This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft File: Z8fCgrBpftBVTIBfUACrEro7nH4.mft (raw, json) Hash identifier: e0WLebcJPftH+zfECzXTgYTISZAa9FsOXN1vI/cecc8= Subject key identifier: F2:16:E7:E5:34:46:2A:30:B5:30:A2:6F:B0:DE:07:7F:1D:CA:1E:30 Authority key identifier: 67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E Certificate issuer: /CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e Certificate serial: 019C42EB68005F4A2D07F4B0A965B9344859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft Manifest number: 084C Signing time: Mon 09 Feb 2026 15:00:49 +0000 Manifest this update: Mon 09 Feb 2026 15:00:49 +0000 Manifest next update: Tue 10 Feb 2026 15:00:49 +0000 Files and hashes: 1: RnwkUlCJs9bw50GiSdHn7SGXOeo.roa (hash: 8K20xbc5P6ZWPSIDkIUTcAS1BtzkRFadgOrDQ1YrclI=) 2: Z8fCgrBpftBVTIBfUACrEro7nH4.crl (hash: n0XG0JakLQT/yLErTv8VdTBMIClVUzoRVnaush1TRzo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:68:00:5f:4a:2d:07:f4:b0:a9:65:b9:34:48:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67c7c282b0697ed0554c805f5000ab12ba3b9c7e Validity Not Before: Feb 9 15:00:49 2026 GMT Not After : Feb 10 15:00:49 2026 GMT Subject: CN=f216e7e534462a30b530a26fb0de077f1dca1e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:56:08:44:55:9e:ad:84:e2:1f:3c:25:b4:c7: 09:28:30:80:01:a9:ee:a9:33:7c:6a:55:45:3a:a8: 1e:44:f4:b3:09:d8:5c:b7:4a:c7:f5:b6:53:d3:c4: 4d:48:68:56:3c:4d:51:2f:4c:ee:c3:00:a2:41:98: 35:b1:82:54:20:b7:4f:f3:a4:b5:41:2f:8a:25:07: b0:af:34:6d:ec:89:27:f6:ea:ea:7b:fa:49:09:bf: ec:1d:57:60:8b:80:e9:42:04:39:72:78:75:ee:60: 5f:db:f6:48:6f:83:69:cf:80:9f:07:9d:e2:30:9b: 1a:91:cb:5f:ec:a2:66:b7:d4:52:49:97:8f:8d:50: 09:2e:b7:f8:a2:6a:f5:40:a8:cd:71:55:36:4d:ca: 6c:25:b7:b9:a8:b9:d0:9a:39:95:e0:fe:7c:3e:99: 15:63:00:18:ee:12:b4:1a:af:6a:ff:2d:68:3d:91: 1d:b1:8d:15:fb:24:3e:61:3d:ec:4b:b8:03:5e:3a: 07:b1:d2:aa:af:dd:ea:0c:0f:a7:0a:c1:0b:5e:1d: e7:53:85:d7:76:b3:1e:57:83:dd:fe:28:cc:ef:5e: d4:9d:00:42:b3:bf:1d:1b:fb:eb:74:91:b7:c7:12: 0a:7c:6d:d4:35:28:c6:b1:2e:5e:4c:a8:67:0e:52: 8c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:E7:E5:34:46:2A:30:B5:30:A2:6F:B0:DE:07:7F:1D:CA:1E:30 X509v3 Authority Key Identifier: keyid:67:C7:C2:82:B0:69:7E:D0:55:4C:80:5F:50:00:AB:12:BA:3B:9C:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8fCgrBpftBVTIBfUACrEro7nH4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/86/f2cc54-722a-495f-a94c-2836ad1c321e/1/Z8fCgrBpftBVTIBfUACrEro7nH4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:95:7c:c0:c0:58:b4:b7:50:21:97:b7:92:97:20:51:b8:d6: 2f:5a:63:d3:4d:1d:18:67:c3:c2:32:9f:e3:e8:f5:4c:d1:55: cf:65:d5:48:7d:5f:f3:74:61:b7:bb:98:fd:04:6b:a9:95:20: d0:0d:3b:d4:06:c7:92:ac:71:c4:83:c0:a2:c8:9f:a2:0b:dc: f4:c1:e6:7f:3f:fb:77:9d:36:01:ee:e3:ac:e7:f1:07:bb:36: 6e:30:60:e2:d9:b9:6d:26:89:68:1c:5a:b9:92:a2:0a:43:83: f2:3a:c7:42:de:7e:26:8a:ab:10:7e:9b:00:bb:f4:b4:c7:c7: 77:c0:4a:00:b9:57:73:f9:3d:b5:3c:92:27:cb:c6:00:d3:cc: 4d:7c:e7:28:0d:94:19:80:c7:3b:03:f3:bb:0e:ea:63:03:3f: 5d:8e:af:48:01:88:05:c8:0c:1e:7e:09:dd:f2:d7:0c:35:fb: 18:fc:b6:3c:fc:4e:7a:6d:26:12:0c:36:bd:5c:af:e5:a2:81: 0e:5d:26:0e:ba:6f:30:e7:69:49:98:7e:4c:89:3c:4d:42:d0: 41:a5:e8:66:e7:ae:ff:ec:19:56:23:24:10:90:a4:7b:aa:1a: 36:bf:9e:1a:6c:3c:1d:91:c3:4b:d3:e2:86:53:5e:19:6d:44: a1:f0:bf:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC62gAX0otB/SwqWW5NEhZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YzdjMjgyYjA2OTdlZDA1NTRjODA1ZjUwMDBhYjEyYmEz YjljN2UwHhcNMjYwMjA5MTUwMDQ5WhcNMjYwMjEwMTUwMDQ5WjAzMTEwLwYDVQQD EyhmMjE2ZTdlNTM0NDYyYTMwYjUzMGEyNmZiMGRlMDc3ZjFkY2ExZTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FYIRFWerYTiHzwltMcJKDCAAanu qTN8alVFOqgeRPSzCdhct0rH9bZT08RNSGhWPE1RL0zuwwCiQZg1sYJUILdP86S1 QS+KJQewrzRt7Ikn9urqe/pJCb/sHVdgi4DpQgQ5cnh17mBf2/ZIb4Npz4CfB53i MJsakctf7KJmt9RSSZePjVAJLrf4omr1QKjNcVU2TcpsJbe5qLnQmjmV4P58PpkV YwAY7hK0Gq9q/y1oPZEdsY0V+yQ+YT3sS7gDXjoHsdKqr93qDA+nCsELXh3nU4XX drMeV4Pd/ijM717UnQBCs78dG/vrdJG3xxIKfG3UNSjGsS5eTKhnDlKMmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIW5+U0RiowtTCib7DeB38dyh4wMB8GA1UdIwQY MBaAFGfHwoKwaX7QVUyAX1AAqxK6O5x+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMt MjgzNmFkMWMzMjFlLzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ni9mMmNjNTQtNzIyYS00OTVmLWE5NGMtMjgzNmFkMWMzMjFl LzEvWjhmQ2dyQnBmdEJWVElCZlVBQ3JFcm83bkg0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJV8wMBY tLdQIZe3kpcgUbjWL1pj000dGGfDwjKf4+j1TNFVz2XVSH1f83Rht7uY/QRrqZUg 0A071AbHkqxxxIPAosifogvc9MHmfz/7d502Ae7jrOfxB7s2bjBg4tm5bSaJaBxa uZKiCkOD8jrHQt5+JoqrEH6bALv0tMfHd8BKALlXc/k9tTySJ8vGANPMTXznKA2U GYDHOwPzuw7qYwM/XY6vSAGIBcgMHn4J3fLXDDX7GPy2PPxOem0mEgw2vVyv5aKB Dl0mDrpvMOdpSZh+TIk8TULQQaXoZueu/+wZViMkEJCke6oaNr+eGmw8HZHDS9Pi hlNeGW1EofC/AQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:38 2026 by rpki-client