This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft File: zaiOm3q14yGxs_lXqboZdt1CW8M.mft (raw, json) Hash identifier: OXFP3wEvzsPrphPrbczM7zQbbbElOJESAw14Ob8t9s0= Subject key identifier: 3F:73:73:E0:67:F0:C1:5E:15:D4:82:C8:E5:8A:B7:38:0C:8A:B5:9D Authority key identifier: CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 Certificate issuer: /CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Certificate serial: 019C420F232D01795DA5B7298915886D7932 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft Manifest number: 057B Signing time: Mon 09 Feb 2026 11:00:14 +0000 Manifest this update: Mon 09 Feb 2026 11:00:14 +0000 Manifest next update: Tue 10 Feb 2026 11:00:14 +0000 Files and hashes: 1: iPcjCWb0-4ZbIqsq4siteUaH3Yo.roa (hash: JNPz+DPVRJ+TisUyQ98oWlbI8xfnbWF+8FcFXp7EsvY=) 2: zaiOm3q14yGxs_lXqboZdt1CW8M.crl (hash: 3pheQhcsKLqcyc9aZkVnawP+EzNjAG5ItVjcHRVkWeo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:23:2d:01:79:5d:a5:b7:29:89:15:88:6d:79:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda88e9b7ab5e321b1b3f957a9ba1976dd425bc3 Validity Not Before: Feb 9 11:00:14 2026 GMT Not After : Feb 10 11:00:14 2026 GMT Subject: CN=3f7373e067f0c15e15d482c8e58ab7380c8ab59d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c9:30:12:a5:d5:46:49:87:9f:bc:f3:3d:16: 96:19:4a:7b:34:6e:85:83:57:64:cd:0a:fd:7a:9c: 65:a0:46:9f:40:44:e8:6e:04:5f:c9:1d:58:0e:63: 76:63:03:ca:db:16:c6:15:0a:cf:de:ec:d9:d4:62: fe:52:11:74:c6:af:ea:a1:56:88:1f:f9:bd:6f:3a: 83:66:be:bc:0d:65:d6:07:7f:70:74:7b:68:39:97: 9a:a6:a5:6b:81:f8:4a:88:7a:04:67:2e:ac:66:01: 58:d8:9c:02:44:88:21:93:67:9d:a4:48:7d:aa:d1: b9:7f:9b:a5:af:ce:98:73:10:75:ec:18:a3:29:66: f5:c8:32:0e:9f:8f:92:52:33:21:93:3e:58:eb:1d: 40:4d:9f:9b:84:69:df:bd:31:e0:33:93:be:b6:63: d7:20:41:3a:2b:f6:38:b7:48:2c:6a:3e:00:bb:79: 85:8e:a6:ee:0d:76:5b:1d:95:96:24:65:f2:b1:d0: 6c:a7:18:81:53:06:13:40:10:42:25:4a:80:d9:49: 5f:d5:82:a9:23:a9:d8:79:be:d5:0f:c8:1d:df:7b: ae:f7:10:06:a9:57:ee:c8:5a:af:8e:28:8e:f5:79: d8:9f:16:ba:69:58:82:a0:4f:0f:4d:96:1d:21:24: cd:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:73:73:E0:67:F0:C1:5E:15:D4:82:C8:E5:8A:B7:38:0C:8A:B5:9D X509v3 Authority Key Identifier: keyid:CD:A8:8E:9B:7A:B5:E3:21:B1:B3:F9:57:A9:BA:19:76:DD:42:5B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaiOm3q14yGxs_lXqboZdt1CW8M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/faf1e3-3bbd-4788-bdf4-1c86e7d0f784/1/zaiOm3q14yGxs_lXqboZdt1CW8M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6f:d9:c2:5d:35:24:7e:34:96:96:6b:c6:8a:6b:fb:c1:a9: fd:c3:91:2c:2d:1c:c9:19:59:a7:81:ed:57:1f:63:7e:80:32: 71:3e:f0:8f:80:11:d1:4e:9f:6a:e4:ea:64:52:bb:f6:d8:16: e6:7a:53:81:3b:51:d5:86:51:b4:29:dc:78:fc:7b:b5:62:9f: 41:8f:a8:fb:9a:50:03:e1:bc:b1:2a:3c:d7:99:c1:b0:02:c8: 0c:33:d9:8d:1b:78:45:05:18:f7:d5:b2:8d:b9:14:9e:cc:4d: a7:21:49:24:dd:b8:65:14:cd:28:0d:c3:a0:ef:b8:07:e9:a9: c1:32:32:4a:e4:f9:09:60:52:62:b8:ff:8c:c3:34:47:69:84: c0:19:39:1f:15:00:55:fe:82:43:e9:a2:5b:70:74:e3:8a:42: b8:69:dd:df:c1:d0:8e:7e:33:b1:e4:2e:f3:46:27:eb:6d:c9: 17:76:67:d5:e8:82:ff:72:5c:d1:ff:0a:e0:76:30:98:c3:7f: 6f:84:a9:6d:57:1d:7e:d0:aa:0d:10:41:27:71:69:b7:ef:8e: 6f:0a:d1:88:b7:42:9e:97:07:d3:24:0f:53:d0:c5:67:26:60: 5d:8c:fc:47:14:57:bf:1e:b1:e2:94:20:f5:c1:09:7c:d5:ba: a0:6b:53:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDyMtAXldpbcpiRWIbXkyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTg4ZTliN2FiNWUzMjFiMWIzZjk1N2E5YmExOTc2ZGQ0 MjViYzMwHhcNMjYwMjA5MTEwMDE0WhcNMjYwMjEwMTEwMDE0WjAzMTEwLwYDVQQD EygzZjczNzNlMDY3ZjBjMTVlMTVkNDgyYzhlNThhYjczODBjOGFiNTlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsckwEqXVRkmHn7zzPRaWGUp7NG6F g1dkzQr9epxloEafQETobgRfyR1YDmN2YwPK2xbGFQrP3uzZ1GL+UhF0xq/qoVaI H/m9bzqDZr68DWXWB39wdHtoOZeapqVrgfhKiHoEZy6sZgFY2JwCRIghk2edpEh9 qtG5f5ulr86YcxB17BijKWb1yDIOn4+SUjMhkz5Y6x1ATZ+bhGnfvTHgM5O+tmPX IEE6K/Y4t0gsaj4Au3mFjqbuDXZbHZWWJGXysdBspxiBUwYTQBBCJUqA2Ulf1YKp I6nYeb7VD8gd33uu9xAGqVfuyFqvjiiO9XnYnxa6aViCoE8PTZYdISTNcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9zc+Bn8MFeFdSCyOWKtzgMirWdMB8GA1UdIwQY MBaAFM2ojpt6teMhsbP5V6m6GXbdQlvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQt MWM4NmU3ZDBmNzg0LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC9mYWYxZTMtM2JiZC00Nzg4LWJkZjQtMWM4NmU3ZDBmNzg0 LzEvemFpT20zcTE0eUd4c19sWHFib1pkdDFDVzhNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWm/Zwl01 JH40lpZrxopr+8Gp/cORLC0cyRlZp4HtVx9jfoAycT7wj4AR0U6fauTqZFK79tgW 5npTgTtR1YZRtCncePx7tWKfQY+o+5pQA+G8sSo815nBsALIDDPZjRt4RQUY99Wy jbkUnsxNpyFJJN24ZRTNKA3DoO+4B+mpwTIySuT5CWBSYrj/jMM0R2mEwBk5HxUA Vf6CQ+miW3B044pCuGnd38HQjn4zseQu80Yn623JF3Zn1eiC/3Jc0f8K4HYwmMN/ b4SpbVcdftCqDRBBJ3Fpt++ObwrRiLdCnpcH0yQPU9DFZyZgXYz8RxRXvx6x4pQg 9cEJfNW6oGtTkA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:36 2026 by rpki-client