This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft File: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft (raw, json) Hash identifier: lvh58XSx9FIJy1uTEfrEVwBgtQuFG6Y3cCN8Kg/ptrw= Subject key identifier: 6E:4A:5A:2E:B5:BD:89:9B:A2:A1:E7:ED:6E:5E:70:A4:B7:F8:33:1D Authority key identifier: 66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 Certificate issuer: /CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Certificate serial: 019C42B4993DBB0968BFE42EF5B1869BF4B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft Manifest number: 17A4 Signing time: Mon 09 Feb 2026 14:00:57 +0000 Manifest this update: Mon 09 Feb 2026 14:00:57 +0000 Manifest next update: Tue 10 Feb 2026 14:00:57 +0000 Files and hashes: 1: S0f6ldR7ma4WBAE-dRr9WopLDdU.roa (hash: H3wJKu7aKl/QyocGnlCHOBSPgMe8CiKy49N+Fdk99WU=) 2: ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl (hash: KQqkiPuK99OsthTF5yMJoWZAkaEIBD1d6hmvSkFzZto=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:99:3d:bb:09:68:bf:e4:2e:f5:b1:86:9b:f4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6611a57d2a03b7065fa8c17b313735bdcda390e9 Validity Not Before: Feb 9 14:00:57 2026 GMT Not After : Feb 10 14:00:57 2026 GMT Subject: CN=6e4a5a2eb5bd899ba2a1e7ed6e5e70a4b7f8331d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ab:f4:d3:f9:77:54:0d:ea:39:24:c1:f2:f6: 39:ca:a2:56:f1:61:be:72:87:5b:f8:12:68:b5:22: c3:ec:87:b1:e6:f0:e2:36:63:39:2a:7a:1a:67:b0: 07:b7:a7:a7:da:d8:ae:60:29:e9:4f:28:be:3a:36: 9b:fa:2d:9f:f5:28:26:c9:81:a4:c0:79:c7:e2:1d: c2:0d:20:d0:28:31:1d:9c:39:de:a6:91:62:1b:69: 3d:bb:da:ad:41:25:77:66:c9:4f:60:07:1b:55:4f: 70:ee:49:f2:80:f1:0a:24:13:b8:75:c4:04:72:f3: ee:e3:c5:08:ed:c3:6b:75:ce:6b:2f:b1:cb:b7:e6: 9f:17:58:15:59:42:8f:09:c7:a8:6e:ae:3b:c7:5f: d7:67:a0:9a:f6:25:70:3a:65:fc:d4:7c:f7:d1:fd: 6c:51:7e:b6:63:a7:2f:fd:ac:ed:30:25:ca:d5:3f: 66:9c:eb:4a:a5:10:7c:59:dc:e2:e5:dc:cb:2a:ec: b7:6b:45:76:ab:1d:8c:b7:71:0b:cb:d3:85:ba:10: 96:87:b8:80:88:3c:37:1a:87:54:cf:5d:0c:0c:c2: 05:6e:dc:c1:10:1b:ba:7a:08:c8:42:7c:21:95:21: 96:f7:f0:e2:5e:dc:29:99:70:e3:79:38:99:7a:a8: 2a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:4A:5A:2E:B5:BD:89:9B:A2:A1:E7:ED:6E:5E:70:A4:B7:F8:33:1D X509v3 Authority Key Identifier: keyid:66:11:A5:7D:2A:03:B7:06:5F:A8:C1:7B:31:37:35:BD:CD:A3:90:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/edb208-6fed-44e4-b1ab-df0ca4d41955/1/ZhGlfSoDtwZfqMF7MTc1vc2jkOk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:36:c0:77:a1:11:a8:9e:f1:cb:0c:cf:b3:6f:38:b9:e7:22: 0e:4f:6c:8a:43:c8:76:e8:ef:d0:fc:79:a7:8a:f9:bc:cd:5e: d2:fa:df:17:8e:05:1c:5b:eb:f4:c7:89:e2:5e:dc:c7:56:67: 53:97:10:c9:15:20:1f:24:40:9b:4d:3f:1f:af:4c:a6:98:c9: 8b:59:1c:1d:2a:8a:07:0d:70:e7:43:82:68:ba:2e:19:63:82: f4:91:a6:10:82:39:dc:e9:74:28:22:59:4b:4c:49:e8:74:7e: 50:a4:ff:f9:43:be:0b:91:2b:12:19:1b:05:ce:21:3d:19:ae: 8d:e4:c9:ab:ea:3a:fd:08:37:f4:2f:ee:2a:a5:e8:7e:27:7e: b7:4d:08:75:1c:58:89:fa:98:75:6f:f0:9d:e2:d6:c0:e8:0a: 3f:b3:2d:26:04:42:71:98:a1:22:7f:63:4b:5b:1e:bf:78:e8: dc:d1:7d:44:da:f9:3e:10:03:8c:30:4e:c1:0f:12:91:45:69: 6c:08:4c:f9:17:ce:46:7f:17:f0:6e:1c:fc:a1:ac:05:8d:de: 8c:f1:f0:6e:1e:31:dc:f3:16:75:b4:9d:7d:ce:3b:71:86:44: de:52:b0:9c:96:cf:f0:c0:86:f6:32:55:d9:87:2a:b7:62:82: 4c:da:7e:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJk9uwlov+Qu9bGGm/SzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MTFhNTdkMmEwM2I3MDY1ZmE4YzE3YjMxMzczNWJkY2Rh MzkwZTkwHhcNMjYwMjA5MTQwMDU3WhcNMjYwMjEwMTQwMDU3WjAzMTEwLwYDVQQD Eyg2ZTRhNWEyZWI1YmQ4OTliYTJhMWU3ZWQ2ZTVlNzBhNGI3ZjgzMzFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA46v00/l3VA3qOSTB8vY5yqJW8WG+ codb+BJotSLD7Iex5vDiNmM5KnoaZ7AHt6en2tiuYCnpTyi+Ojab+i2f9SgmyYGk wHnH4h3CDSDQKDEdnDneppFiG2k9u9qtQSV3ZslPYAcbVU9w7knygPEKJBO4dcQE cvPu48UI7cNrdc5rL7HLt+afF1gVWUKPCceobq47x1/XZ6Ca9iVwOmX81Hz30f1s UX62Y6cv/aztMCXK1T9mnOtKpRB8Wdzi5dzLKuy3a0V2qx2Mt3ELy9OFuhCWh7iA iDw3GodUz10MDMIFbtzBEBu6egjIQnwhlSGW9/DiXtwpmXDjeTiZeqgqmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG5KWi61vYmboqHn7W5ecKS3+DMdMB8GA1UdIwQY MBaAFGYRpX0qA7cGX6jBezE3Nb3No5DpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWIt ZGYwY2E0ZDQxOTU1LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9lZGIyMDgtNmZlZC00NGU0LWIxYWItZGYwY2E0ZDQxOTU1 LzEvWmhHbGZTb0R0d1pmcU1GN01UYzF2YzJqa09rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjbAd6ER qJ7xywzPs284ueciDk9sikPIdujv0Px5p4r5vM1e0vrfF44FHFvr9MeJ4l7cx1Zn U5cQyRUgHyRAm00/H69MppjJi1kcHSqKBw1w50OCaLouGWOC9JGmEII53Ol0KCJZ S0xJ6HR+UKT/+UO+C5ErEhkbBc4hPRmujeTJq+o6/Qg39C/uKqXofid+t00IdRxY ifqYdW/wneLWwOgKP7MtJgRCcZihIn9jS1sev3jo3NF9RNr5PhADjDBOwQ8SkUVp bAhM+RfORn8X8G4c/KGsBY3ejPHwbh4x3PMWdbSdfc47cYZE3lKwnJbP8MCG9jJV 2Ycqt2KCTNp+lA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:55 2026 by rpki-client