This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft File: jzZAFzNC-uiz0sjMH5td3RSUiT8.mft (raw, json) Hash identifier: +zVqbF1idNlodKUnpTsTw9r5tTJkuKTiMG7XpaOl1J4= Subject key identifier: 48:7D:81:EC:F3:6C:D0:DB:FC:FC:BD:8F:A6:9E:98:36:2D:D5:2B:4E Authority key identifier: 8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F Certificate issuer: /CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Certificate serial: 019C420F49992AADEB74C72F9D3D5FB97809 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft Manifest number: 15D8 Signing time: Mon 09 Feb 2026 11:00:23 +0000 Manifest this update: Mon 09 Feb 2026 11:00:23 +0000 Manifest next update: Tue 10 Feb 2026 11:00:23 +0000 Files and hashes: 1: T7i_p7iHry9KxUTj7Bl6jCpCEl8.roa (hash: S3HFZOHNhrK5JfLIS/zCxpsr98ctYvNI/SQplbg/Stw=) 2: jzZAFzNC-uiz0sjMH5td3RSUiT8.crl (hash: PKnoEsuYAGqbpekk2fmfwQVLgKgMnQ+fW38Z0hGav00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:49:99:2a:ad:eb:74:c7:2f:9d:3d:5f:b9:78:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3640173342fae8b3d2c8cc1f9b5ddd1494893f Validity Not Before: Feb 9 11:00:23 2026 GMT Not After : Feb 10 11:00:23 2026 GMT Subject: CN=487d81ecf36cd0dbfcfcbd8fa69e98362dd52b4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:ce:2c:9b:0c:5c:22:b1:38:94:15:5d:fc: 6d:46:83:bf:05:78:c9:c2:42:99:f9:f1:ba:87:95: 5f:94:4f:7d:a8:e0:da:a7:19:4c:bf:f2:79:c9:b6: 6c:a4:0b:8b:71:04:12:18:84:41:5d:41:11:d7:7a: 4f:69:74:2e:ad:93:f8:41:f5:17:d9:90:8a:a7:9a: 6d:76:28:a9:00:16:6a:7b:9b:37:fc:82:7e:af:0c: 01:19:8f:8f:bf:0d:39:88:eb:89:d9:ea:65:a0:ea: d7:0d:3d:02:79:a7:3f:42:b0:08:b2:e2:d2:fb:62: 0f:39:e2:ad:cb:1c:53:2e:da:be:91:8c:e1:92:54: bf:9b:78:4f:3b:3e:80:2d:62:c6:a2:23:e2:3d:d7: b0:9d:db:d4:a0:7f:0c:e9:6a:cd:c0:27:3c:8a:8b: bc:6c:03:23:d2:35:5a:6c:46:ba:d7:2f:1a:e6:ab: 6d:ad:ab:78:76:7e:03:19:65:08:4e:9c:08:f6:71: 21:e9:bf:37:b0:1a:dd:18:18:3f:df:fd:af:7d:73: c2:25:34:df:b9:7c:bd:e1:98:01:d0:08:9a:68:3c: bc:a9:d4:77:76:74:7f:2b:19:e5:b2:e3:a0:74:9d: f9:c0:63:bb:09:3e:3f:b6:6f:0d:e4:df:7c:d1:88: 10:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7D:81:EC:F3:6C:D0:DB:FC:FC:BD:8F:A6:9E:98:36:2D:D5:2B:4E X509v3 Authority Key Identifier: keyid:8F:36:40:17:33:42:FA:E8:B3:D2:C8:CC:1F:9B:5D:DD:14:94:89:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzZAFzNC-uiz0sjMH5td3RSUiT8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/edc17a-427f-40bf-9ff4-be2b3eab4d74/1/jzZAFzNC-uiz0sjMH5td3RSUiT8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:d7:d7:3b:32:40:0d:70:80:a4:85:ab:dc:a4:41:17:b5:86: cb:3a:03:0f:49:2f:c5:38:0e:8f:ab:56:cc:f9:10:a8:f9:0d: ab:2e:8a:33:94:bf:36:0e:6c:ec:3d:32:35:ce:f1:3a:6c:12: 58:6d:cf:45:13:84:53:29:4d:51:42:52:bb:24:9d:d6:c3:d2: 1b:88:66:0b:0d:0b:19:6f:00:0a:47:81:7e:20:2a:f5:de:96: 75:2d:32:6a:a1:da:5b:f4:40:f3:db:ef:95:08:ae:f8:8b:8e: ac:83:6e:ab:5c:54:57:d5:3c:e9:4d:dc:ce:16:94:51:c7:f7: 70:ca:be:4e:a0:fe:0e:68:d3:11:4e:79:ee:7f:10:94:82:7d: 92:e3:a5:fc:98:db:83:4c:85:33:1c:41:df:a0:4a:92:8f:e6: 26:c0:d0:cd:bb:a6:72:00:ca:1c:65:3f:ad:12:40:06:dc:c5: 10:56:09:e1:92:3d:d8:2b:fe:11:71:7f:d9:a6:c1:ac:67:20: 45:b4:a1:af:65:22:f9:66:51:4e:a9:15:9b:51:da:07:24:84: 67:78:e3:2a:e7:f5:ad:91:2d:85:d8:73:0a:f3:5e:ac:e4:62: 77:02:0a:2f:1c:94:44:eb:28:5b:27:75:64:2f:5e:c9:0c:ff: c0:73:08:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD0mZKq3rdMcvnT1fuXgJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzY0MDE3MzM0MmZhZThiM2QyYzhjYzFmOWI1ZGRkMTQ5 NDg5M2YwHhcNMjYwMjA5MTEwMDIzWhcNMjYwMjEwMTEwMDIzWjAzMTEwLwYDVQQD Eyg0ODdkODFlY2YzNmNkMGRiZmNmY2JkOGZhNjllOTgzNjJkZDUyYjRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBbOLJsMXCKxOJQVXfxtRoO/BXjJ wkKZ+fG6h5VflE99qODapxlMv/J5ybZspAuLcQQSGIRBXUER13pPaXQurZP4QfUX 2ZCKp5ptdiipABZqe5s3/IJ+rwwBGY+Pvw05iOuJ2eploOrXDT0Ceac/QrAIsuLS +2IPOeKtyxxTLtq+kYzhklS/m3hPOz6ALWLGoiPiPdewndvUoH8M6WrNwCc8iou8 bAMj0jVabEa61y8a5qttrat4dn4DGWUITpwI9nEh6b83sBrdGBg/3/2vfXPCJTTf uXy94ZgB0AiaaDy8qdR3dnR/KxnlsuOgdJ35wGO7CT4/tm8N5N980YgQGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh9gezzbNDb/Py9j6aemDYt1StOMB8GA1UdIwQY MBaAFI82QBczQvros9LIzB+bXd0UlIk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQt YmUyYjNlYWI0ZDc0LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi9lZGMxN2EtNDI3Zi00MGJmLTlmZjQtYmUyYjNlYWI0ZDc0 LzEvanpaQUZ6TkMtdWl6MHNqTUg1dGQzUlNVaVQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL9fXOzJA DXCApIWr3KRBF7WGyzoDD0kvxTgOj6tWzPkQqPkNqy6KM5S/Ng5s7D0yNc7xOmwS WG3PRROEUylNUUJSuySd1sPSG4hmCw0LGW8ACkeBfiAq9d6WdS0yaqHaW/RA89vv lQiu+IuOrINuq1xUV9U86U3czhaUUcf3cMq+TqD+DmjTEU557n8QlIJ9kuOl/Jjb g0yFMxxB36BKko/mJsDQzbumcgDKHGU/rRJABtzFEFYJ4ZI92Cv+EXF/2abBrGcg RbShr2Ui+WZRTqkVm1HaBySEZ3jjKuf1rZEthdhzCvNerORidwIKLxyUROsoWyd1 ZC9eyQz/wHMIaA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:54 2026 by rpki-client