This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft File: zlWB0nSK_Pd5Znl397ZznuT5_A0.mft (raw, json) Hash identifier: KGKWtKcWMibSULM7l91KIFkse2lHpWNFx8bldC2xZCk= Subject key identifier: 2D:BF:53:C8:59:F2:CB:01:6A:17:61:F4:DB:BE:5E:16:0A:7F:E0:1E Authority key identifier: CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D Certificate issuer: /CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Certificate serial: 019C4210313C6BAC3178ECFDD6F7502DC72B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft Manifest number: 117C Signing time: Mon 09 Feb 2026 11:01:23 +0000 Manifest this update: Mon 09 Feb 2026 11:01:23 +0000 Manifest next update: Tue 10 Feb 2026 11:01:23 +0000 Files and hashes: 1: vMfnrpAebos3eaIEsMS2VFk8-QI.roa (hash: 4/jYsNoEYkp6fGrbtUoi3W/2IDsabtf81IB97bt4re0=) 2: zlWB0nSK_Pd5Znl397ZznuT5_A0.crl (hash: 1gnQ5/SbxUstqdcrH310ojFnuSWpDr6XObF0+o0gKD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:31:3c:6b:ac:31:78:ec:fd:d6:f7:50:2d:c7:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce5581d2748afcf779667977f7b6739ee4f9fc0d Validity Not Before: Feb 9 11:01:23 2026 GMT Not After : Feb 10 11:01:23 2026 GMT Subject: CN=2dbf53c859f2cb016a1761f4dbbe5e160a7fe01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8b:1f:4b:da:17:43:3d:8b:64:87:ff:06:c3: 29:15:aa:83:42:c2:23:f5:a5:ae:51:55:03:f1:f6: 25:26:a2:2c:39:31:b8:f7:ab:cf:c0:58:2b:92:b3: 6d:3f:07:7d:49:17:86:91:21:26:02:4a:ac:dd:b9: 7d:fb:ee:fb:36:7e:08:6e:07:07:9f:e6:c4:9e:cb: eb:03:67:66:11:aa:2a:8f:d3:f9:f1:14:25:0b:2f: 5b:a2:a9:b0:1e:50:11:c0:08:7a:aa:79:9f:03:22: d3:31:66:9e:02:1f:bc:5d:ce:0e:6b:6f:31:81:98: a8:48:66:6a:3b:29:a2:7d:f4:12:75:f5:94:b2:8d: b6:cd:a0:44:cb:25:2e:bf:9c:22:8e:a3:c3:8a:d5: 60:3d:b2:d9:1e:6b:97:dd:8e:b4:4b:28:1c:99:bf: 8f:99:46:e0:21:d2:b0:a3:82:e1:c0:a2:26:c7:e7: 71:b0:cd:da:ec:20:cc:80:bf:2d:ca:46:c5:5e:5f: 09:44:1f:72:52:15:58:71:0f:35:f7:55:fb:ba:0d: f9:3e:b7:7d:13:44:81:3a:bf:c7:be:36:57:3c:3e: a2:c8:10:c7:ad:01:22:eb:50:a3:64:8d:f4:08:70: 4e:fa:68:6f:56:8b:d2:97:1b:b2:f4:96:ab:91:c9: 3a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BF:53:C8:59:F2:CB:01:6A:17:61:F4:DB:BE:5E:16:0A:7F:E0:1E X509v3 Authority Key Identifier: keyid:CE:55:81:D2:74:8A:FC:F7:79:66:79:77:F7:B6:73:9E:E4:F9:FC:0D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zlWB0nSK_Pd5Znl397ZznuT5_A0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6414f1-d468-4d97-b299-d768a77d57f4/1/zlWB0nSK_Pd5Znl397ZznuT5_A0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f8:16:0b:5e:6e:4f:2b:b3:5e:11:dd:ba:4b:8a:8f:ad:58: 56:4c:9f:d8:04:68:84:ec:ab:8f:e9:30:cf:c0:81:66:66:13: c6:27:c3:67:28:2f:15:db:b9:64:2a:06:73:8b:93:a8:50:c3: 6c:02:51:8d:50:9b:f6:f4:00:58:50:95:d0:b6:e0:82:36:20: 20:cd:39:b6:2c:88:ff:23:e1:5d:0e:d1:60:b4:35:b2:81:2f: 12:81:90:17:4e:b4:48:94:f4:38:eb:31:a0:9a:0e:11:be:5a: 3f:a0:1f:fd:22:37:63:32:4c:54:59:98:1e:64:d9:af:7b:58: 41:dc:40:eb:e2:32:b5:5c:62:0a:f3:2d:b0:35:e8:db:94:b7: 24:43:0e:5d:be:ff:62:a9:55:6b:73:21:c3:84:b6:d4:8e:77: a8:29:9c:16:36:df:1a:e1:bb:cd:ae:ad:f7:db:66:cd:80:51: a2:b6:8c:05:a1:d2:77:f7:b9:41:dc:34:c4:ec:ff:e4:10:95: 0a:60:ce:a7:f9:1e:f9:14:82:10:f9:00:43:10:66:b1:d1:25: ca:57:fb:02:9b:4c:fb:aa:b5:6c:ed:5b:32:13:ee:ba:04:ef: 4d:e6:6d:5f:bf:ac:cb:99:4e:47:10:b8:80:3e:8c:0d:e5:df: 94:d1:16:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDE8a6wxeOz91vdQLccrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNTU4MWQyNzQ4YWZjZjc3OTY2Nzk3N2Y3YjY3MzllZTRm OWZjMGQwHhcNMjYwMjA5MTEwMTIzWhcNMjYwMjEwMTEwMTIzWjAzMTEwLwYDVQQD EygyZGJmNTNjODU5ZjJjYjAxNmExNzYxZjRkYmJlNWUxNjBhN2ZlMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3IsfS9oXQz2LZIf/BsMpFaqDQsIj 9aWuUVUD8fYlJqIsOTG496vPwFgrkrNtPwd9SReGkSEmAkqs3bl9++77Nn4IbgcH n+bEnsvrA2dmEaoqj9P58RQlCy9boqmwHlARwAh6qnmfAyLTMWaeAh+8Xc4Oa28x gZioSGZqOymiffQSdfWUso22zaBEyyUuv5wijqPDitVgPbLZHmuX3Y60Sygcmb+P mUbgIdKwo4LhwKImx+dxsM3a7CDMgL8tykbFXl8JRB9yUhVYcQ8191X7ug35Prd9 E0SBOr/HvjZXPD6iyBDHrQEi61CjZI30CHBO+mhvVovSlxuy9Jarkck6xwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC2/U8hZ8ssBahdh9Nu+XhYKf+AeMB8GA1UdIwQY MBaAFM5VgdJ0ivz3eWZ5d/e2c57k+fwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTkt ZDc2OGE3N2Q1N2Y0LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC82NDE0ZjEtZDQ2OC00ZDk3LWIyOTktZDc2OGE3N2Q1N2Y0 LzEvemxXQjBuU0tfUGQ1Wm5sMzk3WnpudVQ1X0EwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAifgWC15u TyuzXhHdukuKj61YVkyf2ARohOyrj+kwz8CBZmYTxifDZygvFdu5ZCoGc4uTqFDD bAJRjVCb9vQAWFCV0LbggjYgIM05tiyI/yPhXQ7RYLQ1soEvEoGQF060SJT0OOsx oJoOEb5aP6Af/SI3YzJMVFmYHmTZr3tYQdxA6+IytVxiCvMtsDXo25S3JEMOXb7/ YqlVa3Mhw4S21I53qCmcFjbfGuG7za6t99tmzYBRoraMBaHSd/e5Qdw0xOz/5BCV CmDOp/ke+RSCEPkAQxBmsdElylf7AptM+6q1bO1bMhPuugTvTeZtX7+sy5lORxC4 gD6MDeXflNEWQw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:48:00 2026 by rpki-client