This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft File: zpTDHhXfS3pg5dQN86rBhS6Np0s.mft (raw, json) Hash identifier: 2DQTGb6xuBVu0LSZI7fjqqE6pkslLbIMNHfAvVmFMT8= Subject key identifier: 2A:C5:40:F7:15:76:31:E8:F6:0B:50:72:0F:B1:B3:1C:7A:B8:1A:71 Authority key identifier: CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B Certificate issuer: /CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Certificate serial: 019C427DDBB92E97B1542A62C9D768914556 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft Manifest number: 0A0D Signing time: Mon 09 Feb 2026 13:01:10 +0000 Manifest this update: Mon 09 Feb 2026 13:01:10 +0000 Manifest next update: Tue 10 Feb 2026 13:01:10 +0000 Files and hashes: 1: 2asX8qOaxpLjyUU4myYKc0Ej3nA.roa (hash: xKHvXSgALDQpoGTmF3KkZGpVCQ/XwWuRiWZZZUlqzJ0=) 2: zpTDHhXfS3pg5dQN86rBhS6Np0s.crl (hash: aM6gKmD0IbVM9judVquv9eaANAMC5uPfOwQdyyA/RUY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:db:b9:2e:97:b1:54:2a:62:c9:d7:68:91:45:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce94c31e15df4b7a60e5d40df3aac1852e8da74b Validity Not Before: Feb 9 13:01:10 2026 GMT Not After : Feb 10 13:01:10 2026 GMT Subject: CN=2ac540f7157631e8f60b50720fb1b31c7ab81a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:1b:72:03:57:cb:63:63:85:37:78:aa:81: 90:2f:46:6e:67:f0:b4:03:95:85:fc:bb:de:72:e5: 75:93:be:dd:e2:4f:83:dd:12:72:24:05:a7:9e:6b: ff:df:c5:b6:fe:b5:04:80:0e:41:83:22:f4:e8:c4: 5a:8f:b6:0b:99:9c:f5:4a:7b:a5:33:93:3a:eb:3c: 11:96:c2:6f:3b:c8:00:9a:b2:12:a7:d2:9c:2d:bb: c4:03:f8:4b:d8:9a:5b:1d:2c:56:17:74:91:c8:6b: d3:a9:12:ac:2e:f9:91:cb:49:a5:03:8f:ce:07:58: 92:ec:df:e6:b3:3f:37:81:cc:b3:c2:a1:8e:47:c3: ee:f6:6a:1b:c4:ff:bb:9e:a7:60:d6:20:d7:94:fb: f6:da:34:00:7e:b1:7f:24:cc:9e:56:04:b1:3c:4d: 89:d5:94:53:89:58:c4:65:8f:0f:fc:a9:b1:43:d5: 31:5d:f9:d9:a8:78:f5:ef:e6:b1:57:50:0c:f2:24: fc:06:fc:f1:80:cf:3b:96:9a:42:d6:95:ec:d7:2b: ea:6b:a9:c3:3d:ba:0a:16:d7:c5:dd:29:4f:f0:f6: e7:61:b3:64:61:3b:e6:3f:3f:c6:b9:00:91:b0:a3: 16:07:49:fc:3b:7b:6c:b6:d9:ca:02:aa:2f:7e:6d: 8c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C5:40:F7:15:76:31:E8:F6:0B:50:72:0F:B1:B3:1C:7A:B8:1A:71 X509v3 Authority Key Identifier: keyid:CE:94:C3:1E:15:DF:4B:7A:60:E5:D4:0D:F3:AA:C1:85:2E:8D:A7:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zpTDHhXfS3pg5dQN86rBhS6Np0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ed7cb2-e387-47bf-be4a-08f2263a413c/1/zpTDHhXfS3pg5dQN86rBhS6Np0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:5a:2d:47:a2:9b:6b:1f:cb:90:c1:df:98:ac:d1:9c:83:87: 4c:2f:85:1d:97:97:1e:3b:64:8b:02:e7:4c:a6:32:e0:8a:76: 69:6b:00:d7:23:81:8f:18:9d:b4:10:ca:e6:10:4f:84:87:dd: 1e:a4:b7:db:0e:d2:f7:c7:6e:ad:f5:ed:a0:a5:37:b3:cc:0e: ca:8c:84:1f:ce:41:7f:b3:f1:aa:43:8f:c6:66:ce:75:d4:bc: 49:10:06:46:69:d5:8c:5f:1f:88:26:6a:4c:17:7a:f1:36:5a: ca:af:95:cc:d1:56:da:53:3d:a5:a2:5c:c9:53:3c:f1:d3:d1: c6:3a:22:9d:18:37:ce:ab:31:7b:4b:24:15:c0:47:54:c2:1c: 48:b3:0f:f4:aa:9d:49:91:73:d6:44:1c:ec:62:0e:ca:d1:9e: b2:c5:bc:0c:b8:0f:4f:4c:3f:7b:87:4f:51:9a:7b:87:fe:77: ad:db:89:08:1a:de:d6:de:26:d0:1f:85:88:ed:58:a8:e1:b8: 53:ce:da:44:74:f0:d9:ef:74:5e:be:17:8b:7a:43:44:2a:5e: 33:6f:cf:6e:ff:4c:07:70:6c:a5:e3:48:df:68:76:b2:06:07: e0:39:1d:c5:2a:2f:c4:e0:ab:91:76:d7:f6:27:69:b1:f2:2e: 83:00:a7:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdu5LpexVCpiyddokUVWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOTRjMzFlMTVkZjRiN2E2MGU1ZDQwZGYzYWFjMTg1MmU4 ZGE3NGIwHhcNMjYwMjA5MTMwMTEwWhcNMjYwMjEwMTMwMTEwWjAzMTEwLwYDVQQD EygyYWM1NDBmNzE1NzYzMWU4ZjYwYjUwNzIwZmIxYjMxYzdhYjgxYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVobcgNXy2NjhTd4qoGQL0ZuZ/C0 A5WF/LvecuV1k77d4k+D3RJyJAWnnmv/38W2/rUEgA5BgyL06MRaj7YLmZz1Snul M5M66zwRlsJvO8gAmrISp9KcLbvEA/hL2JpbHSxWF3SRyGvTqRKsLvmRy0mlA4/O B1iS7N/msz83gcyzwqGOR8Pu9mobxP+7nqdg1iDXlPv22jQAfrF/JMyeVgSxPE2J 1ZRTiVjEZY8P/KmxQ9UxXfnZqHj17+axV1AM8iT8BvzxgM87lppC1pXs1yvqa6nD PboKFtfF3SlP8PbnYbNkYTvmPz/GuQCRsKMWB0n8O3tsttnKAqovfm2MsQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrFQPcVdjHo9gtQcg+xsxx6uBpxMB8GA1UdIwQY MBaAFM6Uwx4V30t6YOXUDfOqwYUujadLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEt MDhmMjI2M2E0MTNjLzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9lZDdjYjItZTM4Ny00N2JmLWJlNGEtMDhmMjI2M2E0MTNj LzEvenBUREhoWGZTM3BnNWRRTjg2ckJoUzZOcDBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASlotR6Kb ax/LkMHfmKzRnIOHTC+FHZeXHjtkiwLnTKYy4Ip2aWsA1yOBjxidtBDK5hBPhIfd HqS32w7S98durfXtoKU3s8wOyoyEH85Bf7PxqkOPxmbOddS8SRAGRmnVjF8fiCZq TBd68TZayq+VzNFW2lM9paJcyVM88dPRxjoinRg3zqsxe0skFcBHVMIcSLMP9Kqd SZFz1kQc7GIOytGessW8DLgPT0w/e4dPUZp7h/53rduJCBre1t4m0B+FiO1YqOG4 U87aRHTw2e90Xr4Xi3pDRCpeM2/Pbv9MB3BspeNI32h2sgYH4DkdxSovxOCrkXbX 9idpsfIugwCn4g== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:44 2026 by rpki-client