This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft File: zkP-lNpK73rfscFih1rxysfLpLE.mft (raw, json) Hash identifier: evanqilT3EFbe+/0n1bpJtQAp1KaxEy3FECMAiFdGtM= Subject key identifier: 68:C5:FD:73:6F:36:70:25:DC:1E:36:2F:A3:17:19:16:8B:8C:D5:AD Authority key identifier: CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1 Certificate issuer: /CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1 Certificate serial: 019C427D13A5381F517D640B5A0E91721FB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 13:00:19 +0000 Manifest this update: Mon 09 Feb 2026 13:00:19 +0000 Manifest next update: Tue 10 Feb 2026 13:00:19 +0000 Files and hashes: 1: 0lsa2lsdRbGhXDlBoxyUzEcvTkw.roa (hash: TZA+evGUSrxkMyqk95k24o509cA93t42uHVcHnI4ehI=) 2: zkP-lNpK73rfscFih1rxysfLpLE.crl (hash: 5vFEKAegKC1/7sik3YmaZJT2TH/FZ4lWyEGi/jPL2bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:13:a5:38:1f:51:7d:64:0b:5a:0e:91:72:1f:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce43fe94da4aef7adfb1c162875af1cac7cba4b1 Validity Not Before: Feb 9 13:00:19 2026 GMT Not After : Feb 10 13:00:19 2026 GMT Subject: CN=68c5fd736f367025dc1e362fa31719168b8cd5ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a7:36:1f:d0:70:05:3e:c7:d2:40:6e:38:af: 53:c8:e6:d2:49:fd:ca:91:d4:4f:cc:d0:53:8d:4c: ed:1b:dd:5c:51:96:44:63:e4:b5:da:fe:07:7d:2d: dd:da:a3:2e:73:90:68:f3:35:96:21:32:fa:0c:29: b7:c3:fb:91:a6:3b:f1:bc:66:47:a5:10:b1:a4:06: e3:c1:47:e9:bc:bd:4c:8f:87:9c:39:c7:69:f1:e2: 64:67:a2:09:89:75:56:01:63:aa:29:85:0d:a8:48: e2:60:66:04:24:5e:5e:5a:ef:a9:fd:d7:e9:f7:2b: f2:5f:ef:3f:4a:1b:4a:05:88:8e:5e:8c:df:b3:a9: 87:4f:55:1d:ad:b2:86:24:e1:0c:54:12:40:75:f6: 75:73:77:83:8c:71:cd:d9:75:89:1f:1e:f4:4e:0b: 4a:52:26:84:69:24:cb:cf:71:ea:17:ed:08:93:99: 9a:63:37:45:60:b8:64:3b:07:3d:21:43:12:78:70: df:62:97:f2:42:91:4f:39:a5:9c:85:6b:12:08:40: 32:95:92:e3:6c:d0:80:02:2f:0b:31:da:f3:39:59: f0:e2:f7:57:e5:e8:2b:aa:77:89:e1:7e:a9:06:16: 59:66:cf:0c:84:b0:1b:45:30:4b:02:6a:f1:12:68: b8:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C5:FD:73:6F:36:70:25:DC:1E:36:2F:A3:17:19:16:8B:8C:D5:AD X509v3 Authority Key Identifier: keyid:CE:43:FE:94:DA:4A:EF:7A:DF:B1:C1:62:87:5A:F1:CA:C7:CB:A4:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zkP-lNpK73rfscFih1rxysfLpLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f9d8d0-cc02-4abf-99bb-e018da53d129/1/zkP-lNpK73rfscFih1rxysfLpLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:34:d6:a1:c8:64:e9:6b:b7:02:d8:0b:35:68:18:30:ca:5f: c8:62:c4:35:c4:fb:c1:90:d5:9c:3a:38:7d:60:9a:62:03:f6: 05:4b:81:36:8a:5a:6a:95:79:8f:b8:9b:79:76:b7:e6:dd:53: e7:c9:91:9b:a2:6c:e7:ea:ef:ff:79:0b:ac:82:97:c9:d9:7d: 3f:46:b3:f1:41:7f:33:ab:11:16:ec:3a:46:e5:5e:fe:b9:07: 4f:db:e6:40:04:5d:d5:4a:b9:2d:ec:a6:45:f3:5e:4e:8f:28: 03:6e:ff:01:f3:fc:58:5a:2e:b7:d7:56:e8:c7:54:a4:7e:c3: 5d:64:95:65:f9:66:8c:ad:97:a2:4a:74:8f:63:95:05:29:65: a0:30:19:ec:71:9a:4a:25:de:6c:1a:4c:ba:1f:d8:b5:ad:a0: 0e:d6:4a:7b:1e:00:bc:78:8c:78:7f:29:d7:66:7e:ab:bd:d5: 76:80:e1:ca:25:8f:6b:94:bc:76:b5:10:41:96:ef:17:7b:bd: 5d:95:2d:db:3f:7f:38:06:23:30:1f:44:cf:64:1e:74:e3:23: 5f:64:66:ec:7d:26:81:74:09:62:f8:68:a8:a1:08:b2:fc:d4: 44:05:ae:94:f1:46:3a:03:ab:ff:bf:5d:60:9b:5a:f6:fc:ae: f8:81:99:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfROlOB9RfWQLWg6Rch+xMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlNDNmZTk0ZGE0YWVmN2FkZmIxYzE2Mjg3NWFmMWNhYzdj YmE0YjEwHhcNMjYwMjA5MTMwMDE5WhcNMjYwMjEwMTMwMDE5WjAzMTEwLwYDVQQD Eyg2OGM1ZmQ3MzZmMzY3MDI1ZGMxZTM2MmZhMzE3MTkxNjhiOGNkNWFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Kc2H9BwBT7H0kBuOK9TyObSSf3K kdRPzNBTjUztG91cUZZEY+S12v4HfS3d2qMuc5Bo8zWWITL6DCm3w/uRpjvxvGZH pRCxpAbjwUfpvL1Mj4ecOcdp8eJkZ6IJiXVWAWOqKYUNqEjiYGYEJF5eWu+p/dfp 9yvyX+8/ShtKBYiOXozfs6mHT1UdrbKGJOEMVBJAdfZ1c3eDjHHN2XWJHx70TgtK UiaEaSTLz3HqF+0Ik5maYzdFYLhkOwc9IUMSeHDfYpfyQpFPOaWchWsSCEAylZLj bNCAAi8LMdrzOVnw4vdX5egrqneJ4X6pBhZZZs8MhLAbRTBLAmrxEmi4MwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGjF/XNvNnAl3B42L6MXGRaLjNWtMB8GA1UdIwQY MBaAFM5D/pTaSu9637HBYoda8crHy6SxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemtQLWxOcEs3M3Jmc2NGaWgxcnh5c2ZMcExFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mOWQ4ZDAtY2MwMi00YWJmLTk5YmIt ZTAxOGRhNTNkMTI5LzEvemtQLWxOcEs3M3Jmc2NGaWgxcnh5c2ZMcExFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9mOWQ4ZDAtY2MwMi00YWJmLTk5YmItZTAxOGRhNTNkMTI5 LzEvemtQLWxOcEs3M3Jmc2NGaWgxcnh5c2ZMcExFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlzTWochk 6Wu3AtgLNWgYMMpfyGLENcT7wZDVnDo4fWCaYgP2BUuBNopaapV5j7ibeXa35t1T 58mRm6Js5+rv/3kLrIKXydl9P0az8UF/M6sRFuw6RuVe/rkHT9vmQARd1Uq5Leym RfNeTo8oA27/AfP8WFout9dW6MdUpH7DXWSVZflmjK2Xokp0j2OVBSlloDAZ7HGa SiXebBpMuh/Yta2gDtZKex4AvHiMeH8p12Z+q73VdoDhyiWPa5S8drUQQZbvF3u9 XZUt2z9/OAYjMB9Ez2QedOMjX2Rm7H0mgXQJYvhoqKEIsvzURAWulPFGOgOr/79d YJta9vyu+IGZmw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:18:00 2026 by rpki-client