This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft File: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft (raw, json) Hash identifier: /4cYCxjFqNdDZ2/W5U0NA09vx8yCGW5E0tVRA3EAuwY= Subject key identifier: 72:C7:B0:BA:08:EF:34:5C:B5:F5:05:86:99:1C:BB:32:E4:7A:41:3C Authority key identifier: 66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01 Certificate issuer: /CN=66d9758b8c8c373583c0575166d62343600c7f01 Certificate serial: 019C41A2085A3A5FFA295B4A803E10FB4B09 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 09:01:03 +0000 Manifest this update: Mon 09 Feb 2026 09:01:03 +0000 Manifest next update: Tue 10 Feb 2026 09:01:03 +0000 Files and hashes: 1: HSWeI-pcXEHS_St9O3C8_Rn69wI.roa (hash: gjfAtgRKuT6ywaR0yaoqKznKuEzQl2e1Pp41NKZMoGQ=) 2: Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl (hash: HFX6Wax4BQtoHUlzk1Xb9HrExIzaARg1SBUQeFWhBnU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:08:5a:3a:5f:fa:29:5b:4a:80:3e:10:fb:4b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66d9758b8c8c373583c0575166d62343600c7f01 Validity Not Before: Feb 9 09:01:03 2026 GMT Not After : Feb 10 09:01:03 2026 GMT Subject: CN=72c7b0ba08ef345cb5f50586991cbb32e47a413c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ef:e7:c1:24:69:cb:61:13:7e:8b:2e:0a:f4: 16:ae:a9:fa:51:3e:86:81:25:98:7b:f0:8b:2d:0c: f1:00:43:b7:29:12:33:01:d8:d0:85:87:74:c8:f2: 0f:db:d3:97:fe:cc:40:ee:b2:06:9f:bf:d5:bb:b1: 20:9a:61:57:01:de:6c:bf:ad:ad:5c:a2:d4:39:5e: 03:f1:4e:9a:7e:f3:d0:2a:d3:90:19:67:7d:77:90: d0:13:9b:93:40:f0:49:01:54:5e:92:36:e2:fe:0a: ab:73:60:fb:6a:04:9b:95:ae:d8:67:0e:1f:e9:aa: 7c:c8:fa:98:01:c5:b9:a3:90:24:a2:79:4e:a6:fd: c9:2d:72:17:5b:5a:ff:bd:b3:48:58:e2:51:30:2e: bf:d4:30:19:97:4b:08:2f:96:a0:74:e2:fe:3b:12: aa:37:5a:9f:ba:cc:47:69:fc:82:b1:c2:15:d2:f3: d0:84:43:de:25:ce:78:16:58:0d:0f:4e:e5:9a:8c: a5:e2:d1:73:0a:d6:f8:e7:5e:60:79:29:52:49:3b: dc:99:b7:95:22:1e:19:35:c7:bb:fc:05:86:39:61: e3:25:26:89:6e:47:1d:f4:f3:d3:1d:d8:d9:61:cb: 8b:0d:eb:bb:b9:b5:24:fa:e0:c7:b9:18:93:8c:70: 83:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C7:B0:BA:08:EF:34:5C:B5:F5:05:86:99:1C:BB:32:E4:7A:41:3C X509v3 Authority Key Identifier: keyid:66:D9:75:8B:8C:8C:37:35:83:C0:57:51:66:D6:23:43:60:0C:7F:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/5d4d2f-ba18-4211-bc9b-ee8831924b32/1/Ztl1i4yMNzWDwFdRZtYjQ2AMfwE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6a:53:19:08:a8:03:57:28:18:b6:10:da:af:cc:c7:eb:24: f7:80:41:95:58:14:7c:de:99:16:56:cd:9f:74:b9:28:30:b3: 68:58:86:62:d1:1a:3a:0c:fe:1e:95:7d:aa:60:7d:74:13:fc: 02:a3:38:98:f7:d6:c3:37:58:f1:76:71:19:70:e1:90:5f:10: d1:11:ff:47:62:fd:cd:fb:d7:2a:aa:2d:d9:17:b9:fc:28:42: 36:21:ba:5d:93:1e:23:f9:3e:a1:ae:60:a6:d3:bd:5e:39:d1: 95:f0:06:b4:70:1d:24:d9:95:47:a1:55:04:5e:cc:ef:55:cf: 20:be:fb:79:02:fe:f2:4b:25:c0:46:e5:a6:9b:6f:ee:27:a4: b8:95:94:fe:c3:b8:54:8e:1c:5e:39:08:d9:89:c9:5b:92:7a: 1c:1d:88:de:bc:91:a2:c9:74:50:66:c0:47:fe:50:03:e7:29: 2a:6d:f9:a6:25:f4:52:96:f1:09:3f:63:23:d9:f5:c5:cc:af: e1:08:3d:8c:37:2f:aa:14:c3:40:81:fc:f8:9a:14:46:d5:dd: 07:d6:4e:f2:99:a4:1f:56:65:0c:9a:2f:bf:9a:f9:b1:e2:d0: a6:02:c7:65:d5:43:8a:18:61:92:d3:7a:71:66:4e:86:f7:74: 92:90:bb:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoghaOl/6KVtKgD4Q+0sJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZDk3NThiOGM4YzM3MzU4M2MwNTc1MTY2ZDYyMzQzNjAw YzdmMDEwHhcNMjYwMjA5MDkwMTAzWhcNMjYwMjEwMDkwMTAzWjAzMTEwLwYDVQQD Eyg3MmM3YjBiYTA4ZWYzNDVjYjVmNTA1ODY5OTFjYmIzMmU0N2E0MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2u/nwSRpy2ETfosuCvQWrqn6UT6G gSWYe/CLLQzxAEO3KRIzAdjQhYd0yPIP29OX/sxA7rIGn7/Vu7EgmmFXAd5sv62t XKLUOV4D8U6afvPQKtOQGWd9d5DQE5uTQPBJAVRekjbi/gqrc2D7agSbla7YZw4f 6ap8yPqYAcW5o5AkonlOpv3JLXIXW1r/vbNIWOJRMC6/1DAZl0sIL5agdOL+OxKq N1qfusxHafyCscIV0vPQhEPeJc54FlgND07lmoyl4tFzCtb4515geSlSSTvcmbeV Ih4ZNce7/AWGOWHjJSaJbkcd9PPTHdjZYcuLDeu7ubUk+uDHuRiTjHCDFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHLHsLoI7zRctfUFhpkcuzLkekE8MB8GA1UdIwQY MBaAFGbZdYuMjDc1g8BXUWbWI0NgDH8BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWIt ZWU4ODMxOTI0YjMyLzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi81ZDRkMmYtYmExOC00MjExLWJjOWItZWU4ODMxOTI0YjMy LzEvWnRsMWk0eU1OeldEd0ZkUlp0WWpRMkFNZndFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2pTGQio A1coGLYQ2q/Mx+sk94BBlVgUfN6ZFlbNn3S5KDCzaFiGYtEaOgz+HpV9qmB9dBP8 AqM4mPfWwzdY8XZxGXDhkF8Q0RH/R2L9zfvXKqot2Re5/ChCNiG6XZMeI/k+oa5g ptO9XjnRlfAGtHAdJNmVR6FVBF7M71XPIL77eQL+8kslwEblpptv7iekuJWU/sO4 VI4cXjkI2YnJW5J6HB2I3ryRosl0UGbAR/5QA+cpKm35piX0UpbxCT9jI9n1xcyv 4Qg9jDcvqhTDQIH8+JoURtXdB9ZO8pmkH1ZlDJovv5r5seLQpgLHZdVDihhhktN6 cWZOhvd0kpC72A== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:19 2026 by rpki-client