This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft File: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft (raw, json) Hash identifier: 5J2At3eqHleQtwz2SytNYwnAMqHURBuYx7U01+E3hu4= Subject key identifier: 36:53:83:83:38:E6:8B:A1:AB:5D:75:70:A2:D9:25:99:32:68:FB:74 Authority key identifier: CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C Certificate issuer: /CN=cf40e25606651a075484c709fa766d80dad52d9c Certificate serial: 019C4210072BF7E0918A36771D9EBB83277A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft Manifest number: 061C Signing time: Mon 09 Feb 2026 11:01:12 +0000 Manifest this update: Mon 09 Feb 2026 11:01:12 +0000 Manifest next update: Tue 10 Feb 2026 11:01:12 +0000 Files and hashes: 1: QdHInLlgS5JRpnU_JucTtPY8VJk.roa (hash: QfoNmRCKJigBgYRu4CBAAOqEk87PTUk4h7GOHN5KHOs=) 2: z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl (hash: vV8fb9Jogh9tqypyJwysszQmnDMIdtCBAIJbL6w2i0o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:07:2b:f7:e0:91:8a:36:77:1d:9e:bb:83:27:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf40e25606651a075484c709fa766d80dad52d9c Validity Not Before: Feb 9 11:01:12 2026 GMT Not After : Feb 10 11:01:12 2026 GMT Subject: CN=3653838338e68ba1ab5d7570a2d925993268fb74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:75:0c:4a:6c:2e:20:1b:14:b6:b2:79:8e:ae: 16:b6:fe:3c:68:65:eb:f5:28:b3:81:c3:86:2b:8c: 56:34:e4:df:f6:ab:ac:68:07:0a:d6:d0:e6:74:b2: 6d:fb:a1:c3:35:1f:cd:39:5e:31:f2:a5:96:23:0f: 29:2a:82:6d:dc:da:67:57:d5:60:d7:6d:11:06:79: 27:b8:ed:6e:41:74:33:30:8e:d6:8c:35:b1:be:a0: 72:7a:e8:a8:a4:75:25:d4:b4:b8:a8:11:77:d8:eb: 7b:af:e8:a8:2d:58:80:eb:f3:39:43:38:1e:cf:67: ae:a9:39:57:27:ba:c4:f9:02:8e:d7:f0:5e:f3:d3: 3e:e1:82:4b:b7:f0:25:f9:73:37:18:cb:25:3c:f3: 47:31:ba:9e:5c:fa:48:ae:d0:ed:69:92:47:20:af: 82:15:0c:c2:5b:c7:04:e3:05:c0:ba:a7:82:14:07: 46:df:7d:6a:ab:be:33:e4:7a:dc:fa:cb:20:ca:8b: 8c:fd:1b:8a:5b:db:d4:10:ce:61:3d:b9:eb:fb:c6: eb:cd:82:6b:bf:5b:4b:0e:74:bb:bb:b0:ab:fb:e1: ef:2b:01:6e:c1:ec:19:20:67:fc:a2:e3:6d:cb:b7: 8f:19:99:db:50:40:83:24:3f:b7:e4:c7:4e:af:5c: 85:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:53:83:83:38:E6:8B:A1:AB:5D:75:70:A2:D9:25:99:32:68:FB:74 X509v3 Authority Key Identifier: keyid:CF:40:E2:56:06:65:1A:07:54:84:C7:09:FA:76:6D:80:DA:D5:2D:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/7d5e1c-9d79-4b39-b560-e997e558d73a/1/z0DiVgZlGgdUhMcJ-nZtgNrVLZw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:fa:02:43:2b:2c:f7:01:41:2c:c3:b3:7f:6e:01:51:16: ca:1d:dc:b8:ae:6d:f6:af:b5:65:65:05:ba:69:39:a2:22:83: 13:eb:52:6a:5d:7e:c8:c4:fb:77:54:0b:aa:59:c3:66:d2:cf: 57:e0:e2:49:80:68:3d:ab:33:4a:3c:a9:ef:a7:22:c4:45:1e: 5f:81:5a:f7:46:51:5c:e9:de:f0:e1:fd:30:43:76:e2:3d:7b: 2d:01:29:dd:29:46:d4:ea:37:01:6e:30:8c:e7:1b:06:7a:58: a7:10:ed:04:a0:79:f6:ca:96:79:be:c5:db:6a:bf:8b:27:ca: 82:24:21:c2:bd:57:43:94:1f:f6:53:71:b1:91:a9:cf:bf:a2: d3:d4:46:38:3b:17:04:d6:d5:0e:9c:fb:e6:b0:28:75:98:11: 05:24:b8:9e:71:13:f6:9f:76:a0:cf:8c:90:8b:84:a7:2e:90: 9b:12:3a:bd:4c:74:86:c7:ff:0b:d2:85:f3:81:b4:7c:d5:81: 6f:86:f4:c7:34:ba:36:e6:63:29:59:c8:a7:f9:68:fe:d5:5d: 17:6c:e2:56:e4:55:05:34:98:55:1a:21:3e:ff:4f:94:09:62: 75:88:91:f7:48:81:15:5a:3c:4d:60:80:ab:f7:bc:83:ec:3e: d4:d3:9a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEAcr9+CRijZ3HZ67gyd6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNDBlMjU2MDY2NTFhMDc1NDg0YzcwOWZhNzY2ZDgwZGFk NTJkOWMwHhcNMjYwMjA5MTEwMTEyWhcNMjYwMjEwMTEwMTEyWjAzMTEwLwYDVQQD EygzNjUzODM4MzM4ZTY4YmExYWI1ZDc1NzBhMmQ5MjU5OTMyNjhmYjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXUMSmwuIBsUtrJ5jq4Wtv48aGXr 9SizgcOGK4xWNOTf9qusaAcK1tDmdLJt+6HDNR/NOV4x8qWWIw8pKoJt3NpnV9Vg 120RBnknuO1uQXQzMI7WjDWxvqByeuiopHUl1LS4qBF32Ot7r+ioLViA6/M5Qzge z2euqTlXJ7rE+QKO1/Be89M+4YJLt/Al+XM3GMslPPNHMbqeXPpIrtDtaZJHIK+C FQzCW8cE4wXAuqeCFAdG331qq74z5Hrc+ssgyouM/RuKW9vUEM5hPbnr+8brzYJr v1tLDnS7u7Cr++HvKwFuwewZIGf8ouNty7ePGZnbUECDJD+35MdOr1yFEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZTg4M45ouhq111cKLZJZkyaPt0MB8GA1UdIwQY MBaAFM9A4lYGZRoHVITHCfp2bYDa1S2cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83ZDVlMWMtOWQ3OS00YjM5LWI1NjAt ZTk5N2U1NThkNzNhLzEvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83ZDVlMWMtOWQ3OS00YjM5LWI1NjAtZTk5N2U1NThkNzNh LzEvejBEaVZnWmxHZ2RVaE1jSi1uWnRnTnJWTFp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/T6AkMr LPcBQSzDs39uAVEWyh3cuK5t9q+1ZWUFumk5oiKDE+tSal1+yMT7d1QLqlnDZtLP V+DiSYBoPaszSjyp76cixEUeX4Fa90ZRXOne8OH9MEN24j17LQEp3SlG1Oo3AW4w jOcbBnpYpxDtBKB59sqWeb7F22q/iyfKgiQhwr1XQ5Qf9lNxsZGpz7+i09RGODsX BNbVDpz75rAodZgRBSS4nnET9p92oM+MkIuEpy6QmxI6vUx0hsf/C9KF84G0fNWB b4b0xzS6NuZjKVnIp/lo/tVdF2ziVuRVBTSYVRohPv9PlAlidYiR90iBFVo8TWCA q/e8g+w+1NOa0g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:01 2026 by rpki-client