This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft File: ZnsrG--6F48w0qMhxFG27qVGYnQ.mft (raw, json) Hash identifier: f2hwizk8TdKCFA0tNaCzA6xSsNEG6iRLBGXaHacOMpU= Subject key identifier: 79:3A:BA:73:63:ED:C0:64:92:EB:25:8F:8B:67:FA:EC:F3:AC:F3:D2 Authority key identifier: 66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74 Certificate issuer: /CN=667b2b1befba178f30d2a321c451b6eea5466274 Certificate serial: 019C420F6615ED137B091A71DC3CF71987EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft Manifest number: 1123 Signing time: Mon 09 Feb 2026 11:00:31 +0000 Manifest this update: Mon 09 Feb 2026 11:00:31 +0000 Manifest next update: Tue 10 Feb 2026 11:00:31 +0000 Files and hashes: 1: ZnsrG--6F48w0qMhxFG27qVGYnQ.crl (hash: +EFfLPtLGuFViwwoNo+dXZPX2iH+5vOYPOS5jUdYGNo=) 2: pf_a0nfpbks_qkQ4qrr2kzaKRXI.roa (hash: vxuQLy7AbojQx6rQzhF+7IW/BG/BLw5H+3NoMpcGW1A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:66:15:ed:13:7b:09:1a:71:dc:3c:f7:19:87:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=667b2b1befba178f30d2a321c451b6eea5466274 Validity Not Before: Feb 9 11:00:31 2026 GMT Not After : Feb 10 11:00:31 2026 GMT Subject: CN=793aba7363edc06492eb258f8b67faecf3acf3d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:ff:ed:0b:b7:6f:0a:7f:29:df:9a:fb:5f: 9a:35:6e:41:e3:27:b9:26:bf:ee:2f:60:a2:03:13: 43:01:4a:48:4f:1c:3c:f7:03:c4:b1:c8:8a:3c:b5: 81:86:a4:14:98:dd:4b:ea:67:26:94:f5:8d:32:86: 07:67:02:8a:d5:24:f0:60:7e:79:eb:8d:b8:c1:50: e6:18:dd:56:83:ad:4d:86:fe:49:6a:0c:20:c0:cb: b2:5d:79:20:f9:57:79:7e:c1:3d:e1:b2:7c:31:6c: 15:47:01:7a:82:64:cc:71:90:58:ef:96:6c:ca:43: f3:0a:4d:2f:fb:51:b6:b8:8d:4f:7d:4e:bc:50:5c: 52:c6:f1:70:3a:38:41:8c:eb:2c:49:1f:01:d5:32: 77:e4:e4:5d:f2:55:ae:68:47:ca:cc:cd:08:ab:28: d3:99:78:f0:89:2c:ea:00:69:7e:b9:c9:df:93:12: db:61:ab:41:76:68:a9:2c:c1:2a:1f:ff:b7:ad:0c: 22:a2:38:a4:be:39:4e:b1:cc:20:61:cd:35:39:52: 58:74:ca:21:09:93:fb:61:70:72:56:46:e5:3c:b3: 21:5b:6c:52:a4:87:b6:f4:d3:23:44:70:f5:0d:27: 40:27:59:51:67:e7:6f:f5:ba:a4:88:29:ed:3f:bd: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:3A:BA:73:63:ED:C0:64:92:EB:25:8F:8B:67:FA:EC:F3:AC:F3:D2 X509v3 Authority Key Identifier: keyid:66:7B:2B:1B:EF:BA:17:8F:30:D2:A3:21:C4:51:B6:EE:A5:46:62:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnsrG--6F48w0qMhxFG27qVGYnQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/7d07ec-2e66-477a-93c6-f8bdd2d7927d/1/ZnsrG--6F48w0qMhxFG27qVGYnQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:9a:8d:b0:b5:e1:b6:8f:3e:70:68:0f:01:cb:8a:32:55:91: af:15:ff:3d:48:09:57:75:0d:31:a3:4b:5d:2a:a8:45:c3:65: 5c:da:5b:ba:39:e6:bf:a6:47:16:1c:8e:61:a9:01:09:08:3c: a9:b1:68:bd:e7:4f:f5:9f:98:41:8b:31:ac:96:e5:8e:8e:67: 7c:ff:27:2b:23:c4:0c:f9:54:79:4a:f5:ff:1e:52:bf:fe:4a: 28:cb:1f:df:ff:bb:6f:75:ee:3e:54:fe:ef:fe:d1:36:8e:ce: 42:9e:88:b4:41:47:d3:2f:04:40:cc:6d:f8:50:5c:91:9d:7c: 9f:d9:f8:b1:95:aa:eb:b7:4d:fe:cd:29:31:93:88:dc:f3:53: ad:6c:a7:6f:eb:45:66:7c:d0:bc:12:b7:6f:db:2a:82:bb:6f: 0d:4e:01:37:ba:a0:d1:e0:03:7e:e5:93:09:1a:3e:ef:37:ab: 3f:fa:48:f0:2a:e6:22:c3:eb:79:67:be:e7:06:7b:b4:91:cb: 24:63:c0:19:f6:30:14:90:6c:e2:3f:aa:bb:1e:13:ca:a2:8a: fd:bd:c6:33:33:8e:3b:80:8d:8c:0d:8e:2f:9d:62:f5:42:a9: eb:bb:77:bb:6b:b6:ba:d5:49:df:69:c4:03:1a:3f:d5:19:bd: 20:56:99:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD2YV7RN7CRpx3Dz3GYfqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2N2IyYjFiZWZiYTE3OGYzMGQyYTMyMWM0NTFiNmVlYTU0 NjYyNzQwHhcNMjYwMjA5MTEwMDMxWhcNMjYwMjEwMTEwMDMxWjAzMTEwLwYDVQQD Eyg3OTNhYmE3MzYzZWRjMDY0OTJlYjI1OGY4YjY3ZmFlY2YzYWNmM2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqD/7Qu3bwp/Kd+a+1+aNW5B4ye5 Jr/uL2CiAxNDAUpITxw89wPEsciKPLWBhqQUmN1L6mcmlPWNMoYHZwKK1STwYH55 6424wVDmGN1Wg61Nhv5JagwgwMuyXXkg+Vd5fsE94bJ8MWwVRwF6gmTMcZBY75Zs ykPzCk0v+1G2uI1PfU68UFxSxvFwOjhBjOssSR8B1TJ35ORd8lWuaEfKzM0IqyjT mXjwiSzqAGl+ucnfkxLbYatBdmipLMEqH/+3rQwiojikvjlOscwgYc01OVJYdMoh CZP7YXByVkblPLMhW2xSpIe29NMjRHD1DSdAJ1lRZ+dv9bqkiCntP70IswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk6unNj7cBkkuslj4tn+uzzrPPSMB8GA1UdIwQY MBaAFGZ7KxvvuhePMNKjIcRRtu6lRmJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYt ZjhiZGQyZDc5MjdkLzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC83ZDA3ZWMtMmU2Ni00NzdhLTkzYzYtZjhiZGQyZDc5Mjdk LzEvWm5zckctLTZGNDh3MHFNaHhGRzI3cVZHWW5RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdZqNsLXh to8+cGgPAcuKMlWRrxX/PUgJV3UNMaNLXSqoRcNlXNpbujnmv6ZHFhyOYakBCQg8 qbFovedP9Z+YQYsxrJbljo5nfP8nKyPEDPlUeUr1/x5Sv/5KKMsf3/+7b3XuPlT+ 7/7RNo7OQp6ItEFH0y8EQMxt+FBckZ18n9n4sZWq67dN/s0pMZOI3PNTrWynb+tF ZnzQvBK3b9sqgrtvDU4BN7qg0eADfuWTCRo+7zerP/pI8CrmIsPreWe+5wZ7tJHL JGPAGfYwFJBs4j+qux4TyqKK/b3GMzOOO4CNjA2OL51i9UKp67t3u2u2utVJ32nE Axo/1Rm9IFaZRw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:19 2026 by rpki-client