This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft File: ZbSNCjer_DS0HS0rroxoLtI-xCY.mft (raw, json) Hash identifier: 3E8tQ1E4tSrAOVRmcLtMhYeH4J3FqNxvSm8K9iNNG3c= Subject key identifier: 87:F6:D6:E0:5C:B1:C0:45:3C:73:AF:A3:12:A5:EC:67:CF:66:CB:0A Authority key identifier: 65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26 Certificate issuer: /CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426 Certificate serial: 019C43FE61EDEC517E3B1B0D88A6FB23A394 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft Manifest number: 1511 Signing time: Mon 09 Feb 2026 20:01:10 +0000 Manifest this update: Mon 09 Feb 2026 20:01:10 +0000 Manifest next update: Tue 10 Feb 2026 20:01:10 +0000 Files and hashes: 1: VxWfHatZSPjNCGQb391xfXyxZ3U.roa (hash: k4qh49pNo2b+6Z7ZcEp1/eu5zGES0cIQ64LIQKZCaxU=) 2: ZbSNCjer_DS0HS0rroxoLtI-xCY.crl (hash: QA4A+NbP0MWMSVXtTzVzTxARbQZ5/pkGrwmHGOLy9FA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:61:ed:ec:51:7e:3b:1b:0d:88:a6:fb:23:a3:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65b48d0a37abfc34b41d2d2bae8c682ed23ec426 Validity Not Before: Feb 9 20:01:10 2026 GMT Not After : Feb 10 20:01:10 2026 GMT Subject: CN=87f6d6e05cb1c0453c73afa312a5ec67cf66cb0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8a:2b:70:dd:22:05:9e:e6:25:ee:c6:5d:ee: 75:9d:cd:7e:0a:1d:b6:4d:65:d3:2c:72:c8:08:c2: 09:14:22:e6:83:2d:12:83:ee:62:ca:d0:f1:3f:ab: 47:4f:d2:f0:79:d3:4a:ef:53:ba:a7:a1:1e:90:7a: 3d:b0:63:28:32:e8:2f:65:8f:9d:8a:66:ee:ca:90: eb:46:40:67:e8:5e:28:8d:6d:32:56:9d:27:bd:a6: 80:75:6f:0a:b8:2f:8e:d4:99:dc:f9:c6:2a:bf:85: 1f:27:27:27:a3:91:06:a5:dd:19:b9:8e:f8:cb:fd: c9:70:7d:31:2a:8c:fc:ff:1a:7a:f7:fa:cb:e9:f6: 57:d5:fb:23:b4:1e:7a:8b:d7:5e:e1:33:ec:4b:6d: e8:5d:2e:19:80:a6:dd:09:b5:a0:24:c7:a2:00:b1: ec:ae:bf:e5:06:39:a7:53:c1:24:47:b8:5c:db:bd: 7e:06:16:22:52:48:c0:e4:e2:f2:54:cc:f1:4c:80: 7f:a5:3d:93:cd:db:66:0b:0a:7a:0c:56:e6:40:a9: ef:8c:d8:05:f3:14:6a:c7:39:ed:89:e4:e9:f7:b5: 3d:27:54:bc:34:ca:bb:d5:fc:99:a9:7b:16:1d:e1: 72:59:4b:b3:ad:67:13:da:00:54:ff:74:4e:d3:bf: 71:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F6:D6:E0:5C:B1:C0:45:3C:73:AF:A3:12:A5:EC:67:CF:66:CB:0A X509v3 Authority Key Identifier: keyid:65:B4:8D:0A:37:AB:FC:34:B4:1D:2D:2B:AE:8C:68:2E:D2:3E:C4:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZbSNCjer_DS0HS0rroxoLtI-xCY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/21b69a-a117-4b6d-86d5-9a15bc0d3988/1/ZbSNCjer_DS0HS0rroxoLtI-xCY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:21:95:f5:43:d9:e8:cb:47:fd:67:54:96:59:26:39:00:6a: 78:52:84:b1:d7:00:a9:6c:30:bb:07:60:cc:15:61:b8:8c:91: 1f:e5:94:48:c6:b5:fd:da:07:4a:18:be:43:3c:53:df:82:5a: fe:ae:99:7c:e1:71:ac:23:2e:c1:cb:84:b7:b0:c3:f2:d8:3f: ab:71:34:ab:a1:24:86:94:a5:76:3b:40:a5:60:a0:b2:5c:7e: 93:ab:64:73:01:16:d0:78:2c:53:2e:91:dd:13:4e:ee:73:28: a1:9b:e9:25:2d:63:4c:53:65:76:09:be:a5:82:56:1e:94:8a: 1c:10:04:12:61:cf:67:8e:3f:2a:b7:80:a5:fb:9e:75:ad:f3: 39:05:fc:4c:50:db:26:bf:d5:7c:f4:7e:34:0f:42:26:7d:fb: b7:63:6b:6d:4c:62:98:c2:67:f0:fc:7c:f3:72:9b:18:1c:ba: 1c:bf:15:f7:e4:7f:8b:d2:6a:52:1e:27:87:e7:20:66:dc:03: e1:16:3e:e6:5e:08:a6:71:e7:e7:f4:a7:9e:22:75:cb:95:2d: 0f:e0:b0:86:f6:4b:63:8e:2f:2c:b4:61:fb:59:74:1b:02:60: ff:ac:99:93:67:ff:41:0e:84:43:70:84:e3:e6:6a:ec:7a:29: 5d:b3:da:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/mHt7FF+OxsNiKb7I6OUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1YjQ4ZDBhMzdhYmZjMzRiNDFkMmQyYmFlOGM2ODJlZDIz ZWM0MjYwHhcNMjYwMjA5MjAwMTEwWhcNMjYwMjEwMjAwMTEwWjAzMTEwLwYDVQQD Eyg4N2Y2ZDZlMDVjYjFjMDQ1M2M3M2FmYTMxMmE1ZWM2N2NmNjZjYjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4orcN0iBZ7mJe7GXe51nc1+Ch22 TWXTLHLICMIJFCLmgy0Sg+5iytDxP6tHT9LwedNK71O6p6EekHo9sGMoMugvZY+d imbuypDrRkBn6F4ojW0yVp0nvaaAdW8KuC+O1Jnc+cYqv4UfJycno5EGpd0ZuY74 y/3JcH0xKoz8/xp69/rL6fZX1fsjtB56i9de4TPsS23oXS4ZgKbdCbWgJMeiALHs rr/lBjmnU8EkR7hc271+BhYiUkjA5OLyVMzxTIB/pT2TzdtmCwp6DFbmQKnvjNgF 8xRqxzntieTp97U9J1S8NMq71fyZqXsWHeFyWUuzrWcT2gBU/3RO079xwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIf21uBcscBFPHOvoxKl7GfPZssKMB8GA1UdIwQY MBaAFGW0jQo3q/w0tB0tK66MaC7SPsQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUt OWExNWJjMGQzOTg4LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8yMWI2OWEtYTExNy00YjZkLTg2ZDUtOWExNWJjMGQzOTg4 LzEvWmJTTkNqZXJfRFMwSFMwcnJveG9MdEkteENZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSGV9UPZ 6MtH/WdUllkmOQBqeFKEsdcAqWwwuwdgzBVhuIyRH+WUSMa1/doHShi+QzxT34Ja /q6ZfOFxrCMuwcuEt7DD8tg/q3E0q6EkhpSldjtApWCgslx+k6tkcwEW0HgsUy6R 3RNO7nMooZvpJS1jTFNldgm+pYJWHpSKHBAEEmHPZ44/KreApfueda3zOQX8TFDb Jr/VfPR+NA9CJn37t2NrbUximMJn8Px883KbGBy6HL8V9+R/i9JqUh4nh+cgZtwD 4RY+5l4IpnHn5/SnniJ1y5UtD+CwhvZLY44vLLRh+1l0GwJg/6yZk2f/QQ6EQ3CE 4+Zq7HopXbPaag== -----END CERTIFICATE-----Generated at Tue Feb 10 01:34:54 2026 by rpki-client