This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft File: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft (raw, json) Hash identifier: 6g236hX3twI9KwgzBulTzpGb9JgxZJ88WNkcWQy3XdM= Subject key identifier: 69:E7:7B:F5:BD:25:18:3E:96:EE:2E:2F:A6:55:C1:9A:EA:D0:39:D7 Authority key identifier: 65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E Certificate issuer: /CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Certificate serial: 019C435922304D461A8D483A35681AD7F7FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft Manifest number: 16D1 Signing time: Mon 09 Feb 2026 17:00:40 +0000 Manifest this update: Mon 09 Feb 2026 17:00:40 +0000 Manifest next update: Tue 10 Feb 2026 17:00:40 +0000 Files and hashes: 1: 09kUsc8xVsHQfG22SiNr4dqPF4E.roa (hash: ysqhE++XuPh/xw2jA2E/+Gvhp8/HFy9qw2ro2jCSjO0=) 2: ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl (hash: 4Hlqn2QdKkmivScNsmQmsF2gNzbKs4O3/j/kN+7a8CI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:22:30:4d:46:1a:8d:48:3a:35:68:1a:d7:f7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65ab51e8e58cc14ed9cb35731af1d011dbe2e12e Validity Not Before: Feb 9 17:00:40 2026 GMT Not After : Feb 10 17:00:40 2026 GMT Subject: CN=69e77bf5bd25183e96ee2e2fa655c19aead039d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:79:ef:41:d6:47:2e:11:ba:6d:47:5e:d4:1a: 5b:d5:c5:79:2a:8e:20:1e:05:b5:ab:51:8e:d3:74: ae:7b:22:d5:ef:f2:60:4e:cb:17:1b:d5:d0:4c:f8: 5e:99:d8:95:1b:b0:c5:73:58:f6:4a:19:28:4f:27: d5:38:23:6d:41:36:3a:8e:35:da:51:82:0c:36:33: 1e:6f:05:df:73:17:be:f6:1b:bd:7f:f8:aa:ce:e4: c8:c4:db:12:1f:99:63:5c:8f:15:4a:a5:d4:6f:66: c8:1d:f3:3a:2d:ea:cf:20:b9:da:ba:96:36:52:d5: 78:cf:6a:da:b6:3d:64:91:ed:1b:5b:7f:92:af:1f: 46:cb:87:4f:92:c1:59:b9:c2:d3:85:09:13:e7:bc: 01:8d:4a:50:30:86:44:ad:ab:5c:8a:d4:76:93:e6: 4b:71:01:25:26:eb:47:1e:b5:37:77:da:d3:c0:33: 2b:c8:55:c8:9e:9b:46:64:5a:1e:ed:1b:c0:21:5c: 11:6b:95:48:2f:48:b8:ad:e8:79:c7:c2:42:4b:70: 8a:73:ea:e5:a2:43:3c:fd:45:c4:57:f9:fa:7c:5b: fc:eb:bb:d5:d3:77:ee:9b:b9:03:17:5a:2a:2b:80: d9:d7:b6:64:83:06:54:d9:d0:28:ab:b6:05:67:dd: 69:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:E7:7B:F5:BD:25:18:3E:96:EE:2E:2F:A6:55:C1:9A:EA:D0:39:D7 X509v3 Authority Key Identifier: keyid:65:AB:51:E8:E5:8C:C1:4E:D9:CB:35:73:1A:F1:D0:11:DB:E2:E1:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/ceff1a-ec66-4d45-ba9f-488a22299ca1/1/ZatR6OWMwU7ZyzVzGvHQEdvi4S4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:bd:ad:a6:c4:c5:9f:ab:78:29:34:c6:35:5a:3b:29:09:17: 8e:79:6a:17:3b:bc:4c:8f:9e:71:5f:0e:e9:89:6b:f8:68:77: a1:73:18:57:be:66:a0:b0:6d:b6:d2:d3:91:f2:ed:50:10:0e: 23:1d:2c:14:07:a7:4a:5a:44:c7:a6:9b:57:aa:58:fd:d1:de: bc:71:ef:27:be:98:84:0c:90:a1:7a:26:56:54:2f:e0:5d:ca: 59:21:4f:cb:3b:29:f3:39:60:e3:d0:30:a1:50:d9:b5:39:00: ab:15:8e:4c:65:50:c2:61:63:61:c4:e6:96:03:03:9c:a2:77: d5:df:8a:05:ec:c3:97:0b:ae:fb:e4:f9:54:99:c2:1e:46:27: f9:40:ef:36:53:f5:f0:b2:98:d2:20:ab:9a:57:e0:5b:6a:f4: a7:21:bd:de:fc:47:9c:89:16:3a:30:d7:1d:e4:ea:3c:ef:d4: 00:52:52:ff:3b:77:6c:17:3a:be:b4:3a:af:3f:ad:d8:c0:0d: 22:47:be:5e:e3:46:a5:0a:31:9d:81:09:ac:02:b6:f2:ff:02: 5e:82:1b:c3:e0:0d:63:76:b7:df:97:47:cb:95:5c:9d:fe:d6: 6d:fb:91:d6:ea:e0:38:b6:b7:29:fe:e3:ec:ae:29:ac:b1:df: 2a:8e:89:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWSIwTUYajUg6NWga1/f8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YWI1MWU4ZTU4Y2MxNGVkOWNiMzU3MzFhZjFkMDExZGJl MmUxMmUwHhcNMjYwMjA5MTcwMDQwWhcNMjYwMjEwMTcwMDQwWjAzMTEwLwYDVQQD Eyg2OWU3N2JmNWJkMjUxODNlOTZlZTJlMmZhNjU1YzE5YWVhZDAzOWQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HnvQdZHLhG6bUde1Bpb1cV5Ko4g HgW1q1GO03SueyLV7/JgTssXG9XQTPhemdiVG7DFc1j2ShkoTyfVOCNtQTY6jjXa UYIMNjMebwXfcxe+9hu9f/iqzuTIxNsSH5ljXI8VSqXUb2bIHfM6LerPILnaupY2 UtV4z2ratj1kke0bW3+Srx9Gy4dPksFZucLThQkT57wBjUpQMIZEratcitR2k+ZL cQElJutHHrU3d9rTwDMryFXInptGZFoe7RvAIVwRa5VIL0i4reh5x8JCS3CKc+rl okM8/UXEV/n6fFv867vV03fum7kDF1oqK4DZ17ZkgwZU2dAoq7YFZ91p2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGnne/W9JRg+lu4uL6ZVwZrq0DnXMB8GA1UdIwQY MBaAFGWrUejljMFO2cs1cxrx0BHb4uEuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYt NDg4YTIyMjk5Y2ExLzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9jZWZmMWEtZWM2Ni00ZDQ1LWJhOWYtNDg4YTIyMjk5Y2Ex LzEvWmF0UjZPV013VTdaeXpWekd2SFFFZHZpNFM0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAob2tpsTF n6t4KTTGNVo7KQkXjnlqFzu8TI+ecV8O6Ylr+Gh3oXMYV75moLBtttLTkfLtUBAO Ix0sFAenSlpEx6abV6pY/dHevHHvJ76YhAyQoXomVlQv4F3KWSFPyzsp8zlg49Aw oVDZtTkAqxWOTGVQwmFjYcTmlgMDnKJ31d+KBezDlwuu++T5VJnCHkYn+UDvNlP1 8LKY0iCrmlfgW2r0pyG93vxHnIkWOjDXHeTqPO/UAFJS/zt3bBc6vrQ6rz+t2MAN Ike+XuNGpQoxnYEJrAK28v8CXoIbw+ANY3a335dHy5Vcnf7WbfuR1urgOLa3Kf7j 7K4prLHfKo6J7A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:08 2026 by rpki-client