This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft File: zQzH_YiYsPffS53wuZMZvLKewkM.mft (raw, json) Hash identifier: XNVp+kYaoQybfvpsxVF6qDKl6HxyHu3e2RQ7o50f1nc= Subject key identifier: 30:69:F9:CB:C8:EA:38:E5:F1:D5:70:85:B4:D1:F2:76:A7:D3:55:7D Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43 Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243 Certificate serial: 019C42EB4AE09CF359C31ADA4C40F2E23B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft Manifest number: 1814 Signing time: Mon 09 Feb 2026 15:00:42 +0000 Manifest this update: Mon 09 Feb 2026 15:00:42 +0000 Manifest next update: Tue 10 Feb 2026 15:00:42 +0000 Files and hashes: 1: MHBYvDEfair8LMjjWldjlJSK4Kg.roa (hash: vmmrMoTWhgUvddV4vdbfGS7BdwqYfrrX4L+ZJDyj1ho=) 2: zQzH_YiYsPffS53wuZMZvLKewkM.crl (hash: QOQM70xw65/N4Nw1hQ6aUyDfu62YdklBMj7OtYO66NY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:4a:e0:9c:f3:59:c3:1a:da:4c:40:f2:e2:3b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243 Validity Not Before: Feb 9 15:00:42 2026 GMT Not After : Feb 10 15:00:42 2026 GMT Subject: CN=3069f9cbc8ea38e5f1d57085b4d1f276a7d3557d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3a:e2:f8:dc:af:91:2c:93:c4:11:84:9e:cc: d4:02:9f:f7:ff:21:9b:31:1e:19:98:01:87:4c:b5: 89:1c:97:c7:3c:1c:b8:94:2e:7a:76:68:43:2d:08: 54:ea:1c:d2:f9:8c:02:20:5b:8c:b7:61:5a:19:27: a1:35:be:c0:1a:2c:4d:3f:23:c0:05:3a:a7:ba:10: 00:25:d1:b9:26:03:07:13:0e:a9:31:01:6e:ac:da: 71:3e:92:8e:d9:5c:db:90:03:33:96:7d:96:d1:df: 50:81:c4:6e:21:4f:59:eb:31:3c:da:9d:3b:2a:6a: 62:3e:ed:80:11:3f:3b:56:78:38:cc:0d:34:f3:f2: 45:af:d4:94:19:ca:06:86:ab:9d:a7:45:a6:28:bc: 19:27:6d:71:6e:4d:10:5f:e7:3a:64:ae:9c:46:6b: a4:4d:96:be:30:66:cb:d3:aa:e5:83:61:76:aa:ef: 2d:55:36:50:cd:f2:80:32:79:86:67:97:06:47:c6: bd:04:93:74:de:68:91:9b:2b:14:7e:dc:e0:61:dd: de:70:14:7c:bb:c0:4a:7a:a0:09:6d:ec:66:5e:a4: 82:a3:25:44:c1:31:9e:76:99:e7:e6:e9:ad:1d:fd: ad:e6:7b:a9:0d:44:c8:f6:d8:ad:15:a0:35:1f:42: 39:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:69:F9:CB:C8:EA:38:E5:F1:D5:70:85:B4:D1:F2:76:A7:D3:55:7D X509v3 Authority Key Identifier: keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:8a:a6:28:88:a9:cc:66:95:b9:28:a9:10:96:a3:7f:5d:06: 2a:3f:db:08:28:bf:03:bc:a1:6e:3a:12:47:97:06:8c:df:bb: 41:ee:0a:2a:5e:46:b6:bd:a7:5a:85:7e:af:14:16:fb:25:07: 3a:5f:d0:c0:38:f0:c1:24:1c:ac:90:0a:ff:51:7c:47:c1:1b: e5:6e:33:36:7c:ae:74:b5:64:7f:36:e9:82:c1:0d:86:15:e9: 7f:a4:89:25:5d:be:b4:90:31:d6:03:96:3f:15:de:e6:9e:e2: ba:b9:54:3b:0b:9a:f3:07:7c:da:cc:dd:3a:4c:9f:a4:c1:47: a8:2e:dd:31:14:33:2f:50:96:17:ec:36:7d:bb:75:15:4e:f4: 0b:20:14:95:3a:4a:47:ae:ad:21:25:4b:57:ff:46:25:dc:57: 18:9f:e1:97:b6:b0:b5:ba:4a:e4:0a:46:ab:d1:ba:21:4c:32: 26:dd:d4:68:b9:f1:c2:ff:1c:e2:67:58:0e:b8:0c:02:f6:54: b5:6d:f8:52:bf:19:b5:fe:ab:9c:0d:ba:13:9d:0b:00:37:41: fe:7b:b6:4a:a9:dc:16:e7:f7:ec:8f:52:94:74:98:ad:a8:f7: 33:a8:fc:cf:b0:bf:b3:1d:41:25:f0:cb:d1:b7:ef:e4:af:58: 9c:2b:ae:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC60rgnPNZwxraTEDy4jsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMGNjN2ZkODg5OGIwZjdkZjRiOWRmMGI5OTMxOWJjYjI5 ZWMyNDMwHhcNMjYwMjA5MTUwMDQyWhcNMjYwMjEwMTUwMDQyWjAzMTEwLwYDVQQD EygzMDY5ZjljYmM4ZWEzOGU1ZjFkNTcwODViNGQxZjI3NmE3ZDM1NTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDri+NyvkSyTxBGEnszUAp/3/yGb MR4ZmAGHTLWJHJfHPBy4lC56dmhDLQhU6hzS+YwCIFuMt2FaGSehNb7AGixNPyPA BTqnuhAAJdG5JgMHEw6pMQFurNpxPpKO2VzbkAMzln2W0d9QgcRuIU9Z6zE82p07 KmpiPu2AET87Vng4zA008/JFr9SUGcoGhqudp0WmKLwZJ21xbk0QX+c6ZK6cRmuk TZa+MGbL06rlg2F2qu8tVTZQzfKAMnmGZ5cGR8a9BJN03miRmysUftzgYd3ecBR8 u8BKeqAJbexmXqSCoyVEwTGedpnn5umtHf2t5nupDUTI9titFaA1H0I5HQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBp+cvI6jjl8dVwhbTR8nan01V9MB8GA1UdIwQY MBaAFM0Mx/2ImLD330ud8LmTGbyynsJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEt YWIwNjM5MzhmMWNlLzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEtYWIwNjM5MzhmMWNl LzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANYqmKIip zGaVuSipEJajf10GKj/bCCi/A7yhbjoSR5cGjN+7Qe4KKl5Gtr2nWoV+rxQW+yUH Ol/QwDjwwSQcrJAK/1F8R8Eb5W4zNnyudLVkfzbpgsENhhXpf6SJJV2+tJAx1gOW PxXe5p7iurlUOwua8wd82szdOkyfpMFHqC7dMRQzL1CWF+w2fbt1FU70CyAUlTpK R66tISVLV/9GJdxXGJ/hl7awtbpK5ApGq9G6IUwyJt3UaLnxwv8c4mdYDrgMAvZU tW34Ur8Ztf6rnA26E50LADdB/nu2SqncFuf37I9SlHSYraj3M6j8z7C/sx1BJfDL 0bfv5K9YnCuudg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:30 2026 by rpki-client