This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft File: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft (raw, json) Hash identifier: UOfXJlONZIXYxKP38P4fS2vW+cfPhjxhwBA5GGIVIWw= Subject key identifier: 0C:03:80:4D:9A:8E:84:64:2D:42:03:5B:E5:59:F8:E3:8C:9E:97:14 Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7 Certificate serial: 019C420F2BF2E2DFD9E473C3879366A6BAFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft Manifest number: 097D Signing time: Mon 09 Feb 2026 11:00:16 +0000 Manifest this update: Mon 09 Feb 2026 11:00:16 +0000 Manifest next update: Tue 10 Feb 2026 11:00:16 +0000 Files and hashes: 1: ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl (hash: DO+AKdvPoXyZT4U0v4H+tYLGjUK5lEyWcWZAcgY8Akc=) 2: xqX86PxnYUFgmbMyGq-FYjU7myI.roa (hash: LU7BTND6Kz806aRKd+CDSvMICobI0jgTkTNE1f7lbDI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:2b:f2:e2:df:d9:e4:73:c3:87:93:66:a6:ba:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7 Validity Not Before: Feb 9 11:00:16 2026 GMT Not After : Feb 10 11:00:16 2026 GMT Subject: CN=0c03804d9a8e84642d42035be559f8e38c9e9714 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a6:e9:1f:b6:ab:0a:db:11:d7:bd:96:10:97: 16:3d:36:40:68:42:ea:ce:c4:60:df:2c:b0:f0:c0: 8f:46:d1:9b:81:34:83:fe:b5:15:a8:f4:7b:47:2d: d9:58:56:b2:8b:26:c2:f6:a3:4f:c4:d7:01:f2:f0: ee:78:0b:85:fa:fd:f9:4e:65:5f:f3:4f:10:32:81: 5b:bc:04:bf:79:4a:76:15:f7:01:db:49:5a:59:aa: 01:94:23:20:f2:10:ac:14:fb:41:e4:2a:2b:d1:38: 0f:47:b7:d9:d7:74:cc:c6:73:de:b4:52:e5:02:dc: 38:67:4b:a1:b3:9e:91:83:2a:fa:7e:c3:1a:8e:96: 16:20:18:96:ed:28:76:b6:2a:b7:b4:96:e9:43:51: a7:89:47:3e:35:bb:e8:43:7c:7a:db:a2:f6:d1:2d: 71:f0:f5:07:8d:63:3e:33:17:6f:13:ea:52:dd:df: f5:42:b0:d0:9e:31:f4:9c:02:0c:83:07:a9:7f:db: fa:48:67:fd:11:f1:45:67:33:aa:ad:fc:69:7f:4c: bd:7c:23:15:76:6d:52:f8:6c:db:42:fe:77:bf:8c: 2d:7d:d1:40:d8:f1:89:ee:83:b3:1d:7b:df:47:35: 04:e7:d6:5a:e8:a1:b1:a1:63:e2:8f:d0:99:be:00: 70:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:03:80:4D:9A:8E:84:64:2D:42:03:5B:E5:59:F8:E3:8C:9E:97:14 X509v3 Authority Key Identifier: keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:6b:ca:04:5d:d2:d7:c9:e5:0c:96:1a:35:89:a5:ae:98:06: cd:9e:f7:fd:ab:46:22:55:f3:00:81:2d:ee:0e:6d:b3:f3:66: cb:12:1f:da:96:3d:28:c9:d4:f2:b7:de:35:5f:24:db:3d:03: df:21:02:b6:a3:a0:d4:c9:95:66:39:14:5c:d2:0f:0f:39:c5: 4a:80:50:7a:86:13:06:1c:65:1d:05:f7:9b:9a:25:7c:26:35: f9:ad:11:35:4d:70:23:81:ab:84:2a:00:87:ba:4b:29:57:4d: 64:61:d3:fe:a2:e7:21:42:3c:70:bd:df:c9:8a:20:b4:50:f7: 2c:58:e6:67:f4:f2:da:fb:85:c9:a6:32:93:67:0b:d3:aa:b2: fc:07:9b:8b:85:41:63:b8:53:bc:af:1c:0f:cb:1c:79:b5:b1: 60:19:e9:48:07:6c:aa:7c:7b:e6:d7:91:52:08:18:9c:38:ef: 8e:c8:5a:63:7a:ba:d9:fc:f7:2a:97:40:da:db:42:fb:93:73: a8:21:08:cc:cf:4c:f0:fb:88:2b:8b:32:16:09:b5:f4:c6:a5: 6c:ba:a6:5a:5d:7a:87:98:e5:11:3c:17:6f:96:cd:97:3e:35: 41:e7:b4:89:a5:02:c8:0c:40:c1:7e:a0:c3:73:9e:9f:3e:ba: 0d:91:4b:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyvy4t/Z5HPDh5Nmprr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0 YjI5ZDcwHhcNMjYwMjA5MTEwMDE2WhcNMjYwMjEwMTEwMDE2WjAzMTEwLwYDVQQD EygwYzAzODA0ZDlhOGU4NDY0MmQ0MjAzNWJlNTU5ZjhlMzhjOWU5NzE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqbpH7arCtsR172WEJcWPTZAaELq zsRg3yyw8MCPRtGbgTSD/rUVqPR7Ry3ZWFayiybC9qNPxNcB8vDueAuF+v35TmVf 808QMoFbvAS/eUp2FfcB20laWaoBlCMg8hCsFPtB5Cor0TgPR7fZ13TMxnPetFLl Atw4Z0uhs56Rgyr6fsMajpYWIBiW7Sh2tiq3tJbpQ1GniUc+NbvoQ3x626L20S1x 8PUHjWM+MxdvE+pS3d/1QrDQnjH0nAIMgwepf9v6SGf9EfFFZzOqrfxpf0y9fCMV dm1S+GzbQv53v4wtfdFA2PGJ7oOzHXvfRzUE59Za6KGxoWPij9CZvgBwFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwDgE2ajoRkLUIDW+VZ+OOMnpcUMB8GA1UdIwQY MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt NWU4MjJmMzEwNjM4LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4 LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnWvKBF3S 18nlDJYaNYmlrpgGzZ73/atGIlXzAIEt7g5ts/NmyxIf2pY9KMnU8rfeNV8k2z0D 3yECtqOg1MmVZjkUXNIPDznFSoBQeoYTBhxlHQX3m5olfCY1+a0RNU1wI4GrhCoA h7pLKVdNZGHT/qLnIUI8cL3fyYogtFD3LFjmZ/Ty2vuFyaYyk2cL06qy/Aebi4VB Y7hTvK8cD8scebWxYBnpSAdsqnx75teRUggYnDjvjshaY3q62fz3KpdA2ttC+5Nz qCEIzM9M8PuIK4syFgm19MalbLqmWl16h5jlETwXb5bNlz41Qee0iaUCyAxAwX6g w3Oenz66DZFL8Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:44 2026 by rpki-client