This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft File: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft (raw, json) Hash identifier: /Vck1d1wzLF7YAKYYCEtBT5i2hI0Uh9wjZWaEZqJ018= Subject key identifier: F9:DB:60:41:0C:47:A0:3E:97:AF:61:62:1D:9A:5B:96:8B:35:2C:6B Authority key identifier: 67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22 Certificate issuer: /CN=67047b987be9742785ba8e8b33ac077bf9c7a222 Certificate serial: 019C42B443582904C73D38990269B5B1DB08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft Manifest number: 0FAB Signing time: Mon 09 Feb 2026 14:00:35 +0000 Manifest this update: Mon 09 Feb 2026 14:00:35 +0000 Manifest next update: Tue 10 Feb 2026 14:00:35 +0000 Files and hashes: 1: JZV9Wmscw-_tBZW5yLoO12kB4nI.roa (hash: 9OD9YsHNLfEzpjHohpylUNvgGqpABxz0jPfe6Fwb8Ws=) 2: ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl (hash: S5qjHwJcUZ/CcZwMWnjW8IcAtJwPo/LVuNM6exNqRq0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:43:58:29:04:c7:3d:38:99:02:69:b5:b1:db:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67047b987be9742785ba8e8b33ac077bf9c7a222 Validity Not Before: Feb 9 14:00:35 2026 GMT Not After : Feb 10 14:00:35 2026 GMT Subject: CN=f9db60410c47a03e97af61621d9a5b968b352c6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:f7:b6:6f:60:a7:af:87:2f:17:1e:0c:df:d6: 1a:2c:a0:9f:75:cd:e8:c6:fa:bf:88:24:e2:70:5a: 3b:30:da:0c:77:26:01:65:9a:bd:b4:69:43:31:ec: 3c:cb:71:c2:3e:5c:de:cc:7d:5c:dc:08:0a:3a:0b: f3:12:73:04:09:f5:a2:9e:dc:ec:ff:ea:ae:d8:40: 59:e1:47:a3:7f:9e:f9:57:76:e0:cb:2c:a9:2a:3e: 1c:88:b8:6d:48:fb:0b:4f:4a:4e:80:92:62:40:b0: c0:ac:14:3a:1d:aa:22:5f:d5:9d:c2:d9:b7:61:c9: 32:22:2f:c9:88:c0:2a:e4:e9:38:fc:a2:d9:38:0b: 42:05:8e:b3:00:75:33:dc:a7:48:a7:54:b1:5b:4b: b5:a1:5e:b7:70:a9:fa:d9:8e:bb:8e:4d:1c:10:81: 05:46:21:31:8a:7b:19:7a:fb:ab:55:7b:f3:1e:2e: d8:c0:39:f2:c3:cd:db:38:0b:4c:4e:f4:4b:a9:f5: 70:93:95:33:28:a8:4b:10:bd:33:59:97:8c:e1:a4: 50:68:c8:84:5e:31:d6:34:0c:d0:c9:0b:05:f8:91: 59:68:67:2e:0a:96:24:cc:0d:f1:ca:11:03:41:c8: 9a:58:51:76:07:a8:30:22:3c:9e:1a:ac:bd:61:bd: 82:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DB:60:41:0C:47:A0:3E:97:AF:61:62:1D:9A:5B:96:8B:35:2C:6B X509v3 Authority Key Identifier: keyid:67:04:7B:98:7B:E9:74:27:85:BA:8E:8B:33:AC:07:7B:F9:C7:A2:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/86d2ae-7c37-4344-a1e6-e8edf29245c0/1/ZwR7mHvpdCeFuo6LM6wHe_nHoiI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f2:cc:e8:a1:49:a5:d3:53:5b:61:56:97:2f:99:fa:a4:8f: 65:0e:08:97:f4:53:1c:90:36:d9:69:5c:5c:82:7a:ef:f6:e7: d4:cb:33:7b:ba:f0:4f:46:9a:16:a9:ca:d3:eb:d9:b5:fc:16: dc:b5:9d:54:15:e4:66:96:60:9b:5d:f6:08:4a:b2:e9:9e:17: 15:47:ac:3f:57:35:15:50:2f:46:78:5c:1b:48:d9:db:56:41: 73:f4:60:11:91:84:ca:04:82:f3:05:d4:c3:50:af:f6:68:f4: ca:4c:9b:52:93:74:22:ae:ef:55:76:22:99:20:aa:c5:6d:39: e9:5d:22:af:44:c8:5d:ff:6e:62:83:cd:a5:43:10:8c:6e:b0: d8:b6:a0:3d:c7:f5:ce:cc:30:88:4f:df:55:4e:d3:3a:1e:7f: 45:23:31:89:c4:e5:97:0f:84:6f:76:da:55:59:37:29:e6:0e: db:a3:51:18:92:e3:f8:df:6c:48:7b:de:57:0f:46:40:10:e4: 01:44:8c:d2:1c:13:36:b4:ee:1d:6a:15:3b:2b:ec:8c:c9:38: b9:1c:3a:70:cf:fc:4c:ac:11:f9:e6:73:8e:02:a1:5a:e3:f9: fd:e3:38:a4:4c:a3:b0:b4:aa:c0:ae:04:0b:6f:b1:34:3c:01: 78:96:cf:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtENYKQTHPTiZAmm1sdsIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MDQ3Yjk4N2JlOTc0Mjc4NWJhOGU4YjMzYWMwNzdiZjlj N2EyMjIwHhcNMjYwMjA5MTQwMDM1WhcNMjYwMjEwMTQwMDM1WjAzMTEwLwYDVQQD EyhmOWRiNjA0MTBjNDdhMDNlOTdhZjYxNjIxZDlhNWI5NjhiMzUyYzZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg/e2b2Cnr4cvFx4M39YaLKCfdc3o xvq/iCTicFo7MNoMdyYBZZq9tGlDMew8y3HCPlzezH1c3AgKOgvzEnMECfWintzs /+qu2EBZ4Uejf575V3bgyyypKj4ciLhtSPsLT0pOgJJiQLDArBQ6HaoiX9Wdwtm3 YckyIi/JiMAq5Ok4/KLZOAtCBY6zAHUz3KdIp1SxW0u1oV63cKn62Y67jk0cEIEF RiExinsZevurVXvzHi7YwDnyw83bOAtMTvRLqfVwk5UzKKhLEL0zWZeM4aRQaMiE XjHWNAzQyQsF+JFZaGcuCpYkzA3xyhEDQciaWFF2B6gwIjyeGqy9Yb2CpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnbYEEMR6A+l69hYh2aW5aLNSxrMB8GA1UdIwQY MBaAFGcEe5h76XQnhbqOizOsB3v5x6IiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYt ZThlZGYyOTI0NWMwLzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS84NmQyYWUtN2MzNy00MzQ0LWExZTYtZThlZGYyOTI0NWMw LzEvWndSN21IdnBkQ2VGdW82TE02d0hlX25Ib2lJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC/LM6KFJ pdNTW2FWly+Z+qSPZQ4Il/RTHJA22WlcXIJ67/bn1Msze7rwT0aaFqnK0+vZtfwW 3LWdVBXkZpZgm132CEqy6Z4XFUesP1c1FVAvRnhcG0jZ21ZBc/RgEZGEygSC8wXU w1Cv9mj0ykybUpN0Iq7vVXYimSCqxW056V0ir0TIXf9uYoPNpUMQjG6w2LagPcf1 zswwiE/fVU7TOh5/RSMxicTllw+Eb3baVVk3KeYO26NRGJLj+N9sSHveVw9GQBDk AUSM0hwTNrTuHWoVOyvsjMk4uRw6cM/8TKwR+eZzjgKhWuP5/eM4pEyjsLSqwK4E C2+xNDwBeJbPtg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:00 2026 by rpki-client