This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft File: Zf_wATbIP1OjisPurJcQp5k2skw.mft (raw, json) Hash identifier: FJJIXRmwbgeheoQTCGXS0MCoilqTu28KX+iQKrTDJn4= Subject key identifier: 32:A8:D6:98:53:52:AF:CF:74:27:AC:BA:51:12:8B:03:AA:65:B9:0A Authority key identifier: 65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C Certificate issuer: /CN=65fff00136c83f53a38ac3eeac9710a79936b24c Certificate serial: 019C4390A4BD0D3EAB298FB98A309BAC6FD9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft Manifest number: 0708 Signing time: Mon 09 Feb 2026 18:01:18 +0000 Manifest this update: Mon 09 Feb 2026 18:01:18 +0000 Manifest next update: Tue 10 Feb 2026 18:01:18 +0000 Files and hashes: 1: Zf_wATbIP1OjisPurJcQp5k2skw.crl (hash: lDQCHZTRPvbmxMYBIFLP5a2lOVz/M3blzaTPyCY+uUc=) 2: gqWYwvqSEqDFNTUCcnGa5SDZF2E.roa (hash: jC0EOd0XvL5sRKBgmxuZafhPeS0sVcqw+4cs49iJ+mY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:a4:bd:0d:3e:ab:29:8f:b9:8a:30:9b:ac:6f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fff00136c83f53a38ac3eeac9710a79936b24c Validity Not Before: Feb 9 18:01:18 2026 GMT Not After : Feb 10 18:01:18 2026 GMT Subject: CN=32a8d6985352afcf7427acba51128b03aa65b90a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4a:a5:7d:48:40:a5:06:9d:61:f9:f7:87:e7: ee:55:c5:c6:cc:d1:0f:42:1d:97:c9:68:a1:85:94: fa:49:a1:f1:71:53:2e:f2:9a:8b:2d:bc:1c:c7:4b: b0:20:4c:ca:40:97:79:21:a4:77:96:89:4f:10:de: ee:55:2f:5e:e2:00:c4:f9:dc:89:51:70:82:75:3e: 7e:07:ed:c5:58:0a:fa:c0:7b:f9:06:1d:0d:23:f4: ee:60:6d:29:1c:5f:ee:73:9a:3c:74:02:90:ce:71: 36:4f:57:81:f3:ef:56:be:c7:3f:ac:00:91:b8:ae: e5:fd:43:6b:27:b1:25:fd:b4:2d:07:4c:59:cb:8b: 42:5c:51:a9:33:ae:c5:fa:f6:95:50:65:0c:84:d4: 01:33:60:5c:d8:af:bc:3f:36:4c:58:47:ad:f7:db: f7:38:ca:8b:e3:74:ae:3f:ed:4b:9c:74:17:f6:8f: 46:61:71:dd:8c:96:5b:78:31:77:2f:61:af:52:31: 8b:2c:8d:6d:a6:83:56:dc:f8:73:d6:e9:ff:d4:9f: 0d:02:a3:ff:c3:8d:da:80:3b:5b:cc:c2:7d:29:bd: 7f:3c:45:c0:d7:7b:11:aa:c2:7d:00:5d:b4:97:ee: 68:b2:8c:e1:e2:cf:b7:94:d5:5d:19:b0:44:b7:96: fe:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A8:D6:98:53:52:AF:CF:74:27:AC:BA:51:12:8B:03:AA:65:B9:0A X509v3 Authority Key Identifier: keyid:65:FF:F0:01:36:C8:3F:53:A3:8A:C3:EE:AC:97:10:A7:99:36:B2:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zf_wATbIP1OjisPurJcQp5k2skw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/02b357-abf7-408b-8b09-0d59d9d11505/1/Zf_wATbIP1OjisPurJcQp5k2skw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:ee:7f:b6:f0:3f:9f:41:2a:fc:60:eb:23:90:ff:0c:52:54: 87:87:7d:78:6a:56:d8:b4:8a:1d:5a:97:5e:33:69:44:00:ee: 7b:d1:c7:ee:87:b5:d6:d8:37:cc:c2:b5:94:19:a2:49:80:4d: 32:90:33:9d:c6:86:d5:66:a7:20:e4:b2:6b:6f:34:4f:75:a4: c0:a6:32:de:e1:7b:40:3a:57:de:ec:5b:de:03:45:a9:f8:99: 2e:2e:ec:70:33:df:f3:3a:c6:83:3b:43:46:0e:dc:85:f8:f6: 75:46:6e:60:4b:a4:10:78:ec:72:0b:4a:e8:fc:14:f6:c8:23: f2:4b:52:14:8a:22:53:5a:3c:49:31:a7:6b:7b:37:d1:8f:9a: 82:92:38:50:7b:67:08:51:0e:c2:d7:49:b8:44:2b:14:e6:4e: 67:b3:8a:34:78:2d:27:60:4c:6f:54:a3:68:11:42:20:46:d0: c3:77:0a:e7:bf:a4:2f:07:50:3f:4a:f0:e7:69:5a:db:00:d2: c2:e9:22:4a:87:40:11:5d:6e:a9:42:2d:2f:50:1b:3d:b7:44: 75:85:d6:23:9f:de:de:32:ed:b8:b4:a3:34:88:af:65:a5:d2: c7:87:f8:c4:dc:92:fd:7d:f8:65:a8:e2:3d:d4:eb:42:24:ae: 53:51:12:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkKS9DT6rKY+5ijCbrG/ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmZmMDAxMzZjODNmNTNhMzhhYzNlZWFjOTcxMGE3OTkz NmIyNGMwHhcNMjYwMjA5MTgwMTE4WhcNMjYwMjEwMTgwMTE4WjAzMTEwLwYDVQQD EygzMmE4ZDY5ODUzNTJhZmNmNzQyN2FjYmE1MTEyOGIwM2FhNjViOTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEqlfUhApQadYfn3h+fuVcXGzNEP Qh2XyWihhZT6SaHxcVMu8pqLLbwcx0uwIEzKQJd5IaR3lolPEN7uVS9e4gDE+dyJ UXCCdT5+B+3FWAr6wHv5Bh0NI/TuYG0pHF/uc5o8dAKQznE2T1eB8+9Wvsc/rACR uK7l/UNrJ7El/bQtB0xZy4tCXFGpM67F+vaVUGUMhNQBM2Bc2K+8PzZMWEet99v3 OMqL43SuP+1LnHQX9o9GYXHdjJZbeDF3L2GvUjGLLI1tpoNW3Phz1un/1J8NAqP/ w43agDtbzMJ9Kb1/PEXA13sRqsJ9AF20l+5osozh4s+3lNVdGbBEt5b+HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDKo1phTUq/PdCesulESiwOqZbkKMB8GA1UdIwQY MBaAFGX/8AE2yD9To4rD7qyXEKeZNrJMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDkt MGQ1OWQ5ZDExNTA1LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8wMmIzNTctYWJmNy00MDhiLThiMDktMGQ1OWQ5ZDExNTA1 LzEvWmZfd0FUYklQMU9qaXNQdXJKY1FwNWsyc2t3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGO5/tvA/ n0Eq/GDrI5D/DFJUh4d9eGpW2LSKHVqXXjNpRADue9HH7oe11tg3zMK1lBmiSYBN MpAzncaG1WanIOSya280T3WkwKYy3uF7QDpX3uxb3gNFqfiZLi7scDPf8zrGgztD Rg7chfj2dUZuYEukEHjscgtK6PwU9sgj8ktSFIoiU1o8STGna3s30Y+agpI4UHtn CFEOwtdJuEQrFOZOZ7OKNHgtJ2BMb1SjaBFCIEbQw3cK57+kLwdQP0rw52la2wDS wukiSodAEV1uqUItL1AbPbdEdYXWI5/e3jLtuLSjNIivZaXSx4f4xNyS/X34Zaji PdTrQiSuU1ESZw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:55 2026 by rpki-client