This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft File: M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft (raw, json) Hash identifier: Yi27E+HUeDT9tIP6Eanoi+wgK6D/zAGD+TusMj4yjX0= Subject key identifier: 89:98:BB:BB:64:C3:02:50:98:BF:FD:02:66:5F:2E:BB:E6:32:3A:0E Authority key identifier: 33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 Certificate issuer: /CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Certificate serial: 019C42B3F679AAEE24FBEBF6CF9AA3B24536 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 14:00:15 +0000 Manifest this update: Mon 09 Feb 2026 14:00:15 +0000 Manifest next update: Tue 10 Feb 2026 14:00:15 +0000 Files and hashes: 1: 9_MYsPE4gd2lbb7TZYORycFaWd0.roa (hash: dw91LpI/SCTexr9LU7pGF2p5zGloMmSS6LWqMDLhx9U=) 2: M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl (hash: fFfg8WtOo4Yty7CQ+shT4CEWDT9butTYLI87qCG8wFE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b3:f6:79:aa:ee:24:fb:eb:f6:cf:9a:a3:b2:45:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33f650c0a0f16515a72dea601ce9ca2d4c164993 Validity Not Before: Feb 9 14:00:15 2026 GMT Not After : Feb 10 14:00:15 2026 GMT Subject: CN=8998bbbb64c3025098bffd02665f2ebbe6323a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cc:53:5f:b1:5d:b6:c0:a1:f2:93:1d:73:83: ae:a6:7f:48:4a:ff:f5:4f:89:f1:b2:60:03:da:90: 64:2d:f3:f4:e4:0e:c4:9c:37:f0:ee:b3:e3:76:05: f1:b8:99:70:e4:24:64:4b:53:95:fb:ac:d4:9f:21: 4d:f7:8a:14:19:f0:be:c6:5f:1f:40:d0:f5:85:75: 98:ae:7a:0c:46:3c:79:b7:7e:63:b0:32:33:8a:00: 26:c9:88:65:22:5f:e1:e3:a4:87:45:56:3c:4a:7f: aa:b9:38:2b:ef:34:22:8c:52:c6:cd:ff:bb:5f:d1: f5:00:db:5e:76:90:56:24:11:26:16:b3:97:0d:65: d1:e4:56:8b:e5:8f:d8:a3:a1:cd:c1:9c:a8:c2:62: 5b:ea:93:54:ab:2a:51:53:c9:e3:66:d2:81:2d:6c: 91:c5:07:46:05:18:d9:d9:b7:4c:32:52:57:d1:1a: a9:8d:72:0b:cc:14:03:5c:18:57:34:44:ad:f5:d9: 11:c3:0f:1a:33:39:ea:68:3e:8b:29:3d:f6:b3:bb: fe:ee:9c:23:13:aa:b4:2b:af:e7:44:64:7d:e0:23: 13:66:82:f0:20:84:8f:6e:7b:6f:67:24:f6:68:04: c8:07:22:4b:23:26:10:c6:b1:44:79:c4:21:1a:3a: da:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:98:BB:BB:64:C3:02:50:98:BF:FD:02:66:5F:2E:BB:E6:32:3A:0E X509v3 Authority Key Identifier: keyid:33:F6:50:C0:A0:F1:65:15:A7:2D:EA:60:1C:E9:CA:2D:4C:16:49:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_ZQwKDxZRWnLepgHOnKLUwWSZM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/fe34d4-59b8-4324-ad27-85069125d3bf/1/M_ZQwKDxZRWnLepgHOnKLUwWSZM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1d:c3:e2:8e:5b:48:63:b0:1d:54:62:e3:2d:0f:8a:2b:d9: c0:cc:52:d3:b6:26:21:e3:7a:10:9d:81:ec:e2:d1:d7:ea:83: cc:d7:e7:9e:be:cd:68:97:6e:a0:6b:14:d0:c2:fb:76:31:f0: 6c:70:3e:82:cf:6d:9b:00:3c:da:a1:a6:72:4e:e3:08:f9:b2: f5:05:cd:67:f6:d8:02:df:72:11:91:8b:60:42:7d:69:fa:24: f0:fd:f7:f2:22:4b:5f:6c:7b:cb:03:93:49:e5:91:b0:8d:eb: af:ee:71:a3:a9:6c:52:39:3e:80:7f:04:e5:2e:b2:b9:87:88: 9f:28:bf:34:d1:f8:fd:85:55:02:cc:ca:c0:96:bf:91:f5:c3: 17:77:28:d0:fc:c8:ba:86:f4:19:e3:73:9c:50:18:55:62:64: a7:99:55:21:74:6e:2a:8d:4c:e7:37:ab:2b:56:93:21:7d:c6: 8c:fa:ae:fa:13:b6:a2:b0:6b:38:06:af:b3:7c:70:69:c2:4d: ee:30:c9:f9:4c:23:8f:c5:6e:db:5a:b4:a3:d7:f4:f4:2f:fa: cf:89:26:80:0b:ea:f4:09:f0:a3:8f:86:da:e7:93:97:89:25: 44:5f:32:82:82:98:34:b6:e4:56:44:96:cd:c1:11:e1:29:2b: de:0e:61:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCs/Z5qu4k++v2z5qjskU2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzZjY1MGMwYTBmMTY1MTVhNzJkZWE2MDFjZTljYTJkNGMx NjQ5OTMwHhcNMjYwMjA5MTQwMDE1WhcNMjYwMjEwMTQwMDE1WjAzMTEwLwYDVQQD Eyg4OTk4YmJiYjY0YzMwMjUwOThiZmZkMDI2NjVmMmViYmU2MzIzYTBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsxTX7FdtsCh8pMdc4Oupn9ISv/1 T4nxsmAD2pBkLfP05A7EnDfw7rPjdgXxuJlw5CRkS1OV+6zUnyFN94oUGfC+xl8f QND1hXWYrnoMRjx5t35jsDIzigAmyYhlIl/h46SHRVY8Sn+quTgr7zQijFLGzf+7 X9H1ANtedpBWJBEmFrOXDWXR5FaL5Y/Yo6HNwZyowmJb6pNUqypRU8njZtKBLWyR xQdGBRjZ2bdMMlJX0RqpjXILzBQDXBhXNESt9dkRww8aMznqaD6LKT32s7v+7pwj E6q0K6/nRGR94CMTZoLwIISPbntvZyT2aATIByJLIyYQxrFEecQhGjrakQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImYu7tkwwJQmL/9AmZfLrvmMjoOMB8GA1UdIwQY MBaAFDP2UMCg8WUVpy3qYBzpyi1MFkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjct ODUwNjkxMjVkM2JmLzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS9mZTM0ZDQtNTliOC00MzI0LWFkMjctODUwNjkxMjVkM2Jm LzEvTV9aUXdLRHhaUlduTGVwZ0hPbktMVXdXU1pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh3D4o5b SGOwHVRi4y0PiivZwMxS07YmIeN6EJ2B7OLR1+qDzNfnnr7NaJduoGsU0ML7djHw bHA+gs9tmwA82qGmck7jCPmy9QXNZ/bYAt9yEZGLYEJ9afok8P338iJLX2x7ywOT SeWRsI3rr+5xo6lsUjk+gH8E5S6yuYeInyi/NNH4/YVVAszKwJa/kfXDF3co0PzI uob0GeNznFAYVWJkp5lVIXRuKo1M5zerK1aTIX3GjPqu+hO2orBrOAavs3xwacJN 7jDJ+Uwjj8Vu21q0o9f09C/6z4kmgAvq9Anwo4+G2ueTl4klRF8ygoKYNLbkVkSW zcER4Skr3g5hag== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:01 2026 by rpki-client