This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft File: znD-aY5Nrp18MrwVbEGAZP3P9LA.mft (raw, json) Hash identifier: X72VJJ7eimiKZNFYLU5lzM2la6HsWSpjDBYeE21Mmwc= Subject key identifier: 9B:8C:EB:8D:FD:EA:89:CC:69:BE:64:7C:90:96:96:D3:B4:DD:81:7B Authority key identifier: CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0 Certificate issuer: /CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0 Certificate serial: 019C424618E2FF27E0060141830AD23CF8B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 12:00:16 +0000 Manifest this update: Mon 09 Feb 2026 12:00:16 +0000 Manifest next update: Tue 10 Feb 2026 12:00:16 +0000 Files and hashes: 1: aSaj4x_eEi9R61JBcv_KlqSjEVo.roa (hash: e0WEFFwimfYALBRW6v2KlOISxXFOHzRtxX7qcK+LLls=) 2: znD-aY5Nrp18MrwVbEGAZP3P9LA.crl (hash: Bnr7CLWmdWtnA83aGG9WJjJ+hJTwgeUjO2nHB8Xj2VQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:18:e2:ff:27:e0:06:01:41:83:0a:d2:3c:f8:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce70fe698e4dae9d7c32bc156c418064fdcff4b0 Validity Not Before: Feb 9 12:00:16 2026 GMT Not After : Feb 10 12:00:16 2026 GMT Subject: CN=9b8ceb8dfdea89cc69be647c909696d3b4dd817b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d0:f4:e6:a9:a9:98:cf:87:c3:40:5f:e4:74: 81:bf:ad:87:82:18:4d:cc:a0:9d:cf:ba:13:56:37: 25:ed:a2:ac:82:9a:c0:87:a0:a4:73:b4:6c:b0:75: 5f:1c:f0:47:6a:0b:8f:0c:40:c7:e9:d2:6e:24:4d: bb:15:fa:98:98:68:04:b5:aa:ec:54:a8:7e:67:8a: c6:65:5f:9a:53:50:77:c3:86:98:69:31:16:1e:9d: 26:b3:7e:0c:d4:3a:fd:03:10:1a:3a:ff:3b:3d:fc: 48:7e:d2:dc:34:c9:8f:d0:de:14:a6:61:7b:12:f7: 27:3f:5d:19:3e:a3:4c:85:35:5b:bf:76:9c:a2:11: 34:06:83:ea:dd:13:d6:65:40:33:d4:b6:6c:ef:d0: 4b:90:e2:33:b7:9d:78:e4:b9:08:8e:d2:68:b6:88: 2d:86:b5:c4:22:7f:f2:70:8d:37:0c:24:ad:a0:9d: d1:4c:e8:e3:29:ef:27:c0:c5:15:d4:b9:88:76:60: 08:2a:16:09:02:76:ed:80:b5:ba:40:33:f4:ab:bf: 52:7b:50:6b:73:d5:34:2f:3d:d1:bb:67:35:2c:33: e5:c5:4a:06:66:41:bb:70:6c:dd:46:c1:c6:50:0d: 16:5a:a8:91:ba:cd:ee:74:94:e9:b4:16:d0:cd:79: 76:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:8C:EB:8D:FD:EA:89:CC:69:BE:64:7C:90:96:96:D3:B4:DD:81:7B X509v3 Authority Key Identifier: keyid:CE:70:FE:69:8E:4D:AE:9D:7C:32:BC:15:6C:41:80:64:FD:CF:F4:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znD-aY5Nrp18MrwVbEGAZP3P9LA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/875ba5-8bb1-48ab-b47d-81fea0f77286/1/znD-aY5Nrp18MrwVbEGAZP3P9LA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:31:76:a2:8b:d2:1c:68:b9:a2:ad:14:18:ff:06:79:74:13: 4c:44:ed:b0:56:7f:08:8c:5b:e2:d9:c4:34:50:dd:bd:c2:52: 2f:1a:8c:3b:ed:91:59:a9:72:82:5e:3b:c8:3a:5c:96:9d:f3: df:7d:45:ef:cb:a8:15:0d:04:a3:e6:17:9f:fd:3b:2e:64:2d: 32:28:83:fa:57:d7:dc:73:54:fd:c7:55:bf:9f:9d:f3:8e:a8: a6:5e:2e:fa:2a:ad:ff:41:d8:8e:3a:14:e0:2f:b9:88:d8:ba: 12:b2:d2:4a:cf:6a:cd:ab:ca:c0:91:6c:5f:e0:59:44:42:39: fc:46:86:4d:89:78:83:02:e8:74:d4:32:fc:d5:e3:e0:a6:a6: bd:2c:75:14:b7:ad:41:2a:9b:ad:97:32:62:cc:e3:d8:82:86: a0:e3:e1:43:36:6c:5a:9e:ef:f8:23:58:6e:b0:ce:26:bb:a0: b1:fc:fb:c2:56:39:d8:39:62:f2:9f:63:42:35:0b:21:54:c2: ce:04:7b:8d:82:6b:e7:11:1f:53:b4:fe:45:3b:ac:fe:32:23: f8:7a:14:40:74:2f:dd:db:0d:67:36:42:f7:17:f4:5b:b3:39: d1:26:4e:20:22:a3:a7:bd:fa:cb:91:b9:01:ef:45:0d:10:07: b3:a8:97:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRhji/yfgBgFBgwrSPPi2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNzBmZTY5OGU0ZGFlOWQ3YzMyYmMxNTZjNDE4MDY0ZmRj ZmY0YjAwHhcNMjYwMjA5MTIwMDE2WhcNMjYwMjEwMTIwMDE2WjAzMTEwLwYDVQQD Eyg5YjhjZWI4ZGZkZWE4OWNjNjliZTY0N2M5MDk2OTZkM2I0ZGQ4MTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstD05qmpmM+Hw0Bf5HSBv62HghhN zKCdz7oTVjcl7aKsgprAh6Ckc7RssHVfHPBHaguPDEDH6dJuJE27FfqYmGgEtars VKh+Z4rGZV+aU1B3w4aYaTEWHp0ms34M1Dr9AxAaOv87PfxIftLcNMmP0N4UpmF7 EvcnP10ZPqNMhTVbv3acohE0BoPq3RPWZUAz1LZs79BLkOIzt5145LkIjtJotogt hrXEIn/ycI03DCStoJ3RTOjjKe8nwMUV1LmIdmAIKhYJAnbtgLW6QDP0q79Se1Br c9U0Lz3Ru2c1LDPlxUoGZkG7cGzdRsHGUA0WWqiRus3udJTptBbQzXl2BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJuM64396onMab5kfJCWltO03YF7MB8GA1UdIwQY MBaAFM5w/mmOTa6dfDK8FWxBgGT9z/SwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2Qt ODFmZWEwZjc3Mjg2LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC84NzViYTUtOGJiMS00OGFiLWI0N2QtODFmZWEwZjc3Mjg2 LzEvem5ELWFZNU5ycDE4TXJ3VmJFR0FaUDNQOUxBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDF2oovS HGi5oq0UGP8GeXQTTETtsFZ/CIxb4tnENFDdvcJSLxqMO+2RWalygl47yDpclp3z 331F78uoFQ0Eo+YXn/07LmQtMiiD+lfX3HNU/cdVv5+d846opl4u+iqt/0HYjjoU 4C+5iNi6ErLSSs9qzavKwJFsX+BZREI5/EaGTYl4gwLodNQy/NXj4KamvSx1FLet QSqbrZcyYszj2IKGoOPhQzZsWp7v+CNYbrDOJrugsfz7wlY52Dli8p9jQjULIVTC zgR7jYJr5xEfU7T+RTus/jIj+HoUQHQv3dsNZzZC9xf0W7M50SZOICKjp736y5G5 Ae9FDRAHs6iXVw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:26 2026 by rpki-client