This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft File: zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft (raw, json) Hash identifier: cmYLWp3jP+tsUXzB1fPf2WFo7z01IPozLMDNb1hqjs8= Subject key identifier: C0:C1:A1:01:1E:85:4A:B9:E4:DA:19:16:90:DF:0E:C8:5A:32:29:76 Authority key identifier: CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1 Certificate issuer: /CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1 Certificate serial: 019C43907EA2D219FEB5679DDAFC9840C6A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft Manifest number: 1164 Signing time: Mon 09 Feb 2026 18:01:08 +0000 Manifest this update: Mon 09 Feb 2026 18:01:08 +0000 Manifest next update: Tue 10 Feb 2026 18:01:08 +0000 Files and hashes: 1: z0HMvI8Tn4kNW4qTvegWr7zZfkQ.roa (hash: gn2Rwh38asVwA7jLccAuFqntHaZG2BuAuv36mcj+c3Q=) 2: zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl (hash: N3ZqEPmMeVzngJbKBYy3Ub23idwqXp23fjJDY87LxCs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:7e:a2:d2:19:fe:b5:67:9d:da:fc:98:40:c6:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce8e9be248c741ba6a26ac8cfe2c2bb7c2d7a3b1 Validity Not Before: Feb 9 18:01:08 2026 GMT Not After : Feb 10 18:01:08 2026 GMT Subject: CN=c0c1a1011e854ab9e4da191690df0ec85a322976 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:37:78:cf:08:74:6a:2f:df:25:4e:e1:a2: 07:f6:6f:ae:d0:64:04:d5:df:69:6b:ff:48:48:0b: 6b:23:e9:68:e3:16:1a:b3:7a:7b:c4:d9:ef:b4:ce: 10:15:4b:0a:bd:86:41:2b:37:75:38:b9:5c:6c:22: dd:5d:97:ca:63:aa:ba:93:dc:19:91:e7:b1:95:87: 2b:dd:9a:fd:02:6c:f4:dd:b2:93:e0:a6:35:74:2c: ea:0e:49:df:50:3b:f2:62:72:34:e6:00:86:3f:35: c8:d7:4a:1d:b8:7f:5a:73:97:5a:62:e5:19:17:44: 69:28:3e:96:84:9e:9f:dd:1a:57:e6:f9:ea:1c:e8: 9c:6c:7c:e2:2b:94:5e:c9:1f:5f:3a:90:9f:ef:30: 85:f7:b9:f5:54:a1:53:c0:02:5f:57:d5:88:4f:9d: 45:d1:32:cc:2d:16:d3:3a:57:40:19:f2:5f:39:20: bf:b4:4f:a7:5a:f9:3b:2f:d9:c7:ef:ff:64:63:15: 79:5f:4c:a4:1e:c8:3a:d7:0d:30:9d:28:93:93:59: 07:c5:3e:54:26:f4:b1:25:cc:7c:79:b8:aa:c7:85: 4f:c1:1d:23:c0:8a:89:06:44:e1:87:a5:79:1e:65: b6:57:3d:c1:b3:9b:c9:14:f7:b7:42:1d:63:c4:38: 4a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:C1:A1:01:1E:85:4A:B9:E4:DA:19:16:90:DF:0E:C8:5A:32:29:76 X509v3 Authority Key Identifier: keyid:CE:8E:9B:E2:48:C7:41:BA:6A:26:AC:8C:FE:2C:2B:B7:C2:D7:A3:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zo6b4kjHQbpqJqyM_iwrt8LXo7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2860c9-ab5f-4440-8312-9fb8e2545d73/1/zo6b4kjHQbpqJqyM_iwrt8LXo7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:75:1d:0b:eb:3c:4f:b1:1f:e9:e2:24:7b:f1:21:c9:e5:cf: d8:f9:4e:0a:58:86:9c:12:ec:c0:bb:43:dd:9a:97:fb:8b:df: 41:eb:cb:05:69:cf:95:49:63:1c:d6:1f:2d:bc:24:bc:1c:4d: 3c:c1:7f:52:f9:38:53:c9:e7:74:46:7e:fa:95:56:90:b7:76: 78:5c:ea:78:6c:b8:bb:0e:0f:af:37:7c:25:af:e6:ee:ff:96: f2:0e:6f:0d:17:89:fa:aa:c0:eb:6b:41:96:d7:4d:66:c4:5f: 54:2b:ff:8c:93:2b:81:18:12:ce:44:58:c3:89:55:5d:eb:e5: 77:b4:54:fd:a6:fc:82:7c:8a:e4:69:3c:20:42:db:f1:20:74: 37:2e:f0:62:1d:bb:9c:8f:6d:2c:84:90:1f:d6:c3:dc:63:31: b9:f5:61:3d:93:48:09:2e:96:48:30:c0:17:05:00:ef:5f:81: 38:97:56:c8:51:77:20:6f:a9:70:7c:dd:b1:a0:c6:18:43:75: 7f:65:63:5a:db:60:54:ed:e8:ef:dd:bc:43:fd:2f:51:7c:f8: cb:f8:81:3d:fc:d5:2f:73:79:0c:b6:22:dd:59:cd:f4:86:bd: 23:a7:d5:9c:f2:09:e9:25:a3:d4:d2:7b:fe:2b:e7:7b:40:44: d8:57:36:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkH6i0hn+tWed2vyYQMapMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlOGU5YmUyNDhjNzQxYmE2YTI2YWM4Y2ZlMmMyYmI3YzJk N2EzYjEwHhcNMjYwMjA5MTgwMTA4WhcNMjYwMjEwMTgwMTA4WjAzMTEwLwYDVQQD EyhjMGMxYTEwMTFlODU0YWI5ZTRkYTE5MTY5MGRmMGVjODVhMzIyOTc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0s3eM8IdGov3yVO4aIH9m+u0GQE 1d9pa/9ISAtrI+lo4xYas3p7xNnvtM4QFUsKvYZBKzd1OLlcbCLdXZfKY6q6k9wZ keexlYcr3Zr9Amz03bKT4KY1dCzqDknfUDvyYnI05gCGPzXI10oduH9ac5daYuUZ F0RpKD6WhJ6f3RpX5vnqHOicbHziK5ReyR9fOpCf7zCF97n1VKFTwAJfV9WIT51F 0TLMLRbTOldAGfJfOSC/tE+nWvk7L9nH7/9kYxV5X0ykHsg61w0wnSiTk1kHxT5U JvSxJcx8ebiqx4VPwR0jwIqJBkThh6V5HmW2Vz3Bs5vJFPe3Qh1jxDhKJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMDBoQEehUq55NoZFpDfDshaMil2MB8GA1UdIwQY MBaAFM6Om+JIx0G6aiasjP4sK7fC16OxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTIt OWZiOGUyNTQ1ZDczLzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS8yODYwYzktYWI1Zi00NDQwLTgzMTItOWZiOGUyNTQ1ZDcz LzEvem82YjRrakhRYnBxSnF5TV9pd3J0OExYbzdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABnUdC+s8 T7Ef6eIke/EhyeXP2PlOCliGnBLswLtD3ZqX+4vfQevLBWnPlUljHNYfLbwkvBxN PMF/Uvk4U8nndEZ++pVWkLd2eFzqeGy4uw4Przd8Ja/m7v+W8g5vDReJ+qrA62tB ltdNZsRfVCv/jJMrgRgSzkRYw4lVXevld7RU/ab8gnyK5Gk8IELb8SB0Ny7wYh27 nI9tLISQH9bD3GMxufVhPZNICS6WSDDAFwUA71+BOJdWyFF3IG+pcHzdsaDGGEN1 f2VjWttgVO3o7928Q/0vUXz4y/iBPfzVL3N5DLYi3VnN9Ia9I6fVnPIJ6SWj1NJ7 /ivne0BE2Fc2Ew== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:21 2026 by rpki-client