This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft File: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft (raw, json) Hash identifier: BlIUsV5RrEDt9MEdUgj8USc4WJ+KqQKbxf263o7EdrU= Subject key identifier: 42:11:1F:09:34:F1:3D:8E:F1:6C:86:7C:9D:FE:44:70:5D:06:8E:71 Authority key identifier: 65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 Certificate issuer: /CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Certificate serial: 019C4390B9F84CBF8E3F7CD8251A6C62DC73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft Manifest number: 0497 Signing time: Mon 09 Feb 2026 18:01:24 +0000 Manifest this update: Mon 09 Feb 2026 18:01:24 +0000 Manifest next update: Tue 10 Feb 2026 18:01:24 +0000 Files and hashes: 1: 3cRUjdhX8xbK1k4DfWaubJp1w0E.roa (hash: Z7aa0TuqsrWRnvU0sn3YMIcRZ7r4lbfupWu8b6jE2/I=) 2: ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl (hash: ugMnkg3LzsY1EVge13yVQPk9qhiRnL16vOSv4scjRhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:b9:f8:4c:bf:8e:3f:7c:d8:25:1a:6c:62:dc:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654abc8e45de231fb829bca22bb2f0b31e1f7af5 Validity Not Before: Feb 9 18:01:24 2026 GMT Not After : Feb 10 18:01:24 2026 GMT Subject: CN=42111f0934f13d8ef16c867c9dfe44705d068e71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:1e:da:8b:5c:db:96:5b:30:ad:dc:29:bc: 25:b5:8b:7d:c0:73:19:bf:77:55:f3:85:a3:62:e2: 80:b7:4e:a0:a1:e5:8c:da:06:95:ab:38:0f:9b:c2: 7f:56:2a:05:f0:07:55:71:c6:24:21:c7:08:f0:d3: b0:50:f6:6d:ed:97:57:b1:64:d4:8f:3e:b6:aa:3e: 01:3b:fd:f9:53:ba:0b:7f:85:da:c8:36:ea:de:49: d8:ec:56:ac:8b:8b:7a:87:eb:75:4b:07:5d:8c:0a: a2:cb:71:ab:e2:93:41:29:08:83:77:6b:78:ca:7d: 43:e3:ee:d0:49:65:45:bd:eb:3b:7f:17:cb:ca:b0: 37:98:11:12:25:a8:74:4e:cd:0f:cb:42:7d:7e:d6: 26:0e:17:d7:4b:9a:90:bd:5f:18:c4:da:d3:3a:c1: ea:11:17:37:fd:16:e1:50:62:0b:83:cc:e8:25:ab: d0:54:73:b4:ed:99:dd:86:f1:1c:71:61:36:83:50: 06:69:13:9c:19:bd:43:3a:2b:26:71:54:67:e0:b2: 7d:df:36:b6:b5:19:ac:d3:cf:e3:bf:89:d9:04:08: d8:94:fd:e0:64:4f:3c:00:09:45:48:92:76:c0:36: 97:99:11:1f:b2:ef:db:ee:a7:ff:02:24:d4:ce:47: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:11:1F:09:34:F1:3D:8E:F1:6C:86:7C:9D:FE:44:70:5D:06:8E:71 X509v3 Authority Key Identifier: keyid:65:4A:BC:8E:45:DE:23:1F:B8:29:BC:A2:2B:B2:F0:B3:1E:1F:7A:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/6155d5-31ba-4239-a753-f287b7b6d7b2/1/ZUq8jkXeIx-4KbyiK7Lwsx4fevU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:49:09:0b:da:8d:70:bb:f5:79:bb:21:74:80:11:f0:a5:bd: 1f:6b:66:07:c2:15:61:3f:e0:5e:91:c0:27:e6:6d:dd:ce:6d: 6d:c1:b0:b4:32:7e:8f:c3:d5:88:5c:16:c0:86:cc:5a:b0:55: 22:28:81:f3:7e:e9:81:83:70:5a:ae:10:1c:e0:0c:15:74:01: b6:4e:5c:20:83:78:b0:d3:48:c5:d8:48:cc:91:d2:5d:ec:94: 3c:f8:8d:48:cb:b7:b4:92:35:85:9b:a4:01:35:d2:7a:cc:f7: 2b:4a:d2:2f:ac:bc:aa:1c:ea:64:dc:d5:74:3a:30:f4:32:d0: da:b2:8d:be:c4:9c:d0:62:3c:52:cb:04:a5:13:aa:b5:23:ae: 9f:f7:97:27:ca:07:64:91:d2:c2:4a:ae:59:5b:3c:53:a6:e6: 9f:40:eb:b8:d2:7d:24:25:36:1e:56:52:a7:2f:b2:0d:9d:eb: b2:ec:d4:17:3d:9e:8c:9e:f4:b1:29:3b:52:7b:0b:d6:03:e4: 3d:6c:3a:ea:d5:cd:f8:5f:8f:dd:35:56:3d:52:18:c7:24:f2: 7f:a8:13:72:25:fc:41:58:71:b7:12:fa:8d:6a:df:16:98:a5: 5f:1d:6f:d3:a9:fc:d6:c5:f5:97:30:7c:02:1d:54:fc:23:d9: 84:33:d4:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkLn4TL+OP3zYJRpsYtxzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NGFiYzhlNDVkZTIzMWZiODI5YmNhMjJiYjJmMGIzMWUx ZjdhZjUwHhcNMjYwMjA5MTgwMTI0WhcNMjYwMjEwMTgwMTI0WjAzMTEwLwYDVQQD Eyg0MjExMWYwOTM0ZjEzZDhlZjE2Yzg2N2M5ZGZlNDQ3MDVkMDY4ZTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsse2otc25ZbMK3cKbwltYt9wHMZ v3dV84WjYuKAt06goeWM2gaVqzgPm8J/VioF8AdVccYkIccI8NOwUPZt7ZdXsWTU jz62qj4BO/35U7oLf4XayDbq3knY7Fasi4t6h+t1SwddjAqiy3Gr4pNBKQiDd2t4 yn1D4+7QSWVFves7fxfLyrA3mBESJah0Ts0Py0J9ftYmDhfXS5qQvV8YxNrTOsHq ERc3/RbhUGILg8zoJavQVHO07ZndhvEccWE2g1AGaROcGb1DOismcVRn4LJ93za2 tRms08/jv4nZBAjYlP3gZE88AAlFSJJ2wDaXmREfsu/b7qf/AiTUzkeAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEIRHwk08T2O8WyGfJ3+RHBdBo5xMB8GA1UdIwQY MBaAFGVKvI5F3iMfuCm8oiuy8LMeH3r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMt ZjI4N2I3YjZkN2IyLzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS82MTU1ZDUtMzFiYS00MjM5LWE3NTMtZjI4N2I3YjZkN2Iy LzEvWlVxOGprWGVJeC00S2J5aUs3THdzeDRmZXZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQUkJC9qN cLv1ebshdIAR8KW9H2tmB8IVYT/gXpHAJ+Zt3c5tbcGwtDJ+j8PViFwWwIbMWrBV IiiB837pgYNwWq4QHOAMFXQBtk5cIIN4sNNIxdhIzJHSXeyUPPiNSMu3tJI1hZuk ATXSesz3K0rSL6y8qhzqZNzVdDow9DLQ2rKNvsSc0GI8UssEpROqtSOun/eXJ8oH ZJHSwkquWVs8U6bmn0DruNJ9JCU2HlZSpy+yDZ3rsuzUFz2ejJ70sSk7UnsL1gPk PWw66tXN+F+P3TVWPVIYxyTyf6gTciX8QVhxtxL6jWrfFpilXx1v06n81sX1lzB8 Ah1U/CPZhDPU4A== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:58 2026 by rpki-client