This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft File: zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft (raw, json) Hash identifier: xsfe4bDiO6Gbml3+hW9WWU9ZJji5hEkbA2ld8kHe9go= Subject key identifier: 2C:F8:74:65:33:EF:25:4E:FC:0A:1A:B6:F1:ED:4A:C9:04:F5:72:13 Authority key identifier: CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54 Certificate issuer: /CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354 Certificate serial: 019C42467C89C875970ACBCFE98DE28BEA9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft Manifest number: 10C4 Signing time: Mon 09 Feb 2026 12:00:41 +0000 Manifest this update: Mon 09 Feb 2026 12:00:41 +0000 Manifest next update: Tue 10 Feb 2026 12:00:41 +0000 Files and hashes: 1: mGIcxgiPYTdH4yLZmV0JBleuht4.roa (hash: OZj4BcogggilSPwT8xEb1QoBaX+3k88vX0bMKlFe0Qg=) 2: zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl (hash: c+OeqJiM1tT+XaGloO28Ez6Mw/D37FjP3yszvY3sGDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:7c:89:c8:75:97:0a:cb:cf:e9:8d:e2:8b:ea:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cea179e4f353ea9dcaf02f37a72b750ecfa1c354 Validity Not Before: Feb 9 12:00:41 2026 GMT Not After : Feb 10 12:00:41 2026 GMT Subject: CN=2cf8746533ef254efc0a1ab6f1ed4ac904f57213 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f7:dd:e0:7d:13:58:a6:3e:e8:f8:0b:6d:a2: f0:f1:b0:8f:64:35:f9:4a:e0:e5:a6:f1:a0:21:48: d6:8d:0e:b3:d0:f8:9b:a7:9c:37:b8:1c:a6:b0:e1: 25:42:75:5c:47:62:cc:62:01:52:19:24:44:11:cb: 80:34:09:52:68:f4:0a:8d:7a:cd:3b:99:e8:fd:5a: a2:6f:dc:d4:ee:ba:db:82:3d:c3:be:49:85:08:63: 00:d0:66:c8:7d:14:12:24:df:97:cd:bb:8c:8b:9c: 35:c4:b2:27:85:41:24:45:98:09:2f:15:dd:6e:db: 7b:54:d0:79:44:b3:c7:de:b4:f2:fa:9b:6b:18:76: 91:6c:7f:78:86:88:8f:cb:e7:06:e3:fe:5b:6f:39: e7:af:bb:26:56:5e:ca:f7:c2:ca:3a:ac:d7:f6:58: 28:3e:a0:b1:1b:78:9c:60:90:db:c6:2e:8d:c2:70: 9c:83:28:80:0d:12:be:e7:f5:e4:28:00:3c:89:35: 02:36:fa:24:45:56:27:51:c7:60:45:49:9f:a0:db: d5:04:e0:ff:e1:fa:d3:fa:57:08:7d:60:cb:35:88: 3b:c0:81:7f:08:cb:43:cf:62:15:79:ed:83:2f:3c: b4:8d:b4:e4:3f:6c:40:6c:1a:43:06:2d:b5:81:90: 73:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:F8:74:65:33:EF:25:4E:FC:0A:1A:B6:F1:ED:4A:C9:04:F5:72:13 X509v3 Authority Key Identifier: keyid:CE:A1:79:E4:F3:53:EA:9D:CA:F0:2F:37:A7:2B:75:0E:CF:A1:C3:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zqF55PNT6p3K8C83pyt1Ds-hw1Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/4a05f0-7abb-4e1f-8c27-215cd570e409/1/zqF55PNT6p3K8C83pyt1Ds-hw1Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:a1:c4:d2:f0:a2:8d:9a:bc:0b:99:9a:d2:db:f2:c0:82:bf: 48:3b:e0:8c:e6:d6:01:1d:4f:d1:70:1c:00:1c:30:3e:76:89: ca:68:4f:a4:66:7d:2e:72:12:fd:ed:ef:c9:0a:16:43:32:06: 2d:a1:aa:cb:6f:4d:24:6b:88:55:7b:38:fc:b3:7e:d7:b9:2e: 89:da:8c:59:c2:65:33:f0:56:7d:1c:95:a1:9d:6e:36:53:45: 79:c3:7e:af:b1:0e:10:f3:bf:18:40:0f:01:46:45:f7:87:86: 35:3a:1e:18:1a:fc:c4:35:6a:d3:ae:9b:52:1b:8e:c7:c2:a6: ee:28:6a:24:bf:0d:c6:24:c7:74:1c:6b:29:9f:9d:bd:41:ac: e1:a2:af:31:f7:8b:ad:b2:14:72:eb:7c:cd:9a:1e:ba:38:dd: 6f:82:5c:bd:b6:22:fb:d6:d9:85:83:d9:c7:b4:a9:35:85:01: ec:3a:3e:3c:1d:56:38:4c:07:09:81:b0:2e:4f:16:db:eb:d5: 64:3a:52:cf:5f:9a:b7:c7:32:54:87:e3:f7:5a:01:3c:03:84: 26:3c:c7:4f:d6:24:23:be:f1:6c:22:94:94:94:a8:94:b6:56: 13:9e:5c:cf:a1:da:63:9e:f6:66:4a:bc:c1:b4:7d:5a:9e:8b: ff:a0:02:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnyJyHWXCsvP6Y3ii+qeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYTE3OWU0ZjM1M2VhOWRjYWYwMmYzN2E3MmI3NTBlY2Zh MWMzNTQwHhcNMjYwMjA5MTIwMDQxWhcNMjYwMjEwMTIwMDQxWjAzMTEwLwYDVQQD EygyY2Y4NzQ2NTMzZWYyNTRlZmMwYTFhYjZmMWVkNGFjOTA0ZjU3MjEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx/fd4H0TWKY+6PgLbaLw8bCPZDX5 SuDlpvGgIUjWjQ6z0Pibp5w3uBymsOElQnVcR2LMYgFSGSREEcuANAlSaPQKjXrN O5no/Vqib9zU7rrbgj3DvkmFCGMA0GbIfRQSJN+XzbuMi5w1xLInhUEkRZgJLxXd btt7VNB5RLPH3rTy+ptrGHaRbH94hoiPy+cG4/5bbznnr7smVl7K98LKOqzX9lgo PqCxG3icYJDbxi6NwnCcgyiADRK+5/XkKAA8iTUCNvokRVYnUcdgRUmfoNvVBOD/ 4frT+lcIfWDLNYg7wIF/CMtDz2IVee2DLzy0jbTkP2xAbBpDBi21gZBz+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCz4dGUz7yVO/AoatvHtSskE9XITMB8GA1UdIwQY MBaAFM6heeTzU+qdyvAvN6crdQ7PocNUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy80YTA1ZjAtN2FiYi00ZTFmLThjMjct MjE1Y2Q1NzBlNDA5LzEvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy80YTA1ZjAtN2FiYi00ZTFmLThjMjctMjE1Y2Q1NzBlNDA5 LzEvenFGNTVQTlQ2cDNLOEM4M3B5dDFEcy1odzFRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtaHE0vCi jZq8C5ma0tvywIK/SDvgjObWAR1P0XAcABwwPnaJymhPpGZ9LnIS/e3vyQoWQzIG LaGqy29NJGuIVXs4/LN+17kuidqMWcJlM/BWfRyVoZ1uNlNFecN+r7EOEPO/GEAP AUZF94eGNToeGBr8xDVq066bUhuOx8Km7ihqJL8NxiTHdBxrKZ+dvUGs4aKvMfeL rbIUcut8zZoeujjdb4JcvbYi+9bZhYPZx7SpNYUB7Do+PB1WOEwHCYGwLk8W2+vV ZDpSz1+at8cyVIfj91oBPAOEJjzHT9YkI77xbCKUlJSolLZWE55cz6HaY572Zkq8 wbR9Wp6L/6ACbA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:08 2026 by rpki-client