This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft File: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft (raw, json) Hash identifier: zCJ69AcU/xUWRKTiQQVLzV6+ENoRTy5R6fRZZMbfgrM= Subject key identifier: 35:03:54:93:D6:B2:B0:AD:9F:88:94:47:AF:F7:9E:47:0D:28:A2:8D Authority key identifier: CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19 Certificate issuer: /CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119 Certificate serial: 019C41A1EB5E3FBDBD28E47FF946131D8CAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft Manifest number: 07D9 Signing time: Mon 09 Feb 2026 09:00:56 +0000 Manifest this update: Mon 09 Feb 2026 09:00:56 +0000 Manifest next update: Tue 10 Feb 2026 09:00:56 +0000 Files and hashes: 1: rVO37CdUQiDsPnPUBWkJWEN8yHU.roa (hash: zSEofIQOLxbgh2NSVkGuDXmZbljjzQDcpH66ByIJTs4=) 2: zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl (hash: FO4qA9n+m2oA6BO2DmKbeIfAYZVL9YOmLWwVZmKJq7A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:eb:5e:3f:bd:bd:28:e4:7f:f9:46:13:1d:8c:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccaa8872c2b3f974c95168d214bfd57f0f9e9119 Validity Not Before: Feb 9 09:00:56 2026 GMT Not After : Feb 10 09:00:56 2026 GMT Subject: CN=35035493d6b2b0ad9f889447aff79e470d28a28d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:43:83:fe:83:af:f7:b9:4e:ac:25:d1:20:a2: df:a6:b0:29:77:a9:04:ed:b3:cd:47:61:b1:eb:da: 99:6f:61:68:03:aa:40:26:9b:43:d2:2d:a7:ea:4b: aa:d3:6a:7b:59:eb:aa:67:56:03:ce:7d:e8:2f:55: 08:90:50:34:29:0a:3e:61:b4:02:87:26:9c:0e:6f: 70:9e:c1:44:43:cc:ed:0f:2d:d8:6a:00:63:1c:32: 0a:65:4a:8c:5b:4a:ec:10:29:71:00:ae:0b:67:a1: 38:73:da:62:b8:13:ef:53:14:91:28:82:c8:da:4c: be:82:5d:f7:db:79:42:fc:98:0a:75:1c:19:ec:2b: 62:49:73:16:d7:e0:86:28:0e:29:9a:89:d6:83:4a: 24:0c:01:65:76:4b:34:9b:8c:81:14:16:a1:5f:a6: 43:23:2a:3d:74:11:7d:d0:66:cc:08:b1:59:3d:c7: 79:b8:7e:f3:a9:01:2b:4a:20:98:47:51:bf:05:13: c8:6e:bd:af:47:2e:10:6f:2e:d6:6f:ea:14:18:5c: e9:30:48:ea:b6:d7:04:87:9b:0a:9b:6a:57:ab:47: fb:5d:d3:5b:de:4f:97:3e:76:c0:4b:b1:18:2c:2c: 96:26:be:7a:7c:96:e4:04:2f:12:ac:07:8a:50:35: 2f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:03:54:93:D6:B2:B0:AD:9F:88:94:47:AF:F7:9E:47:0D:28:A2:8D X509v3 Authority Key Identifier: keyid:CC:AA:88:72:C2:B3:F9:74:C9:51:68:D2:14:BF:D5:7F:0F:9E:91:19 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/fa3c0f-c232-4644-b2f4-e04c58a41f66/1/zKqIcsKz-XTJUWjSFL_Vfw-ekRk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:b4:27:0b:5d:b5:14:2c:65:b4:5a:11:28:ba:41:72:d2:ae: c9:34:48:dc:19:fc:d8:5b:09:73:91:3c:27:05:92:ae:27:1e: 1c:68:6a:bc:8b:ab:1b:b1:d6:4c:4a:bd:37:b9:bd:77:13:45: f6:8c:f1:56:f0:86:33:af:d4:1a:73:bb:17:25:ca:52:b9:0c: 90:1c:08:9b:1d:ee:20:22:58:b7:a5:ab:3c:e3:e6:c7:ef:8f: 5b:4d:95:6d:3f:05:73:34:d9:db:13:19:59:14:24:14:81:a5: 7a:5f:ff:c3:65:50:93:3b:db:bc:06:fa:fc:65:76:3c:f7:28: cb:1c:be:3d:00:6c:90:8a:14:7a:6d:ba:c1:20:b8:f3:aa:0d: dd:23:56:bb:ff:94:b8:ef:0e:22:d4:b7:0f:99:aa:3b:5e:88: 2a:09:46:ff:78:f8:3c:68:77:04:83:4b:04:8b:12:bd:4d:e6: 64:63:cc:c9:ac:cf:b5:26:1a:da:0d:74:a8:7a:15:ef:f5:b6: c1:b2:66:ee:b0:ac:6d:c3:38:c2:d7:84:46:f9:3a:06:b8:bc: e4:8a:0d:d8:03:3b:99:86:9a:8c:b9:29:e9:d9:f9:10:e2:82: c2:c9:a3:6a:1b:89:10:36:4a:3b:0e:2a:0f:3f:3e:dd:31:b8: 48:62:75:8b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoeteP729KOR/+UYTHYytMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYWE4ODcyYzJiM2Y5NzRjOTUxNjhkMjE0YmZkNTdmMGY5 ZTkxMTkwHhcNMjYwMjA5MDkwMDU2WhcNMjYwMjEwMDkwMDU2WjAzMTEwLwYDVQQD EygzNTAzNTQ5M2Q2YjJiMGFkOWY4ODk0NDdhZmY3OWU0NzBkMjhhMjhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EOD/oOv97lOrCXRIKLfprApd6kE 7bPNR2Gx69qZb2FoA6pAJptD0i2n6kuq02p7WeuqZ1YDzn3oL1UIkFA0KQo+YbQC hyacDm9wnsFEQ8ztDy3YagBjHDIKZUqMW0rsEClxAK4LZ6E4c9piuBPvUxSRKILI 2ky+gl3323lC/JgKdRwZ7CtiSXMW1+CGKA4pmonWg0okDAFldks0m4yBFBahX6ZD Iyo9dBF90GbMCLFZPcd5uH7zqQErSiCYR1G/BRPIbr2vRy4Qby7Wb+oUGFzpMEjq ttcEh5sKm2pXq0f7XdNb3k+XPnbAS7EYLCyWJr56fJbkBC8SrAeKUDUv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUDVJPWsrCtn4iUR6/3nkcNKKKNMB8GA1UdIwQY MBaAFMyqiHLCs/l0yVFo0hS/1X8PnpEZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQt ZTA0YzU4YTQxZjY2LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC9mYTNjMGYtYzIzMi00NjQ0LWIyZjQtZTA0YzU4YTQxZjY2 LzEvektxSWNzS3otWFRKVVdqU0ZMX1Zmdy1la1JrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr7QnC121 FCxltFoRKLpBctKuyTRI3Bn82FsJc5E8JwWSriceHGhqvIurG7HWTEq9N7m9dxNF 9ozxVvCGM6/UGnO7FyXKUrkMkBwImx3uICJYt6WrPOPmx++PW02VbT8FczTZ2xMZ WRQkFIGlel//w2VQkzvbvAb6/GV2PPcoyxy+PQBskIoUem26wSC486oN3SNWu/+U uO8OItS3D5mqO16IKglG/3j4PGh3BINLBIsSvU3mZGPMyazPtSYa2g10qHoV7/W2 wbJm7rCsbcM4wteERvk6Bri85IoN2AM7mYaajLkp6dn5EOKCwsmjahuJEDZKOw4q Dz8+3TG4SGJ1iw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:34 2026 by rpki-client