This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft File: zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft (raw, json) Hash identifier: JH1eT1k/wnoHEiLrgFCLjPwl7WPPQxETL8Vp8LyWpO0= Subject key identifier: 69:18:64:33:B2:7F:F3:4A:05:FD:4F:78:1B:C9:7E:53:0A:92:BF:2E Authority key identifier: CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 Certificate issuer: /CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Certificate serial: 019C42EB994D621DD4B66E6D5CB6935877D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 15:01:02 +0000 Manifest this update: Mon 09 Feb 2026 15:01:02 +0000 Manifest next update: Tue 10 Feb 2026 15:01:02 +0000 Files and hashes: 1: cFxRCCQN4YXEL_mFbkEo5k1pnIo.roa (hash: 3gOkanUhjfYhiX9/Lx+CjQ0DSnaWLj1dJ1oGqbwVrl8=) 2: zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl (hash: cl20QgI9QuMtdJJ6SCbq4Kpp5g2ngvhSTOwM/fDbVpg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:99:4d:62:1d:d4:b6:6e:6d:5c:b6:93:58:77:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc78bfceb41bafefc02f7952e1aa2480e986f037 Validity Not Before: Feb 9 15:01:02 2026 GMT Not After : Feb 10 15:01:02 2026 GMT Subject: CN=69186433b27ff34a05fd4f781bc97e530a92bf2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c4:14:19:4f:8b:79:32:35:bc:9a:73:41:a4: ca:b1:ad:f8:af:06:d1:cf:c1:cd:81:08:6f:6d:6e: 54:8f:a8:26:82:d2:f6:b3:5e:9e:7a:65:66:2f:a2: 78:ee:9d:39:85:70:c2:6e:16:d1:69:e2:85:d6:c1: e1:0c:56:61:7f:ef:03:44:d3:3b:07:8f:6f:4a:de: db:66:e9:d1:52:6f:fe:d6:08:83:9a:c8:c2:0a:64: 91:84:04:8b:f6:35:63:e9:2e:dc:7d:fa:03:71:fb: f3:48:94:cd:79:e2:77:c4:a1:0d:61:bc:c2:86:7d: 54:2b:5d:f4:c9:ed:45:9f:2a:b9:ca:ac:0d:33:06: c1:5a:11:f5:d5:fd:a5:c0:e3:62:c5:30:2b:06:48: c0:ee:3d:53:20:6f:29:4e:1f:1f:fd:01:e8:c5:18: 4b:aa:97:e9:bc:e1:b1:af:a6:f1:73:a5:78:49:3c: 63:26:5b:a9:c7:d8:53:3e:54:89:de:c6:b9:a1:8f: 5b:12:8c:af:39:e2:f4:14:93:40:92:d4:24:37:33: 51:fa:b4:3a:cb:15:9b:01:5c:34:8d:2d:d5:bf:ba: 63:48:ae:d1:24:d7:ee:80:4d:5c:39:be:a2:c8:b7: dc:47:37:b8:99:91:5c:c9:08:15:ce:32:8f:2a:55: e9:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:18:64:33:B2:7F:F3:4A:05:FD:4F:78:1B:C9:7E:53:0A:92:BF:2E X509v3 Authority Key Identifier: keyid:CC:78:BF:CE:B4:1B:AF:EF:C0:2F:79:52:E1:AA:24:80:E9:86:F0:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zHi_zrQbr-_AL3lS4aokgOmG8Dc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/215f47-1ce0-4ee5-aa4a-1272d2ab43d8/1/zHi_zrQbr-_AL3lS4aokgOmG8Dc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:73:f2:ba:2e:97:83:f7:04:a1:15:67:f3:1c:68:17:eb:07: 87:9e:cb:b5:b9:59:69:4b:4e:5c:bb:13:ca:67:d6:75:d0:a9: 68:66:cf:21:ff:74:fc:1c:38:cb:e0:02:b7:fa:d0:47:40:2b: 09:da:5a:cf:5a:cf:97:18:ff:86:4f:1d:f9:02:58:be:96:9d: e6:b1:cd:30:85:04:51:88:14:22:98:c9:36:70:77:d5:d5:d8: b2:da:e8:6d:92:a7:d6:e9:2c:e1:3d:58:6f:d6:a3:2a:57:a4: dd:41:f4:cf:a2:01:e5:57:1c:8d:b6:30:b5:0d:b5:71:42:46: a8:64:fa:8e:67:3b:b1:f5:50:97:49:e8:e2:9d:6f:8c:c1:fe: 3c:e0:9f:d1:5e:f8:ea:1c:ae:7a:21:1e:50:82:69:51:d3:78: 8f:0b:0c:b6:35:82:72:6e:ae:95:dd:8c:c3:d1:33:90:9a:64: d4:dc:67:cb:1b:13:dc:56:6f:a3:f1:b9:90:e9:66:0b:85:68: eb:84:88:a6:da:3d:16:e0:cd:a0:a4:2e:f4:7c:37:37:b3:3a: d1:24:c9:31:32:c3:56:26:01:73:d3:77:e5:ab:c8:b7:3f:0b: f7:bc:67:41:57:78:a4:a7:52:33:6b:be:49:33:12:92:f3:d9: 1c:e4:39:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC65lNYh3Utm5tXLaTWHfVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNzhiZmNlYjQxYmFmZWZjMDJmNzk1MmUxYWEyNDgwZTk4 NmYwMzcwHhcNMjYwMjA5MTUwMTAyWhcNMjYwMjEwMTUwMTAyWjAzMTEwLwYDVQQD Eyg2OTE4NjQzM2IyN2ZmMzRhMDVmZDRmNzgxYmM5N2U1MzBhOTJiZjJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusQUGU+LeTI1vJpzQaTKsa34rwbR z8HNgQhvbW5Uj6gmgtL2s16eemVmL6J47p05hXDCbhbRaeKF1sHhDFZhf+8DRNM7 B49vSt7bZunRUm/+1giDmsjCCmSRhASL9jVj6S7cffoDcfvzSJTNeeJ3xKENYbzC hn1UK130ye1Fnyq5yqwNMwbBWhH11f2lwONixTArBkjA7j1TIG8pTh8f/QHoxRhL qpfpvOGxr6bxc6V4STxjJlupx9hTPlSJ3sa5oY9bEoyvOeL0FJNAktQkNzNR+rQ6 yxWbAVw0jS3Vv7pjSK7RJNfugE1cOb6iyLfcRze4mZFcyQgVzjKPKlXpEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkYZDOyf/NKBf1PeBvJflMKkr8uMB8GA1UdIwQY MBaAFMx4v860G6/vwC95UuGqJIDphvA3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEt MTI3MmQyYWI0M2Q4LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMTVmNDctMWNlMC00ZWU1LWFhNGEtMTI3MmQyYWI0M2Q4 LzEvekhpX3pyUWJyLV9BTDNsUzRhb2tnT21HOERjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGnPyui6X g/cEoRVn8xxoF+sHh57LtblZaUtOXLsTymfWddCpaGbPIf90/Bw4y+ACt/rQR0Ar Cdpaz1rPlxj/hk8d+QJYvpad5rHNMIUEUYgUIpjJNnB31dXYstrobZKn1uks4T1Y b9ajKlek3UH0z6IB5VccjbYwtQ21cUJGqGT6jmc7sfVQl0no4p1vjMH+POCf0V74 6hyueiEeUIJpUdN4jwsMtjWCcm6uld2Mw9EzkJpk1NxnyxsT3FZvo/G5kOlmC4Vo 64SIpto9FuDNoKQu9Hw3N7M60STJMTLDViYBc9N35avItz8L97xnQVd4pKdSM2u+ STMSkvPZHOQ50g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:33 2026 by rpki-client