This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft File: Z3COBc2oa73nTtuoXR2-tz_n91c.mft (raw, json) Hash identifier: aOjLw2ew9nga+wukg7SP56oj1P2WC7E9sZMpo2NOTrM= Subject key identifier: FE:DC:17:28:6A:BE:7C:0A:99:BC:80:D7:EA:A5:1A:D6:30:92:14:02 Authority key identifier: 67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 Certificate issuer: /CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Certificate serial: 019C43904363156FFB213C781AB7692AC4B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 18:00:53 +0000 Manifest this update: Mon 09 Feb 2026 18:00:53 +0000 Manifest next update: Tue 10 Feb 2026 18:00:53 +0000 Files and hashes: 1: Z3COBc2oa73nTtuoXR2-tz_n91c.crl (hash: Z7Kci54og+V5yU9/gUj2Qi+bs97G0ICwk5AmGhIz/ic=) 2: lBanohcXuTk3tPGpdRVlhFgo50k.roa (hash: QRKqk4kvpnYuyI5Tk2E7RWYUVWf78BdUbT/Cbi1GnI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:43:63:15:6f:fb:21:3c:78:1a:b7:69:2a:c4:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67708e05cda86bbde74edba85d1dbeb73fe7f757 Validity Not Before: Feb 9 18:00:53 2026 GMT Not After : Feb 10 18:00:53 2026 GMT Subject: CN=fedc17286abe7c0a99bc80d7eaa51ad630921402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:06:3e:0e:a3:ae:df:90:20:b0:ef:ce:54:ee: 1b:ad:b8:23:d6:6f:83:ac:a5:f1:3c:6b:ff:ac:0f: 4b:96:2f:03:54:50:a6:89:11:8a:7b:ee:ef:4d:57: 52:06:48:38:7d:3d:ec:08:f2:d2:a7:cc:ee:bd:e0: cb:23:29:6c:80:9b:e0:cf:ed:8c:f5:13:31:56:82: a3:19:ca:97:aa:f9:36:52:aa:4e:4a:a6:33:39:fb: 2d:b2:e0:73:91:7a:9e:04:b0:a2:a5:b9:7d:3c:d1: 6c:4a:f1:73:24:1d:1e:5a:55:53:e8:42:8d:88:16: 0e:7c:9a:3d:0a:53:d2:6c:07:83:20:e9:8d:58:ce: b8:d9:af:c5:63:a8:98:3d:a0:21:dc:3a:38:31:89: 63:be:63:d0:6c:33:3d:2e:75:da:ce:f9:69:6b:c8: d3:91:97:65:94:2c:97:25:0a:4f:ad:64:1b:03:3b: e7:70:1f:c1:37:fb:3e:af:ef:69:fb:e6:fb:4d:f1: 48:51:a0:b2:b6:bf:91:86:a0:dc:cd:52:c2:de:c4: f0:29:07:3e:38:52:30:19:8a:da:f7:cf:19:c6:41: e4:98:71:2f:09:3f:6c:f0:ba:01:3e:22:c7:1b:0e: 41:ff:b4:21:98:18:6e:fa:e0:e8:3f:be:49:86:1d: a9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:DC:17:28:6A:BE:7C:0A:99:BC:80:D7:EA:A5:1A:D6:30:92:14:02 X509v3 Authority Key Identifier: keyid:67:70:8E:05:CD:A8:6B:BD:E7:4E:DB:A8:5D:1D:BE:B7:3F:E7:F7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z3COBc2oa73nTtuoXR2-tz_n91c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/4d2796-7f80-43a4-b814-00395a38c37d/1/Z3COBc2oa73nTtuoXR2-tz_n91c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:79:eb:bb:c2:29:87:d3:15:c9:ca:cc:f9:69:67:6e:f1:f4: f2:0a:42:9c:9d:ff:32:dd:5b:d0:65:11:6d:38:dd:c1:8c:98: 08:d2:6d:39:bc:f9:e1:53:b4:96:98:90:e9:e3:ea:1f:92:06: 43:5f:39:de:98:a0:0d:56:4c:3c:00:76:de:b9:c6:e1:04:3e: 15:8c:79:6e:f5:e8:62:29:e2:e6:04:27:5f:88:6d:8c:56:2c: f4:61:98:c2:74:36:b8:b8:4a:84:62:36:85:3c:80:70:97:5a: e1:6c:cb:50:c2:15:ba:c1:07:1c:69:b9:b0:7e:7f:95:2a:3b: ce:de:cb:6f:78:e8:08:f8:ba:0c:b2:1b:98:79:82:bd:17:15: cf:1a:69:54:fd:33:d4:1b:21:b8:3b:b8:d1:e6:31:03:0f:15: 40:a8:f7:ec:2c:9e:13:d2:70:9d:ac:ae:b9:51:67:6e:91:28: f5:8a:42:64:db:79:48:6c:be:2b:ec:44:0c:5e:b1:38:a9:e2: 54:d7:86:79:7c:0f:49:cd:96:e9:f7:26:36:99:cb:69:c3:07: 24:7f:9f:eb:7d:28:e6:06:f4:76:80:98:86:f3:9c:05:3d:ff: 4c:40:e8:e6:24:24:bc:23:9d:25:2d:8c:74:17:01:85:10:42: b1:fc:74:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkENjFW/7ITx4GrdpKsSxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3NzA4ZTA1Y2RhODZiYmRlNzRlZGJhODVkMWRiZWI3M2Zl N2Y3NTcwHhcNMjYwMjA5MTgwMDUzWhcNMjYwMjEwMTgwMDUzWjAzMTEwLwYDVQQD EyhmZWRjMTcyODZhYmU3YzBhOTliYzgwZDdlYWE1MWFkNjMwOTIxNDAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQY+DqOu35AgsO/OVO4brbgj1m+D rKXxPGv/rA9Lli8DVFCmiRGKe+7vTVdSBkg4fT3sCPLSp8zuveDLIylsgJvgz+2M 9RMxVoKjGcqXqvk2UqpOSqYzOfstsuBzkXqeBLCipbl9PNFsSvFzJB0eWlVT6EKN iBYOfJo9ClPSbAeDIOmNWM642a/FY6iYPaAh3Do4MYljvmPQbDM9LnXazvlpa8jT kZdllCyXJQpPrWQbAzvncB/BN/s+r+9p++b7TfFIUaCytr+RhqDczVLC3sTwKQc+ OFIwGYra988ZxkHkmHEvCT9s8LoBPiLHGw5B/7QhmBhu+uDoP75Jhh2p6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP7cFyhqvnwKmbyA1+qlGtYwkhQCMB8GA1UdIwQY MBaAFGdwjgXNqGu9507bqF0dvrc/5/dXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQt MDAzOTVhMzhjMzdkLzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC80ZDI3OTYtN2Y4MC00M2E0LWI4MTQtMDAzOTVhMzhjMzdk LzEvWjNDT0JjMm9hNzNuVHR1b1hSMi10el9uOTFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmHnru8Ip h9MVycrM+WlnbvH08gpCnJ3/Mt1b0GURbTjdwYyYCNJtObz54VO0lpiQ6ePqH5IG Q1853pigDVZMPAB23rnG4QQ+FYx5bvXoYini5gQnX4htjFYs9GGYwnQ2uLhKhGI2 hTyAcJda4WzLUMIVusEHHGm5sH5/lSo7zt7Lb3joCPi6DLIbmHmCvRcVzxppVP0z 1BshuDu40eYxAw8VQKj37CyeE9JwnayuuVFnbpEo9YpCZNt5SGy+K+xEDF6xOKni VNeGeXwPSc2W6fcmNpnLacMHJH+f630o5gb0doCYhvOcBT3/TEDo5iQkvCOdJS2M dBcBhRBCsfx03g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:56 2026 by rpki-client