This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft File: 0ZHOrh_4itqODi-VUGddFTMokeQ.mft (raw, json) Hash identifier: 4FurOXbqabG9uVsvfNmBXi8kb4Ugnb4eEBdxRpsUTGU= Subject key identifier: 91:11:80:DF:8D:38:4F:07:5A:BA:DD:BB:AB:CF:EB:6B:9C:52:BE:8B Authority key identifier: D1:91:CE:AE:1F:F8:8A:DA:8E:0E:2F:95:50:67:5D:15:33:28:91:E4 Certificate issuer: /CN=d191ceae1ff88ada8e0e2f9550675d15332891e4 Certificate serial: 019C41A1964FB8C23CD8DDB7BA3428565826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZHOrh_4itqODi-VUGddFTMokeQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft Manifest number: 35 Signing time: Mon 09 Feb 2026 09:00:34 +0000 Manifest this update: Mon 09 Feb 2026 09:00:34 +0000 Manifest next update: Tue 10 Feb 2026 09:00:34 +0000 Files and hashes: 1: 0ZHOrh_4itqODi-VUGddFTMokeQ.crl (hash: 1FnN7Tukc0/40cLcm1KM9dm8JvNFPLG3nxRZ7slqp1c=) 2: _VYu2mv6bKW7U-bqoazVPbuNZw0.roa (hash: jBfKqmXGL7y6Zilv4tkveGpy7JudLuPoH0FpKfvCBu4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft rsync://rpki.ripe.net/repository/DEFAULT/0ZHOrh_4itqODi-VUGddFTMokeQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:96:4f:b8:c2:3c:d8:dd:b7:ba:34:28:56:58:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d191ceae1ff88ada8e0e2f9550675d15332891e4 Validity Not Before: Feb 9 09:00:34 2026 GMT Not After : Feb 10 09:00:34 2026 GMT Subject: CN=911180df8d384f075abaddbbabcfeb6b9c52be8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:c8:42:3d:ae:a7:92:20:40:9a:c6:9c:70: 92:49:ef:57:ae:49:a9:28:08:87:f8:5c:fa:1f:dd: ae:13:89:92:1a:b8:af:4b:33:03:ce:6c:e3:1f:a9: 97:d9:8d:a2:cf:25:2b:9f:22:65:0a:7c:72:03:e2: 11:b7:52:5b:66:c1:bf:88:82:c4:39:ee:3f:88:55: 3f:6a:d0:ec:7d:88:2a:8a:1d:90:29:08:41:03:88: 7b:49:d1:90:9f:25:66:99:41:d2:6a:7c:c2:0c:e1: aa:cf:cf:b5:bd:ce:48:df:f4:67:1e:63:5c:e5:1e: 52:2e:b2:16:63:00:57:8e:34:51:b5:fd:b9:ad:1d: 3d:46:94:5a:6c:6f:a6:05:2a:9f:e9:10:42:a9:f0: 7a:00:2c:8c:9f:1c:e0:2c:92:7e:5d:b6:44:19:72: 62:aa:c1:48:5f:8d:52:20:16:c1:5d:9f:5e:83:29: 89:2d:de:6e:2a:45:d7:31:e8:f8:ec:b4:98:c8:23: ec:d8:d7:ff:ec:b4:3d:b9:35:58:ab:8c:5c:57:46: 99:0a:ad:12:81:f0:ed:bf:ae:d0:1f:52:a7:48:b9: 26:1a:80:ba:73:58:a0:af:95:29:4f:0f:03:94:1b: dc:73:b7:30:7b:b8:bd:38:cc:3c:32:84:38:43:90: 46:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:11:80:DF:8D:38:4F:07:5A:BA:DD:BB:AB:CF:EB:6B:9C:52:BE:8B X509v3 Authority Key Identifier: keyid:D1:91:CE:AE:1F:F8:8A:DA:8E:0E:2F:95:50:67:5D:15:33:28:91:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZHOrh_4itqODi-VUGddFTMokeQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/c5cd96-b9d2-434b-a431-1c35fbce9616/1/0ZHOrh_4itqODi-VUGddFTMokeQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:aa:b2:bc:66:f8:46:d9:c0:bc:73:b5:cf:e4:06:e2:ff:b6: 94:a9:7e:6f:95:2c:d5:05:9e:f0:25:b6:6d:c8:18:9a:3f:e0: bb:2c:5a:1d:19:c5:67:b7:63:4b:a2:c9:ab:50:03:7e:5d:69: 78:ea:c0:65:96:6e:8d:ca:e6:54:46:de:a4:b3:d4:31:19:f6: 7c:d1:00:72:ed:f7:f6:57:94:e8:90:3f:8a:7a:bd:90:44:c1: c7:e6:e8:90:8c:5f:8d:f8:52:fc:14:f6:3f:a6:1f:ec:7f:15: 25:ae:82:81:1c:d0:a9:dd:aa:d1:27:28:9e:36:03:07:fe:0e: b5:ec:ee:74:b6:80:7a:23:2d:9b:81:8b:72:d1:9e:56:e3:76: cd:67:bf:17:d9:1d:55:72:3a:11:7f:fc:0f:bf:c9:77:f0:95: 35:eb:6c:77:6d:75:ea:44:3d:21:45:15:a6:20:57:d7:0f:da: f4:20:e8:84:dd:7a:e0:c9:d0:6d:96:27:1e:e8:13:ba:fc:57: b1:f4:22:2a:1d:41:43:5a:37:d2:54:bd:1e:9f:0a:dc:9c:45: 12:b2:c7:37:ff:ce:1d:5e:b6:df:63:ba:ae:8a:89:37:0f:9e: ee:f5:d1:c8:98:a5:5a:40:d6:d1:f7:81:2a:bd:33:a2:29:91: cf:23:c9:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZZPuMI82N23ujQoVlgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxOTFjZWFlMWZmODhhZGE4ZTBlMmY5NTUwNjc1ZDE1MzMy ODkxZTQwHhcNMjYwMjA5MDkwMDM0WhcNMjYwMjEwMDkwMDM0WjAzMTEwLwYDVQQD Eyg5MTExODBkZjhkMzg0ZjA3NWFiYWRkYmJhYmNmZWI2YjljNTJiZThiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrrIQj2up5IgQJrGnHCSSe9Xrkmp KAiH+Fz6H92uE4mSGrivSzMDzmzjH6mX2Y2izyUrnyJlCnxyA+IRt1JbZsG/iILE Oe4/iFU/atDsfYgqih2QKQhBA4h7SdGQnyVmmUHSanzCDOGqz8+1vc5I3/RnHmNc 5R5SLrIWYwBXjjRRtf25rR09RpRabG+mBSqf6RBCqfB6ACyMnxzgLJJ+XbZEGXJi qsFIX41SIBbBXZ9egymJLd5uKkXXMej47LSYyCPs2Nf/7LQ9uTVYq4xcV0aZCq0S gfDtv67QH1KnSLkmGoC6c1igr5UpTw8DlBvcc7cwe7i9OMw8MoQ4Q5BGrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJERgN+NOE8HWrrdu6vP62ucUr6LMB8GA1UdIwQY MBaAFNGRzq4f+Irajg4vlVBnXRUzKJHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMFpIT3JoXzRpdHFPRGktVlVHZGRGVE1va2VRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9jNWNkOTYtYjlkMi00MzRiLWE0MzEt MWMzNWZiY2U5NjE2LzEvMFpIT3JoXzRpdHFPRGktVlVHZGRGVE1va2VRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9jNWNkOTYtYjlkMi00MzRiLWE0MzEtMWMzNWZiY2U5NjE2 LzEvMFpIT3JoXzRpdHFPRGktVlVHZGRGVE1va2VRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraqyvGb4 RtnAvHO1z+QG4v+2lKl+b5Us1QWe8CW2bcgYmj/guyxaHRnFZ7djS6LJq1ADfl1p eOrAZZZujcrmVEbepLPUMRn2fNEAcu339leU6JA/inq9kETBx+bokIxfjfhS/BT2 P6Yf7H8VJa6CgRzQqd2q0SconjYDB/4OtezudLaAeiMtm4GLctGeVuN2zWe/F9kd VXI6EX/8D7/Jd/CVNetsd2116kQ9IUUVpiBX1w/a9CDohN164MnQbZYnHugTuvxX sfQiKh1BQ1o30lS9Hp8K3JxFErLHN//OHV6232O6roqJNw+e7vXRyJilWkDW0feB Kr0zoimRzyPJzg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:22:43 2026 by rpki-client