This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft File: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft (raw, json) Hash identifier: J5Nlt2QgPOK+weYyX8mvO8kTe3eBHRLvD/reX5OJ7bw= Subject key identifier: D4:6F:FE:29:93:17:70:61:78:9D:9D:12:93:A1:07:B1:85:73:9F:27 Authority key identifier: 64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43 Certificate issuer: /CN=64d4054d1b62158b8335a2019f0548b3872a3443 Certificate serial: 019C1B02495CDB571F05061B7138D60FF8D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft Manifest number: 10 Signing time: Sun 01 Feb 2026 21:01:00 +0000 Manifest this update: Sun 01 Feb 2026 21:01:00 +0000 Manifest next update: Mon 02 Feb 2026 21:01:00 +0000 Files and hashes: 1: BLh9dGsuh7lniQM8xAMUAHHwvhs.asa (hash: SQgAv1elFPVayLOwK2pVHQea2OzdV5LG4O7IuyBvLJA=) 2: ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl (hash: /NkeByaO9mNcIbWhtOuPCl8uNGPvb9XZmrzIdzxVtmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Feb 2026 19:29:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1b:02:49:5c:db:57:1f:05:06:1b:71:38:d6:0f:f8:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d4054d1b62158b8335a2019f0548b3872a3443 Validity Not Before: Feb 1 21:01:00 2026 GMT Not After : Feb 2 21:01:00 2026 GMT Subject: CN=d46ffe2993177061789d9d1293a107b185739f27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:1d:48:6a:91:a6:73:99:da:64:44:a5:7b: 17:7c:16:f9:1d:17:6a:e7:9f:3d:29:e8:d4:ea:ee: d0:60:ef:8c:74:d2:e2:23:68:a8:bc:e7:48:64:6b: f3:ee:be:b8:c4:e9:7e:06:8a:c8:fe:51:82:ee:20: bc:60:1a:2d:8d:63:8c:10:9a:8b:95:82:df:4f:f8: 5a:db:20:52:d5:2e:be:a7:5f:fa:76:b2:52:7f:9b: 81:14:16:c8:33:20:b2:18:2d:ac:12:95:35:3b:e0: c6:6b:39:31:35:84:6d:61:b2:f1:5c:46:43:8c:70: 12:cc:21:ad:e8:42:ca:f6:cf:7c:76:4d:72:68:6c: ec:c2:e6:68:ba:80:53:dc:b1:56:bb:f6:2c:57:9b: 5c:a7:c6:eb:ca:be:1c:e2:41:03:bc:d5:84:2d:af: 5d:ad:6b:20:3e:30:19:c3:20:9e:10:f6:c4:5d:ee: 8d:38:7a:d6:f1:7a:dc:be:92:5e:61:c4:9f:b8:fb: 34:95:06:82:da:ed:ff:4d:87:07:18:cc:d7:4b:66: 74:7b:8f:54:2e:cd:78:eb:de:8b:08:2f:b7:f9:b1: 50:a8:f8:56:d3:f8:e5:4c:0e:ec:a7:fe:17:b0:84: fb:90:c2:0c:2b:e5:34:96:f7:21:c9:54:85:5f:a8: ff:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6F:FE:29:93:17:70:61:78:9D:9D:12:93:A1:07:B1:85:73:9F:27 X509v3 Authority Key Identifier: keyid:64:D4:05:4D:1B:62:15:8B:83:35:A2:01:9F:05:48:B3:87:2A:34:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/200d4e-7528-4f5e-b365-6b4852570b8a/1/ZNQFTRtiFYuDNaIBnwVIs4cqNEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:bb:4e:61:74:f1:b5:10:9b:2c:24:da:4e:d5:93:5c:4d:a7: ee:2c:ec:67:47:c8:e3:7f:cc:88:59:ec:60:c0:91:f2:d5:ce: 8c:82:e6:47:ab:6c:16:e0:70:57:cd:39:fe:88:37:0a:d3:d6: 50:7e:ff:7e:df:f2:94:4b:9e:80:cd:4f:b9:43:f3:95:fb:39: d2:f2:1e:4f:02:16:81:78:55:cb:f0:47:7f:d3:31:5a:4e:c0: b5:9d:e8:2e:b5:b7:33:cb:de:00:bb:e0:1a:e2:97:b9:8e:f2: 2e:4b:af:ef:67:46:cc:04:1e:2f:37:7a:46:6a:9f:14:57:ee: bf:17:8b:54:1c:ab:08:7e:dc:01:92:3d:b5:05:2b:18:dc:47: 10:cc:6f:13:b9:e9:00:86:03:c4:0f:57:f0:e5:01:7b:23:1f: 10:97:22:61:c5:1b:a1:a6:57:11:f6:32:e0:b8:f8:7f:55:7c: a5:21:07:40:0c:f5:42:1b:6a:07:ad:3a:3d:81:07:e3:30:b4: a6:d3:cd:18:0e:b6:56:00:30:67:99:36:c2:89:7e:40:91:52: ff:be:5d:dc:0e:a4:0a:41:b5:05:ed:2e:ef:a9:71:15:b3:64: 88:d0:b7:df:e4:59:be:ce:46:84:04:a6:5b:8e:63:6a:f2:35: 42:05:9f:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwbAklc21cfBQYbcTjWD/jZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDQwNTRkMWI2MjE1OGI4MzM1YTIwMTlmMDU0OGIzODcy YTM0NDMwHhcNMjYwMjAxMjEwMTAwWhcNMjYwMjAyMjEwMTAwWjAzMTEwLwYDVQQD EyhkNDZmZmUyOTkzMTc3MDYxNzg5ZDlkMTI5M2ExMDdiMTg1NzM5ZjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAry4dSGqRpnOZ2mREpXsXfBb5HRdq 5589KejU6u7QYO+MdNLiI2iovOdIZGvz7r64xOl+BorI/lGC7iC8YBotjWOMEJqL lYLfT/ha2yBS1S6+p1/6drJSf5uBFBbIMyCyGC2sEpU1O+DGazkxNYRtYbLxXEZD jHASzCGt6ELK9s98dk1yaGzswuZouoBT3LFWu/YsV5tcp8bryr4c4kEDvNWELa9d rWsgPjAZwyCeEPbEXe6NOHrW8XrcvpJeYcSfuPs0lQaC2u3/TYcHGMzXS2Z0e49U Ls14696LCC+3+bFQqPhW0/jlTA7sp/4XsIT7kMIMK+U0lvchyVSFX6j/LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRv/imTF3BheJ2dEpOhB7GFc58nMB8GA1UdIwQY MBaAFGTUBU0bYhWLgzWiAZ8FSLOHKjRDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUt NmI0ODUyNTcwYjhhLzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMDBkNGUtNzUyOC00ZjVlLWIzNjUtNmI0ODUyNTcwYjhh LzEvWk5RRlRSdGlGWXVETmFJQm53VklzNGNxTkVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPrtOYXTx tRCbLCTaTtWTXE2n7izsZ0fI43/MiFnsYMCR8tXOjILmR6tsFuBwV805/og3CtPW UH7/ft/ylEuegM1PuUPzlfs50vIeTwIWgXhVy/BHf9MxWk7AtZ3oLrW3M8veALvg GuKXuY7yLkuv72dGzAQeLzd6RmqfFFfuvxeLVByrCH7cAZI9tQUrGNxHEMxvE7np AIYDxA9X8OUBeyMfEJciYcUboaZXEfYy4Lj4f1V8pSEHQAz1QhtqB606PYEH4zC0 ptPNGA62VgAwZ5k2wol+QJFS/75d3A6kCkG1Be0u76lxFbNkiNC33+RZvs5GhASm W45javI1QgWfUg== -----END CERTIFICATE-----Generated at Mon Feb 2 07:53:51 2026 by rpki-client