This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft File: zr9l4AadvMdre1VujB1wWInfJ-k.mft (raw, json) Hash identifier: CuFXP7vMNHQYBx6Ly7wfYuWLSvVZ4G08b6FD7rMAS2w= Subject key identifier: 2E:95:C8:23:19:0A:56:81:2D:9D:1C:5F:D8:C5:3A:53:96:48:8F:74 Authority key identifier: CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 Certificate issuer: /CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Certificate serial: 019C360BA1F5973E2AF69879640A970872B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft Manifest number: 1818 Signing time: Sat 07 Feb 2026 03:00:57 +0000 Manifest this update: Sat 07 Feb 2026 03:00:57 +0000 Manifest next update: Sun 08 Feb 2026 03:00:57 +0000 Files and hashes: 1: fpYgYHcSe1IMtLQuQ8ZHZS6M188.roa (hash: lFEjpgx0+Rqia9Wt28o4eVjHYzMi3xg620xweR16lkU=) 2: zr9l4AadvMdre1VujB1wWInfJ-k.crl (hash: cu9x0UZ3cIFwka2x+BGOzOU7SfO5YvGwY2Ft4ymoUog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 08 Feb 2026 00:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:36:0b:a1:f5:97:3e:2a:f6:98:79:64:0a:97:08:72:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cebf65e0069dbcc76b7b556e8c1d705889df27e9 Validity Not Before: Feb 7 03:00:57 2026 GMT Not After : Feb 8 03:00:57 2026 GMT Subject: CN=2e95c823190a56812d9d1c5fd8c53a5396488f74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:00:e4:ca:ff:6e:16:09:eb:93:8e:45:52:64: 11:7f:be:56:19:9b:97:0f:f9:b8:d8:a1:1d:48:9b: 31:ce:43:da:de:a2:55:ba:7d:3c:92:30:01:90:e5: c2:dd:ab:68:c4:1e:ae:31:03:92:62:bf:74:9c:28: b0:4c:34:fe:52:58:6e:63:74:98:02:56:f1:1b:99: 79:c2:90:9a:88:c6:a9:ac:c6:2e:c1:85:de:76:3b: 83:b7:61:22:af:ce:e2:b1:2b:a3:19:4a:c4:c5:14: 70:9a:78:1b:51:23:dd:4e:39:66:1f:b3:c6:f7:30: df:9b:96:c8:a0:33:10:d6:42:43:62:e2:03:1d:0f: 14:b7:95:a6:14:2e:2e:96:16:7d:9f:28:50:98:69: a5:c7:9d:62:58:b3:70:03:62:e4:c4:15:7b:99:13: 4d:c4:2c:5b:eb:f2:be:ab:92:59:66:71:eb:86:02: 8a:4b:5c:d9:a2:eb:ac:32:6a:e2:0c:41:6b:44:86: a6:61:4a:dc:89:de:93:e9:ad:76:9f:15:a7:e8:b0: 19:43:2e:3d:93:1c:3d:77:58:1a:03:3d:67:1f:00: dd:86:a3:d8:ce:75:6d:b3:03:59:f8:ac:f2:23:35: 52:35:c3:74:00:8e:86:35:3d:a3:35:f3:a6:10:3f: 9f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:95:C8:23:19:0A:56:81:2D:9D:1C:5F:D8:C5:3A:53:96:48:8F:74 X509v3 Authority Key Identifier: keyid:CE:BF:65:E0:06:9D:BC:C7:6B:7B:55:6E:8C:1D:70:58:89:DF:27:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zr9l4AadvMdre1VujB1wWInfJ-k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/ead79a-d8a1-4e87-bacf-23ba4a91a105/1/zr9l4AadvMdre1VujB1wWInfJ-k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:e0:8c:c6:2d:72:bb:1f:ae:eb:58:0e:5f:48:43:05:61:ed: 44:1d:f0:d8:29:b4:db:d8:a7:33:89:c5:d7:3d:bb:4a:fb:ad: 0c:ea:86:d2:af:98:94:5c:5c:31:08:a2:fd:93:65:28:c7:cc: b4:31:7f:fc:c6:95:09:1c:04:a5:4a:1e:77:12:72:52:49:d9: d6:8a:cf:e5:10:c4:2c:a6:be:ad:27:6d:d9:62:23:49:0d:84: 2f:87:63:20:56:70:06:e3:75:7a:94:3e:ac:8e:e5:59:65:3c: fa:74:04:36:45:88:ff:87:6e:36:f6:7b:f1:05:8e:8d:03:dc: 6e:a1:83:5a:91:2e:e7:71:fd:c0:ce:57:29:8d:2d:53:d2:a2: fd:78:c9:68:70:1b:88:96:59:ef:dc:fd:a2:d1:1a:e6:35:ea: 43:7f:68:8e:ac:18:97:98:15:a5:91:81:6d:9f:91:45:2b:29: 06:ad:9a:60:1f:fb:06:4d:4d:fd:81:f7:f7:6c:5c:6d:7d:78: 58:fc:01:3d:25:ab:2b:fd:48:16:18:31:70:4a:89:3c:9a:8b: da:f9:72:e2:d4:3f:17:0e:a1:ac:39:3a:07:a2:f9:0a:bb:5f: 67:05:a2:ea:e4:52:b8:76:79:c7:5b:d0:5b:fa:34:c6:0b:b6: 9f:a1:f3:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZw2C6H1lz4q9ph5ZAqXCHK3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYmY2NWUwMDY5ZGJjYzc2YjdiNTU2ZThjMWQ3MDU4ODlk ZjI3ZTkwHhcNMjYwMjA3MDMwMDU3WhcNMjYwMjA4MDMwMDU3WjAzMTEwLwYDVQQD EygyZTk1YzgyMzE5MGE1NjgxMmQ5ZDFjNWZkOGM1M2E1Mzk2NDg4Zjc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2QDkyv9uFgnrk45FUmQRf75WGZuX D/m42KEdSJsxzkPa3qJVun08kjABkOXC3atoxB6uMQOSYr90nCiwTDT+UlhuY3SY AlbxG5l5wpCaiMaprMYuwYXedjuDt2Eir87isSujGUrExRRwmngbUSPdTjlmH7PG 9zDfm5bIoDMQ1kJDYuIDHQ8Ut5WmFC4ulhZ9nyhQmGmlx51iWLNwA2LkxBV7mRNN xCxb6/K+q5JZZnHrhgKKS1zZouusMmriDEFrRIamYUrcid6T6a12nxWn6LAZQy49 kxw9d1gaAz1nHwDdhqPYznVtswNZ+KzyIzVSNcN0AI6GNT2jNfOmED+fVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6VyCMZClaBLZ0cX9jFOlOWSI90MB8GA1UdIwQY MBaAFM6/ZeAGnbzHa3tVbowdcFiJ3yfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2Yt MjNiYTRhOTFhMTA1LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS9lYWQ3OWEtZDhhMS00ZTg3LWJhY2YtMjNiYTRhOTFhMTA1 LzEvenI5bDRBYWR2TWRyZTFWdWpCMXdXSW5mSi1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs+CMxi1y ux+u61gOX0hDBWHtRB3w2Cm029inM4nF1z27SvutDOqG0q+YlFxcMQii/ZNlKMfM tDF//MaVCRwEpUoedxJyUknZ1orP5RDELKa+rSdt2WIjSQ2EL4djIFZwBuN1epQ+ rI7lWWU8+nQENkWI/4duNvZ78QWOjQPcbqGDWpEu53H9wM5XKY0tU9Ki/XjJaHAb iJZZ79z9otEa5jXqQ39ojqwYl5gVpZGBbZ+RRSspBq2aYB/7Bk1N/YH392xcbX14 WPwBPSWrK/1IFhgxcEqJPJqL2vly4tQ/Fw6hrDk6B6L5CrtfZwWi6uRSuHZ5x1vQ W/o0xgu2n6HzWg== -----END CERTIFICATE-----Generated at Sat Feb 7 05:46:02 2026 by rpki-client