This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft File: Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft (raw, json) Hash identifier: DQeUuz3MqjP6jXvvTQ6dU+cwOTE8J6gLFzrJxUn53A0= Subject key identifier: E1:B0:3E:F1:0B:90:0A:34:55:55:11:33:66:BA:BC:AF:40:B3:29:D5 Authority key identifier: 67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 Certificate issuer: /CN=67800aba40639bf38d1eb6c9157b994f19323b13 Certificate serial: 019C42B4822E07F7B9AAFD46B257095093CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft Manifest number: 1620 Signing time: Mon 09 Feb 2026 14:00:51 +0000 Manifest this update: Mon 09 Feb 2026 14:00:51 +0000 Manifest next update: Tue 10 Feb 2026 14:00:51 +0000 Files and hashes: 1: Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl (hash: s3ovT1wgTiCxpyPQ1V8H3+fpM5q/27xkSuWQtoXI26M=) 2: edP4akUMA-KW5rz8mARn_FxYYuc.roa (hash: Bpp4EPAnJ50C+lo/0XnBwL4aQGBYEBIyI5OyCtU4jV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:82:2e:07:f7:b9:aa:fd:46:b2:57:09:50:93:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67800aba40639bf38d1eb6c9157b994f19323b13 Validity Not Before: Feb 9 14:00:51 2026 GMT Not After : Feb 10 14:00:51 2026 GMT Subject: CN=e1b03ef10b900a345555113366babcaf40b329d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5c:42:cd:c2:ea:85:1d:a6:29:6e:ce:19:f2: 5a:22:88:bc:16:61:50:d2:26:86:cd:00:07:a5:4c: a1:36:0d:62:b0:ab:bf:71:71:e0:f7:f2:c8:37:9d: 95:7d:10:a4:db:e0:11:45:db:0e:bd:93:4c:55:87: 17:6d:84:ed:b1:fd:1a:a7:4b:3d:d9:f7:d2:2b:7f: 26:1f:cd:1e:a2:f4:cb:fd:dc:2b:14:b5:62:5e:ae: d5:d4:cb:bb:87:98:20:a8:8a:17:28:bb:6f:f1:b0: 61:db:8a:64:fe:11:b4:14:1e:68:1f:1f:38:23:79: 96:6d:0a:7c:1c:6f:b9:51:07:e9:6d:85:d2:20:9c: 24:d6:e8:06:11:01:e6:38:2c:e1:5e:93:53:be:c6: 07:06:88:c2:4a:86:27:40:27:4f:3e:5a:41:c8:db: 2d:c9:2a:65:16:87:1d:d5:16:2c:31:e7:9f:45:e7: 02:14:7d:ae:95:71:f4:de:69:82:73:1e:3e:f6:64: f3:80:b9:7e:59:98:63:54:9a:02:d0:b9:50:03:f2: 4e:40:bf:27:50:ee:e7:5d:2e:5b:b8:b0:b2:8f:f4: eb:b3:8d:24:1e:a5:ab:fd:b4:0f:55:c3:a5:2d:4e: 98:da:b2:1a:65:a8:e5:63:93:96:4d:47:b6:8e:fb: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B0:3E:F1:0B:90:0A:34:55:55:11:33:66:BA:BC:AF:40:B3:29:D5 X509v3 Authority Key Identifier: keyid:67:80:0A:BA:40:63:9B:F3:8D:1E:B6:C9:15:7B:99:4F:19:32:3B:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4AKukBjm_ONHrbJFXuZTxkyOxM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3b54d2-783d-4d5b-891a-29262790409d/1/Z4AKukBjm_ONHrbJFXuZTxkyOxM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:14:74:13:ff:5c:0e:03:96:dd:58:7a:7d:4b:c6:81:1a:01: 7f:ff:19:70:f9:55:01:55:32:11:f1:25:7b:a8:bf:14:61:f2: cd:fc:c3:4b:7e:d0:c3:b5:e7:76:a0:32:b5:4d:d6:bf:26:f2: cf:29:f5:2c:ea:c7:91:65:ef:6b:d6:22:b4:d2:ae:87:f1:1c: 51:e8:ee:f8:76:3b:44:43:1a:20:ee:5b:29:82:9a:00:ef:0e: de:93:48:bd:a6:02:89:b3:cb:5f:54:d4:b4:8c:96:d7:54:da: 25:3e:cc:d0:d9:5d:65:e6:60:14:d1:a4:6a:46:ec:24:35:ee: 7a:a0:12:ae:5c:e4:00:1c:d0:66:31:a0:ba:18:f7:02:f3:f9: e5:0b:6e:4e:55:5c:9f:a6:6a:69:02:b8:d6:60:c0:59:d8:2c: 91:c2:32:a2:66:f1:08:ad:f4:80:59:3e:bf:66:96:ec:78:62: 11:0a:d4:e1:a5:13:58:65:ba:5d:7c:4c:c9:10:36:8e:2f:36: c9:ec:8e:b6:3d:e4:48:8f:fa:b0:28:b0:a2:50:14:75:6b:59: 4a:9f:97:47:2f:e2:9b:0d:9b:81:9f:f3:6b:06:71:51:15:b1: 09:27:56:da:cf:e1:35:1e:c0:56:21:89:ee:20:7f:7a:d9:06: 42:65:7c:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIIuB/e5qv1GslcJUJPNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODAwYWJhNDA2MzliZjM4ZDFlYjZjOTE1N2I5OTRmMTkz MjNiMTMwHhcNMjYwMjA5MTQwMDUxWhcNMjYwMjEwMTQwMDUxWjAzMTEwLwYDVQQD EyhlMWIwM2VmMTBiOTAwYTM0NTU1NTExMzM2NmJhYmNhZjQwYjMyOWQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1xCzcLqhR2mKW7OGfJaIoi8FmFQ 0iaGzQAHpUyhNg1isKu/cXHg9/LIN52VfRCk2+ARRdsOvZNMVYcXbYTtsf0ap0s9 2ffSK38mH80eovTL/dwrFLViXq7V1Mu7h5ggqIoXKLtv8bBh24pk/hG0FB5oHx84 I3mWbQp8HG+5UQfpbYXSIJwk1ugGEQHmOCzhXpNTvsYHBojCSoYnQCdPPlpByNst ySplFocd1RYsMeefRecCFH2ulXH03mmCcx4+9mTzgLl+WZhjVJoC0LlQA/JOQL8n UO7nXS5buLCyj/Trs40kHqWr/bQPVcOlLU6Y2rIaZajlY5OWTUe2jvvG/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGwPvELkAo0VVURM2a6vK9AsynVMB8GA1UdIwQY MBaAFGeACrpAY5vzjR62yRV7mU8ZMjsTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEt MjkyNjI3OTA0MDlkLzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOS8zYjU0ZDItNzgzZC00ZDViLTg5MWEtMjkyNjI3OTA0MDlk LzEvWjRBS3VrQmptX09OSHJiSkZYdVpUeGt5T3hNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXBR0E/9c DgOW3Vh6fUvGgRoBf/8ZcPlVAVUyEfEle6i/FGHyzfzDS37Qw7XndqAytU3Wvyby zyn1LOrHkWXva9YitNKuh/EcUeju+HY7REMaIO5bKYKaAO8O3pNIvaYCibPLX1TU tIyW11TaJT7M0NldZeZgFNGkakbsJDXueqASrlzkABzQZjGguhj3AvP55QtuTlVc n6ZqaQK41mDAWdgskcIyombxCK30gFk+v2aW7HhiEQrU4aUTWGW6XXxMyRA2ji82 yeyOtj3kSI/6sCiwolAUdWtZSp+XRy/imw2bgZ/zawZxURWxCSdW2s/hNR7AViGJ 7iB/etkGQmV8IQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:00 2026 by rpki-client