This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft File: RZnthOSyEcyLqokUl0E1T4hQ7w8.mft (raw, json) Hash identifier: usj5wxrkawtQoTTLxKLYmduPNDN3lwZUvlZLNc6lNNw= Subject key identifier: C3:DE:44:CB:03:44:7E:6C:C3:60:E2:F2:9B:93:9D:57:B0:17:4E:65 Authority key identifier: 45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F Certificate issuer: /CN=4599ed84e4b211cc8baa89149741354f8850ef0f Certificate serial: 019C4246A3E970D16AEA2C6FA137200EF627 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft Manifest number: 0AD2 Signing time: Mon 09 Feb 2026 12:00:51 +0000 Manifest this update: Mon 09 Feb 2026 12:00:51 +0000 Manifest next update: Tue 10 Feb 2026 12:00:51 +0000 Files and hashes: 1: RZnthOSyEcyLqokUl0E1T4hQ7w8.crl (hash: ruA3QUnZzlUWM+CccFODN2KJ5ayDZJfq7S/YkNLXYeU=) 2: YAsr4AMd-DQg17IKnmJqPsKycSA.roa (hash: g07FXjeIHQJ20whOb8MTucqM4PupENC/MFjlVryEQbI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:a3:e9:70:d1:6a:ea:2c:6f:a1:37:20:0e:f6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4599ed84e4b211cc8baa89149741354f8850ef0f Validity Not Before: Feb 9 12:00:51 2026 GMT Not After : Feb 10 12:00:51 2026 GMT Subject: CN=c3de44cb03447e6cc360e2f29b939d57b0174e65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3f:65:13:7e:13:63:66:3c:ff:25:72:1a:c3: 49:8a:d8:10:ec:41:e7:ff:78:7a:6d:b7:4a:58:ec: 34:8f:36:51:a1:91:73:cc:ff:16:3c:c3:a3:ef:e4: 74:ac:39:77:bc:07:90:f1:5d:9a:26:09:c9:99:3d: e1:dd:5f:89:bc:ab:46:8b:40:79:41:f6:44:e5:27: dc:d4:00:c8:59:2a:c8:da:9f:c6:05:a5:8f:23:24: ec:c2:f1:0e:e7:7e:99:a8:97:cb:55:02:6f:5d:e6: a8:8a:85:43:33:a5:3f:fd:49:72:1a:c5:54:61:70: 3a:5b:04:3d:4a:68:7f:ce:16:f7:03:ab:7a:cc:7c: c7:08:ed:6f:f2:56:05:89:a6:d1:57:fd:89:61:42: c5:64:da:1d:c8:91:8f:d7:94:c9:e4:61:cc:18:29: 0f:ca:ed:f3:8f:18:54:29:4b:89:60:68:e4:b5:bd: 6a:b2:fd:5d:ab:80:77:6a:df:16:39:29:11:49:04: ea:47:62:7c:a6:06:44:00:6b:76:f3:cf:46:a1:1e: 98:1d:9f:8b:62:eb:65:c6:5a:a9:7d:30:37:6e:5d: ac:cd:2c:04:2a:0c:21:f3:95:1b:f8:e2:ff:4a:b7: dd:b1:85:23:cc:c2:b7:73:61:3f:03:24:d2:94:3a: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:DE:44:CB:03:44:7E:6C:C3:60:E2:F2:9B:93:9D:57:B0:17:4E:65 X509v3 Authority Key Identifier: keyid:45:99:ED:84:E4:B2:11:CC:8B:AA:89:14:97:41:35:4F:88:50:EF:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZnthOSyEcyLqokUl0E1T4hQ7w8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/89291a-e6ce-40ce-8b49-16ffa114699c/1/RZnthOSyEcyLqokUl0E1T4hQ7w8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:b7:9a:88:10:9b:08:f5:10:97:7c:92:f2:e5:5f:a9:ee:46: f6:67:be:27:4e:c0:14:c3:4a:d8:6a:15:d2:a6:97:a3:50:e5: c2:72:1f:2f:cd:e3:10:7f:2a:a7:22:4c:71:6e:c6:93:c0:3a: f6:57:60:15:84:ac:b1:1b:05:f8:7e:71:6b:2d:f9:57:3e:d1: 25:81:16:a8:e6:91:e1:f6:54:f9:1f:b5:70:f2:9d:4d:41:58: f6:08:8f:d0:c2:2b:27:cc:28:e5:ae:49:fa:1a:59:37:25:0c: 76:dc:3c:bd:60:48:a5:b1:c0:18:52:c4:a3:54:ed:69:2d:45: c0:e3:ee:e2:2c:8b:28:84:f7:4a:93:f2:90:b7:99:f7:6f:b7: 6d:85:5b:79:65:3d:05:80:ad:11:a5:28:bd:43:5c:b5:1b:f3: 03:ab:6d:04:ff:f1:cf:f7:d6:5c:30:ea:e3:93:dd:b3:83:3b: 47:d3:84:bc:f4:87:6b:bf:2c:83:ff:39:2e:f2:a3:d9:bd:e2: f4:62:a9:91:c1:0e:7a:53:b2:c3:c6:8d:60:f4:9a:c2:b6:a0: 19:be:43:ca:bd:48:55:ba:9d:74:ae:ea:7b:75:9f:68:96:80: 52:1d:a5:e9:92:80:b9:5d:69:c8:42:0c:f7:ab:22:79:ea:27: 12:05:d7:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRqPpcNFq6ixvoTcgDvYnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OTllZDg0ZTRiMjExY2M4YmFhODkxNDk3NDEzNTRmODg1 MGVmMGYwHhcNMjYwMjA5MTIwMDUxWhcNMjYwMjEwMTIwMDUxWjAzMTEwLwYDVQQD EyhjM2RlNDRjYjAzNDQ3ZTZjYzM2MGUyZjI5YjkzOWQ1N2IwMTc0ZTY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwD9lE34TY2Y8/yVyGsNJitgQ7EHn /3h6bbdKWOw0jzZRoZFzzP8WPMOj7+R0rDl3vAeQ8V2aJgnJmT3h3V+JvKtGi0B5 QfZE5Sfc1ADIWSrI2p/GBaWPIyTswvEO536ZqJfLVQJvXeaoioVDM6U//UlyGsVU YXA6WwQ9Smh/zhb3A6t6zHzHCO1v8lYFiabRV/2JYULFZNodyJGP15TJ5GHMGCkP yu3zjxhUKUuJYGjktb1qsv1dq4B3at8WOSkRSQTqR2J8pgZEAGt2889GoR6YHZ+L YutlxlqpfTA3bl2szSwEKgwh85Ub+OL/SrfdsYUjzMK3c2E/AyTSlDqbrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMPeRMsDRH5sw2Di8puTnVewF05lMB8GA1UdIwQY MBaAFEWZ7YTkshHMi6qJFJdBNU+IUO8PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDkt MTZmZmExMTQ2OTljLzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84OTI5MWEtZTZjZS00MGNlLThiNDktMTZmZmExMTQ2OTlj LzEvUlpudGhPU3lFY3lMcW9rVWwwRTFUNGhRN3c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFLeaiBCb CPUQl3yS8uVfqe5G9me+J07AFMNK2GoV0qaXo1DlwnIfL83jEH8qpyJMcW7Gk8A6 9ldgFYSssRsF+H5xay35Vz7RJYEWqOaR4fZU+R+1cPKdTUFY9giP0MIrJ8wo5a5J +hpZNyUMdtw8vWBIpbHAGFLEo1TtaS1FwOPu4iyLKIT3SpPykLeZ92+3bYVbeWU9 BYCtEaUovUNctRvzA6ttBP/xz/fWXDDq45Pds4M7R9OEvPSHa78sg/85LvKj2b3i 9GKpkcEOelOyw8aNYPSawragGb5Dyr1IVbqddK7qe3WfaJaAUh2l6ZKAuV1pyEIM 96sieeonEgXXbg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:58 2026 by rpki-client