This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft File: z1PAwqcKnguguGDSKQTbsOkrkgs.mft (raw, json) Hash identifier: O6yHA6hRFEdnz33AHRuXdkO93It3lolazxBmSxW5qtE= Subject key identifier: 0E:E0:5A:D9:57:6B:C3:09:3B:6F:19:EA:05:EB:5F:48:E3:1F:39:B5 Authority key identifier: CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B Certificate issuer: /CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Certificate serial: 019C4321DA755F71641E559AD8F51D133D2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft Manifest number: 077F Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: _9WbrV_lxRO9A6dqxPijQXNV-ko.roa (hash: fEUSm2PwMNP9PK5a1HcBHHCSAECUxHIXVKYYdmBQe64=) 2: z1PAwqcKnguguGDSKQTbsOkrkgs.crl (hash: pVklURwhLWvv0antlOq1JR9newe0gkeNviuDoqbfY1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:da:75:5f:71:64:1e:55:9a:d8:f5:1d:13:3d:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf53c0c2a70a9e0ba0b860d22904dbb0e92b920b Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=0ee05ad9576bc3093b6f19ea05eb5f48e31f39b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:79:b4:73:f0:ab:49:6a:cf:55:dc:e3:e3:00: 92:e5:81:7e:11:f3:98:95:2e:61:ad:d6:6c:0c:56: 44:b0:8d:07:00:e1:ec:b6:4d:71:58:5c:94:9e:72: ae:1e:75:2c:74:6b:65:2f:94:65:61:81:dd:e4:50: c7:2d:6f:37:98:c9:d0:22:95:59:64:a6:49:09:18: 01:74:c2:bd:36:55:44:4c:bc:a1:73:26:97:7a:e5: cc:02:29:c2:28:fd:50:eb:df:fc:b2:42:04:97:78: 79:6f:64:90:31:65:e2:21:6d:55:dc:81:60:ce:9f: 4c:60:d4:69:f6:77:ad:0e:36:ed:4b:fc:e0:25:75: 1b:6e:80:ff:bc:e1:1a:0b:ee:1d:72:21:76:6b:59: be:8c:a2:59:56:63:36:e2:0a:bd:bf:3b:06:1f:f7: a1:71:c3:5a:27:a8:d8:fe:e1:ca:4c:04:a2:36:d4: 68:81:6e:c1:43:06:c5:4f:23:9d:a1:97:c7:9d:17: 7f:b8:98:c7:59:62:d7:ba:8e:57:67:d8:e9:0a:a8: 46:a1:c2:ba:1a:89:c3:85:00:41:bf:de:c7:ae:37: a3:76:53:fd:17:ac:6a:50:f7:14:20:46:61:36:62: ce:dc:90:42:6f:27:a9:a9:c0:e0:42:98:33:8a:92: 6a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:E0:5A:D9:57:6B:C3:09:3B:6F:19:EA:05:EB:5F:48:E3:1F:39:B5 X509v3 Authority Key Identifier: keyid:CF:53:C0:C2:A7:0A:9E:0B:A0:B8:60:D2:29:04:DB:B0:E9:2B:92:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z1PAwqcKnguguGDSKQTbsOkrkgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/bda7cc-645c-4821-ad22-3e44fcac3bc5/1/z1PAwqcKnguguGDSKQTbsOkrkgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:42:b9:26:43:9c:47:4a:90:f3:ef:bc:50:4f:38:6e:26:ca: 98:d5:14:f3:04:ee:85:3c:6e:ad:ab:8a:41:39:d5:72:68:53: 0f:69:be:cc:ee:97:19:44:cb:3f:90:0e:0b:af:34:64:c1:4a: e5:b1:c1:4d:fc:90:4a:55:0e:b8:84:3e:1a:01:ac:63:c9:1c: 6d:96:ed:2f:3e:68:bf:c1:81:86:ca:9e:9e:71:d4:ea:5d:56: 07:e7:dd:ea:d5:f1:c5:c6:60:bf:7f:e0:59:d6:ca:8c:86:90: 4c:f8:2a:74:88:6d:95:96:40:92:fe:c4:87:a3:8b:f3:75:ab: 77:13:52:a6:29:a8:d1:df:1d:6a:74:f5:f9:74:aa:81:7c:b4: d8:50:c3:f3:bf:58:19:17:31:de:90:bd:ad:66:02:c8:ba:31: 00:72:62:51:7f:54:e1:9a:b2:51:3c:15:87:80:98:06:d4:bf: 37:40:29:4b:17:ae:2e:2c:f7:98:3b:66:30:fd:35:90:b7:99: 5f:a6:67:88:23:c5:16:53:09:d3:a3:5f:fe:de:8f:79:3d:d9: b6:91:4a:f5:0e:30:28:74:7a:5d:cf:ea:e8:0f:c6:4e:9f:90: dd:a1:c6:9c:f9:12:ce:b4:41:c5:6b:c4:4c:54:8f:1f:64:3b: 19:fb:d7:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdp1X3FkHlWa2PUdEz0tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNTNjMGMyYTcwYTllMGJhMGI4NjBkMjI5MDRkYmIwZTky YjkyMGIwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD EygwZWUwNWFkOTU3NmJjMzA5M2I2ZjE5ZWEwNWViNWY0OGUzMWYzOWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHm0c/CrSWrPVdzj4wCS5YF+EfOY lS5hrdZsDFZEsI0HAOHstk1xWFyUnnKuHnUsdGtlL5RlYYHd5FDHLW83mMnQIpVZ ZKZJCRgBdMK9NlVETLyhcyaXeuXMAinCKP1Q69/8skIEl3h5b2SQMWXiIW1V3IFg zp9MYNRp9netDjbtS/zgJXUbboD/vOEaC+4dciF2a1m+jKJZVmM24gq9vzsGH/eh ccNaJ6jY/uHKTASiNtRogW7BQwbFTyOdoZfHnRd/uJjHWWLXuo5XZ9jpCqhGocK6 GonDhQBBv97HrjejdlP9F6xqUPcUIEZhNmLO3JBCbyepqcDgQpgzipJqeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA7gWtlXa8MJO28Z6gXrX0jjHzm1MB8GA1UdIwQY MBaAFM9TwMKnCp4LoLhg0ikE27DpK5ILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjIt M2U0NGZjYWMzYmM1LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9iZGE3Y2MtNjQ1Yy00ODIxLWFkMjItM2U0NGZjYWMzYmM1 LzEvejFQQXdxY0tuZ3VndUdEU0tRVGJzT2tya2dzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzUK5JkOc R0qQ8++8UE84bibKmNUU8wTuhTxurauKQTnVcmhTD2m+zO6XGUTLP5AOC680ZMFK 5bHBTfyQSlUOuIQ+GgGsY8kcbZbtLz5ov8GBhsqennHU6l1WB+fd6tXxxcZgv3/g WdbKjIaQTPgqdIhtlZZAkv7Eh6OL83WrdxNSpimo0d8danT1+XSqgXy02FDD879Y GRcx3pC9rWYCyLoxAHJiUX9U4ZqyUTwVh4CYBtS/N0ApSxeuLiz3mDtmMP01kLeZ X6ZniCPFFlMJ06Nf/t6PeT3ZtpFK9Q4wKHR6Xc/q6A/GTp+Q3aHGnPkSzrRBxWvE TFSPH2Q7GfvXzQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:55 2026 by rpki-client