This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft File: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft (raw, json) Hash identifier: hq9eyghMACWSPXJ/f+WyUxYSI5V3y1psF7S0CHpaD6M= Subject key identifier: 43:AD:C1:EF:F2:F3:C7:98:59:1C:31:E1:03:B3:E9:5C:24:9B:1C:8B Authority key identifier: 67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 Certificate issuer: /CN=67dbf31d597746c9a1434706062a40653bc545c3 Certificate serial: 019C42B4A01F9B63AEA62C5742184A57832D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft Manifest number: 03A6 Signing time: Mon 09 Feb 2026 14:00:59 +0000 Manifest this update: Mon 09 Feb 2026 14:00:59 +0000 Manifest next update: Tue 10 Feb 2026 14:00:59 +0000 Files and hashes: 1: Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl (hash: 7zWAxykbP17TpGugJqPN9eLvoQszbNxyr1spERhUn44=) 2: _7yKofbHnJoEbJpKfmaDh_UzpU4.roa (hash: SGPyBt5E90o9ZLuMZHW0/rutTar66Sv5UUe187RDyyg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:a0:1f:9b:63:ae:a6:2c:57:42:18:4a:57:83:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67dbf31d597746c9a1434706062a40653bc545c3 Validity Not Before: Feb 9 14:00:59 2026 GMT Not After : Feb 10 14:00:59 2026 GMT Subject: CN=43adc1eff2f3c798591c31e103b3e95c249b1c8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d6:34:e5:07:27:34:5c:77:a6:2b:b5:79:4d: 88:d3:4c:3e:5f:a9:95:13:a5:20:da:75:38:c3:34: 7c:ff:98:70:13:cc:ad:9f:c0:97:24:7c:b7:80:22: d7:77:ac:9f:ea:22:56:c3:a0:ca:ab:a9:7f:63:a4: 92:25:9a:22:77:1d:25:22:02:ea:3d:b4:fd:23:37: 8a:ce:47:04:62:a0:90:2c:44:30:ca:f1:20:09:04: d9:88:db:bb:1b:63:47:20:06:f5:70:29:f2:ca:62: 0d:98:c4:fb:7b:a3:bf:ef:da:a4:b8:18:f3:9f:90: bc:e8:5e:50:9c:52:83:82:76:82:61:1f:54:fc:e4: ad:89:3e:07:f6:56:00:3c:83:9a:1c:6c:09:4a:dd: f7:3e:13:3b:47:80:0c:aa:f2:a4:a3:f0:e5:76:96: 42:73:a7:10:8b:fe:2c:09:64:62:67:48:d3:ea:ff: 44:8e:8d:29:fc:72:67:de:f4:3e:e7:6d:59:eb:0d: c6:40:51:1c:d8:b7:2e:2e:1e:5e:cc:ef:19:27:cd: e4:bf:be:98:22:72:fd:d5:4e:90:3e:17:82:85:3c: c1:a1:37:73:50:a1:8e:38:55:c1:5b:d4:cb:c5:f3: d6:99:fe:24:c9:62:03:5c:69:70:19:63:21:fb:51: 5a:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:AD:C1:EF:F2:F3:C7:98:59:1C:31:E1:03:B3:E9:5C:24:9B:1C:8B X509v3 Authority Key Identifier: keyid:67:DB:F3:1D:59:77:46:C9:A1:43:47:06:06:2A:40:65:3B:C5:45:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/ecdb09-d786-429c-ab24-2fb3db14e7a1/1/Z9vzHVl3RsmhQ0cGBipAZTvFRcM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:49:59:69:b3:64:0c:9c:88:30:87:48:e7:a0:d7:98:a2:2a: 6a:c1:3f:60:c6:17:eb:e6:31:4d:16:28:07:c6:52:70:df:1a: 90:c9:55:cb:ec:22:b9:58:a0:1e:39:d1:71:dd:33:c3:b6:8c: 3f:e1:b0:97:e3:44:6e:11:f7:1b:b8:c9:b0:67:dd:e7:97:0d: 82:d8:10:14:30:e2:8d:88:62:60:ce:69:e4:f0:64:d8:5e:75: e8:60:c8:ce:3d:25:97:ab:3f:ea:50:1c:c5:39:19:84:3c:49: 62:f9:cd:d2:69:52:82:18:5d:54:ee:f2:fb:b4:38:dc:87:2a: 5e:ac:00:82:43:90:13:c2:b4:b4:12:c5:c8:3f:ff:6d:14:5b: 53:6a:8f:a9:36:e3:41:d9:1c:91:e4:f0:e6:90:b0:a0:ca:2d: 40:ea:49:60:4f:a3:f4:98:f2:b9:28:da:75:8e:45:de:49:d3: 37:25:59:ed:7b:c3:74:55:1b:0b:c8:e6:2c:17:66:45:89:61: 4c:82:9d:df:83:f7:a5:17:91:b1:07:c3:b3:98:b1:1f:de:8c: 5a:c5:ed:a3:68:2a:9e:e6:d7:6a:bc:91:48:21:33:ed:c5:0d: 7a:24:74:5c:00:a4:23:b0:16:1b:c5:eb:6e:f1:22:9f:82:d9: 89:d0:b5:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtKAfm2OupixXQhhKV4MtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZGJmMzFkNTk3NzQ2YzlhMTQzNDcwNjA2MmE0MDY1M2Jj NTQ1YzMwHhcNMjYwMjA5MTQwMDU5WhcNMjYwMjEwMTQwMDU5WjAzMTEwLwYDVQQD Eyg0M2FkYzFlZmYyZjNjNzk4NTkxYzMxZTEwM2IzZTk1YzI0OWIxYzhiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktY05QcnNFx3piu1eU2I00w+X6mV E6Ug2nU4wzR8/5hwE8ytn8CXJHy3gCLXd6yf6iJWw6DKq6l/Y6SSJZoidx0lIgLq PbT9IzeKzkcEYqCQLEQwyvEgCQTZiNu7G2NHIAb1cCnyymINmMT7e6O/79qkuBjz n5C86F5QnFKDgnaCYR9U/OStiT4H9lYAPIOaHGwJSt33PhM7R4AMqvKko/DldpZC c6cQi/4sCWRiZ0jT6v9Ejo0p/HJn3vQ+521Z6w3GQFEc2LcuLh5ezO8ZJ83kv76Y InL91U6QPheChTzBoTdzUKGOOFXBW9TLxfPWmf4kyWIDXGlwGWMh+1Fa6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOtwe/y88eYWRwx4QOz6VwkmxyLMB8GA1UdIwQY MBaAFGfb8x1Zd0bJoUNHBgYqQGU7xUXDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQt MmZiM2RiMTRlN2ExLzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9lY2RiMDktZDc4Ni00MjljLWFiMjQtMmZiM2RiMTRlN2Ex LzEvWjl2ekhWbDNSc21oUTBjR0JpcEFaVHZGUmNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFUlZabNk DJyIMIdI56DXmKIqasE/YMYX6+YxTRYoB8ZScN8akMlVy+wiuVigHjnRcd0zw7aM P+Gwl+NEbhH3G7jJsGfd55cNgtgQFDDijYhiYM5p5PBk2F516GDIzj0ll6s/6lAc xTkZhDxJYvnN0mlSghhdVO7y+7Q43IcqXqwAgkOQE8K0tBLFyD//bRRbU2qPqTbj QdkckeTw5pCwoMotQOpJYE+j9JjyuSjadY5F3knTNyVZ7XvDdFUbC8jmLBdmRYlh TIKd34P3pReRsQfDs5ixH96MWsXto2gqnubXaryRSCEz7cUNeiR0XACkI7AWG8Xr bvEin4LZidC1qw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:38 2026 by rpki-client