This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft File: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft (raw, json) Hash identifier: VxexcCwKgxZ76vwG5gkM5oEulIrw0WozNTVgGmoq+s8= Subject key identifier: 98:E6:3A:B8:67:28:C8:43:5C:A8:D9:F0:19:AF:35:84:3D:BE:35:0A Authority key identifier: 66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F Certificate issuer: /CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Certificate serial: 019C42EB7364EF50666E3A3B1A8BE20EAFFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft Manifest number: 0C0C Signing time: Mon 09 Feb 2026 15:00:52 +0000 Manifest this update: Mon 09 Feb 2026 15:00:52 +0000 Manifest next update: Tue 10 Feb 2026 15:00:52 +0000 Files and hashes: 1: 3FX3dROebXazZ9k_8-Lo5o1qkkI.roa (hash: iLVy4lChJ6R/aX19zh/vuVIS2qDiRo8xZfWhdwKLT/E=) 2: ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl (hash: fjDCdPoFBA5ei3eCzfPXLbYv556lhWq3NPdr3bX1TmA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:73:64:ef:50:66:6e:3a:3b:1a:8b:e2:0e:af:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66491883cb4c50122fdb2754b6252fdd6fc9d51f Validity Not Before: Feb 9 15:00:52 2026 GMT Not After : Feb 10 15:00:52 2026 GMT Subject: CN=98e63ab86728c8435ca8d9f019af35843dbe350a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:43:e8:a0:b2:d4:fd:78:a0:dc:bb:b7:01:ff: a0:ed:c5:37:21:90:94:5b:6c:02:58:26:c2:e5:43: 50:bf:b3:0d:cc:73:21:90:41:17:b1:a8:f1:76:d5: 24:dc:22:58:44:0c:56:03:b1:e5:a8:b9:a7:c3:84: ed:f1:26:d3:b9:9b:8e:28:9b:f7:7a:83:49:b1:4d: f8:6c:78:ea:68:1d:80:ac:57:1c:43:a2:db:d5:48: ad:f0:bf:e5:43:90:39:8d:f6:be:60:50:dd:23:71: 92:05:2e:30:d3:e0:1c:ae:22:ea:aa:de:70:d8:7b: 7a:f0:4b:3b:dc:61:bd:15:a0:4a:e7:c1:cf:76:9f: 40:5f:28:05:ec:85:8a:87:5a:ff:83:f5:b0:fb:99: ef:8b:16:0f:e6:b6:f3:4e:21:bb:a9:50:b7:3a:25: 62:07:ac:e6:3b:f2:91:50:88:61:bb:4b:6b:10:46: de:5b:0f:07:c4:1d:8f:40:01:df:7f:1e:a8:6e:6f: b8:0a:a8:50:d9:fe:9e:2a:84:33:ea:02:97:55:39: 30:44:bb:1b:be:ff:5c:4b:81:ce:d8:23:05:88:c2: f0:91:0c:19:53:a0:6d:d2:e3:5d:54:3f:0c:e6:78: 6a:a8:56:9c:0e:2e:97:6a:c6:93:2a:c1:1a:2e:78: 5b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:E6:3A:B8:67:28:C8:43:5C:A8:D9:F0:19:AF:35:84:3D:BE:35:0A X509v3 Authority Key Identifier: keyid:66:49:18:83:CB:4C:50:12:2F:DB:27:54:B6:25:2F:DD:6F:C9:D5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8c5787-09fa-4988-81a1-75d6be4e5c37/1/ZkkYg8tMUBIv2ydUtiUv3W_J1R8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:e4:4e:21:86:50:98:88:59:fd:aa:18:a2:f6:35:b0:af:8d: 51:0a:7a:6f:7a:83:7d:7d:66:1f:8f:2a:29:d9:4c:15:ca:02: 6f:35:f8:d4:86:1d:27:54:0d:d3:16:d3:0d:4c:a2:84:37:64: 0c:1e:21:51:94:f6:97:01:04:9a:c6:67:95:15:76:de:69:61: 10:2f:30:d3:80:1a:b1:15:fa:62:59:42:c3:cc:42:18:cd:cb: a2:2f:39:6e:f2:65:71:9c:36:7a:0d:72:65:7c:48:53:5b:fe: 94:2c:e0:8b:97:56:55:c8:81:7a:06:8b:42:2c:8f:37:72:35: 96:49:3b:4d:68:f8:7a:91:fe:62:c7:59:08:84:1d:ed:f7:c0: c1:55:9c:e5:96:7d:d2:3b:1d:cf:18:10:d5:de:4a:cf:5d:4f: 51:82:a7:16:5a:54:5e:d6:c1:06:9c:72:f3:59:48:3b:1c:ff: b5:da:c8:ce:a2:31:84:83:70:6c:57:21:1e:47:5f:58:ff:2c: e6:6b:42:6e:3c:3c:86:69:ff:ff:66:8a:24:3b:99:93:5f:b0: 18:2a:17:3b:69:74:ae:15:5e:a6:a4:ef:d3:20:39:5f:d8:1a: fa:b5:2c:50:46:a3:c8:11:24:a3:e1:a6:46:d3:52:17:52:a9: a4:72:ec:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC63Nk71Bmbjo7GoviDq/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NDkxODgzY2I0YzUwMTIyZmRiMjc1NGI2MjUyZmRkNmZj OWQ1MWYwHhcNMjYwMjA5MTUwMDUyWhcNMjYwMjEwMTUwMDUyWjAzMTEwLwYDVQQD Eyg5OGU2M2FiODY3MjhjODQzNWNhOGQ5ZjAxOWFmMzU4NDNkYmUzNTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz0PooLLU/Xig3Lu3Af+g7cU3IZCU W2wCWCbC5UNQv7MNzHMhkEEXsajxdtUk3CJYRAxWA7HlqLmnw4Tt8SbTuZuOKJv3 eoNJsU34bHjqaB2ArFccQ6Lb1Uit8L/lQ5A5jfa+YFDdI3GSBS4w0+AcriLqqt5w 2Ht68Es73GG9FaBK58HPdp9AXygF7IWKh1r/g/Ww+5nvixYP5rbzTiG7qVC3OiVi B6zmO/KRUIhhu0trEEbeWw8HxB2PQAHffx6obm+4CqhQ2f6eKoQz6gKXVTkwRLsb vv9cS4HO2CMFiMLwkQwZU6Bt0uNdVD8M5nhqqFacDi6XasaTKsEaLnhbxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjmOrhnKMhDXKjZ8BmvNYQ9vjUKMB8GA1UdIwQY MBaAFGZJGIPLTFASL9snVLYlL91vydUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEt NzVkNmJlNGU1YzM3LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC84YzU3ODctMDlmYS00OTg4LTgxYTEtNzVkNmJlNGU1YzM3 LzEvWmtrWWc4dE1VQkl2MnlkVXRpVXYzV19KMVI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKOROIYZQ mIhZ/aoYovY1sK+NUQp6b3qDfX1mH48qKdlMFcoCbzX41IYdJ1QN0xbTDUyihDdk DB4hUZT2lwEEmsZnlRV23mlhEC8w04AasRX6YllCw8xCGM3Loi85bvJlcZw2eg1y ZXxIU1v+lCzgi5dWVciBegaLQiyPN3I1lkk7TWj4epH+YsdZCIQd7ffAwVWc5ZZ9 0jsdzxgQ1d5Kz11PUYKnFlpUXtbBBpxy81lIOxz/tdrIzqIxhINwbFchHkdfWP8s 5mtCbjw8hmn//2aKJDuZk1+wGCoXO2l0rhVepqTv0yA5X9ga+rUsUEajyBEko+Gm RtNSF1KppHLsPQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:50 2026 by rpki-client