This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft File: zig0CiCbK6Eq6QOnTLteLiOu0jg.mft (raw, json) Hash identifier: gN9PAp5tindB7Q5v9M+7OuuJjuM4g/drjeGCZNH1R1c= Subject key identifier: 09:3B:02:1C:2F:90:78:42:E4:1C:E0:13:8D:7E:25:28:30:52:EE:6B Authority key identifier: CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 Certificate issuer: /CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Certificate serial: 019C41A21C93123ADABA9D461A66E7978300 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft Manifest number: 17AA Signing time: Mon 09 Feb 2026 09:01:09 +0000 Manifest this update: Mon 09 Feb 2026 09:01:09 +0000 Manifest next update: Tue 10 Feb 2026 09:01:09 +0000 Files and hashes: 1: _c_Ge4KlyXooIVPQ3URHN_DCCOc.roa (hash: zZr72d4ktyBj5RLLYIViykO4UzrMMtJKZidkjGHFvsc=) 2: zig0CiCbK6Eq6QOnTLteLiOu0jg.crl (hash: z8JFEDqt1ElIc+LZ/9s1uzXYchrtyspnfpiI1LBiYCA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:1c:93:12:3a:da:ba:9d:46:1a:66:e7:97:83:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce28340a209b2ba12ae903a74cbb5e2e23aed238 Validity Not Before: Feb 9 09:01:09 2026 GMT Not After : Feb 10 09:01:09 2026 GMT Subject: CN=093b021c2f907842e41ce0138d7e25283052ee6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:32:41:15:c0:e5:da:e0:a5:fb:22:6a:ec:c6: b6:cf:38:57:4c:73:ad:d3:72:46:2a:64:58:19:52: 3f:87:01:5e:e2:3f:d7:72:b7:55:83:b2:51:13:91: 55:79:84:fe:08:5a:ad:2c:05:dc:f6:7d:b2:3e:d0: ff:1c:64:ad:64:5e:b9:68:a1:bf:31:26:a2:af:cb: be:c8:e7:4f:7f:03:70:1b:7b:1a:1e:3c:fa:23:fc: ef:60:2e:7a:37:33:0a:90:d0:99:ad:83:95:a4:f3: 57:2f:ac:82:0f:85:fe:0b:f5:de:2c:6a:cb:16:05: 15:d8:35:33:1b:5a:1d:7b:44:d0:66:78:49:b7:d8: db:7b:21:58:50:51:3f:03:78:d9:d5:aa:63:65:2a: df:e7:bd:20:1b:aa:7f:70:18:ce:b8:48:5a:e2:82: fe:de:f1:96:b3:8a:54:d0:0e:07:24:89:f7:a8:9d: 27:b0:f1:55:44:30:f4:36:23:10:16:17:0b:b3:c7: 05:15:61:63:94:56:16:13:05:d8:94:3b:af:fd:fd: 12:49:fa:e5:1e:c8:3e:b9:3d:f7:9c:93:d5:e6:96: 6b:6e:4b:97:f4:20:d3:5b:03:50:c9:be:5d:f8:c2: 43:6d:38:26:5c:17:20:95:bd:a3:d1:ac:ad:44:43: 8d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:02:1C:2F:90:78:42:E4:1C:E0:13:8D:7E:25:28:30:52:EE:6B X509v3 Authority Key Identifier: keyid:CE:28:34:0A:20:9B:2B:A1:2A:E9:03:A7:4C:BB:5E:2E:23:AE:D2:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zig0CiCbK6Eq6QOnTLteLiOu0jg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/45c689-751f-46d7-9b6c-b1fc547b7322/1/zig0CiCbK6Eq6QOnTLteLiOu0jg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:a0:23:24:e1:35:fa:7f:0d:3d:8d:df:05:05:d3:a1:e0:bd: 77:1f:1a:83:18:90:86:16:c6:dc:6e:90:82:5c:12:61:1a:7d: 92:5c:e1:e0:da:a8:cf:60:32:1e:09:a3:01:ac:ad:75:e1:eb: 0d:80:30:13:6f:df:ad:6a:d0:d3:3a:35:92:0f:b4:18:0a:8d: f9:61:ba:da:6d:79:a0:55:1c:0e:1b:d0:3e:45:e6:c8:c9:76: 26:53:64:63:9a:6f:a1:f4:b2:ee:31:d1:97:3c:b9:45:83:f1: e0:cf:f8:e7:1b:c0:25:45:c5:25:6d:ca:cc:d0:b5:f8:c3:08: 1c:b1:79:22:1a:81:13:5a:8d:fa:d6:77:0d:54:91:ee:ba:59: d4:44:50:68:be:14:a1:c8:75:4e:96:f9:e2:f5:f9:46:0d:a1: 26:d6:93:e9:87:81:74:ac:cb:30:d0:b6:64:c3:b2:09:b9:4c: 5c:aa:1c:08:df:c0:1b:a4:23:5d:62:65:d5:dc:08:36:c2:29: cf:20:37:ea:f8:dd:f2:48:96:c7:60:f1:53:9e:00:40:21:27: cb:b3:ce:b0:b4:c1:6f:30:ca:b6:a1:26:6a:65:fc:fc:6e:95: 67:e2:fb:0a:c3:77:99:f0:23:1b:f8:c5:9d:58:ab:4f:89:05: ad:4c:61:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBohyTEjraup1GGmbnl4MAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjgzNDBhMjA5YjJiYTEyYWU5MDNhNzRjYmI1ZTJlMjNh ZWQyMzgwHhcNMjYwMjA5MDkwMTA5WhcNMjYwMjEwMDkwMTA5WjAzMTEwLwYDVQQD EygwOTNiMDIxYzJmOTA3ODQyZTQxY2UwMTM4ZDdlMjUyODMwNTJlZTZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzJBFcDl2uCl+yJq7Ma2zzhXTHOt 03JGKmRYGVI/hwFe4j/XcrdVg7JRE5FVeYT+CFqtLAXc9n2yPtD/HGStZF65aKG/ MSair8u+yOdPfwNwG3saHjz6I/zvYC56NzMKkNCZrYOVpPNXL6yCD4X+C/XeLGrL FgUV2DUzG1ode0TQZnhJt9jbeyFYUFE/A3jZ1apjZSrf570gG6p/cBjOuEha4oL+ 3vGWs4pU0A4HJIn3qJ0nsPFVRDD0NiMQFhcLs8cFFWFjlFYWEwXYlDuv/f0SSfrl Hsg+uT33nJPV5pZrbkuX9CDTWwNQyb5d+MJDbTgmXBcglb2j0aytREONlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk7AhwvkHhC5BzgE41+JSgwUu5rMB8GA1UdIwQY MBaAFM4oNAogmyuhKukDp0y7Xi4jrtI4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMt YjFmYzU0N2I3MzIyLzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS80NWM2ODktNzUxZi00NmQ3LTliNmMtYjFmYzU0N2I3MzIy LzEvemlnMENpQ2JLNkVxNlFPblRMdGVMaU91MGpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaAjJOE1 +n8NPY3fBQXToeC9dx8agxiQhhbG3G6QglwSYRp9klzh4Nqoz2AyHgmjAaytdeHr DYAwE2/frWrQ0zo1kg+0GAqN+WG62m15oFUcDhvQPkXmyMl2JlNkY5pvofSy7jHR lzy5RYPx4M/45xvAJUXFJW3KzNC1+MMIHLF5IhqBE1qN+tZ3DVSR7rpZ1ERQaL4U och1Tpb54vX5Rg2hJtaT6YeBdKzLMNC2ZMOyCblMXKocCN/AG6QjXWJl1dwINsIp zyA36vjd8kiWx2DxU54AQCEny7POsLTBbzDKtqEmamX8/G6VZ+L7CsN3mfAjG/jF nVirT4kFrUxhrA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:54:00 2026 by rpki-client