This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft File: zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft (raw, json) Hash identifier: fn3oNZpVuXCnefD+HSgYXaufKKEWeq2n9EINS4IyzyM= Subject key identifier: 70:FD:B8:21:A5:0F:C3:96:4C:72:9E:BA:2C:C5:C7:A2:46:EA:09:9D Authority key identifier: CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 Certificate issuer: /CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Certificate serial: 019C4390695F0FC320E7EF32801606B2283E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft Manifest number: 0FDC Signing time: Mon 09 Feb 2026 18:01:03 +0000 Manifest this update: Mon 09 Feb 2026 18:01:03 +0000 Manifest next update: Tue 10 Feb 2026 18:01:03 +0000 Files and hashes: 1: HpXjeYop5-9dbwuBCfkZCDXpE9s.roa (hash: 8cPnpIvED13OzR+/chtPAusOqJJ0JWVG5pHQBGp1xGI=) 2: zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl (hash: jFQOl7xmGXG2K18SO59dyXVAqEZAin/D1EzbFkGFVM0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:69:5f:0f:c3:20:e7:ef:32:80:16:06:b2:28:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cce57dc8234df5f59d67fdc6856bb262e7193f52 Validity Not Before: Feb 9 18:01:03 2026 GMT Not After : Feb 10 18:01:03 2026 GMT Subject: CN=70fdb821a50fc3964c729eba2cc5c7a246ea099d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:76:e2:b5:69:ac:2b:b9:11:52:f3:50:ea: 87:0f:48:1e:ec:82:ff:de:57:c7:00:5f:d8:56:40: a2:64:15:b3:86:bc:b5:49:a4:8f:5b:be:cf:91:8e: d4:ce:4f:bd:f4:2c:3e:58:ba:82:10:ab:f8:4f:1d: ab:af:5a:27:a5:ea:64:7b:22:5b:7c:d9:14:51:c7: 57:0a:7e:fe:b1:09:c1:10:a8:80:bb:ee:db:35:a6: 71:8c:42:30:cb:1b:8f:74:8e:2a:3f:76:7c:6d:2a: 8c:8d:08:65:4f:0c:83:5d:eb:42:a2:46:cf:44:57: 6c:c6:35:40:7b:6d:9a:ac:81:c3:f0:27:b0:3e:b3: f9:82:43:bb:bc:63:d7:11:39:77:ee:28:7f:95:bc: 4e:ae:9f:27:9e:5f:73:2f:52:32:25:90:62:8e:84: 9a:4e:b2:0e:2b:30:f6:e3:c8:9d:ea:18:3d:13:80: 3a:4a:17:5c:0d:fe:b2:49:83:67:b2:ac:e8:02:78: 51:c4:9d:d7:89:5d:af:65:55:a8:b1:c1:d5:56:6f: 00:b2:d5:4f:ea:db:22:07:b5:5e:19:74:89:66:1d: 20:ec:23:07:1e:71:0d:13:c4:26:0b:85:15:df:34: 51:3c:5c:62:48:c9:4b:48:39:a0:73:4c:01:9e:97: 5e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:FD:B8:21:A5:0F:C3:96:4C:72:9E:BA:2C:C5:C7:A2:46:EA:09:9D X509v3 Authority Key Identifier: keyid:CC:E5:7D:C8:23:4D:F5:F5:9D:67:FD:C6:85:6B:B2:62:E7:19:3F:52 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zOV9yCNN9fWdZ_3GhWuyYucZP1I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/34acf4-747f-45fe-8129-402f1fb848cf/1/zOV9yCNN9fWdZ_3GhWuyYucZP1I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:54:96:a9:60:9a:34:6c:5e:7b:fc:be:58:88:30:3c:50:c7: da:1d:7a:b5:b8:24:72:c6:90:28:e4:55:af:64:a6:80:d6:88: 83:56:fc:74:10:08:be:7b:4b:f7:e1:eb:28:ce:22:54:f3:d0: a7:15:29:ac:2d:06:1c:a1:79:ca:19:dd:cd:25:bc:90:2a:1c: f7:7b:c9:6e:53:4d:7a:88:f0:a4:44:1a:72:60:b2:a1:35:1d: 67:7b:36:26:9b:2e:6d:ad:0e:c8:15:30:74:cf:b5:58:9f:16: 12:00:ad:09:8a:31:f4:12:25:9a:cc:fd:74:61:8c:ad:98:3a: c9:bb:26:5f:bc:49:c2:f5:94:13:dc:b2:31:d1:76:b1:e0:aa: cf:69:53:be:a5:05:46:89:3f:27:2b:af:c4:67:ef:2e:79:76: 7c:c1:b1:7c:48:29:e3:f5:e9:79:7d:2d:8f:2a:79:ed:60:9c: 3e:ca:6e:7c:b7:66:b4:d2:80:0d:55:50:c8:f7:f5:bf:29:5b: 9d:3f:a2:01:9f:3c:4e:33:c5:6e:9c:26:3e:01:83:62:aa:79: f2:d1:96:11:fd:66:af:35:9b:a7:78:ed:7a:57:65:b5:b7:c4: 1b:c3:7a:a0:3e:7a:55:d7:a4:e9:e6:df:b1:11:85:51:2e:bc: d5:8e:84:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkGlfD8Mg5+8ygBYGsig+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZTU3ZGM4MjM0ZGY1ZjU5ZDY3ZmRjNjg1NmJiMjYyZTcx OTNmNTIwHhcNMjYwMjA5MTgwMTAzWhcNMjYwMjEwMTgwMTAzWjAzMTEwLwYDVQQD Eyg3MGZkYjgyMWE1MGZjMzk2NGM3MjllYmEyY2M1YzdhMjQ2ZWEwOTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOR24rVprCu5EVLzUOqHD0ge7IL/ 3lfHAF/YVkCiZBWzhry1SaSPW77PkY7Uzk+99Cw+WLqCEKv4Tx2rr1onpepkeyJb fNkUUcdXCn7+sQnBEKiAu+7bNaZxjEIwyxuPdI4qP3Z8bSqMjQhlTwyDXetCokbP RFdsxjVAe22arIHD8CewPrP5gkO7vGPXETl37ih/lbxOrp8nnl9zL1IyJZBijoSa TrIOKzD248id6hg9E4A6ShdcDf6ySYNnsqzoAnhRxJ3XiV2vZVWoscHVVm8AstVP 6tsiB7VeGXSJZh0g7CMHHnENE8QmC4UV3zRRPFxiSMlLSDmgc0wBnpdenwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHD9uCGlD8OWTHKeuizFx6JG6gmdMB8GA1UdIwQY MBaAFMzlfcgjTfX1nWf9xoVrsmLnGT9SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjkt NDAyZjFmYjg0OGNmLzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC8zNGFjZjQtNzQ3Zi00NWZlLTgxMjktNDAyZjFmYjg0OGNm LzEvek9WOXlDTk45ZldkWl8zR2hXdXlZdWNaUDFJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgVSWqWCa NGxee/y+WIgwPFDH2h16tbgkcsaQKORVr2SmgNaIg1b8dBAIvntL9+HrKM4iVPPQ pxUprC0GHKF5yhndzSW8kCoc93vJblNNeojwpEQacmCyoTUdZ3s2Jpsuba0OyBUw dM+1WJ8WEgCtCYox9BIlmsz9dGGMrZg6ybsmX7xJwvWUE9yyMdF2seCqz2lTvqUF Rok/JyuvxGfvLnl2fMGxfEgp4/XpeX0tjyp57WCcPspufLdmtNKADVVQyPf1vylb nT+iAZ88TjPFbpwmPgGDYqp58tGWEf1mrzWbp3jteldltbfEG8N6oD56Vdek6ebf sRGFUS681Y6EYA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:35:14 2026 by rpki-client