This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft File: Zo1_de9C8L1xqpxmZo4KM9vhY08.mft (raw, json) Hash identifier: xrI/CjqEZ8WagJCSn5W+sfit8zRRld8Aa4jinzAUtI8= Subject key identifier: 1D:4F:FF:F0:E9:AD:6A:9F:7D:B3:0A:01:2D:73:9A:11:99:1E:42:E5 Authority key identifier: 66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F Certificate issuer: /CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f Certificate serial: 019C42EB591CDC4EBBFD00D113A479AC5F46 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft Manifest number: 180F Signing time: Mon 09 Feb 2026 15:00:45 +0000 Manifest this update: Mon 09 Feb 2026 15:00:45 +0000 Manifest next update: Tue 10 Feb 2026 15:00:45 +0000 Files and hashes: 1: FCrI_OtnxQ-1-z-8biyHW_0Jr3k.roa (hash: UDISGnchaBY9CTjsTbG4ZtPwcxVzVNzDL/kKcPoMHj8=) 2: Zo1_de9C8L1xqpxmZo4KM9vhY08.crl (hash: 5OSYOWxBavvJo36PQruTziEAH9u8t8v+8FasJSSuJQk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:59:1c:dc:4e:bb:fd:00:d1:13:a4:79:ac:5f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=668d7f75ef42f0bd71aa9c66668e0a33dbe1634f Validity Not Before: Feb 9 15:00:45 2026 GMT Not After : Feb 10 15:00:45 2026 GMT Subject: CN=1d4ffff0e9ad6a9f7db30a012d739a11991e42e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2e:e0:3e:aa:54:77:65:91:f0:11:c8:96:0b: a8:28:72:41:88:91:af:39:82:3e:af:b0:79:19:a2: 29:c0:30:7f:ec:f5:4e:bd:94:68:b5:a2:ce:db:a1: 4a:1b:7d:5f:6f:34:c7:0f:8f:94:90:df:eb:bc:1a: 95:4a:07:2c:ab:04:28:6a:d8:64:54:99:56:c6:60: c9:b9:77:96:0a:94:69:4d:65:d8:98:73:81:6d:34: 08:1f:a5:6b:ed:e6:57:47:06:26:7a:86:26:ed:fe: 88:fe:0a:7f:0e:ca:50:52:ab:d5:8d:f8:ff:af:e2: de:73:10:bc:9d:af:96:30:61:43:a0:ab:52:4f:4d: e0:6f:f4:de:a5:54:a1:ed:f9:0c:5c:a1:ea:43:40: 5d:17:80:a5:cb:c0:23:56:1c:a2:87:80:26:4e:73: 95:6d:19:2f:01:23:96:d3:07:8a:68:d8:2c:13:18: 16:81:c1:5e:4a:a9:1e:d4:cf:93:6b:1d:b2:e8:63: e0:89:a2:c6:ba:ee:d2:1f:69:0e:50:d6:a5:5d:07: 4a:38:b0:45:af:3f:29:6b:ca:ba:ae:ea:a7:e3:df: 99:74:34:b9:5f:2b:ac:86:8f:80:db:76:db:24:55: ce:c3:ea:42:7b:e6:43:34:fe:8b:0b:f0:8e:07:9f: 80:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:4F:FF:F0:E9:AD:6A:9F:7D:B3:0A:01:2D:73:9A:11:99:1E:42:E5 X509v3 Authority Key Identifier: keyid:66:8D:7F:75:EF:42:F0:BD:71:AA:9C:66:66:8E:0A:33:DB:E1:63:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zo1_de9C8L1xqpxmZo4KM9vhY08.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/53f75e-42b9-4fae-b1be-26e7f3f2b11e/1/Zo1_de9C8L1xqpxmZo4KM9vhY08.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f7:7a:ef:39:08:68:f5:ab:34:d1:47:39:56:fa:55:e5:46: 27:f9:05:89:18:1d:e3:db:39:db:5f:eb:4d:61:37:64:6a:9d: d7:a9:cf:72:bf:22:ef:f0:ab:b3:56:90:21:b1:fd:23:a9:0d: 67:8d:12:c6:cf:4d:ae:46:98:58:cd:df:0c:86:fc:82:9c:b2: b1:54:c1:d7:41:cb:bb:dd:fa:5b:52:30:55:0f:9b:49:ff:b6: fc:d0:39:79:cf:bf:04:16:63:d7:82:eb:57:6e:ae:76:3b:60: 39:73:70:cf:ea:95:e8:1d:a3:5a:74:e3:a4:68:a5:85:39:26: f5:e5:80:4b:29:76:e1:72:8d:28:40:d7:58:0f:bc:cc:1b:b6: 6e:57:55:28:ca:d7:da:97:46:9e:40:5b:c3:74:aa:84:14:4b: 3d:77:ff:6e:85:45:ab:b8:5f:d4:46:3a:ca:9c:58:8e:d7:c0: 3c:11:8b:dd:3b:cd:7b:bc:ee:c8:a5:3d:43:08:59:04:c7:b1: cf:a6:c1:5d:c7:52:3e:ed:32:9f:6e:d0:ec:bd:3d:91:65:b8: 73:90:b3:58:3e:a2:aa:6c:39:37:7d:b4:d3:26:f7:d7:ed:db: 03:c3:47:6e:b3:aa:c6:26:cd:97:dc:97:21:d3:66:43:82:12: 68:a7:60:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61kc3E67/QDRE6R5rF9GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2OGQ3Zjc1ZWY0MmYwYmQ3MWFhOWM2NjY2OGUwYTMzZGJl MTYzNGYwHhcNMjYwMjA5MTUwMDQ1WhcNMjYwMjEwMTUwMDQ1WjAzMTEwLwYDVQQD EygxZDRmZmZmMGU5YWQ2YTlmN2RiMzBhMDEyZDczOWExMTk5MWU0MmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmS7gPqpUd2WR8BHIlguoKHJBiJGv OYI+r7B5GaIpwDB/7PVOvZRotaLO26FKG31fbzTHD4+UkN/rvBqVSgcsqwQoathk VJlWxmDJuXeWCpRpTWXYmHOBbTQIH6Vr7eZXRwYmeoYm7f6I/gp/DspQUqvVjfj/ r+LecxC8na+WMGFDoKtST03gb/TepVSh7fkMXKHqQ0BdF4Cly8AjVhyih4AmTnOV bRkvASOW0weKaNgsExgWgcFeSqke1M+Tax2y6GPgiaLGuu7SH2kOUNalXQdKOLBF rz8pa8q6ruqn49+ZdDS5Xyusho+A23bbJFXOw+pCe+ZDNP6LC/COB5+A4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB1P//DprWqffbMKAS1zmhGZHkLlMB8GA1UdIwQY MBaAFGaNf3XvQvC9caqcZmaOCjPb4WNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm8xX2RlOUM4TDF4cXB4bVpvNEtNOXZoWTA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81M2Y3NWUtNDJiOS00ZmFlLWIxYmUt MjZlN2YzZjJiMTFlLzEvWm8xX2RlOUM4TDF4cXB4bVpvNEtNOXZoWTA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81M2Y3NWUtNDJiOS00ZmFlLWIxYmUtMjZlN2YzZjJiMTFl LzEvWm8xX2RlOUM4TDF4cXB4bVpvNEtNOXZoWTA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/d67zkI aPWrNNFHOVb6VeVGJ/kFiRgd49s521/rTWE3ZGqd16nPcr8i7/Crs1aQIbH9I6kN Z40Sxs9NrkaYWM3fDIb8gpyysVTB10HLu936W1IwVQ+bSf+2/NA5ec+/BBZj14Lr V26udjtgOXNwz+qV6B2jWnTjpGilhTkm9eWASyl24XKNKEDXWA+8zBu2bldVKMrX 2pdGnkBbw3SqhBRLPXf/boVFq7hf1EY6ypxYjtfAPBGL3TvNe7zuyKU9QwhZBMex z6bBXcdSPu0yn27Q7L09kWW4c5CzWD6iqmw5N3200yb31+3bA8NHbrOqxibNl9yX IdNmQ4ISaKdgcQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:20 2026 by rpki-client