This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft File: ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft (raw, json) Hash identifier: DEORY+IA1OEyXCKKeYab1vGjgHTrGMYG6Oqxa6XjbeE= Subject key identifier: 08:C6:55:40:64:91:A9:16:2F:E5:1B:DF:EB:46:C1:D9:C3:76:C2:5E Authority key identifier: 65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 Certificate issuer: /CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Certificate serial: 019C427D50E5604CC42F85FFD1209211C85B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft Manifest number: 1815 Signing time: Mon 09 Feb 2026 13:00:34 +0000 Manifest this update: Mon 09 Feb 2026 13:00:34 +0000 Manifest next update: Tue 10 Feb 2026 13:00:34 +0000 Files and hashes: 1: ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl (hash: Z0YEBqksMBQaAITSr1g+Tvdiye1CvOrvivldNhFAIYc=) 2: ruf5ygSKBpBoMppN0_Ydb0zlKDA.roa (hash: AYXx9sIQleSTgwqrdqLha3RogyCLh5BNOu7WolJzJ7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:50:e5:60:4c:c4:2f:85:ff:d1:20:92:11:c8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=657ed6f5bba633d55269fdd056bcf60c68c7b2b8 Validity Not Before: Feb 9 13:00:34 2026 GMT Not After : Feb 10 13:00:34 2026 GMT Subject: CN=08c655406491a9162fe51bdfeb46c1d9c376c25e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:57:46:d8:af:76:0e:ab:96:5f:8f:aa:a8:3a: c1:76:ff:35:14:49:0d:1f:0e:95:e0:a8:0f:1e:55: 28:c5:53:c0:90:47:4d:cc:48:0c:bc:12:af:a0:50: 00:6b:f7:7d:c3:ef:eb:db:21:8d:fe:0c:e3:c5:05: 5f:d6:c8:95:a6:30:c3:0b:9f:86:fe:8a:7a:6f:9a: 17:0c:eb:be:3b:ca:c9:81:b9:cd:6d:8e:b9:12:21: 9a:58:54:42:47:8a:c2:7c:72:57:18:33:0c:47:e8: 6a:a7:3e:a8:68:d0:e6:f5:5b:bc:ec:47:1b:1f:69: b9:ee:d6:75:04:c9:74:f5:d5:b3:6d:56:fa:94:b4: 35:f5:f8:d9:33:c7:4a:22:76:66:48:31:06:e9:93: 9f:c9:8f:db:53:97:63:9d:1a:b8:87:84:35:c4:1b: 71:08:0a:b6:5a:e6:21:03:1f:67:2d:77:96:55:0e: 45:2a:09:c6:20:2f:bd:76:50:7d:41:6c:0b:08:9d: 9c:42:f8:f5:52:c6:e0:03:87:b0:e6:24:d4:fc:18: df:7b:76:3f:44:da:1c:69:44:81:27:4a:16:41:bf: e3:df:c2:53:4d:a0:55:56:f6:37:35:c6:ca:79:ab: 0a:71:2d:21:56:9a:1e:fe:ab:7f:b9:c3:51:9b:14: 90:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:C6:55:40:64:91:A9:16:2F:E5:1B:DF:EB:46:C1:D9:C3:76:C2:5E X509v3 Authority Key Identifier: keyid:65:7E:D6:F5:BB:A6:33:D5:52:69:FD:D0:56:BC:F6:0C:68:C7:B2:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZX7W9bumM9VSaf3QVrz2DGjHsrg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/32/064fac-eddd-4903-a13d-0b9c76c0d91c/1/ZX7W9bumM9VSaf3QVrz2DGjHsrg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:66:92:ac:28:c5:9d:53:ed:48:62:12:cf:83:2a:32:61:6c: 13:ad:f6:af:e1:35:4f:67:6f:03:ac:98:03:56:29:72:06:da: e0:42:5f:04:c3:82:f4:75:a4:80:60:d0:37:0e:7a:73:64:be: 66:ab:63:62:9e:04:a5:ff:14:c5:e7:cd:fe:88:3f:34:aa:d2: 4e:ef:4e:a5:1f:e9:3c:f3:33:f8:92:cd:20:ca:c2:95:24:16: e3:c6:9e:20:82:54:b6:72:71:3e:37:46:ed:48:44:29:80:1c: 46:ef:8b:8a:a2:ff:0a:0d:5c:b2:32:dd:37:2b:16:f8:c0:3c: d4:24:e9:5b:1b:e7:28:5f:fd:0f:6a:27:26:5f:1e:9d:8d:d3: b4:56:a1:74:e1:7c:ee:6c:9f:f3:f5:6f:0c:09:fb:6f:89:2b: 0c:ed:25:03:5a:d0:10:97:66:19:39:d6:e3:d8:1d:b2:9b:97: c1:96:10:6a:50:00:d5:b3:f2:23:13:af:58:8c:0c:75:6e:c4: 35:7f:1a:3e:6c:f2:3b:91:cf:b1:e7:e9:4c:c0:41:d1:f6:d5: 00:e3:1f:a5:a1:98:2b:5d:99:89:06:b8:33:4b:bc:7f:6c:b4: 3a:f1:51:38:e5:30:ff:0a:ea:e7:cf:0d:04:bb:4d:78:e9:8b: 7d:bd:c2:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVDlYEzEL4X/0SCSEchbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1N2VkNmY1YmJhNjMzZDU1MjY5ZmRkMDU2YmNmNjBjNjhj N2IyYjgwHhcNMjYwMjA5MTMwMDM0WhcNMjYwMjEwMTMwMDM0WjAzMTEwLwYDVQQD EygwOGM2NTU0MDY0OTFhOTE2MmZlNTFiZGZlYjQ2YzFkOWMzNzZjMjVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1dG2K92DquWX4+qqDrBdv81FEkN Hw6V4KgPHlUoxVPAkEdNzEgMvBKvoFAAa/d9w+/r2yGN/gzjxQVf1siVpjDDC5+G /op6b5oXDOu+O8rJgbnNbY65EiGaWFRCR4rCfHJXGDMMR+hqpz6oaNDm9Vu87Ecb H2m57tZ1BMl09dWzbVb6lLQ19fjZM8dKInZmSDEG6ZOfyY/bU5djnRq4h4Q1xBtx CAq2WuYhAx9nLXeWVQ5FKgnGIC+9dlB9QWwLCJ2cQvj1UsbgA4ew5iTU/Bjfe3Y/ RNocaUSBJ0oWQb/j38JTTaBVVvY3NcbKeasKcS0hVpoe/qt/ucNRmxSQQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjGVUBkkakWL+Ub3+tGwdnDdsJeMB8GA1UdIwQY MBaAFGV+1vW7pjPVUmn90Fa89gxox7K4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2Qt MGI5Yzc2YzBkOTFjLzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMi8wNjRmYWMtZWRkZC00OTAzLWExM2QtMGI5Yzc2YzBkOTFj LzEvWlg3VzlidW1NOVZTYWYzUVZyejJER2pIc3JnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmaSrCjF nVPtSGISz4MqMmFsE632r+E1T2dvA6yYA1Ypcgba4EJfBMOC9HWkgGDQNw56c2S+ ZqtjYp4Epf8UxefN/og/NKrSTu9OpR/pPPMz+JLNIMrClSQW48aeIIJUtnJxPjdG 7UhEKYAcRu+LiqL/Cg1csjLdNysW+MA81CTpWxvnKF/9D2onJl8enY3TtFahdOF8 7myf8/VvDAn7b4krDO0lA1rQEJdmGTnW49gdspuXwZYQalAA1bPyIxOvWIwMdW7E NX8aPmzyO5HPsefpTMBB0fbVAOMfpaGYK12ZiQa4M0u8f2y0OvFROOUw/wrq588N BLtNeOmLfb3CQw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:06 2026 by rpki-client