This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft File: ZfASDuO28PjbUtDbgcAeREfY5Lo.mft (raw, json) Hash identifier: K3nYSewX2m/xMby705d2KGGtpiF0hjotHyRLcaMyIGs= Subject key identifier: 90:0C:34:9A:57:54:94:13:81:29:F1:E2:CF:80:67:19:5E:68:51:3C Authority key identifier: 65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA Certificate issuer: /CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba Certificate serial: 019C4434965C4AB81EE44169A9559BB1A626 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 21:00:22 +0000 Manifest this update: Mon 09 Feb 2026 21:00:22 +0000 Manifest next update: Tue 10 Feb 2026 21:00:22 +0000 Files and hashes: 1: Tthj6IAisEXh8B7T83zOvQFpSgE.roa (hash: swp/iMSfoovOUEacEZNjOCFIiISihBeFVFi87XAxBPg=) 2: ZfASDuO28PjbUtDbgcAeREfY5Lo.crl (hash: 8176H/7K25LNrxi7K6UX1dN/vvv/BtoMgY9flRmWrKk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:96:5c:4a:b8:1e:e4:41:69:a9:55:9b:b1:a6:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65f0120ee3b6f0f8db52d0db81c01e4447d8e4ba Validity Not Before: Feb 9 21:00:22 2026 GMT Not After : Feb 10 21:00:22 2026 GMT Subject: CN=900c349a575494138129f1e2cf8067195e68513c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a8:d9:65:5f:1b:ae:3b:d5:d0:04:12:61:e2: 5e:03:0c:fe:84:2d:10:7c:2b:d0:3c:13:2b:8f:b2: 6b:df:e1:00:0d:30:7f:78:8a:20:e3:f0:2c:c7:8c: df:23:d9:c0:60:5b:b3:23:3f:eb:ea:ab:3f:e2:c6: e4:99:50:84:c9:d0:e9:4a:12:7d:87:b2:98:33:78: cd:c7:33:7e:09:84:61:f7:de:6b:3f:db:8d:b5:c5: 75:3a:19:fa:43:04:18:a8:80:aa:fb:45:68:57:03: 13:51:84:b0:68:32:6c:c8:f5:8e:43:90:08:ae:d5: ef:a8:a9:09:4a:70:aa:f5:c0:5e:91:cb:fd:58:ac: 23:05:28:5d:e6:ca:8e:38:48:27:d5:44:e3:90:97: 6a:ab:62:35:8f:6f:0d:77:d1:ea:93:d6:cc:40:6c: 69:a5:95:e1:1a:4c:2b:ba:39:f9:68:65:de:c2:d4: 18:5d:fd:d3:9c:b7:1e:d3:f5:59:36:a0:bd:00:f5: 6d:e5:77:02:ca:46:be:43:8f:4f:01:b7:98:e4:d4: 1d:64:5c:00:a0:16:f2:29:74:fb:2d:d3:4d:5d:27: 72:ae:97:78:41:d8:36:43:a9:73:58:bb:c8:27:73: 7e:2b:a1:fb:ac:6d:57:65:a3:dd:91:a6:61:49:d6: 7d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0C:34:9A:57:54:94:13:81:29:F1:E2:CF:80:67:19:5E:68:51:3C X509v3 Authority Key Identifier: keyid:65:F0:12:0E:E3:B6:F0:F8:DB:52:D0:DB:81:C0:1E:44:47:D8:E4:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfASDuO28PjbUtDbgcAeREfY5Lo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/d1418c-7cd8-4af9-8166-577c03910701/1/ZfASDuO28PjbUtDbgcAeREfY5Lo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:66:42:f7:a4:01:25:c4:14:bc:68:8b:f8:57:ee:5e:0e:5d: f4:d0:4b:9e:49:9b:6d:65:75:d9:09:22:8c:6f:a3:50:2b:ae: c2:a2:5b:94:24:96:ed:f8:4b:43:2a:9c:40:c1:ca:02:24:da: 25:85:25:e9:75:52:50:55:59:1c:f7:8d:b9:0f:e1:fc:78:cd: bd:ae:c0:83:38:69:41:d4:0d:c1:28:82:d5:dc:46:a2:f2:ea: e1:1b:4a:1e:cf:58:07:78:6e:ce:16:9d:4e:1f:b2:fd:92:ce: 6d:c3:dd:ad:ad:5a:04:c0:b3:38:b1:1d:ca:82:f1:96:da:71: e6:76:86:9e:e0:96:51:bf:72:e2:07:62:d4:ee:f9:af:2a:8e: 5d:a2:fb:2b:39:d0:f7:3e:99:f5:46:c6:34:f2:fb:01:a9:21: 81:a2:c6:3c:9e:1e:77:96:b4:81:da:28:7b:4f:6b:70:d6:e0: 93:72:47:b4:57:a5:01:ae:df:3e:94:72:45:d5:d3:96:64:72: fd:34:b5:6e:bc:88:46:b8:f6:75:9e:62:b4:6d:cf:78:05:25: 1b:aa:ff:b7:9c:42:ff:69:38:4f:e6:69:d2:c0:8e:97:25:a7: 5d:52:bf:23:4a:3b:dc:0b:d5:bd:cb:12:bf:21:84:79:18:d3: 5e:b9:49:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENJZcSrge5EFpqVWbsaYmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZjAxMjBlZTNiNmYwZjhkYjUyZDBkYjgxYzAxZTQ0NDdk OGU0YmEwHhcNMjYwMjA5MjEwMDIyWhcNMjYwMjEwMjEwMDIyWjAzMTEwLwYDVQQD Eyg5MDBjMzQ5YTU3NTQ5NDEzODEyOWYxZTJjZjgwNjcxOTVlNjg1MTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqjZZV8brjvV0AQSYeJeAwz+hC0Q fCvQPBMrj7Jr3+EADTB/eIog4/Asx4zfI9nAYFuzIz/r6qs/4sbkmVCEydDpShJ9 h7KYM3jNxzN+CYRh995rP9uNtcV1Ohn6QwQYqICq+0VoVwMTUYSwaDJsyPWOQ5AI rtXvqKkJSnCq9cBekcv9WKwjBShd5sqOOEgn1UTjkJdqq2I1j28Nd9Hqk9bMQGxp pZXhGkwrujn5aGXewtQYXf3TnLce0/VZNqC9APVt5XcCyka+Q49PAbeY5NQdZFwA oBbyKXT7LdNNXSdyrpd4Qdg2Q6lzWLvIJ3N+K6H7rG1XZaPdkaZhSdZ9nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAMNJpXVJQTgSnx4s+AZxleaFE8MB8GA1UdIwQY MBaAFGXwEg7jtvD421LQ24HAHkRH2OS6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYt NTc3YzAzOTEwNzAxLzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9kMTQxOGMtN2NkOC00YWY5LTgxNjYtNTc3YzAzOTEwNzAx LzEvWmZBU0R1TzI4UGpiVXREYmdjQWVSRWZZNUxvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVWZC96QB JcQUvGiL+FfuXg5d9NBLnkmbbWV12QkijG+jUCuuwqJblCSW7fhLQyqcQMHKAiTa JYUl6XVSUFVZHPeNuQ/h/HjNva7AgzhpQdQNwSiC1dxGovLq4RtKHs9YB3huzhad Th+y/ZLObcPdra1aBMCzOLEdyoLxltpx5naGnuCWUb9y4gdi1O75ryqOXaL7KznQ 9z6Z9UbGNPL7AakhgaLGPJ4ed5a0gdooe09rcNbgk3JHtFelAa7fPpRyRdXTlmRy /TS1bryIRrj2dZ5itG3PeAUlG6r/t5xC/2k4T+Zp0sCOlyWnXVK/I0o73AvVvcsS vyGEeRjTXrlJSw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:15 2026 by rpki-client