This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft File: zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft (raw, json) Hash identifier: e8uft3EFMb+nzf+mIrOPGMprLqhPgE69Zt5ql+xulm0= Subject key identifier: E1:47:7A:B1:AB:03:97:50:AB:C1:D4:EA:9E:93:7C:6A:BC:F7:F6:0B Authority key identifier: CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3 Certificate issuer: /CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3 Certificate serial: 019C4246517B85E30A36AA669F78D247C57B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft Manifest number: 14D0 Signing time: Mon 09 Feb 2026 12:00:30 +0000 Manifest this update: Mon 09 Feb 2026 12:00:30 +0000 Manifest next update: Tue 10 Feb 2026 12:00:30 +0000 Files and hashes: 1: zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl (hash: PcH34EFx3uvO4Ptixtqj+DkxWyPiuWtdSxXf1J+Mz54=) 2: zsJeYAbKofBpijDlV1JN21oSRPc.roa (hash: i7qvLARvFAbwyr2d6HJClZJICp4QULfuGH4ozBybTr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:51:7b:85:e3:0a:36:aa:66:9f:78:d2:47:c5:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce65c2f958a7e21a3135916eed1a4d9786e09da3 Validity Not Before: Feb 9 12:00:30 2026 GMT Not After : Feb 10 12:00:30 2026 GMT Subject: CN=e1477ab1ab039750abc1d4ea9e937c6abcf7f60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:65:d9:ab:1c:c1:c9:95:17:46:b9:6f:2a:3d: cb:05:89:4d:ed:13:1a:b6:f2:b7:90:a4:0c:69:f6: 5f:c4:43:94:bd:c0:5e:90:ad:24:4c:a2:d0:39:43: 32:7f:2c:75:96:3e:e9:9d:de:9c:83:76:a6:07:ce: 7d:c6:9b:e5:2f:28:11:2c:c3:f4:28:e5:11:69:c9: 4b:47:af:a1:63:86:8d:b4:11:19:45:6e:50:61:07: 58:b7:fd:e3:a9:b9:35:7c:3d:ed:ee:78:ee:64:4b: bd:e1:0a:79:76:ef:2d:df:f8:22:3d:d1:52:41:ab: ef:b8:3e:f0:97:6a:ec:6b:9e:11:21:05:83:b4:77: e5:7a:f2:cd:16:56:ae:8d:9e:fa:3f:5e:69:26:2d: b1:ab:5f:ff:64:94:29:72:bc:9e:55:3f:c1:8f:0a: 20:35:e5:5b:94:ec:65:84:99:23:77:69:3d:61:87: 3e:65:f0:f1:77:d8:35:ab:e4:8d:fe:94:73:25:3e: 3d:3c:29:02:32:66:18:af:74:ca:99:f8:f6:1b:a9: 28:62:f9:72:06:9e:39:5d:33:c3:06:11:05:aa:bd: 65:55:ea:d3:02:a6:51:79:c0:0a:99:15:ac:45:4f: 6c:12:57:75:da:11:4f:2d:6d:6e:e5:02:19:e9:1e: 97:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:47:7A:B1:AB:03:97:50:AB:C1:D4:EA:9E:93:7C:6A:BC:F7:F6:0B X509v3 Authority Key Identifier: keyid:CE:65:C2:F9:58:A7:E2:1A:31:35:91:6E:ED:1A:4D:97:86:E0:9D:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zmXC-Vin4hoxNZFu7RpNl4bgnaM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2ea928-d996-4c4d-b13b-5d596d00de9c/1/zmXC-Vin4hoxNZFu7RpNl4bgnaM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:fa:3c:2d:4c:df:5d:a0:61:fe:ba:d2:f9:c6:3b:f8:29:eb: ea:05:a3:f3:f6:89:ab:eb:b2:e6:c6:53:4a:fd:46:45:53:b0: f9:c1:f3:77:5a:c9:5e:93:70:f1:f9:6e:d6:5f:a4:d4:be:99: d1:86:76:f1:59:91:58:e2:bc:f3:dc:b3:7a:44:26:f5:94:a1: 1d:29:d1:6c:ca:21:fc:7f:29:77:20:8d:3c:01:3e:e2:07:74: 46:67:4d:0e:f8:f7:4b:ad:8f:b6:b3:f9:a8:b2:a7:70:b0:6d: 94:93:a4:82:b4:dd:50:76:fe:84:5c:ab:c3:28:a8:6f:87:6c: d3:54:98:7f:5b:c0:e0:2d:9d:4e:36:93:32:d4:e7:df:07:6b: 12:32:cb:9c:3c:22:f3:97:63:45:4f:fa:1b:b2:cc:dc:29:db: 05:99:d5:0c:74:8d:0b:8b:b8:44:c1:92:30:e5:db:d2:75:80: 7e:b4:a5:ef:e4:a2:35:a3:73:41:0b:99:a7:1a:9f:10:01:59: 3b:ec:a3:5b:9c:38:54:02:e6:62:77:15:fb:93:30:2e:1f:2e: 01:0f:8c:f9:e6:44:1b:c3:83:0e:18:42:b1:1d:e0:42:15:14: b0:51:cd:54:75:46:ae:ad:96:95:7e:e0:de:10:25:c7:7f:33: fb:8e:71:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRlF7heMKNqpmn3jSR8V7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNjVjMmY5NThhN2UyMWEzMTM1OTE2ZWVkMWE0ZDk3ODZl MDlkYTMwHhcNMjYwMjA5MTIwMDMwWhcNMjYwMjEwMTIwMDMwWjAzMTEwLwYDVQQD EyhlMTQ3N2FiMWFiMDM5NzUwYWJjMWQ0ZWE5ZTkzN2M2YWJjZjdmNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2XZqxzByZUXRrlvKj3LBYlN7RMa tvK3kKQMafZfxEOUvcBekK0kTKLQOUMyfyx1lj7pnd6cg3amB859xpvlLygRLMP0 KOURaclLR6+hY4aNtBEZRW5QYQdYt/3jqbk1fD3t7njuZEu94Qp5du8t3/giPdFS QavvuD7wl2rsa54RIQWDtHflevLNFlaujZ76P15pJi2xq1//ZJQpcryeVT/Bjwog NeVblOxlhJkjd2k9YYc+ZfDxd9g1q+SN/pRzJT49PCkCMmYYr3TKmfj2G6koYvly Bp45XTPDBhEFqr1lVerTAqZRecAKmRWsRU9sEld12hFPLW1u5QIZ6R6XjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOFHerGrA5dQq8HU6p6TfGq89/YLMB8GA1UdIwQY MBaAFM5lwvlYp+IaMTWRbu0aTZeG4J2jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2It NWQ1OTZkMDBkZTljLzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC8yZWE5MjgtZDk5Ni00YzRkLWIxM2ItNWQ1OTZkMDBkZTlj LzEvem1YQy1WaW40aG94TlpGdTdScE5sNGJnbmFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfo8LUzf XaBh/rrS+cY7+Cnr6gWj8/aJq+uy5sZTSv1GRVOw+cHzd1rJXpNw8flu1l+k1L6Z 0YZ28VmRWOK889yzekQm9ZShHSnRbMoh/H8pdyCNPAE+4gd0RmdNDvj3S62PtrP5 qLKncLBtlJOkgrTdUHb+hFyrwyiob4ds01SYf1vA4C2dTjaTMtTn3wdrEjLLnDwi 85djRU/6G7LM3CnbBZnVDHSNC4u4RMGSMOXb0nWAfrSl7+SiNaNzQQuZpxqfEAFZ O+yjW5w4VALmYncV+5MwLh8uAQ+M+eZEG8ODDhhCsR3gQhUUsFHNVHVGrq2WlX7g 3hAlx38z+45xkg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:41 2026 by rpki-client