This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft File: zyJMhK66hZuQyJNsumFn7kxE7Oc.mft (raw, json) Hash identifier: j/riuBtrbdT5C9m5mzGMRyNguHCG/0KWvkfT2LDgx4U= Subject key identifier: 6D:86:D2:12:DA:37:F7:0A:76:EA:69:8B:C8:2B:99:9A:06:4C:F7:51 Authority key identifier: CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7 Certificate issuer: /CN=cf224c84aeba859b90c8936cba6167ee4c44ece7 Certificate serial: 019C41D902C7E99A0C2EA236487AF08165AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft Manifest number: 0883 Signing time: Mon 09 Feb 2026 10:01:06 +0000 Manifest this update: Mon 09 Feb 2026 10:01:06 +0000 Manifest next update: Tue 10 Feb 2026 10:01:06 +0000 Files and hashes: 1: EeAR-0FuIgpREXK4CZj7bbiR324.roa (hash: nK35rOT9ZlV+vNlZLQE4MxQolHHOslBBZTHEZhrQ+LA=) 2: zyJMhK66hZuQyJNsumFn7kxE7Oc.crl (hash: R5Aer9qyt6lxhOu58jBb2toOE3N8uF1kU4TJy+8AfhQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d9:02:c7:e9:9a:0c:2e:a2:36:48:7a:f0:81:65:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf224c84aeba859b90c8936cba6167ee4c44ece7 Validity Not Before: Feb 9 10:01:06 2026 GMT Not After : Feb 10 10:01:06 2026 GMT Subject: CN=6d86d212da37f70a76ea698bc82b999a064cf751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a3:f7:ee:00:56:1f:a5:ab:9f:d2:4f:fa:bb: 61:6d:ec:93:21:ab:71:76:2b:9d:5b:f5:8c:46:27: c8:b0:fe:13:64:86:0a:22:40:2d:3e:1f:76:76:49: 1e:a8:dd:dc:f3:0c:19:8e:27:63:3c:6c:0a:28:c4: 92:07:ff:0b:04:5a:27:34:b2:7f:4e:6b:98:6b:a7: 4c:86:a7:5b:78:3e:b2:68:3c:d1:c9:8f:03:b7:5b: fa:ab:fb:66:12:71:f0:fb:ba:44:a2:b1:8b:22:1b: f6:3a:41:b7:9f:33:8e:fd:da:74:51:7c:5e:e8:02: bf:88:ef:f1:d7:fa:14:97:0a:ff:3e:ab:7c:e8:fa: 0c:8e:f8:47:8c:b8:55:aa:8b:ed:a6:d0:3e:a3:de: 2a:2a:f9:ab:ae:e5:8d:7c:08:f7:9f:b3:ec:c1:7c: f5:80:79:4c:af:49:72:86:59:47:8a:24:52:d4:12: 81:71:15:e2:4f:63:da:a4:1c:87:2e:01:0b:77:a6: 0f:ed:fc:bf:21:25:33:28:8c:62:e8:b7:9d:5e:69: 76:a2:cd:c6:38:71:5f:5c:e1:3e:cb:30:dd:f8:48: 17:51:e3:f4:2d:8d:b8:af:09:75:c2:20:ce:6f:ff: 8e:65:14:37:12:af:8f:c0:72:2c:bd:85:13:0e:64: fc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:86:D2:12:DA:37:F7:0A:76:EA:69:8B:C8:2B:99:9A:06:4C:F7:51 X509v3 Authority Key Identifier: keyid:CF:22:4C:84:AE:BA:85:9B:90:C8:93:6C:BA:61:67:EE:4C:44:EC:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zyJMhK66hZuQyJNsumFn7kxE7Oc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0716df-341b-4a08-a451-596225031ee3/1/zyJMhK66hZuQyJNsumFn7kxE7Oc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:36:2d:c8:e9:b6:4a:bc:91:d2:f7:ba:41:ba:1a:53:98:12: fc:82:98:e8:16:54:b1:1b:38:4e:aa:a8:31:16:63:41:4a:89: e5:5e:d2:c3:d6:72:28:0c:4d:a3:ef:fc:76:f3:c0:1c:54:4c: 4c:e5:77:51:de:6d:aa:36:d5:c7:74:3d:0c:d6:45:8c:c8:94: 21:34:46:97:0b:51:0c:14:43:ac:32:90:66:f8:2a:b2:9d:fd: 28:4e:86:af:b7:53:8b:9e:d9:45:38:67:dc:1f:e2:3d:fa:e8: f4:2d:3a:91:e7:d5:ae:06:77:79:54:cf:08:1c:cd:4b:31:7b: 8b:11:f5:be:0f:b6:49:de:bb:3f:87:72:76:10:44:da:d9:20: 34:d9:7a:0d:9b:5e:06:c5:a6:f2:ac:ca:0b:c7:b3:aa:29:9e: 63:5d:6f:26:d0:cd:7e:70:70:55:b9:01:10:b3:83:2b:4d:1a: 13:04:d9:68:6f:56:cc:75:7f:89:69:2b:cb:46:c6:51:9b:9b: 37:70:5c:57:30:04:64:eb:89:da:64:26:03:9f:ed:05:61:ed: 07:8f:0e:76:92:9e:a1:c2:06:26:da:33:da:97:68:d7:6f:96: 60:5f:1e:c9:93:80:20:0e:78:51:25:ac:fd:bb:66:70:89:c2: 45:ec:bd:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2QLH6ZoMLqI2SHrwgWWuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMjI0Yzg0YWViYTg1OWI5MGM4OTM2Y2JhNjE2N2VlNGM0 NGVjZTcwHhcNMjYwMjA5MTAwMTA2WhcNMjYwMjEwMTAwMTA2WjAzMTEwLwYDVQQD Eyg2ZDg2ZDIxMmRhMzdmNzBhNzZlYTY5OGJjODJiOTk5YTA2NGNmNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKP37gBWH6Wrn9JP+rthbeyTIatx diudW/WMRifIsP4TZIYKIkAtPh92dkkeqN3c8wwZjidjPGwKKMSSB/8LBFonNLJ/ TmuYa6dMhqdbeD6yaDzRyY8Dt1v6q/tmEnHw+7pEorGLIhv2OkG3nzOO/dp0UXxe 6AK/iO/x1/oUlwr/Pqt86PoMjvhHjLhVqovtptA+o94qKvmrruWNfAj3n7PswXz1 gHlMr0lyhllHiiRS1BKBcRXiT2PapByHLgELd6YP7fy/ISUzKIxi6LedXml2os3G OHFfXOE+yzDd+EgXUeP0LY24rwl1wiDOb/+OZRQ3Eq+PwHIsvYUTDmT85QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG2G0hLaN/cKduppi8grmZoGTPdRMB8GA1UdIwQY MBaAFM8iTISuuoWbkMiTbLphZ+5MROznMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEt NTk2MjI1MDMxZWUzLzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi8wNzE2ZGYtMzQxYi00YTA4LWE0NTEtNTk2MjI1MDMxZWUz LzEvenlKTWhLNjZoWnVReUpOc3VtRm43a3hFN09jLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDYtyOm2 SryR0ve6QboaU5gS/IKY6BZUsRs4TqqoMRZjQUqJ5V7Sw9ZyKAxNo+/8dvPAHFRM TOV3Ud5tqjbVx3Q9DNZFjMiUITRGlwtRDBRDrDKQZvgqsp39KE6Gr7dTi57ZRThn 3B/iPfro9C06kefVrgZ3eVTPCBzNSzF7ixH1vg+2Sd67P4dydhBE2tkgNNl6DZte BsWm8qzKC8ezqimeY11vJtDNfnBwVbkBELODK00aEwTZaG9WzHV/iWkry0bGUZub N3BcVzAEZOuJ2mQmA5/tBWHtB48OdpKeocIGJtoz2pdo12+WYF8eyZOAIA54USWs /btmcInCRey9vg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:43 2026 by rpki-client