This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft File: ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft (raw, json) Hash identifier: oHG9X2DhOqt1vwfsEI24fA8jKb9CcV9Hr/eszx0QQhA= Subject key identifier: 3D:B5:02:C5:2D:EF:70:B8:DF:A0:4E:43:3D:74:0B:20:6C:EF:24:5E Authority key identifier: CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 Certificate issuer: /CN=ce235c504019c504021e0662f70133b7ee733173 Certificate serial: 019C416ADADF11AB1814BE7150B071667BE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft Manifest number: 14D0 Signing time: Mon 09 Feb 2026 08:00:47 +0000 Manifest this update: Mon 09 Feb 2026 08:00:47 +0000 Manifest next update: Tue 10 Feb 2026 08:00:47 +0000 Files and hashes: 1: x9QsQ2MvWpON4kKDHpcRaSQsYcw.roa (hash: 4Sqz3nDe+SLiXa/m3KHMeflziRuyuGIJ470KTQ8nem4=) 2: ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl (hash: Qv5WTGJliLaXj77Maol7X/dGv6vqLPfizNVFSF5kdig=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 08:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:6a:da:df:11:ab:18:14:be:71:50:b0:71:66:7b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce235c504019c504021e0662f70133b7ee733173 Validity Not Before: Feb 9 08:00:47 2026 GMT Not After : Feb 10 08:00:47 2026 GMT Subject: CN=3db502c52def70b8dfa04e433d740b206cef245e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:d9:c5:c1:1b:ea:8c:a3:d1:a4:69:c8:97: f3:3d:96:2e:1f:08:51:87:01:d5:8e:ee:c5:95:2b: ef:c4:80:ab:04:9c:14:1c:9e:50:40:20:6e:9f:e6: 55:db:84:7e:01:1a:2a:1c:4d:33:12:a6:96:91:d4: 3a:61:6f:61:3f:18:ba:34:8a:69:30:d7:97:9a:cd: b2:0b:54:e9:68:56:9b:8d:b7:cf:98:16:cc:63:f3: e6:9e:42:c9:11:11:ca:a2:3e:2b:4e:97:ca:17:72: 4c:76:ef:b6:a3:00:e3:00:55:e0:f7:c9:22:9f:ab: ec:e9:a7:c0:43:8f:1e:34:fa:eb:b0:93:8e:33:d4: 38:6c:05:6a:e4:81:ce:6a:7f:6f:65:b9:b2:49:69: db:39:b5:bb:4a:7b:7f:93:62:de:4a:64:9c:2e:5d: 46:bc:48:37:61:1f:34:62:66:e0:f5:bc:62:14:86: de:9b:5a:59:79:96:2f:a9:84:b3:85:95:36:da:97: 4b:60:cc:63:e3:8b:2b:a5:f6:01:eb:26:3e:02:23: 4b:56:04:60:75:59:6d:80:ea:76:2a:50:c8:95:ce: c7:c2:83:e4:24:02:f1:ff:91:32:65:ed:b7:20:d6: 5a:67:40:ba:9f:cd:56:4b:1f:b2:7c:7a:0f:9f:48: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B5:02:C5:2D:EF:70:B8:DF:A0:4E:43:3D:74:0B:20:6C:EF:24:5E X509v3 Authority Key Identifier: keyid:CE:23:5C:50:40:19:C5:04:02:1E:06:62:F7:01:33:B7:EE:73:31:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziNcUEAZxQQCHgZi9wEzt-5zMXM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/391092-82f3-48bc-b426-fcc6d27f444f/1/ziNcUEAZxQQCHgZi9wEzt-5zMXM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:16:d3:d8:f3:ff:38:9f:51:91:a0:b7:43:f3:9c:7e:4b:e7: e8:5c:ab:c9:c0:56:2b:16:a6:73:8e:f6:3f:bc:10:40:ce:77: df:4d:50:03:72:88:75:66:00:02:98:bb:94:6b:14:eb:60:d2: 20:12:8d:d7:e5:13:c7:11:eb:85:53:16:b1:32:67:f1:e6:f2: 50:7b:01:5e:e4:27:90:d6:38:3e:c4:77:42:b9:9d:0b:ef:43: 9f:61:cb:47:78:2c:7c:52:be:35:b7:3c:3b:3c:9e:8a:f4:55: 03:a5:18:70:3d:ca:7b:e6:1a:d9:17:35:7a:90:bd:fb:aa:fa: 7a:ce:f5:4c:cf:71:7c:10:72:15:1b:5a:e8:bc:8c:e7:2c:07: 2c:5d:50:25:82:43:76:a1:4e:ad:be:6b:91:a4:46:ca:12:71: 46:78:3d:40:63:4b:32:4f:2a:da:f7:89:74:ad:ef:59:b0:e2: 34:bf:01:ac:c9:7c:6d:a9:0a:3b:99:5b:a5:bd:67:a0:e4:be: 01:4a:bd:fa:69:59:30:c1:fa:84:2c:df:bf:14:a1:1e:3e:76: 55:37:56:1d:7d:00:b5:1f:62:4b:fb:53:b9:09:dd:a4:f3:47: 23:f8:95:fa:5d:ea:fa:07:37:73:9d:06:1b:38:2d:1f:33:6f: b7:48:6f:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBatrfEasYFL5xULBxZnvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjM1YzUwNDAxOWM1MDQwMjFlMDY2MmY3MDEzM2I3ZWU3 MzMxNzMwHhcNMjYwMjA5MDgwMDQ3WhcNMjYwMjEwMDgwMDQ3WjAzMTEwLwYDVQQD EygzZGI1MDJjNTJkZWY3MGI4ZGZhMDRlNDMzZDc0MGIyMDZjZWYyNDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4rZxcEb6oyj0aRpyJfzPZYuHwhR hwHVju7FlSvvxICrBJwUHJ5QQCBun+ZV24R+ARoqHE0zEqaWkdQ6YW9hPxi6NIpp MNeXms2yC1TpaFabjbfPmBbMY/PmnkLJERHKoj4rTpfKF3JMdu+2owDjAFXg98ki n6vs6afAQ48eNPrrsJOOM9Q4bAVq5IHOan9vZbmySWnbObW7Snt/k2LeSmScLl1G vEg3YR80Ymbg9bxiFIbem1pZeZYvqYSzhZU22pdLYMxj44srpfYB6yY+AiNLVgRg dVltgOp2KlDIlc7HwoPkJALx/5EyZe23INZaZ0C6n81WSx+yfHoPn0h/cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD21AsUt73C436BOQz10CyBs7yReMB8GA1UdIwQY MBaAFM4jXFBAGcUEAh4GYvcBM7fuczFzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYt ZmNjNmQyN2Y0NDRmLzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMS8zOTEwOTItODJmMy00OGJjLWI0MjYtZmNjNmQyN2Y0NDRm LzEvemlOY1VFQVp4UVFDSGdaaTl3RXp0LTV6TVhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRbT2PP/ OJ9RkaC3Q/Ocfkvn6FyrycBWKxamc472P7wQQM53301QA3KIdWYAApi7lGsU62DS IBKN1+UTxxHrhVMWsTJn8ebyUHsBXuQnkNY4PsR3QrmdC+9Dn2HLR3gsfFK+Nbc8 OzyeivRVA6UYcD3Ke+Ya2Rc1epC9+6r6es71TM9xfBByFRta6LyM5ywHLF1QJYJD dqFOrb5rkaRGyhJxRng9QGNLMk8q2veJdK3vWbDiNL8BrMl8bakKO5lbpb1noOS+ AUq9+mlZMMH6hCzfvxShHj52VTdWHX0AtR9iS/tTuQndpPNHI/iV+l3q+gc3c50G GzgtHzNvt0hvHA== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:36 2026 by rpki-client