This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft File: ZJek5qz7ctUdKe5hpig29mBgl6Y.mft (raw, json) Hash identifier: nreVw+trHkuabFrag5rVD12QDRlFsVxyeRYn5Yio65M= Subject key identifier: 90:3A:00:A0:D6:B3:EB:62:F1:A5:85:B3:A2:B4:D3:83:A7:4F:BC:B9 Authority key identifier: 64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6 Certificate issuer: /CN=6497a4e6acfb72d51d29ee61a62836f6606097a6 Certificate serial: 019C1CF0F6DAE725D802FD32948728949D98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft Manifest number: 0678 Signing time: Mon 02 Feb 2026 06:01:19 +0000 Manifest this update: Mon 02 Feb 2026 06:01:19 +0000 Manifest next update: Tue 03 Feb 2026 06:01:19 +0000 Files and hashes: 1: ZJek5qz7ctUdKe5hpig29mBgl6Y.crl (hash: S9J+g+m0rFEX2WWN2yvBpe616QxZqJimBmASVNDaTDk=) 2: t-CPneeaVHYgCJeN9aRr26OHu8s.roa (hash: i5R3976Bs/xCdmNx5+5wTM2K2LQaNxrVpxX02Fkd/C0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Feb 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:1c:f0:f6:da:e7:25:d8:02:fd:32:94:87:28:94:9d:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6497a4e6acfb72d51d29ee61a62836f6606097a6 Validity Not Before: Feb 2 06:01:19 2026 GMT Not After : Feb 3 06:01:19 2026 GMT Subject: CN=903a00a0d6b3eb62f1a585b3a2b4d383a74fbcb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:84:b5:52:f6:82:1b:5c:eb:f3:d0:c3:e8:b3: 0b:11:a2:c2:12:05:b9:76:55:5e:1b:ab:46:b2:83: 56:82:fa:ae:39:e9:39:c3:30:10:05:8d:b9:65:79: a7:57:41:d7:cf:93:24:26:20:09:eb:08:0f:d4:df: 1f:d9:51:d0:44:de:53:87:0f:8e:d2:b7:7e:56:f9: ea:29:6a:dd:ef:74:60:d2:a4:21:f1:18:2d:fe:4e: bd:eb:ae:8f:2f:be:cb:ca:0e:e2:7f:eb:b6:89:3d: 38:77:6b:a0:35:bb:b1:82:9b:ab:c1:78:22:3d:b2: 14:2b:bc:99:a1:21:d2:7b:e5:9d:d2:d2:fe:8a:e0: c6:e4:be:f9:18:ec:d5:cd:02:e9:2b:d8:5b:88:19: 2e:3b:bf:de:6d:a1:c2:43:34:c5:f4:a6:31:b2:52: 25:3f:a4:22:3f:7c:64:22:43:05:c7:99:68:db:69: 7c:94:de:fb:a3:88:e8:26:b1:75:61:9e:6b:1c:81: 06:2f:c4:d2:ba:a7:12:98:ee:31:af:69:09:95:cb: 77:c7:91:1c:1a:81:0d:97:48:8b:5d:0d:0a:b8:ca: d7:df:ba:30:34:d0:39:c6:c3:d8:54:b5:ba:68:df: a8:a2:75:1d:0b:ee:21:a2:bc:1b:5d:84:f6:d2:29: 6d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3A:00:A0:D6:B3:EB:62:F1:A5:85:B3:A2:B4:D3:83:A7:4F:BC:B9 X509v3 Authority Key Identifier: keyid:64:97:A4:E6:AC:FB:72:D5:1D:29:EE:61:A6:28:36:F6:60:60:97:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZJek5qz7ctUdKe5hpig29mBgl6Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/925ea2-fff8-4095-9d96-01cd47b6ca0d/1/ZJek5qz7ctUdKe5hpig29mBgl6Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:02:07:3c:67:73:e9:41:87:47:a0:28:78:48:72:44:98:95: ea:15:be:6f:53:88:5a:56:5f:1c:86:6a:fa:3e:bc:e9:fc:34: 60:cb:1a:34:af:34:27:7b:73:9c:d0:13:0d:35:6a:18:86:aa: 63:ab:9d:da:e3:65:39:e4:e9:e7:62:00:9f:3f:eb:35:4f:cd: 11:44:21:c9:ca:7e:85:bf:28:97:7c:5a:37:52:7a:3f:b1:96: 8b:35:ac:d4:ee:06:64:3c:68:07:ca:ed:87:49:9c:09:05:e4: 6f:80:df:c3:8d:e6:83:b4:55:f5:63:bb:b4:df:6e:06:df:07: 69:fb:49:13:a7:53:55:7c:80:6e:60:18:ec:0c:58:04:6d:fb: 73:1d:9f:ea:91:f8:e3:28:de:81:c7:84:7e:c2:db:f3:13:42: 27:b4:41:ec:88:ce:02:9e:9d:dd:ed:e1:3e:e7:c9:b5:79:76: d9:c1:b7:c5:31:c5:93:d8:2e:25:e9:cc:bf:50:e5:ae:1e:60: 63:fd:c6:5d:dd:8b:2f:0b:9b:30:24:db:d1:dc:df:3c:1d:8f: 81:ce:b1:7c:11:4b:44:17:0a:9b:23:bd:48:f6:bf:d6:8e:1a: ba:21:6d:72:1b:ed:bd:c5:1e:e9:30:c7:70:b8:02:6c:7c:8a: 0a:1b:a3:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwc8Pba5yXYAv0ylIcolJ2YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0OTdhNGU2YWNmYjcyZDUxZDI5ZWU2MWE2MjgzNmY2NjA2 MDk3YTYwHhcNMjYwMjAyMDYwMTE5WhcNMjYwMjAzMDYwMTE5WjAzMTEwLwYDVQQD Eyg5MDNhMDBhMGQ2YjNlYjYyZjFhNTg1YjNhMmI0ZDM4M2E3NGZiY2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzoS1UvaCG1zr89DD6LMLEaLCEgW5 dlVeG6tGsoNWgvquOek5wzAQBY25ZXmnV0HXz5MkJiAJ6wgP1N8f2VHQRN5Thw+O 0rd+VvnqKWrd73Rg0qQh8Rgt/k69666PL77Lyg7if+u2iT04d2ugNbuxgpurwXgi PbIUK7yZoSHSe+Wd0tL+iuDG5L75GOzVzQLpK9hbiBkuO7/ebaHCQzTF9KYxslIl P6QiP3xkIkMFx5lo22l8lN77o4joJrF1YZ5rHIEGL8TSuqcSmO4xr2kJlct3x5Ec GoENl0iLXQ0KuMrX37owNNA5xsPYVLW6aN+oonUdC+4horwbXYT20iltAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJA6AKDWs+ti8aWFs6K004OnT7y5MB8GA1UdIwQY MBaAFGSXpOas+3LVHSnuYaYoNvZgYJemMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYt MDFjZDQ3YjZjYTBkLzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNy85MjVlYTItZmZmOC00MDk1LTlkOTYtMDFjZDQ3YjZjYTBk LzEvWkplazVxejdjdFVkS2U1aHBpZzI5bUJnbDZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAIHPGdz 6UGHR6AoeEhyRJiV6hW+b1OIWlZfHIZq+j686fw0YMsaNK80J3tznNATDTVqGIaq Y6ud2uNlOeTp52IAnz/rNU/NEUQhycp+hb8ol3xaN1J6P7GWizWs1O4GZDxoB8rt h0mcCQXkb4Dfw43mg7RV9WO7tN9uBt8HaftJE6dTVXyAbmAY7AxYBG37cx2f6pH4 4yjegceEfsLb8xNCJ7RB7IjOAp6d3e3hPufJtXl22cG3xTHFk9guJenMv1Dlrh5g Y/3GXd2LLwubMCTb0dzfPB2Pgc6xfBFLRBcKmyO9SPa/1o4auiFtchvtvcUe6TDH cLgCbHyKChujgQ== -----END CERTIFICATE-----Generated at Mon Feb 2 17:16:53 2026 by rpki-client