0N/PXk djOoJP7Hgj0+tepnLwwqKjLicLa6e/XLPiKzxKTGOzWmVcPN5YZmjScqnip4SBfK V8nwH35B7YeJR3aoTHJQdliJPYEDV78Vl4VdYbRLqnwC3mPDDrTXhXLW8CqQeAhs pmsk4Tia+8tHFXHvCCSqU7Zx7uBSoWeS0fEzo2dkQJyoUcHOBx8OVswyRTEcb86R DlFG7Q1avsdNLLqGUQuzh2C09cw+uJo4PZL/aevsr2aK0dMOGwha/MIGYkq01nlc jzeQwsO5mDr5vU1k5ERoIX909nEv+oHihjQrX+SQi8vsL73zlbK08K4vNQ/C/THJ odbcuxxbhVdL7A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:22 2026 by rpki-client