This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft File: Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft (raw, json) Hash identifier: m0uVrbuK0tEWxMuCdut6Y9Bf9VfFjR5xAo1dEuuKmc4= Subject key identifier: A6:99:36:FC:BA:37:D1:85:15:5A:CB:D0:D0:CD:56:21:A0:24:64:BB Authority key identifier: 67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA Certificate issuer: /CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Certificate serial: 019C43597E968B1BB62A9741198BD3ABD8FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft Manifest number: 051E Signing time: Mon 09 Feb 2026 17:01:04 +0000 Manifest this update: Mon 09 Feb 2026 17:01:04 +0000 Manifest next update: Tue 10 Feb 2026 17:01:04 +0000 Files and hashes: 1: Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl (hash: dXtLee1jF86M9/amQLBybdiGdNMMogHtEhoC47s9lbU=) 2: aQ9gfy4fYC0VC08rI5UWZXPKETo.roa (hash: 3nT5m1pplYfTGimm9tivPlp5Ti9zXf+dDwmifgJXGYE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:7e:96:8b:1b:b6:2a:97:41:19:8b:d3:ab:d8:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bb39cf24a674248f694f6d1c3bfb5c8267eefa Validity Not Before: Feb 9 17:01:04 2026 GMT Not After : Feb 10 17:01:04 2026 GMT Subject: CN=a69936fcba37d185155acbd0d0cd5621a02464bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:db:13:50:4f:57:0d:5b:7f:0c:5d:ae:14:80: ee:8b:a9:d2:8f:a6:c0:7b:77:ea:dd:d0:d5:27:17: e0:22:96:19:99:38:1c:40:97:92:a2:94:05:62:d6: 8d:23:e2:bb:e5:c3:3f:bc:a1:e8:9b:41:cf:a3:6f: 23:3c:4a:b7:61:76:44:03:c3:17:2e:ec:02:10:e7: cc:21:55:bd:56:c2:90:7c:c6:3f:e0:5f:fb:05:70: cc:5b:fb:42:cc:da:a3:82:83:d6:6a:09:98:f5:f1: 76:d0:05:df:93:8e:39:02:e2:19:3c:78:f7:8e:ca: 7b:8c:b7:76:6f:fc:0c:c1:7f:55:22:da:bd:89:fb: 2f:0a:69:17:9a:c4:60:6e:69:b5:8c:57:84:11:6e: 40:c8:d8:cb:0b:1c:c9:31:3a:96:b9:8c:b6:d1:38: dd:4c:29:50:fb:0b:f3:e1:5c:01:dd:d5:f9:7e:40: d6:4c:8b:27:b6:91:71:3d:cf:0a:f5:bf:1c:28:b5: 15:91:cc:03:72:10:5a:c3:35:28:05:05:f3:7c:5a: 9e:be:f9:e6:c2:4d:71:a9:27:7b:bc:f1:e0:d2:e3: 72:a5:1f:6c:9b:19:24:5d:f3:5e:a2:1f:68:f7:9f: 23:b6:ab:eb:db:d8:99:15:c5:0f:5b:d8:56:6d:4a: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:36:FC:BA:37:D1:85:15:5A:CB:D0:D0:CD:56:21:A0:24:64:BB X509v3 Authority Key Identifier: keyid:67:BB:39:CF:24:A6:74:24:8F:69:4F:6D:1C:3B:FB:5C:82:67:EE:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7s5zySmdCSPaU9tHDv7XIJn7vo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d9d664-b018-4896-8cbd-aeccb632d288/1/Z7s5zySmdCSPaU9tHDv7XIJn7vo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:16:af:46:6e:cc:9d:26:6b:08:93:0f:04:49:f6:52:06:d4: 64:b8:60:6d:67:7c:b2:a0:70:f2:83:77:86:98:a6:62:a6:5d: 25:06:b2:ed:98:2c:f2:fb:07:e6:ca:61:16:ba:ee:99:88:86: de:33:aa:87:c5:a6:85:37:c8:68:56:74:b7:ee:ce:5c:16:2d: 88:b1:19:e0:e4:e8:6a:62:44:eb:0c:b3:2f:90:7a:1f:40:d4: fb:54:0e:2e:04:de:bc:23:9d:f8:af:6c:6a:78:ef:e2:c8:bb: cf:25:92:a2:cf:95:e7:38:9b:0f:cb:f9:35:85:b7:7c:82:95: 06:69:d5:0c:cb:d7:ca:e5:fe:b3:17:45:bc:29:3d:82:14:da: 67:4c:8d:db:55:ab:3d:d3:75:1d:77:37:96:93:46:1a:66:ce: 6c:3f:40:1e:15:2c:05:7c:08:56:aa:d8:7b:a5:d8:9f:07:67: 51:37:80:f2:80:de:dc:6f:58:ad:05:11:0c:22:27:41:97:d3: 1e:d8:34:53:d4:81:57:80:2d:1d:36:22:a6:de:9a:43:93:f9: 3d:44:44:dd:94:04:d8:35:1a:1c:d8:a8:14:0e:a1:db:71:c5: cb:6d:ed:07:f2:dd:10:1e:cb:00:24:9f:57:9d:ec:17:ff:db: be:f9:f3:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWX6Wixu2KpdBGYvTq9j9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmIzOWNmMjRhNjc0MjQ4ZjY5NGY2ZDFjM2JmYjVjODI2 N2VlZmEwHhcNMjYwMjA5MTcwMTA0WhcNMjYwMjEwMTcwMTA0WjAzMTEwLwYDVQQD EyhhNjk5MzZmY2JhMzdkMTg1MTU1YWNiZDBkMGNkNTYyMWEwMjQ2NGJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNsTUE9XDVt/DF2uFIDui6nSj6bA e3fq3dDVJxfgIpYZmTgcQJeSopQFYtaNI+K75cM/vKHom0HPo28jPEq3YXZEA8MX LuwCEOfMIVW9VsKQfMY/4F/7BXDMW/tCzNqjgoPWagmY9fF20AXfk445AuIZPHj3 jsp7jLd2b/wMwX9VItq9ifsvCmkXmsRgbmm1jFeEEW5AyNjLCxzJMTqWuYy20Tjd TClQ+wvz4VwB3dX5fkDWTIsntpFxPc8K9b8cKLUVkcwDchBawzUoBQXzfFqevvnm wk1xqSd7vPHg0uNypR9smxkkXfNeoh9o958jtqvr29iZFcUPW9hWbUoIFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKaZNvy6N9GFFVrL0NDNViGgJGS7MB8GA1UdIwQY MBaAFGe7Oc8kpnQkj2lPbRw7+1yCZ+76MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQt YWVjY2I2MzJkMjg4LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS9kOWQ2NjQtYjAxOC00ODk2LThjYmQtYWVjY2I2MzJkMjg4 LzEvWjdzNXp5U21kQ1NQYVU5dEhEdjdYSUpuN3ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahavRm7M nSZrCJMPBEn2UgbUZLhgbWd8sqBw8oN3hpimYqZdJQay7Zgs8vsH5sphFrrumYiG 3jOqh8WmhTfIaFZ0t+7OXBYtiLEZ4OToamJE6wyzL5B6H0DU+1QOLgTevCOd+K9s anjv4si7zyWSos+V5zibD8v5NYW3fIKVBmnVDMvXyuX+sxdFvCk9ghTaZ0yN21Wr PdN1HXc3lpNGGmbObD9AHhUsBXwIVqrYe6XYnwdnUTeA8oDe3G9YrQURDCInQZfT Htg0U9SBV4AtHTYipt6aQ5P5PURE3ZQE2DUaHNioFA6h23HFy23tB/LdEB7LACSf V53sF//bvvnzsg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:55 2026 by rpki-client