This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft File: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft (raw, json) Hash identifier: +poDng1W7vuHK4O6jfauQu6sSKxyC0CgwhYN8u2fbWA= Subject key identifier: 75:FE:8E:A4:42:95:32:E4:BB:0C:34:22:5F:87:7B:F7:7C:BB:7A:7D Authority key identifier: 64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 Certificate issuer: /CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Certificate serial: 019C424649B2E2D940E6E2120B5AF39898F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft Manifest number: 03AF Signing time: Mon 09 Feb 2026 12:00:28 +0000 Manifest this update: Mon 09 Feb 2026 12:00:28 +0000 Manifest next update: Tue 10 Feb 2026 12:00:28 +0000 Files and hashes: 1: HXygwNK2STzqNVll6HVDO_wB5r0.roa (hash: ZY5/8uKYBcUum4H1cHS3G78vJsO1xPm4UChz23v/ZS8=) 2: ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl (hash: Gcw84HwNljzPvgUcej1axcrgElVliGtqWa+Ui3DwN90=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:49:b2:e2:d9:40:e6:e2:12:0b:5a:f3:98:98:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6454903ab485b16cca862d15e6d93fba0e4dde01 Validity Not Before: Feb 9 12:00:28 2026 GMT Not After : Feb 10 12:00:28 2026 GMT Subject: CN=75fe8ea4429532e4bb0c34225f877bf77cbb7a7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1b:e7:81:6b:6c:36:2b:11:2c:44:6a:06:6f: 58:e4:19:88:57:93:7c:a0:f4:48:3e:1e:54:9b:6e: 40:48:b8:34:b8:d7:d5:51:85:59:25:c0:d8:4f:e6: 55:cf:fb:1d:ad:f3:52:f1:8c:1e:c6:95:06:14:8a: 2b:48:6b:23:18:56:a8:ad:9b:88:33:bf:ed:a1:06: c2:23:a0:30:97:9d:5f:ec:29:47:89:44:d3:2d:9b: 9d:21:d8:8a:10:83:c8:4c:e8:44:e8:1d:44:07:7a: 3d:46:6d:2a:a3:8e:f9:bb:5e:be:c5:0b:94:fb:a4: cd:da:f7:22:7e:0d:ca:f9:36:19:f0:67:16:d2:80: 32:d5:a2:67:5b:90:ac:42:54:cd:be:25:df:67:bc: 4d:63:ab:0e:dc:0a:b4:ca:68:07:fd:93:9a:3d:d3: c4:2b:37:fa:7e:71:0e:7d:24:a5:f1:c5:69:a3:eb: 8b:2a:c6:39:44:77:63:f6:3a:b8:ab:c7:52:08:6c: 3b:f3:73:0e:59:cf:4f:d2:c9:5a:b9:8a:89:58:fd: 9e:b4:44:22:e9:ff:3e:b7:71:56:f3:27:e9:54:92: 2d:45:4d:ae:d1:01:08:93:b8:ef:32:e5:a2:a6:55: e1:ab:8b:e9:72:d9:94:8c:3e:59:47:29:c4:1c:1d: 30:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:FE:8E:A4:42:95:32:E4:BB:0C:34:22:5F:87:7B:F7:7C:BB:7A:7D X509v3 Authority Key Identifier: keyid:64:54:90:3A:B4:85:B1:6C:CA:86:2D:15:E6:D9:3F:BA:0E:4D:DE:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d6d569-f491-43f1-94f2-0656d0b34b24/1/ZFSQOrSFsWzKhi0V5tk_ug5N3gE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:a5:f0:b9:52:a1:cb:2e:01:5a:e5:cb:72:b0:c2:d9:c4:08: fd:bb:26:36:15:1a:9e:85:21:34:5d:66:c4:ea:fd:0a:30:8e: f9:d0:5a:31:cf:cf:94:8f:eb:7a:a6:2d:bf:9d:67:89:d1:47: 70:62:1e:0f:bc:6d:73:85:9c:a4:91:07:51:4f:df:6c:d0:1d: 97:3c:d9:9b:c6:bb:c8:03:d6:20:74:7b:32:ab:a5:e3:d4:88: 1d:99:f7:4c:2b:1b:0a:4e:33:39:75:95:94:ca:bf:f1:51:8b: 0a:7e:6a:6d:ea:29:61:bf:06:6b:df:fc:82:9c:90:84:6e:3c: e7:b0:de:df:9a:b2:1b:15:53:f5:34:15:87:ea:da:9e:cf:b8: 76:0e:e4:ee:b1:9b:e8:cc:a5:6b:31:1d:a7:81:a1:9e:8a:91: e9:9a:77:c5:45:0b:2d:35:e6:6e:c4:48:06:c4:fd:1a:bc:94: 4f:ed:a5:1e:73:27:ba:fd:cd:71:dc:b8:fe:ec:31:67:df:cf: 9c:4d:22:ee:88:4b:2d:63:1e:87:70:24:85:e8:27:eb:81:45: d4:7c:21:c7:18:42:b9:94:65:ac:c0:14:87:d8:8b:e8:51:97: 0f:60:60:5b:44:4f:9e:fb:c8:6e:9d:00:d2:0a:66:1c:06:e1: 7e:88:6b:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRkmy4tlA5uISC1rzmJj0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NTQ5MDNhYjQ4NWIxNmNjYTg2MmQxNWU2ZDkzZmJhMGU0 ZGRlMDEwHhcNMjYwMjA5MTIwMDI4WhcNMjYwMjEwMTIwMDI4WjAzMTEwLwYDVQQD Eyg3NWZlOGVhNDQyOTUzMmU0YmIwYzM0MjI1Zjg3N2JmNzdjYmI3YTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBvngWtsNisRLERqBm9Y5BmIV5N8 oPRIPh5Um25ASLg0uNfVUYVZJcDYT+ZVz/sdrfNS8YwexpUGFIorSGsjGFaorZuI M7/toQbCI6Awl51f7ClHiUTTLZudIdiKEIPITOhE6B1EB3o9Rm0qo475u16+xQuU +6TN2vcifg3K+TYZ8GcW0oAy1aJnW5CsQlTNviXfZ7xNY6sO3Aq0ymgH/ZOaPdPE Kzf6fnEOfSSl8cVpo+uLKsY5RHdj9jq4q8dSCGw783MOWc9P0slauYqJWP2etEQi 6f8+t3FW8yfpVJItRU2u0QEIk7jvMuWiplXhq4vpctmUjD5ZRynEHB0wEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHX+jqRClTLkuww0Il+He/d8u3p9MB8GA1UdIwQY MBaAFGRUkDq0hbFsyoYtFebZP7oOTd4BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjIt MDY1NmQwYjM0YjI0LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9kNmQ1NjktZjQ5MS00M2YxLTk0ZjItMDY1NmQwYjM0YjI0 LzEvWkZTUU9yU0ZzV3pLaGkwVjV0a191ZzVOM2dFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmqXwuVKh yy4BWuXLcrDC2cQI/bsmNhUanoUhNF1mxOr9CjCO+dBaMc/PlI/reqYtv51nidFH cGIeD7xtc4WcpJEHUU/fbNAdlzzZm8a7yAPWIHR7Mqul49SIHZn3TCsbCk4zOXWV lMq/8VGLCn5qbeopYb8Ga9/8gpyQhG4857De35qyGxVT9TQVh+rans+4dg7k7rGb 6MylazEdp4GhnoqR6Zp3xUULLTXmbsRIBsT9GryUT+2lHnMnuv3Ncdy4/uwxZ9/P nE0i7ohLLWMeh3Akhegn64FF1HwhxxhCuZRlrMAUh9iL6FGXD2BgW0RPnvvIbp0A 0gpmHAbhfohr2g== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:02 2026 by rpki-client