This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft File: zxuxqgyTt5GML9JDO0HCHXnUTao.mft (raw, json) Hash identifier: Dk4PAsUKCSRBNnHYk9El0e0PPNh66KLrahQaoqi/om4= Subject key identifier: 27:88:E0:B3:B8:83:37:73:D7:10:BA:6A:0F:64:0F:7A:F0:34:D9:26 Authority key identifier: CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA Certificate issuer: /CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa Certificate serial: 019C427DBA2C82AE918FF0ED1BAD238E09BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft Manifest number: 0CD5 Signing time: Mon 09 Feb 2026 13:01:01 +0000 Manifest this update: Mon 09 Feb 2026 13:01:01 +0000 Manifest next update: Tue 10 Feb 2026 13:01:01 +0000 Files and hashes: 1: SKTC8iFjoyKhvbRbbjVeP1tuXkY.roa (hash: x4nm8dMDKJDEpeH+JfZ+1a0v/EVg7R0GUoex2DYQAOs=) 2: zxuxqgyTt5GML9JDO0HCHXnUTao.crl (hash: scXnxbPhjDbBO45XM9JQ6kqNDYKvapTaBkL6KCIi7CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:ba:2c:82:ae:91:8f:f0:ed:1b:ad:23:8e:09:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf1bb1aa0c93b7918c2fd2433b41c21d79d44daa Validity Not Before: Feb 9 13:01:01 2026 GMT Not After : Feb 10 13:01:01 2026 GMT Subject: CN=2788e0b3b8833773d710ba6a0f640f7af034d926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9e:88:8e:8e:10:d8:ef:7e:88:ac:09:0a:ca: a4:f0:25:6a:7c:6b:eb:21:13:48:3f:71:30:8b:23: c5:87:d5:36:c5:fd:54:b3:0a:84:00:b4:17:a4:56: fa:5b:18:fb:c7:cd:6b:ec:59:c7:bb:d4:97:9a:15: f0:ed:5d:0c:eb:67:a0:b8:07:08:45:80:0d:2d:61: 5e:17:86:40:35:ed:c1:be:5a:b3:d9:e5:3e:13:a2: 74:33:55:49:35:42:43:4b:1f:9e:34:bd:d6:5e:14: 14:17:34:65:ca:a5:e4:ee:71:73:7f:a8:36:c3:7c: ca:15:4c:0e:06:22:9c:ab:d1:77:32:cf:26:9f:09: 69:06:6c:dc:57:8e:31:34:77:fe:48:73:66:18:4a: 4b:74:6e:ca:75:30:f0:f8:c0:21:2e:97:47:e6:68: 55:3a:b9:ab:89:35:02:96:56:85:85:5e:ea:42:85: d4:48:5c:8e:20:bc:35:42:bf:2b:e8:cb:26:28:4c: 45:26:8b:12:63:a2:3f:aa:d9:7b:7b:74:9b:9f:87: aa:eb:85:77:c6:60:e5:02:58:0b:75:ef:ff:67:7f: 39:b0:89:4b:52:97:c9:46:fc:bd:20:36:b1:6f:f6: 24:6f:dd:a0:b6:d4:01:d6:d3:4f:82:4e:b5:c3:d6: 69:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:88:E0:B3:B8:83:37:73:D7:10:BA:6A:0F:64:0F:7A:F0:34:D9:26 X509v3 Authority Key Identifier: keyid:CF:1B:B1:AA:0C:93:B7:91:8C:2F:D2:43:3B:41:C2:1D:79:D4:4D:AA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxuxqgyTt5GML9JDO0HCHXnUTao.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/f2f26a-1547-43f3-a239-c9f09af729cf/1/zxuxqgyTt5GML9JDO0HCHXnUTao.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:cd:19:e7:99:89:74:37:29:6c:50:a1:58:53:4a:f3:54:e5: 9d:0d:09:c4:54:3c:c1:e1:c6:c8:42:fd:4a:61:32:c0:12:9a: 1f:14:f4:6f:80:ff:98:50:a9:a4:73:72:83:14:91:6e:6a:c1: 26:54:b0:96:59:cc:4f:e3:9a:fa:ca:38:96:7f:8f:d0:a9:4c: fa:f7:33:28:ba:69:dd:e0:69:b4:3a:a6:24:11:e9:32:9d:3a: f7:98:40:17:1e:06:a0:37:8e:4c:3a:34:f6:2f:e8:22:14:bc: 0a:a9:d9:56:aa:ae:63:97:3d:cc:33:7c:b3:36:2e:0e:76:c6: d1:08:cc:4b:f6:e4:77:53:96:e9:1a:75:d6:cf:28:06:89:93: 77:07:66:6f:8d:85:a2:63:30:62:b9:22:3c:1b:b1:b5:d3:b4: 3b:91:74:4b:fb:de:25:9d:0b:37:a1:a4:5f:f0:7b:9f:54:da: 5c:14:ec:5e:2f:cb:45:a3:eb:c9:9d:b4:c1:c8:1a:64:5a:75: 65:d4:e9:2e:20:cf:78:ad:29:5b:58:ce:5b:ad:bc:13:c2:89: 9c:9d:a4:23:3d:61:34:fc:e2:fb:b1:64:8d:6a:2e:84:ab:ab: 93:18:58:40:50:e6:a8:a5:86:35:d2:f9:8b:ec:ec:12:07:b3: da:00:03:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfbosgq6Rj/DtG60jjgm9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMWJiMWFhMGM5M2I3OTE4YzJmZDI0MzNiNDFjMjFkNzlk NDRkYWEwHhcNMjYwMjA5MTMwMTAxWhcNMjYwMjEwMTMwMTAxWjAzMTEwLwYDVQQD EygyNzg4ZTBiM2I4ODMzNzczZDcxMGJhNmEwZjY0MGY3YWYwMzRkOTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ6Ijo4Q2O9+iKwJCsqk8CVqfGvr IRNIP3EwiyPFh9U2xf1UswqEALQXpFb6Wxj7x81r7FnHu9SXmhXw7V0M62eguAcI RYANLWFeF4ZANe3Bvlqz2eU+E6J0M1VJNUJDSx+eNL3WXhQUFzRlyqXk7nFzf6g2 w3zKFUwOBiKcq9F3Ms8mnwlpBmzcV44xNHf+SHNmGEpLdG7KdTDw+MAhLpdH5mhV OrmriTUCllaFhV7qQoXUSFyOILw1Qr8r6MsmKExFJosSY6I/qtl7e3Sbn4eq64V3 xmDlAlgLde//Z385sIlLUpfJRvy9IDaxb/Ykb92gttQB1tNPgk61w9Zp3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeI4LO4gzdz1xC6ag9kD3rwNNkmMB8GA1UdIwQY MBaAFM8bsaoMk7eRjC/SQztBwh151E2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mMmYyNmEtMTU0Ny00M2YzLWEyMzkt YzlmMDlhZjcyOWNmLzEvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9mMmYyNmEtMTU0Ny00M2YzLWEyMzktYzlmMDlhZjcyOWNm LzEvenh1eHFneVR0NUdNTDlKRE8wSENIWG5VVGFvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZM0Z55mJ dDcpbFChWFNK81TlnQ0JxFQ8weHGyEL9SmEywBKaHxT0b4D/mFCppHNygxSRbmrB JlSwllnMT+Oa+so4ln+P0KlM+vczKLpp3eBptDqmJBHpMp0695hAFx4GoDeOTDo0 9i/oIhS8CqnZVqquY5c9zDN8szYuDnbG0QjMS/bkd1OW6Rp11s8oBomTdwdmb42F omMwYrkiPBuxtdO0O5F0S/veJZ0LN6GkX/B7n1TaXBTsXi/LRaPryZ20wcgaZFp1 ZdTpLiDPeK0pW1jOW628E8KJnJ2kIz1hNPzi+7FkjWouhKurkxhYQFDmqKWGNdL5 i+zsEgez2gADww== -----END CERTIFICATE-----Generated at Mon Feb 9 20:06:38 2026 by rpki-client