This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft File: ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft (raw, json) Hash identifier: v+guu+yJUMcsed6EkwBAeeYsCL1y7IAHGrEXFkELVrc= Subject key identifier: BB:CC:23:08:41:4D:8D:DC:91:CF:90:C8:1B:C1:8E:DA:AD:31:95:E8 Authority key identifier: 65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 Certificate issuer: /CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Certificate serial: 019C43FE1C5598B8CA7F4A04AEAFB8B4EE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft Manifest number: 0F0F Signing time: Mon 09 Feb 2026 20:00:52 +0000 Manifest this update: Mon 09 Feb 2026 20:00:52 +0000 Manifest next update: Tue 10 Feb 2026 20:00:52 +0000 Files and hashes: 1: QPm5_PDWMrxWuR6yCX-RrxN3H3c.roa (hash: F4rOeKQIIr+v8+zO3vdMMRp/iT0j1wFRvBSXZLKj3lw=) 2: ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl (hash: gtdcCf/9epNu1k7N2b96lSISfQnivaRhPD9tdRVvcHw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:1c:55:98:b8:ca:7f:4a:04:ae:af:b8:b4:ee:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6531785b623492ed0c99ed79c7db7404ad4cb171 Validity Not Before: Feb 9 20:00:52 2026 GMT Not After : Feb 10 20:00:52 2026 GMT Subject: CN=bbcc2308414d8ddc91cf90c81bc18edaad3195e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:e4:68:1e:44:bd:3c:9a:03:16:63:26:32:92: d9:2b:f0:a5:a2:36:1b:1b:32:ad:b7:4e:ce:c1:a1: d6:75:ec:01:1c:06:1f:5f:52:61:d7:43:8f:1d:25: 2d:0b:6c:0d:dc:4e:22:38:c4:9b:58:c4:b5:0d:9b: ac:46:b4:59:e4:60:40:51:df:49:eb:de:3b:f8:91: 3a:dd:82:7a:fb:1d:34:4c:b3:83:da:b7:19:54:c7: 9a:1b:cc:99:00:32:8a:31:4b:a4:e9:a4:87:dc:ab: ec:ce:cf:21:5f:e9:7f:ae:f1:ff:10:69:34:f0:d6: 6b:ce:20:8b:0e:76:e4:74:ed:2c:41:38:2a:98:6c: f6:f7:e2:e3:39:27:da:59:fb:81:c7:58:f5:f6:90: 92:02:ad:67:1b:de:83:43:31:8f:df:83:71:d0:fc: 91:89:4c:af:35:d5:8a:8b:c1:68:be:65:5f:3d:f7: f3:7c:9a:dc:47:8b:62:7a:39:5b:2a:56:e5:be:d4: 53:47:c7:25:b9:0a:89:99:ec:16:db:be:94:1c:14: 0f:e1:cc:92:f9:98:bf:71:06:68:f6:da:3f:27:1b: ee:67:b0:02:17:e6:d3:2b:bb:64:1d:5d:62:c4:c2: 79:b0:e3:08:7a:e6:45:80:69:bf:20:dc:a1:b2:55: a4:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:CC:23:08:41:4D:8D:DC:91:CF:90:C8:1B:C1:8E:DA:AD:31:95:E8 X509v3 Authority Key Identifier: keyid:65:31:78:5B:62:34:92:ED:0C:99:ED:79:C7:DB:74:04:AD:4C:B1:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZTF4W2I0ku0Mme15x9t0BK1MsXE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/1b1db0-cee4-441b-93e3-126ce081529a/1/ZTF4W2I0ku0Mme15x9t0BK1MsXE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4c:20:9b:6b:fa:a5:fd:44:b2:0b:14:24:2b:3f:0b:35:51: 9c:ff:41:6d:94:4d:b1:3f:83:06:b4:94:e4:3a:5b:54:dd:41: 08:dd:c0:57:99:10:86:16:a9:18:fa:d5:76:30:c1:db:ba:2f: 22:3c:c7:e8:5b:e3:43:b8:f3:37:66:49:a4:3c:f3:b4:cf:a6: 39:19:11:c3:d7:8f:c7:54:87:ae:f8:d0:8d:9a:42:b5:86:59: 05:fe:c3:4a:07:f8:0a:0b:11:62:e5:47:52:7b:b4:13:d2:29: be:b7:24:15:6f:95:42:db:a5:b0:59:7e:7a:51:6e:8b:51:d2: 13:37:95:fe:5a:b1:6b:75:c9:b7:e8:56:e0:1e:95:58:a7:39: 64:3d:22:d1:b7:bd:17:53:ae:72:a1:2d:18:7d:93:2e:21:04: 78:ad:99:da:fc:f4:09:ea:d6:de:39:b2:e1:48:c3:b3:99:6c: d8:b8:8f:f2:14:f8:b0:f2:da:37:96:e8:25:ad:5c:fb:9f:f6: 58:8e:9b:90:09:75:eb:16:cf:2e:0e:a6:00:70:9a:bd:da:3a: fd:e3:77:78:c8:56:fc:e4:c0:a7:67:10:b9:54:8f:9c:6d:16: 39:cc:72:ee:22:bb:2f:6c:1c:0b:b4:4e:d1:e4:21:63:98:79: 8e:c1:a0:35 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/hxVmLjKf0oErq+4tO40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MzE3ODViNjIzNDkyZWQwYzk5ZWQ3OWM3ZGI3NDA0YWQ0 Y2IxNzEwHhcNMjYwMjA5MjAwMDUyWhcNMjYwMjEwMjAwMDUyWjAzMTEwLwYDVQQD EyhiYmNjMjMwODQxNGQ4ZGRjOTFjZjkwYzgxYmMxOGVkYWFkMzE5NWU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ORoHkS9PJoDFmMmMpLZK/ClojYb GzKtt07OwaHWdewBHAYfX1Jh10OPHSUtC2wN3E4iOMSbWMS1DZusRrRZ5GBAUd9J 6947+JE63YJ6+x00TLOD2rcZVMeaG8yZADKKMUuk6aSH3Kvszs8hX+l/rvH/EGk0 8NZrziCLDnbkdO0sQTgqmGz29+LjOSfaWfuBx1j19pCSAq1nG96DQzGP34Nx0PyR iUyvNdWKi8FovmVfPffzfJrcR4tiejlbKlblvtRTR8cluQqJmewW276UHBQP4cyS +Zi/cQZo9to/JxvuZ7ACF+bTK7tkHV1ixMJ5sOMIeuZFgGm/INyhslWkHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvMIwhBTY3ckc+QyBvBjtqtMZXoMB8GA1UdIwQY MBaAFGUxeFtiNJLtDJntecfbdAStTLFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMt MTI2Y2UwODE1MjlhLzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy8xYjFkYjAtY2VlNC00NDFiLTkzZTMtMTI2Y2UwODE1Mjlh LzEvWlRGNFcySTBrdTBNbWUxNXg5dDBCSzFNc1hFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWkwgm2v6 pf1EsgsUJCs/CzVRnP9BbZRNsT+DBrSU5DpbVN1BCN3AV5kQhhapGPrVdjDB27ov IjzH6FvjQ7jzN2ZJpDzztM+mORkRw9ePx1SHrvjQjZpCtYZZBf7DSgf4CgsRYuVH Unu0E9IpvrckFW+VQtulsFl+elFui1HSEzeV/lqxa3XJt+hW4B6VWKc5ZD0i0be9 F1OucqEtGH2TLiEEeK2Z2vz0CerW3jmy4UjDs5ls2LiP8hT4sPLaN5boJa1c+5/2 WI6bkAl16xbPLg6mAHCavdo6/eN3eMhW/OTAp2cQuVSPnG0WOcxy7iK7L2wcC7RO 0eQhY5h5jsGgNQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:28 2026 by rpki-client