This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft File: zZEXAvST1u3htuhyvKzcuFQoK60.mft (raw, json) Hash identifier: c8skZJUIDnXxDavVpJ91Xzev+HH1w/bbkQ4eicCIjeU= Subject key identifier: 59:D4:D9:86:92:62:59:F8:26:65:95:D3:D7:67:1A:43:DC:6A:22:FD Authority key identifier: CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD Certificate issuer: /CN=cd911702f493d6ede1b6e872bcacdcb854282bad Certificate serial: 019C427D83C6F121BF338BB497DAF082D038 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft Manifest number: 0E75 Signing time: Mon 09 Feb 2026 13:00:47 +0000 Manifest this update: Mon 09 Feb 2026 13:00:47 +0000 Manifest next update: Tue 10 Feb 2026 13:00:47 +0000 Files and hashes: 1: Yac91t2eogvz5cwAb2fKP1E4ctw.roa (hash: GRCEipXvu/z6v8Q0987NE/jFkhe0wRikv0AvdJFVTDI=) 2: zZEXAvST1u3htuhyvKzcuFQoK60.crl (hash: Znbkkih9DkPYrUZBf1dW6bZh0upOdyGbeiS1QIQNcR4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:83:c6:f1:21:bf:33:8b:b4:97:da:f0:82:d0:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd911702f493d6ede1b6e872bcacdcb854282bad Validity Not Before: Feb 9 13:00:47 2026 GMT Not After : Feb 10 13:00:47 2026 GMT Subject: CN=59d4d986926259f8266595d3d7671a43dc6a22fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:77:55:e9:68:f8:8f:6e:7d:44:cc:ba:37:69: be:f2:64:a8:bf:e4:76:51:64:b5:32:fd:1f:b5:c6: 9b:7b:40:fe:22:38:ef:3a:52:5d:cc:07:a8:57:3e: a1:d7:7f:c0:85:fa:a0:3b:6a:a9:45:64:eb:72:30: 39:0b:c9:02:b8:95:5e:c8:1d:71:25:1b:2c:c8:08: 0e:54:07:3c:a9:b9:56:44:07:ea:97:25:5a:2c:39: 9f:55:1f:89:5b:31:2c:e1:26:91:40:ce:94:05:e6: 5b:bc:2d:88:ee:a0:1a:1e:6e:d0:12:6f:b1:77:bd: ea:3f:bd:9f:b2:8e:6f:86:3d:81:3b:12:b8:5e:23: ab:db:30:17:c6:3e:10:a1:9e:d6:3e:6a:3a:4d:9c: 17:ac:ed:d2:44:c3:8b:3f:62:cb:34:db:48:01:aa: 16:28:d8:af:c5:9b:25:25:ce:88:11:f3:f4:b5:f6: 69:50:f9:10:75:15:6a:33:93:f5:91:08:62:0c:54: 8f:c7:bd:4c:30:df:b0:8d:fc:61:14:4a:e0:f6:02: d7:0e:ea:e2:e8:4e:0d:6e:02:7b:87:f1:a2:57:77: 01:0e:dd:c6:4d:2a:73:24:df:64:89:b6:84:d9:9a: 2b:3d:a3:dd:da:5a:09:f7:4d:78:0e:fc:5a:60:ac: cd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:D4:D9:86:92:62:59:F8:26:65:95:D3:D7:67:1A:43:DC:6A:22:FD X509v3 Authority Key Identifier: keyid:CD:91:17:02:F4:93:D6:ED:E1:B6:E8:72:BC:AC:DC:B8:54:28:2B:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZEXAvST1u3htuhyvKzcuFQoK60.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/b74207-3853-435d-abde-22b7782162ca/1/zZEXAvST1u3htuhyvKzcuFQoK60.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:40:22:1a:e4:da:7b:2f:11:c8:26:85:63:ae:a7:8b:9e:49: c3:80:af:fe:3e:ae:57:4b:32:aa:d1:a6:8c:10:54:44:b3:95: 6d:1a:6f:82:15:31:c3:c9:72:3c:ff:ed:df:45:51:b4:e3:56: ef:a6:5d:6a:ec:0b:a1:37:d9:0a:6d:3c:89:39:d5:21:67:97: ac:53:70:61:2e:fa:20:ea:13:06:09:02:e0:e2:a0:8a:53:3f: 43:86:c9:38:70:9e:12:4a:3a:fb:fb:85:d3:11:d0:19:23:b9: 7e:6d:7b:4a:e6:6f:09:34:35:8d:dd:d0:92:23:ed:88:ee:a1: 79:d3:08:a6:29:c0:a8:55:0e:11:b1:2e:1e:38:2a:42:e4:ea: 0e:08:ec:9e:14:24:88:3e:c2:64:28:ba:f5:7f:71:e2:87:b6: 4d:f4:7c:0d:48:fb:97:4c:46:03:8c:2f:be:52:ed:70:9b:10: 4f:15:80:54:34:aa:8e:a6:14:43:ae:89:be:84:c3:60:1c:66: 3c:3b:bf:5c:ca:b3:b0:9e:6c:ef:e4:b4:7e:f0:00:c5:8d:00: e0:dc:91:21:d5:58:09:d5:d0:33:7b:d9:23:d1:57:44:36:6e: 27:17:21:1e:d1:98:da:09:cc:e7:af:6d:67:96:b2:e3:06:e3: 46:a8:35:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYPG8SG/M4u0l9rwgtA4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTExNzAyZjQ5M2Q2ZWRlMWI2ZTg3MmJjYWNkY2I4NTQy ODJiYWQwHhcNMjYwMjA5MTMwMDQ3WhcNMjYwMjEwMTMwMDQ3WjAzMTEwLwYDVQQD Eyg1OWQ0ZDk4NjkyNjI1OWY4MjY2NTk1ZDNkNzY3MWE0M2RjNmEyMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXdV6Wj4j259RMy6N2m+8mSov+R2 UWS1Mv0ftcabe0D+IjjvOlJdzAeoVz6h13/AhfqgO2qpRWTrcjA5C8kCuJVeyB1x JRssyAgOVAc8qblWRAfqlyVaLDmfVR+JWzEs4SaRQM6UBeZbvC2I7qAaHm7QEm+x d73qP72fso5vhj2BOxK4XiOr2zAXxj4QoZ7WPmo6TZwXrO3SRMOLP2LLNNtIAaoW KNivxZslJc6IEfP0tfZpUPkQdRVqM5P1kQhiDFSPx71MMN+wjfxhFErg9gLXDuri 6E4NbgJ7h/GiV3cBDt3GTSpzJN9kibaE2ZorPaPd2loJ9014DvxaYKzNWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFnU2YaSYln4JmWV09dnGkPcaiL9MB8GA1UdIwQY MBaAFM2RFwL0k9bt4bbocrys3LhUKCutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUt MjJiNzc4MjE2MmNhLzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9iNzQyMDctMzg1My00MzVkLWFiZGUtMjJiNzc4MjE2MmNh LzEvelpFWEF2U1QxdTNodHVoeXZLemN1RlFvSzYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEAiGuTa ey8RyCaFY66ni55Jw4Cv/j6uV0syqtGmjBBURLOVbRpvghUxw8lyPP/t30VRtONW 76ZdauwLoTfZCm08iTnVIWeXrFNwYS76IOoTBgkC4OKgilM/Q4bJOHCeEko6+/uF 0xHQGSO5fm17SuZvCTQ1jd3QkiPtiO6hedMIpinAqFUOEbEuHjgqQuTqDgjsnhQk iD7CZCi69X9x4oe2TfR8DUj7l0xGA4wvvlLtcJsQTxWAVDSqjqYUQ66JvoTDYBxm PDu/XMqzsJ5s7+S0fvAAxY0A4NyRIdVYCdXQM3vZI9FXRDZuJxchHtGY2gnM569t Z5ay4wbjRqg11w== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:34 2026 by rpki-client