This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft File: Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft (raw, json) Hash identifier: lVurajgoZpzuzfpiYU+PHRicm8WDu8pxWTqpwEZavsk= Subject key identifier: 12:EC:07:8A:57:13:13:60:4F:AB:A0:7B:77:F6:C3:E1:B1:ED:7E:A0 Authority key identifier: 67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC Certificate issuer: /CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Certificate serial: 019C44A296646EF1D456A1D18771086BBA54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft Manifest number: 0ED4 Signing time: Mon 09 Feb 2026 23:00:31 +0000 Manifest this update: Mon 09 Feb 2026 23:00:31 +0000 Manifest next update: Tue 10 Feb 2026 23:00:31 +0000 Files and hashes: 1: Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl (hash: tyovb1jgM8eg2JDrukbSVhqO5/Vq/Xcp7dGTjekAlIc=) 2: f2zknB9pBzLqJNKA9xa7Tf6W4Ic.roa (hash: 1Rqc6mFbR90w9k/f9rpjArBKFO0g3svHy0Exo+MbIcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:a2:96:64:6e:f1:d4:56:a1:d1:87:71:08:6b:ba:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678cebf7eec3d5e0121e401170ce01ff3888d4ec Validity Not Before: Feb 9 23:00:31 2026 GMT Not After : Feb 10 23:00:31 2026 GMT Subject: CN=12ec078a571313604faba07b77f6c3e1b1ed7ea0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d6:d3:fc:69:be:8c:ea:ea:7e:4f:fe:aa:41: ec:97:ed:4b:02:54:02:c2:a9:fd:8c:88:56:d5:b1: 73:db:a8:b9:77:1b:f9:02:6e:26:aa:0e:6a:33:49: 1e:93:90:ba:43:86:e3:32:67:2b:a1:4f:cc:c6:72: 41:60:b8:ea:89:ae:61:f8:72:71:35:82:70:93:ac: 5b:69:2c:ed:d4:fa:dc:43:f7:0c:72:46:81:21:9c: 67:c7:08:68:6d:9c:5f:a3:bd:fb:52:a1:5c:75:eb: dc:aa:1f:7b:2d:e0:52:34:69:6a:b4:79:05:02:87: 47:d5:18:a9:56:ca:03:34:60:bf:ec:03:1a:0d:7a: 1a:a9:56:ee:ec:43:19:45:e0:6a:2d:c4:44:d8:2b: 1f:3b:49:02:53:bc:b9:93:54:63:61:52:05:dd:0c: be:3c:d4:61:9f:39:8e:95:07:83:19:b0:ad:82:67: b0:ec:55:70:68:d1:80:14:24:bd:92:a3:c3:f2:2f: 19:b4:04:2c:e3:a2:c0:6b:55:6d:57:12:09:8c:0c: 7e:3c:9c:14:21:db:91:1e:0d:b9:60:be:8d:57:58: 8c:ef:0e:eb:01:4d:5b:45:6c:34:6b:6e:4c:22:a5: a8:4b:72:6f:98:b1:f7:c1:13:0f:4d:c8:81:b9:49: b7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:EC:07:8A:57:13:13:60:4F:AB:A0:7B:77:F6:C3:E1:B1:ED:7E:A0 X509v3 Authority Key Identifier: keyid:67:8C:EB:F7:EE:C3:D5:E0:12:1E:40:11:70:CE:01:FF:38:88:D4:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4zr9-7D1eASHkARcM4B_ziI1Ow.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f2b87b-95e9-4cf8-abeb-6dfbba4edd59/1/Z4zr9-7D1eASHkARcM4B_ziI1Ow.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:cc:11:cb:f5:1c:e5:8e:52:46:45:9a:7e:62:01:44:66:e1: 06:43:a5:d0:13:b1:a1:13:38:11:e4:21:ed:88:d9:cd:b8:e3: 2b:8b:a7:4f:e9:17:18:24:5b:1b:64:60:12:8e:31:af:7b:17: 2a:26:31:44:ef:8b:18:12:ac:4a:a6:95:2b:49:9e:36:0d:f8: 0c:d1:ab:c5:49:37:63:9a:6a:76:a3:33:1b:8e:7e:f3:8b:bb: fa:fa:c2:46:0d:c5:f7:78:a7:91:9e:4d:fb:f3:c1:2b:e2:54: 89:02:b3:cd:36:55:a8:4b:de:a9:a2:76:38:a3:6d:f1:fb:ba: 3e:24:04:ed:ef:37:be:2e:3a:e2:b1:d2:02:35:e2:e3:2f:18: 61:e9:cf:a9:99:61:ce:e5:75:a9:ac:80:b1:4a:b2:bb:ba:7d: 47:6b:e0:74:77:a8:33:32:5e:47:c0:a8:18:9d:8a:fa:7a:1e: 29:7e:a0:30:4f:5d:02:34:e2:57:98:7e:91:23:af:35:f3:e0: 49:ef:4b:18:15:a8:1e:be:30:81:24:59:c6:3e:bd:f5:c6:b3: b4:8f:8b:a5:cb:48:06:f0:fd:22:15:f6:8a:74:42:bb:6a:7b: 29:ea:3f:f6:aa:26:c1:0e:b0:c3:d3:4e:c8:65:dc:81:1d:f2: a7:e8:6b:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEopZkbvHUVqHRh3EIa7pUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGNlYmY3ZWVjM2Q1ZTAxMjFlNDAxMTcwY2UwMWZmMzg4 OGQ0ZWMwHhcNMjYwMjA5MjMwMDMxWhcNMjYwMjEwMjMwMDMxWjAzMTEwLwYDVQQD EygxMmVjMDc4YTU3MTMxMzYwNGZhYmEwN2I3N2Y2YzNlMWIxZWQ3ZWEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNbT/Gm+jOrqfk/+qkHsl+1LAlQC wqn9jIhW1bFz26i5dxv5Am4mqg5qM0kek5C6Q4bjMmcroU/MxnJBYLjqia5h+HJx NYJwk6xbaSzt1PrcQ/cMckaBIZxnxwhobZxfo737UqFcdevcqh97LeBSNGlqtHkF AodH1RipVsoDNGC/7AMaDXoaqVbu7EMZReBqLcRE2CsfO0kCU7y5k1RjYVIF3Qy+ PNRhnzmOlQeDGbCtgmew7FVwaNGAFCS9kqPD8i8ZtAQs46LAa1VtVxIJjAx+PJwU IduRHg25YL6NV1iM7w7rAU1bRWw0a25MIqWoS3JvmLH3wRMPTciBuUm3xQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBLsB4pXExNgT6uge3f2w+Gx7X6gMB8GA1UdIwQY MBaAFGeM6/fuw9XgEh5AEXDOAf84iNTsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWIt NmRmYmJhNGVkZDU5LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mMmI4N2ItOTVlOS00Y2Y4LWFiZWItNmRmYmJhNGVkZDU5 LzEvWjR6cjktN0QxZUFTSGtBUmNNNEJfemlJMU93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1cwRy/Uc 5Y5SRkWafmIBRGbhBkOl0BOxoRM4EeQh7YjZzbjjK4unT+kXGCRbG2RgEo4xr3sX KiYxRO+LGBKsSqaVK0meNg34DNGrxUk3Y5pqdqMzG45+84u7+vrCRg3F93inkZ5N +/PBK+JUiQKzzTZVqEveqaJ2OKNt8fu6PiQE7e83vi464rHSAjXi4y8YYenPqZlh zuV1qayAsUqyu7p9R2vgdHeoMzJeR8CoGJ2K+noeKX6gME9dAjTiV5h+kSOvNfPg Se9LGBWoHr4wgSRZxj699caztI+LpctIBvD9IhX2inRCu2p7Keo/9qomwQ6ww9NO yGXcgR3yp+hrsQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:39 2026 by rpki-client