This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft File: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft (raw, json) Hash identifier: zjg2Kulxy1ybhXlAlyCNLj9YEbfcQhviTknx/WoSLQ4= Subject key identifier: 24:81:77:0E:F5:B3:21:C3:19:B5:A5:E2:F8:11:4E:58:A5:62:A2:29 Authority key identifier: CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A Certificate issuer: /CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Certificate serial: 019C4246CED2BE7A778503C7A721A64F8763 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 12:01:02 +0000 Manifest this update: Mon 09 Feb 2026 12:01:02 +0000 Manifest next update: Tue 10 Feb 2026 12:01:02 +0000 Files and hashes: 1: a-GQ10_VoZGMx2Uu4LVJHteO_m0.roa (hash: NioNjVo8lGbEZZ9K9hzAzdA29RBjR5Al0oMN0vHtav4=) 2: zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl (hash: +pTMDYyG6p7t9mtg1bYHBb+JfOKVuBjpHwzs/dsJz5Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:ce:d2:be:7a:77:85:03:c7:a7:21:a6:4f:87:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc323163bbb465f2a0fa2f93fa50ef3b0d4c6a9a Validity Not Before: Feb 9 12:01:02 2026 GMT Not After : Feb 10 12:01:02 2026 GMT Subject: CN=2481770ef5b321c319b5a5e2f8114e58a562a229 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:5f:e3:51:14:c7:cd:8d:d6:84:4a:e6:90:f9: 6d:eb:1b:40:39:ce:5f:5e:eb:54:60:96:43:48:93: be:f6:7d:2c:9b:a5:12:1d:24:44:bb:4e:bc:0b:eb: 1c:0e:0f:dd:0e:96:e4:26:a7:e5:1e:0a:df:51:46: 13:66:30:07:e7:7c:d3:07:f9:8f:9b:6b:e1:7b:e0: 70:71:2e:89:93:f8:a2:d1:e4:de:9c:ea:29:37:6e: b0:1f:c0:50:5b:fb:8f:9c:55:d4:b6:af:0c:16:74: 26:01:1e:a7:6a:5a:8a:14:e9:2f:5f:2c:4f:8a:10: e6:00:60:e5:d4:30:22:b8:e9:1f:f1:a4:9a:cf:75: 1a:00:25:1e:63:ce:bf:99:40:02:46:3c:f2:31:4c: ab:a7:bb:e8:1d:1c:ea:94:6b:90:2c:cc:1c:39:78: 53:87:a2:3e:73:2f:e7:56:cc:5b:04:ae:22:32:8e: 99:80:8c:ab:e8:ff:cf:a0:11:90:33:1a:1c:01:c7: a0:f1:74:1f:5b:74:07:3f:c5:5d:93:23:f1:c2:4b: 61:c2:ee:59:de:58:63:78:1b:f2:dc:f9:ae:57:f2: 2c:71:3e:33:4a:ef:07:17:e2:19:8c:c8:29:af:62: 24:91:df:fc:00:ab:dc:23:6f:cd:6b:ed:9d:c5:d9: e8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:81:77:0E:F5:B3:21:C3:19:B5:A5:E2:F8:11:4E:58:A5:62:A2:29 X509v3 Authority Key Identifier: keyid:CC:32:31:63:BB:B4:65:F2:A0:FA:2F:93:FA:50:EF:3B:0D:4C:6A:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/713bd7-f73b-4614-8e92-1ef0090b7154/1/zDIxY7u0ZfKg-i-T-lDvOw1Mapo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:4b:d7:b2:e8:ce:28:67:cd:87:f7:e4:be:6f:10:a1:46:fe: 69:40:e6:f6:9f:2f:b3:b0:c4:c7:1b:21:67:ab:92:08:d0:ad: 1b:92:49:18:d2:c6:90:4e:ca:e6:3c:d4:b6:94:39:b3:20:66: a4:88:17:e8:89:7d:7f:e2:20:fb:a6:3e:dc:45:71:19:e0:40: 3b:46:f2:29:e6:28:68:64:3b:1c:a9:82:2e:dc:2b:00:3c:85: 89:ee:a8:c6:a7:06:48:9b:f9:c1:26:14:50:ac:e4:0b:3f:c6: 7c:c0:0f:c1:4d:0c:91:8f:e4:ba:08:c9:b7:e5:24:52:92:b4: 2f:e2:d8:d3:1d:bd:49:9c:4a:40:04:09:1f:73:1b:0e:bc:2e: b3:d4:4f:aa:ca:7a:c7:5d:67:3f:af:7d:d8:20:97:43:9a:be: 15:2e:e2:18:96:d2:0f:d7:35:09:cb:ac:08:0c:80:7a:0c:ac: d0:d3:f1:dc:0c:b6:24:8d:c8:1a:08:87:ce:e9:de:4b:44:bd: 90:4a:14:b9:00:dc:8c:28:f4:8c:94:a7:b6:2a:f6:ae:e8:b3: a9:d1:be:f1:d5:08:f0:87:8d:f4:9b:17:7f:e1:7e:6b:02:d3: 93:64:47:62:3e:3c:46:68:02:81:8f:06:a2:9a:a4:b5:08:45: 79:a4:99:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRs7Svnp3hQPHpyGmT4djMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMzIzMTYzYmJiNDY1ZjJhMGZhMmY5M2ZhNTBlZjNiMGQ0 YzZhOWEwHhcNMjYwMjA5MTIwMTAyWhcNMjYwMjEwMTIwMTAyWjAzMTEwLwYDVQQD EygyNDgxNzcwZWY1YjMyMWMzMTliNWE1ZTJmODExNGU1OGE1NjJhMjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF/jURTHzY3WhErmkPlt6xtAOc5f XutUYJZDSJO+9n0sm6USHSREu068C+scDg/dDpbkJqflHgrfUUYTZjAH53zTB/mP m2vhe+BwcS6Jk/ii0eTenOopN26wH8BQW/uPnFXUtq8MFnQmAR6nalqKFOkvXyxP ihDmAGDl1DAiuOkf8aSaz3UaACUeY86/mUACRjzyMUyrp7voHRzqlGuQLMwcOXhT h6I+cy/nVsxbBK4iMo6ZgIyr6P/PoBGQMxocAceg8XQfW3QHP8VdkyPxwkthwu5Z 3lhjeBvy3PmuV/IscT4zSu8HF+IZjMgpr2Ikkd/8AKvcI2/Na+2dxdnoLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSBdw71syHDGbWl4vgRTlilYqIpMB8GA1UdIwQY MBaAFMwyMWO7tGXyoPovk/pQ7zsNTGqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTIt MWVmMDA5MGI3MTU0LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi83MTNiZDctZjczYi00NjE0LThlOTItMWVmMDA5MGI3MTU0 LzEvekRJeFk3dTBaZktnLWktVC1sRHZPdzFNYXBvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS0vXsujO KGfNh/fkvm8QoUb+aUDm9p8vs7DExxshZ6uSCNCtG5JJGNLGkE7K5jzUtpQ5syBm pIgX6Il9f+Ig+6Y+3EVxGeBAO0byKeYoaGQ7HKmCLtwrADyFie6oxqcGSJv5wSYU UKzkCz/GfMAPwU0MkY/kugjJt+UkUpK0L+LY0x29SZxKQAQJH3MbDrwus9RPqsp6 x11nP6992CCXQ5q+FS7iGJbSD9c1CcusCAyAegys0NPx3Ay2JI3IGgiHzuneS0S9 kEoUuQDcjCj0jJSntir2ruizqdG+8dUI8IeN9JsXf+F+awLTk2RHYj48RmgCgY8G opqktQhFeaSZ/g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:56 2026 by rpki-client