This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft File: zfaOwSf7MsZ5IYr8duG26qWVIbs.mft (raw, json) Hash identifier: pJ0XmkpIx24awQUXm0ZMpvBLfJM+7DCe5WaDbITVjbk= Subject key identifier: 79:2D:45:51:7B:38:8E:6C:F1:71:75:3F:14:52:45:90:DE:07:11:E7 Authority key identifier: CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB Certificate issuer: /CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Certificate serial: 019C4358EE2EC4DDF23A9CDC5AE4E0A6ECFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 17:00:27 +0000 Manifest this update: Mon 09 Feb 2026 17:00:27 +0000 Manifest next update: Tue 10 Feb 2026 17:00:27 +0000 Files and hashes: 1: Ui7fU_ExtBQjRDUB3fQ-b_PpUpk.roa (hash: k7V6RcZgsQ7uAKSC8Cpi5tMaIoKJRCG66jYZCk0ZWm8=) 2: zfaOwSf7MsZ5IYr8duG26qWVIbs.crl (hash: C8TAXkDOhN+vSr0kRjm9NdKfpcArdmdZVDhKTffcpTU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:ee:2e:c4:dd:f2:3a:9c:dc:5a:e4:e0:a6:ec:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdf68ec127fb32c679218afc76e1b6eaa59521bb Validity Not Before: Feb 9 17:00:27 2026 GMT Not After : Feb 10 17:00:27 2026 GMT Subject: CN=792d45517b388e6cf171753f14524590de0711e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:dc:34:45:99:f5:e9:30:64:d6:0c:27:61:d7: c0:98:4a:ec:1f:48:c1:77:2b:97:9d:02:d2:67:4b: 7d:47:5f:ed:bc:2c:88:73:0d:ee:46:75:2c:3e:67: 66:6a:e6:e2:24:9f:ae:de:12:a9:92:24:40:d3:2b: 4d:fc:e7:db:ee:87:76:cc:b5:28:d2:e9:a9:dc:4f: 97:b6:17:e6:c2:7c:27:95:53:a2:8f:ec:65:f6:d1: c2:1c:28:62:81:74:1c:af:35:bf:5d:cc:2e:61:57: fa:7e:cf:4b:a9:a3:e1:d3:78:af:cf:ca:15:42:ca: f0:b1:f9:15:25:20:72:c2:30:d0:49:a0:92:37:47: 5c:f1:93:8a:46:83:db:ef:4b:62:38:0e:77:13:91: 2a:dc:ac:59:c6:76:a8:3c:93:84:c3:3a:ee:6c:ba: ea:38:97:92:63:43:bd:35:20:ec:e7:9a:3e:6f:f2: a4:92:25:e7:8d:e0:8c:c5:9a:a4:c5:2a:01:60:b4: 62:7c:b5:1c:fc:f4:e8:f3:7c:88:d4:7f:40:59:96: 07:0b:0e:60:0a:72:97:5c:b4:79:1d:2b:aa:d5:34: 44:2d:70:ee:a0:76:af:90:4d:29:93:a1:fb:11:64: f7:a1:31:e1:ac:bd:55:4b:c9:93:ed:f9:77:f5:7e: 5a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:2D:45:51:7B:38:8E:6C:F1:71:75:3F:14:52:45:90:DE:07:11:E7 X509v3 Authority Key Identifier: keyid:CD:F6:8E:C1:27:FB:32:C6:79:21:8A:FC:76:E1:B6:EA:A5:95:21:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zfaOwSf7MsZ5IYr8duG26qWVIbs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/08377f-f232-44b0-a3b5-98246a4cb6f8/1/zfaOwSf7MsZ5IYr8duG26qWVIbs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:35:f4:34:95:b1:b5:fc:29:40:63:00:27:10:ef:c0:dd:eb: e2:2e:77:9a:84:45:90:3a:cd:63:43:0d:95:77:74:78:5b:af: 09:5b:ab:ad:91:86:0a:1c:73:0d:92:22:7f:72:53:2b:d4:75: f7:f0:50:96:58:75:6e:6c:f8:8b:dd:3f:df:f8:3f:08:02:2d: e9:ff:08:2f:8f:f2:ce:75:87:bb:63:be:85:b7:80:db:47:64: a5:dd:1d:ad:e3:14:41:33:9d:1c:30:14:74:ff:70:d2:a4:ee: 86:60:a9:3a:77:17:66:0f:c8:a7:50:8a:80:d2:6c:1c:f3:53: 84:cf:01:b0:09:e5:e4:52:3d:f2:dd:40:80:52:65:b6:7f:3c: f4:fb:48:49:e7:5e:d0:45:2c:ea:d1:97:bd:33:98:63:e7:e9: 94:e3:3b:45:29:c4:ec:86:73:77:c6:0b:56:09:a9:39:a6:b9: 25:30:c4:50:1e:3d:2a:58:71:f1:00:db:f4:97:44:51:85:cf: 5a:c3:7f:96:4c:9a:0e:0e:71:47:86:b0:b9:e4:13:e0:cd:9c: e5:3a:a2:3e:cd:1f:85:67:06:5c:54:21:04:c8:ba:d4:70:f0: 67:7a:0b:95:da:3f:91:26:99:af:48:17:a5:29:25:67:83:0e: 5e:d5:ec:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWO4uxN3yOpzcWuTgpuz8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZjY4ZWMxMjdmYjMyYzY3OTIxOGFmYzc2ZTFiNmVhYTU5 NTIxYmIwHhcNMjYwMjA5MTcwMDI3WhcNMjYwMjEwMTcwMDI3WjAzMTEwLwYDVQQD Eyg3OTJkNDU1MTdiMzg4ZTZjZjE3MTc1M2YxNDUyNDU5MGRlMDcxMWU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutw0RZn16TBk1gwnYdfAmErsH0jB dyuXnQLSZ0t9R1/tvCyIcw3uRnUsPmdmaubiJJ+u3hKpkiRA0ytN/Ofb7od2zLUo 0ump3E+XthfmwnwnlVOij+xl9tHCHChigXQcrzW/XcwuYVf6fs9LqaPh03ivz8oV QsrwsfkVJSBywjDQSaCSN0dc8ZOKRoPb70tiOA53E5Eq3KxZxnaoPJOEwzrubLrq OJeSY0O9NSDs55o+b/KkkiXnjeCMxZqkxSoBYLRifLUc/PTo83yI1H9AWZYHCw5g CnKXXLR5HSuq1TRELXDuoHavkE0pk6H7EWT3oTHhrL1VS8mT7fl39X5akQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHktRVF7OI5s8XF1PxRSRZDeBxHnMB8GA1UdIwQY MBaAFM32jsEn+zLGeSGK/HbhtuqllSG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUt OTgyNDZhNGNiNmY4LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYS8wODM3N2YtZjIzMi00NGIwLWEzYjUtOTgyNDZhNGNiNmY4 LzEvemZhT3dTZjdNc1o1SVlyOGR1RzI2cVdWSWJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTX0NJWx tfwpQGMAJxDvwN3r4i53moRFkDrNY0MNlXd0eFuvCVurrZGGChxzDZIif3JTK9R1 9/BQllh1bmz4i90/3/g/CAIt6f8IL4/yznWHu2O+hbeA20dkpd0dreMUQTOdHDAU dP9w0qTuhmCpOncXZg/Ip1CKgNJsHPNThM8BsAnl5FI98t1AgFJltn889PtISede 0EUs6tGXvTOYY+fplOM7RSnE7IZzd8YLVgmpOaa5JTDEUB49Klhx8QDb9JdEUYXP WsN/lkyaDg5xR4awueQT4M2c5TqiPs0fhWcGXFQhBMi61HDwZ3oLldo/kSaZr0gX pSklZ4MOXtXs+A== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:26 2026 by rpki-client