This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft File: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft (raw, json) Hash identifier: TikaYQ4KtJLCKeF5qwqVlqy6MK47RUiUDqIqiIf60Ew= Subject key identifier: FA:CA:93:28:93:EF:CD:94:3A:7D:60:F7:42:A8:54:CF:6A:BA:2E:33 Authority key identifier: 66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8 Certificate issuer: /CN=6683a96cf511a67919d900f3fc934099341f87d8 Certificate serial: 019C4322FFCFE4798FC590EBB92AD73FB8B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft Manifest number: 0FEF Signing time: Mon 09 Feb 2026 16:01:32 +0000 Manifest this update: Mon 09 Feb 2026 16:01:32 +0000 Manifest next update: Tue 10 Feb 2026 16:01:32 +0000 Files and hashes: 1: ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl (hash: hjiZW65UcYclswzSWkfHtokopV7KD653Q3Hnimf3bUM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ff:cf:e4:79:8f:c5:90:eb:b9:2a:d7:3f:b8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6683a96cf511a67919d900f3fc934099341f87d8 Validity Not Before: Feb 9 16:01:32 2026 GMT Not After : Feb 10 16:01:32 2026 GMT Subject: CN=faca932893efcd943a7d60f742a854cf6aba2e33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1a:54:a5:ef:20:33:83:59:4d:f1:b0:7f:13: e3:84:ef:4e:5b:14:90:0c:db:cb:29:a8:bc:f2:d4: 03:82:e4:37:ee:5d:46:e1:e5:7a:06:cf:8d:5d:6d: d1:45:fb:30:d6:16:3d:4a:7b:c6:6c:e0:df:d9:79: a6:ea:30:e5:66:15:a5:7e:d4:43:52:ce:b1:40:8a: 5c:90:5f:e4:f9:f4:4d:bc:4c:e9:5c:32:0b:dd:e1: 9d:d7:c9:1b:af:47:65:7c:5a:df:a0:00:0a:64:a2: 61:74:be:89:a0:e2:22:1b:80:c6:de:92:80:55:16: 1b:9f:a9:98:cb:f8:69:d8:11:c6:da:44:55:e6:9d: 0f:49:78:d8:f3:43:39:d6:5d:0c:90:f2:b8:3e:77: cc:69:f3:cd:aa:f1:2e:dc:9f:76:57:5f:54:47:50: a8:05:5a:ed:e4:ab:70:cc:0c:4a:ce:75:cc:81:f8: 58:19:8d:a3:74:69:1a:51:2d:04:4d:40:40:e2:d1: f4:5e:4f:0c:4d:fb:39:96:49:2d:cf:33:39:bb:83: 40:aa:d3:8d:12:9b:c6:78:e5:5a:c2:1b:85:29:41: f4:7e:9d:a2:8a:08:42:c1:22:c8:1f:84:f4:b2:e7: d3:47:5c:91:7a:e5:67:b2:90:f2:c4:f5:c1:1f:11: f3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:CA:93:28:93:EF:CD:94:3A:7D:60:F7:42:A8:54:CF:6A:BA:2E:33 X509v3 Authority Key Identifier: keyid:66:83:A9:6C:F5:11:A6:79:19:D9:00:F3:FC:93:40:99:34:1F:87:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c540e3-d2c7-4f08-9178-ae30686c8589/1/ZoOpbPURpnkZ2QDz_JNAmTQfh9g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:89:8c:a3:d8:c4:aa:f9:d0:14:68:da:64:e6:4c:7e:55:e8: f4:5c:41:09:ab:b6:a0:93:f5:ff:92:8d:f2:f6:e7:60:79:6e: dc:36:7f:ec:0c:12:27:e9:71:24:d0:f8:83:07:9d:ef:ac:5f: 68:ae:8e:65:d9:6b:6d:7c:b7:2c:bc:ed:e3:97:8b:03:5c:03: d3:ec:8c:1a:61:38:32:8d:2f:5c:c9:ce:af:48:2c:da:90:e0: 4a:c9:66:0e:10:9f:b4:ff:a5:ab:2d:b7:89:f3:34:39:13:62: 5f:23:ec:8e:2f:5b:5b:3e:51:89:16:79:67:4e:c9:df:1b:4a: 3c:03:b1:36:e9:c2:66:c9:5c:44:ee:a8:3a:34:41:dd:cf:15: 38:0c:a6:7a:42:15:99:41:47:9d:ef:33:1a:51:bf:e8:70:1c: a2:b2:be:9f:17:6a:00:ac:02:ac:79:18:74:d3:1a:06:06:98: 8e:43:85:a0:72:df:61:6d:55:54:fe:83:92:28:e1:93:ab:f8: 03:25:ed:d3:b2:3d:f6:5c:55:0b:6b:ec:d7:13:b3:76:05:a2: 9b:e3:39:20:14:75:32:88:7e:de:f2:89:b5:bd:c3:6d:1f:f0: ae:88:28:b5:2d:c0:81:21:0e:17:53:e1:62:80:28:5d:31:13: 07:cc:27:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIv/P5HmPxZDruSrXP7i1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ODNhOTZjZjUxMWE2NzkxOWQ5MDBmM2ZjOTM0MDk5MzQx Zjg3ZDgwHhcNMjYwMjA5MTYwMTMyWhcNMjYwMjEwMTYwMTMyWjAzMTEwLwYDVQQD EyhmYWNhOTMyODkzZWZjZDk0M2E3ZDYwZjc0MmE4NTRjZjZhYmEyZTMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RpUpe8gM4NZTfGwfxPjhO9OWxSQ DNvLKai88tQDguQ37l1G4eV6Bs+NXW3RRfsw1hY9SnvGbODf2Xmm6jDlZhWlftRD Us6xQIpckF/k+fRNvEzpXDIL3eGd18kbr0dlfFrfoAAKZKJhdL6JoOIiG4DG3pKA VRYbn6mYy/hp2BHG2kRV5p0PSXjY80M51l0MkPK4PnfMafPNqvEu3J92V19UR1Co BVrt5KtwzAxKznXMgfhYGY2jdGkaUS0ETUBA4tH0Xk8MTfs5lkktzzM5u4NAqtON EpvGeOVawhuFKUH0fp2iighCwSLIH4T0sufTR1yReuVnspDyxPXBHxHzKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPrKkyiT782UOn1g90KoVM9qui4zMB8GA1UdIwQY MBaAFGaDqWz1EaZ5GdkA8/yTQJk0H4fYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgt YWUzMDY4NmM4NTg5LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9jNTQwZTMtZDJjNy00ZjA4LTkxNzgtYWUzMDY4NmM4NTg5 LzEvWm9PcGJQVVJwbmtaMlFEel9KTkFtVFFmaDlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtImMo9jE qvnQFGjaZOZMflXo9FxBCau2oJP1/5KN8vbnYHlu3DZ/7AwSJ+lxJND4gwed76xf aK6OZdlrbXy3LLzt45eLA1wD0+yMGmE4Mo0vXMnOr0gs2pDgSslmDhCftP+lqy23 ifM0ORNiXyPsji9bWz5RiRZ5Z07J3xtKPAOxNunCZslcRO6oOjRB3c8VOAymekIV mUFHne8zGlG/6HAcorK+nxdqAKwCrHkYdNMaBgaYjkOFoHLfYW1VVP6Dkijhk6v4 AyXt07I99lxVC2vs1xOzdgWim+M5IBR1Moh+3vKJtb3DbR/wrogotS3AgSEOF1Ph YoAoXTETB8wnFA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:42 2026 by rpki-client