This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft File: zNLcTzj5a21HeWmI7N3wxtDE6DI.mft (raw, json) Hash identifier: cyzeWwlA3Eh0H0dn/F9URgaVdFkJgNJs3AC6zv9Hdb8= Subject key identifier: 9C:B2:EB:94:76:4A:2B:7A:D0:83:81:2F:85:9F:65:0D:06:A6:66:44 Authority key identifier: CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 Certificate issuer: /CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Certificate serial: 019C43C6B113C3EBDE73973260F7E30CD0D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft Manifest number: 03C6 Signing time: Mon 09 Feb 2026 19:00:20 +0000 Manifest this update: Mon 09 Feb 2026 19:00:20 +0000 Manifest next update: Tue 10 Feb 2026 19:00:20 +0000 Files and hashes: 1: kNIMwvIm17KNl4j_uiod0k8I7zA.roa (hash: UUpBz48IIuQvNQbtn+EM3409/ewRtq2gofruXX7xipw=) 2: zNLcTzj5a21HeWmI7N3wxtDE6DI.crl (hash: JYrv+UWdn6Zgb+FuhdDqfcxHT0yxhzLmuLtoOi4VOGI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:b1:13:c3:eb:de:73:97:32:60:f7:e3:0c:d0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccd2dc4f38f96b6d47796988ecddf0c6d0c4e832 Validity Not Before: Feb 9 19:00:20 2026 GMT Not After : Feb 10 19:00:20 2026 GMT Subject: CN=9cb2eb94764a2b7ad083812f859f650d06a66644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f1:34:a0:e1:df:74:1b:d1:c0:da:87:71:fe: 60:98:60:d5:09:3d:ec:e4:90:12:61:31:43:0f:c4: fd:e8:9b:cf:7a:3b:04:eb:c4:57:94:a1:87:18:75: 40:ce:73:55:45:d8:a7:06:76:16:d2:66:12:61:a1: 8d:a7:7a:bc:c6:08:ba:21:5d:7b:2d:fd:06:cd:0b: 0c:8e:e1:48:86:e1:82:d5:95:05:ae:3e:29:f3:2a: b4:bf:ff:78:1c:cc:26:60:06:81:a3:04:6b:6f:fb: 9a:01:e8:af:ef:27:4e:cb:0d:ad:6a:6f:30:ff:a3: b1:c6:65:9a:60:67:b4:b2:0f:c5:ad:37:32:87:3d: 37:12:b6:da:97:65:e5:cf:71:17:5a:16:ab:69:f9: 8d:dc:3b:20:2d:e7:96:55:2f:93:8d:30:88:5c:68: 51:6c:1e:ad:ff:59:32:ca:89:99:c6:9e:b7:ad:8f: cd:9a:f6:46:08:39:52:04:27:b2:b9:7a:c1:64:ad: fd:3f:ee:b6:79:1a:8a:af:bf:5d:60:cb:ce:1c:d4: 97:06:b7:8f:e4:fa:7e:da:bc:40:57:34:61:74:43: 0d:6a:e4:f6:9b:59:45:0b:14:c5:bd:cd:f1:27:9c: 14:56:2b:6e:dc:4c:96:b8:d7:98:b4:92:9e:10:91: 72:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B2:EB:94:76:4A:2B:7A:D0:83:81:2F:85:9F:65:0D:06:A6:66:44 X509v3 Authority Key Identifier: keyid:CC:D2:DC:4F:38:F9:6B:6D:47:79:69:88:EC:DD:F0:C6:D0:C4:E8:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNLcTzj5a21HeWmI7N3wxtDE6DI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/6a2e5f-9bb9-43a4-b452-460c89b392b3/1/zNLcTzj5a21HeWmI7N3wxtDE6DI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3b:00:fd:9c:2e:2f:2f:e3:c2:74:c7:9a:2b:71:68:4b:fc: fc:bf:af:23:3a:bf:c0:74:4f:fc:38:ab:51:4a:97:a8:94:38: 11:df:59:34:e2:79:f9:c1:1d:03:5e:fa:e8:6c:5d:9d:f1:86: ba:e4:5a:b0:b4:d0:92:69:3d:db:73:50:5f:5c:a0:c3:7d:f5: 48:1b:6b:b8:ad:af:f1:70:cd:14:3c:b8:2c:5d:67:3d:81:ac: 6d:84:d7:84:5f:13:3a:46:86:4b:ab:80:4e:e4:32:ed:d1:1d: c9:a4:e7:40:54:75:42:a8:8c:9e:d6:32:b7:00:a4:fd:ae:33: ff:4f:36:82:92:ef:46:76:2e:3d:7d:13:40:db:6a:fa:2a:de: d8:5a:c0:4f:bc:38:4a:a9:8f:b2:28:86:7e:73:cd:87:47:d2: 78:62:ad:91:96:a2:4a:ae:80:9a:68:94:b3:79:e6:4d:88:2f: a2:2b:fd:fa:e9:af:0f:d4:0f:a5:02:01:42:9e:dd:f2:96:9e: 7f:41:37:11:64:e4:78:e8:3b:cd:84:8f:54:19:5a:48:c3:58: be:8d:c9:32:9b:ab:5b:94:c5:ef:68:ad:1e:a5:39:6b:5a:ba: a5:71:0f:e4:a3:49:a4:09:67:35:4b:e9:1b:78:f3:bf:ff:de: f3:18:90:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxrETw+vec5cyYPfjDNDYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjZDJkYzRmMzhmOTZiNmQ0Nzc5Njk4OGVjZGRmMGM2ZDBj NGU4MzIwHhcNMjYwMjA5MTkwMDIwWhcNMjYwMjEwMTkwMDIwWjAzMTEwLwYDVQQD Eyg5Y2IyZWI5NDc2NGEyYjdhZDA4MzgxMmY4NTlmNjUwZDA2YTY2NjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvE0oOHfdBvRwNqHcf5gmGDVCT3s 5JASYTFDD8T96JvPejsE68RXlKGHGHVAznNVRdinBnYW0mYSYaGNp3q8xgi6IV17 Lf0GzQsMjuFIhuGC1ZUFrj4p8yq0v/94HMwmYAaBowRrb/uaAeiv7ydOyw2tam8w /6OxxmWaYGe0sg/FrTcyhz03Erbal2Xlz3EXWharafmN3DsgLeeWVS+TjTCIXGhR bB6t/1kyyomZxp63rY/NmvZGCDlSBCeyuXrBZK39P+62eRqKr79dYMvOHNSXBreP 5Pp+2rxAVzRhdEMNauT2m1lFCxTFvc3xJ5wUVitu3EyWuNeYtJKeEJFywQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyy65R2Sit60IOBL4WfZQ0GpmZEMB8GA1UdIwQY MBaAFMzS3E84+WttR3lpiOzd8MbQxOgyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTIt NDYwYzg5YjM5MmIzLzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni82YTJlNWYtOWJiOS00M2E0LWI0NTItNDYwYzg5YjM5MmIz LzEvek5MY1R6ajVhMjFIZVdtSTdOM3d4dERFNkRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhjsA/Zwu Ly/jwnTHmitxaEv8/L+vIzq/wHRP/DirUUqXqJQ4Ed9ZNOJ5+cEdA1766GxdnfGG uuRasLTQkmk923NQX1ygw331SBtruK2v8XDNFDy4LF1nPYGsbYTXhF8TOkaGS6uA TuQy7dEdyaTnQFR1QqiMntYytwCk/a4z/082gpLvRnYuPX0TQNtq+ire2FrAT7w4 SqmPsiiGfnPNh0fSeGKtkZaiSq6AmmiUs3nmTYgvoiv9+umvD9QPpQIBQp7d8pae f0E3EWTkeOg7zYSPVBlaSMNYvo3JMpurW5TF72itHqU5a1q6pXEP5KNJpAlnNUvp G3jzv//e8xiQ1g== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:35 2026 by rpki-client