This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft File: Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft (raw, json) Hash identifier: zWA7gnw2D3JHioBuO4CVDy9H0DMg27ZT7AVicKYUYVI= Subject key identifier: 88:14:1A:E5:11:DB:5A:D5:E6:1D:26:71:E1:0F:17:C1:FB:CF:A9:19 Authority key identifier: 67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27 Certificate issuer: /CN=6777a62846df4edbe5666b89e8420e919ab08627 Certificate serial: 019C42EB84FF207D49B8EF432F06E4C3DD2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft Manifest number: 176B Signing time: Mon 09 Feb 2026 15:00:57 +0000 Manifest this update: Mon 09 Feb 2026 15:00:57 +0000 Manifest next update: Tue 10 Feb 2026 15:00:57 +0000 Files and hashes: 1: 3VLDvoZCO7skcLMmoqmsMLtkmQU.roa (hash: 54REseVbtlx9mAKpYatYkVRIZlL/47Cw+aylSFwZYDg=) 2: Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl (hash: vpCfIshZM6j6xoaARxivpAcx628ddws/8TTfH/jgnTg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:84:ff:20:7d:49:b8:ef:43:2f:06:e4:c3:dd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6777a62846df4edbe5666b89e8420e919ab08627 Validity Not Before: Feb 9 15:00:57 2026 GMT Not After : Feb 10 15:00:57 2026 GMT Subject: CN=88141ae511db5ad5e61d2671e10f17c1fbcfa919 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9d:81:62:a7:76:97:a3:24:0f:e4:58:74:be: 0a:26:ab:a8:f0:9a:6c:24:09:79:42:3b:28:14:29: 16:09:0a:7d:f4:e8:6e:90:8c:ca:88:f9:e3:55:01: 4d:3f:ea:da:7a:d0:3f:97:8b:29:c1:b1:03:c1:4d: 97:61:30:2b:a6:c8:be:5b:11:25:87:d2:3e:3e:9c: 2a:18:b0:bf:5a:6c:f1:ef:6b:13:29:52:6c:7f:56: 5b:44:16:80:f9:e2:ae:a9:37:2f:ff:f7:fb:ee:ad: 17:42:94:77:07:cb:4b:ba:09:60:78:82:3e:94:d1: cf:97:5a:6d:7e:b7:95:d1:2e:84:c4:4a:75:f6:ef: 94:d3:18:70:0d:b9:5a:54:8a:fe:88:b5:f0:9e:93: 9c:fb:45:01:38:44:19:4e:1d:d5:c8:90:ae:4e:ba: c8:7b:55:e0:00:ef:94:fb:26:f6:2e:19:f2:89:28: 29:20:69:f6:f9:39:35:5d:e9:f7:21:6f:79:bb:b1: 23:cb:0d:ed:fd:1c:0c:9d:4a:83:19:0a:85:da:6f: 49:5a:38:01:bb:3d:4b:5c:b5:da:90:04:99:08:ef: 9c:47:26:0f:9f:7a:5a:52:31:f6:24:f9:6a:d6:53: 1e:bd:e7:10:a1:b7:46:b4:fe:ef:81:9b:1f:43:50: 81:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:14:1A:E5:11:DB:5A:D5:E6:1D:26:71:E1:0F:17:C1:FB:CF:A9:19 X509v3 Authority Key Identifier: keyid:67:77:A6:28:46:DF:4E:DB:E5:66:6B:89:E8:42:0E:91:9A:B0:86:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3emKEbfTtvlZmuJ6EIOkZqwhic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/cb373f-764d-4532-8333-62d94af801b5/1/Z3emKEbfTtvlZmuJ6EIOkZqwhic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:7d:ca:3a:8a:af:c9:b3:49:ce:c2:f9:76:76:59:2b:fb:1f: 4c:96:c9:5c:12:d6:85:7a:92:61:9b:3a:d5:c8:7e:57:75:a3: 0b:28:8b:63:d1:01:fd:09:11:4a:86:73:23:c3:68:16:cb:7d: ec:e2:4c:08:11:2b:7b:7a:e1:36:b7:6d:e0:85:ff:aa:7d:36: e8:4a:5c:ed:aa:e0:e6:b4:ac:00:78:8c:8b:05:0a:17:40:33: 3e:2d:b4:06:e9:95:0c:00:69:27:5a:93:3f:f1:2e:62:10:0a: 54:4c:c5:7e:55:35:25:2d:25:bc:f3:22:54:6a:52:6c:d1:84: 77:fa:8a:4d:8e:18:d6:a0:12:69:49:d8:6b:1a:16:fd:d2:5c: 69:87:46:09:78:f3:9b:6a:19:ee:57:bc:47:5c:9e:f2:20:c0: 41:38:5e:80:23:9f:93:f9:2a:3e:30:cc:c6:4b:09:c4:fb:55: 44:cb:3d:0e:a0:42:e0:7e:54:55:40:23:64:82:82:ac:28:b1: ee:38:60:38:06:b8:53:b8:88:c1:a0:d9:d2:f6:9c:de:91:e6: 49:1f:b4:a3:92:2a:1b:4c:ac:c1:62:2a:07:03:3c:22:86:cf: 76:42:1a:be:68:4d:28:4b:0f:96:82:81:a6:ed:b3:aa:74:cf: b8:c0:73:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC64T/IH1JuO9DLwbkw90tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzdhNjI4NDZkZjRlZGJlNTY2NmI4OWU4NDIwZTkxOWFi MDg2MjcwHhcNMjYwMjA5MTUwMDU3WhcNMjYwMjEwMTUwMDU3WjAzMTEwLwYDVQQD Eyg4ODE0MWFlNTExZGI1YWQ1ZTYxZDI2NzFlMTBmMTdjMWZiY2ZhOTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv52BYqd2l6MkD+RYdL4KJquo8Jps JAl5QjsoFCkWCQp99OhukIzKiPnjVQFNP+raetA/l4spwbEDwU2XYTArpsi+WxEl h9I+PpwqGLC/Wmzx72sTKVJsf1ZbRBaA+eKuqTcv//f77q0XQpR3B8tLuglgeII+ lNHPl1ptfreV0S6ExEp19u+U0xhwDblaVIr+iLXwnpOc+0UBOEQZTh3VyJCuTrrI e1XgAO+U+yb2LhnyiSgpIGn2+Tk1Xen3IW95u7Ejyw3t/RwMnUqDGQqF2m9JWjgB uz1LXLXakASZCO+cRyYPn3paUjH2JPlq1lMevecQobdGtP7vgZsfQ1CBGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIgUGuUR21rV5h0mceEPF8H7z6kZMB8GA1UdIwQY MBaAFGd3pihG307b5WZriehCDpGasIYnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNlbUtFYmZUdHZsWm11SjZFSU9rWnF3aGljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9jYjM3M2YtNzY0ZC00NTMyLTgzMzMt NjJkOTRhZjgwMWI1LzEvWjNlbUtFYmZUdHZsWm11SjZFSU9rWnF3aGljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9jYjM3M2YtNzY0ZC00NTMyLTgzMzMtNjJkOTRhZjgwMWI1 LzEvWjNlbUtFYmZUdHZsWm11SjZFSU9rWnF3aGljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdn3KOoqv ybNJzsL5dnZZK/sfTJbJXBLWhXqSYZs61ch+V3WjCyiLY9EB/QkRSoZzI8NoFst9 7OJMCBEre3rhNrdt4IX/qn026Epc7arg5rSsAHiMiwUKF0AzPi20BumVDABpJ1qT P/EuYhAKVEzFflU1JS0lvPMiVGpSbNGEd/qKTY4Y1qASaUnYaxoW/dJcaYdGCXjz m2oZ7le8R1ye8iDAQThegCOfk/kqPjDMxksJxPtVRMs9DqBC4H5UVUAjZIKCrCix 7jhgOAa4U7iIwaDZ0vac3pHmSR+0o5IqG0yswWIqBwM8IobPdkIavmhNKEsPloKB pu2zqnTPuMBzyw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:49 2026 by rpki-client