This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft File: Z9zZJr83DT-gGDoTi1ewmDzaygo.mft (raw, json) Hash identifier: UBgd4l2u/2xg4yrduwzPCdt0INXWNqNIxRsoBla73iI= Subject key identifier: 3F:DC:8D:4D:D0:1B:0F:C6:11:BA:99:AD:89:05:E6:3E:71:86:7F:C5 Authority key identifier: 67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A Certificate issuer: /CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Certificate serial: 019C41A19EF47779816972380487ED839D78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 09:00:36 +0000 Manifest this update: Mon 09 Feb 2026 09:00:36 +0000 Manifest next update: Tue 10 Feb 2026 09:00:36 +0000 Files and hashes: 1: Z9zZJr83DT-gGDoTi1ewmDzaygo.crl (hash: k1Ed70Ra83ucNSTHxZ8E3RbzDFVyClzKRYvFKGMJ1uA=) 2: vXSPj4U0XPgUCORzKqKn2pQ-_54.roa (hash: a+QqfJndzh+WZAcq/hkoF/C3W7oEsp7bn060vJhpI74=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:9e:f4:77:79:81:69:72:38:04:87:ed:83:9d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dcd926bf370d3fa0183a138b57b0983cdaca0a Validity Not Before: Feb 9 09:00:36 2026 GMT Not After : Feb 10 09:00:36 2026 GMT Subject: CN=3fdc8d4dd01b0fc611ba99ad8905e63e71867fc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3b:ca:5d:47:3b:66:31:28:cc:25:71:a6:44: 59:52:60:ea:b7:77:15:4c:db:0c:82:e2:7c:ce:22: 5e:ea:fe:ce:43:66:b3:bf:e7:6c:f7:55:b1:e0:7f: d3:e6:49:0b:e4:40:4f:bf:32:3a:e8:08:de:a9:e9: 8c:51:f1:c9:7c:72:74:23:29:8c:e2:f6:1f:46:c1: 96:d9:62:05:d8:1c:45:92:c6:70:15:e0:2a:a7:35: 63:01:23:d5:ae:34:8d:e6:79:f3:51:49:aa:fe:dc: 3c:92:37:79:fc:24:83:f5:74:af:5b:fb:26:77:f1: 1b:14:0c:d7:69:38:31:1d:f2:10:f5:cc:c3:eb:bd: 0b:46:39:01:ec:5f:2f:31:26:18:fb:20:f2:06:1c: 8e:f7:fc:eb:c3:61:f8:6c:cf:1c:ab:06:fb:f7:6a: 96:5d:9e:90:8b:8f:44:5d:7c:a6:c7:67:77:a2:14: b6:f9:97:7f:99:94:14:b5:46:05:c5:d7:98:c0:b7: 85:b3:e1:23:e6:62:67:25:4e:7c:91:60:86:7e:49: 96:3a:ea:67:14:fd:31:36:b9:6b:e1:fa:cb:e7:d8: 86:4a:ef:31:a5:65:d6:8c:fe:01:e5:3f:b3:a9:bb: 07:e9:20:bc:40:36:c6:b9:91:54:bf:11:84:f1:47: 7f:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:DC:8D:4D:D0:1B:0F:C6:11:BA:99:AD:89:05:E6:3E:71:86:7F:C5 X509v3 Authority Key Identifier: keyid:67:DC:D9:26:BF:37:0D:3F:A0:18:3A:13:8B:57:B0:98:3C:DA:CA:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9zZJr83DT-gGDoTi1ewmDzaygo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e1c80d-a63b-481c-a9f2-9f5b2eb492a0/1/Z9zZJr83DT-gGDoTi1ewmDzaygo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d1:bc:bf:ab:f0:3b:fa:43:82:da:5f:d3:be:ae:f8:93:a2: ed:de:91:ed:09:48:0a:1b:6b:b0:04:fe:9f:5d:2d:ae:2f:b4: 4b:f2:b1:92:f1:95:c4:25:94:34:ff:f1:e1:be:51:81:3e:15: 13:3d:55:cf:51:f7:03:30:99:f8:3e:af:cb:bb:88:28:eb:cd: 39:e1:a4:89:30:1f:e6:b5:5d:eb:5a:95:9e:25:00:85:99:90: 22:04:d5:3a:91:7b:bb:99:3d:5e:b6:d1:35:a7:a1:a6:4e:2b: 95:85:40:6b:3b:90:7d:9e:c6:d4:80:00:d2:8a:d6:f6:aa:dd: 69:52:ea:83:af:f5:6b:ce:64:05:74:4d:37:5d:57:9a:c8:46: 05:4d:33:54:4e:d9:dc:b3:db:90:bb:de:6f:d8:3a:30:90:23: 11:79:ea:d1:98:9b:9b:d8:bb:28:f0:5d:b3:13:c0:b7:20:2c: b6:04:a7:74:8d:2c:0a:4f:fc:e2:a2:5a:80:ad:be:5f:98:53: 52:7c:fc:1a:77:8d:07:94:52:0b:0d:c1:20:ee:61:72:fe:2e: e8:75:c9:d9:a1:7f:d2:a3:28:cf:2b:1a:d2:9c:9a:d6:f7:54: 56:43:d4:14:4f:47:80:d2:9a:32:e7:69:34:43:c6:b2:17:8b: 5d:8f:bb:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoZ70d3mBaXI4BIftg514MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGNkOTI2YmYzNzBkM2ZhMDE4M2ExMzhiNTdiMDk4M2Nk YWNhMGEwHhcNMjYwMjA5MDkwMDM2WhcNMjYwMjEwMDkwMDM2WjAzMTEwLwYDVQQD EygzZmRjOGQ0ZGQwMWIwZmM2MTFiYTk5YWQ4OTA1ZTYzZTcxODY3ZmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jvKXUc7ZjEozCVxpkRZUmDqt3cV TNsMguJ8ziJe6v7OQ2azv+ds91Wx4H/T5kkL5EBPvzI66AjeqemMUfHJfHJ0IymM 4vYfRsGW2WIF2BxFksZwFeAqpzVjASPVrjSN5nnzUUmq/tw8kjd5/CSD9XSvW/sm d/EbFAzXaTgxHfIQ9czD670LRjkB7F8vMSYY+yDyBhyO9/zrw2H4bM8cqwb792qW XZ6Qi49EXXymx2d3ohS2+Zd/mZQUtUYFxdeYwLeFs+Ej5mJnJU58kWCGfkmWOupn FP0xNrlr4frL59iGSu8xpWXWjP4B5T+zqbsH6SC8QDbGuZFUvxGE8Ud/cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/cjU3QGw/GEbqZrYkF5j5xhn/FMB8GA1UdIwQY MBaAFGfc2Sa/Nw0/oBg6E4tXsJg82soKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjIt OWY1YjJlYjQ5MmEwLzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NC9lMWM4MGQtYTYzYi00ODFjLWE5ZjItOWY1YjJlYjQ5MmEw LzEvWjl6WkpyODNEVC1nR0RvVGkxZXdtRHpheWdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNG8v6vw O/pDgtpf076u+JOi7d6R7QlIChtrsAT+n10tri+0S/KxkvGVxCWUNP/x4b5RgT4V Ez1Vz1H3AzCZ+D6vy7uIKOvNOeGkiTAf5rVd61qVniUAhZmQIgTVOpF7u5k9XrbR Naehpk4rlYVAazuQfZ7G1IAA0orW9qrdaVLqg6/1a85kBXRNN11XmshGBU0zVE7Z 3LPbkLveb9g6MJAjEXnq0Zibm9i7KPBdsxPAtyAstgSndI0sCk/84qJagK2+X5hT Unz8GneNB5RSCw3BIO5hcv4u6HXJ2aF/0qMozysa0pya1vdUVkPUFE9HgNKaMudp NEPGsheLXY+7AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:42 2026 by rpki-client