This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft File: zbY--iaaFBF1Thzaq4SPsG-ghBE.mft (raw, json) Hash identifier: 2dLt5rsWden3BpOWtzPIOGWSLDhqxSqcRqo/fCIJvfQ= Subject key identifier: 4B:BD:B0:F0:EC:DC:24:A2:1A:86:F9:97:EC:D5:4A:52:21:12:90:62 Authority key identifier: CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11 Certificate issuer: /CN=cdb63efa269a1411754e1cdaab848fb06fa08411 Certificate serial: 019C41A256697550F8E8384FE4669D47463A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft Manifest number: 0F47 Signing time: Mon 09 Feb 2026 09:01:23 +0000 Manifest this update: Mon 09 Feb 2026 09:01:23 +0000 Manifest next update: Tue 10 Feb 2026 09:01:23 +0000 Files and hashes: 1: nn4wxQ4YjE7V-fLYN9QlBKJx3kc.roa (hash: qFZqmcvD3VdssLZWKysthIOIYoxtOvRq6+nL6RJRO2k=) 2: zbY--iaaFBF1Thzaq4SPsG-ghBE.crl (hash: 2v3PN06P1z3VjZqBUpPm3rHUPfIdBA2oJeCV2Vj01GA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:56:69:75:50:f8:e8:38:4f:e4:66:9d:47:46:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdb63efa269a1411754e1cdaab848fb06fa08411 Validity Not Before: Feb 9 09:01:23 2026 GMT Not After : Feb 10 09:01:23 2026 GMT Subject: CN=4bbdb0f0ecdc24a21a86f997ecd54a5221129062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4e:0f:ce:e8:89:a7:6f:6e:f8:61:06:d2:d6: 05:f7:66:8e:cb:90:b7:54:96:b5:68:5f:1a:8b:1d: 1c:f8:e0:92:6d:d8:91:bf:74:af:d5:a7:b8:0d:52: ec:12:9c:3d:1c:ee:20:97:d0:d3:80:46:fa:d7:fa: f3:fb:28:21:15:ec:95:87:9a:a7:9d:e0:df:e1:57: 9c:eb:12:ee:87:42:0f:08:db:dc:5d:72:4f:27:31: ae:8b:11:89:9a:00:26:1e:6b:f7:e5:46:d4:5e:58: d8:78:ef:e5:6f:e6:88:2c:eb:dd:51:0a:7e:52:0f: 18:ce:22:03:9b:78:a6:98:ce:8f:0f:28:3f:74:a7: fd:1a:32:ae:27:8d:6e:31:67:9c:86:fc:ea:b1:af: 0f:46:97:6c:bb:0d:28:09:44:4c:94:bf:22:e3:6b: a5:7f:66:ca:26:91:c6:dd:65:32:85:61:c2:4b:23: 82:78:7e:9b:df:f7:91:8a:e3:3e:92:0c:13:f1:11: 6b:fe:01:1c:f8:65:41:28:03:a6:40:d1:eb:4c:91: cb:64:c3:da:f2:96:27:fc:a8:a0:d8:69:8c:87:de: b9:c0:ab:cc:06:a4:31:4b:01:12:d2:ec:a6:de:03: b3:38:42:d0:51:e9:22:2b:2e:af:e8:80:5f:de:63: 0b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:BD:B0:F0:EC:DC:24:A2:1A:86:F9:97:EC:D5:4A:52:21:12:90:62 X509v3 Authority Key Identifier: keyid:CD:B6:3E:FA:26:9A:14:11:75:4E:1C:DA:AB:84:8F:B0:6F:A0:84:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbY--iaaFBF1Thzaq4SPsG-ghBE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5005b4-301d-4a5b-9c96-43883487e492/1/zbY--iaaFBF1Thzaq4SPsG-ghBE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:f8:2c:5e:21:11:c4:29:15:2f:b9:cf:0a:a4:16:76:32:c3: fb:b7:c9:e7:42:c8:8f:dc:95:f2:3e:1d:6f:10:48:d5:23:55: 2b:cc:9d:22:25:2a:86:cf:ba:89:06:7a:1d:13:8e:97:0a:5a: 69:a4:05:59:68:75:78:88:dc:47:be:44:2a:0c:e0:da:0f:6a: 04:97:2f:8f:38:93:a2:c0:ab:c4:dd:1b:d6:42:fe:6d:1f:9f: 63:b2:d8:86:d6:53:8d:65:09:61:4f:15:08:dc:aa:81:b4:21: 6a:42:c5:20:95:2c:ea:c9:cf:86:22:e9:a6:3b:28:be:fc:1d: 6c:63:53:90:de:bb:fa:ee:9f:5f:14:e5:20:5d:58:d7:b0:15: f9:4f:64:ae:de:f3:d3:b4:2e:10:4c:76:e1:01:b6:b8:ef:3e: 0c:54:72:e4:09:a7:7a:1e:07:34:d5:eb:75:8d:18:e2:c2:0d: 0c:02:bc:3a:5e:dd:87:e0:bf:ed:81:45:52:00:59:c1:15:16: 7c:78:e1:de:5d:77:f5:5e:c8:bc:6e:86:b9:38:9a:17:23:4c: 18:a2:05:15:cd:21:3a:af:ec:f1:10:56:f6:d4:f4:52:e6:bc: c1:26:52:d3:50:21:4b:01:c7:58:67:67:80:9a:ec:45:08:21: 44:ef:83:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBolZpdVD46DhP5GadR0Y6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYjYzZWZhMjY5YTE0MTE3NTRlMWNkYWFiODQ4ZmIwNmZh MDg0MTEwHhcNMjYwMjA5MDkwMTIzWhcNMjYwMjEwMDkwMTIzWjAzMTEwLwYDVQQD Eyg0YmJkYjBmMGVjZGMyNGEyMWE4NmY5OTdlY2Q1NGE1MjIxMTI5MDYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2k4PzuiJp29u+GEG0tYF92aOy5C3 VJa1aF8aix0c+OCSbdiRv3Sv1ae4DVLsEpw9HO4gl9DTgEb61/rz+yghFeyVh5qn neDf4Vec6xLuh0IPCNvcXXJPJzGuixGJmgAmHmv35UbUXljYeO/lb+aILOvdUQp+ Ug8YziIDm3immM6PDyg/dKf9GjKuJ41uMWechvzqsa8PRpdsuw0oCURMlL8i42ul f2bKJpHG3WUyhWHCSyOCeH6b3/eRiuM+kgwT8RFr/gEc+GVBKAOmQNHrTJHLZMPa 8pYn/Kig2GmMh965wKvMBqQxSwES0uym3gOzOELQUekiKy6v6IBf3mMLYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEu9sPDs3CSiGob5l+zVSlIhEpBiMB8GA1UdIwQY MBaAFM22PvommhQRdU4c2quEj7BvoIQRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYt NDM4ODM0ODdlNDkyLzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS81MDA1YjQtMzAxZC00YTViLTljOTYtNDM4ODM0ODdlNDky LzEvemJZLS1pYWFGQkYxVGh6YXE0U1BzRy1naEJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAvgsXiER xCkVL7nPCqQWdjLD+7fJ50LIj9yV8j4dbxBI1SNVK8ydIiUqhs+6iQZ6HROOlwpa aaQFWWh1eIjcR75EKgzg2g9qBJcvjziTosCrxN0b1kL+bR+fY7LYhtZTjWUJYU8V CNyqgbQhakLFIJUs6snPhiLppjsovvwdbGNTkN67+u6fXxTlIF1Y17AV+U9krt7z 07QuEEx24QG2uO8+DFRy5Amneh4HNNXrdY0Y4sINDAK8Ol7dh+C/7YFFUgBZwRUW fHjh3l139V7IvG6GuTiaFyNMGKIFFc0hOq/s8RBW9tT0Uua8wSZS01AhSwHHWGdn gJrsRQghRO+DVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:19 2026 by rpki-client