This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft File: zBO-hHGPVRwkFHfyKgQcc065fcU.mft (raw, json) Hash identifier: f2+0YfxiIy9hXO7POnNm1NMoW8OnXsCrGi7oAnPxSis= Subject key identifier: C6:C3:DE:C0:E9:C2:BC:5F:14:8E:3B:2C:BD:3A:57:B4:95:C1:9A:40 Authority key identifier: CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 Certificate issuer: /CN=cc13be84718f551c241477f22a041c734eb97dc5 Certificate serial: 019C42B485C94F6DCC91C747A3E89362D74F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft Manifest number: 1595 Signing time: Mon 09 Feb 2026 14:00:52 +0000 Manifest this update: Mon 09 Feb 2026 14:00:52 +0000 Manifest next update: Tue 10 Feb 2026 14:00:52 +0000 Files and hashes: 1: eANnaI0GGzfziqDmk3jw-r4G0TA.roa (hash: wlsMTfOuS0IU8a4wZ8IPTnAMJudHI+T0Qy9e4m8glN4=) 2: zBO-hHGPVRwkFHfyKgQcc065fcU.crl (hash: BrbowckRYOYUOQNqF5MoQiGaKwFeyWX142ITrmkf0XI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:85:c9:4f:6d:cc:91:c7:47:a3:e8:93:62:d7:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc13be84718f551c241477f22a041c734eb97dc5 Validity Not Before: Feb 9 14:00:52 2026 GMT Not After : Feb 10 14:00:52 2026 GMT Subject: CN=c6c3dec0e9c2bc5f148e3b2cbd3a57b495c19a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a9:44:da:cf:1a:e8:72:f8:0a:4b:63:c1:61: 5b:e2:ac:1f:18:31:af:9f:2c:30:b6:be:17:00:e8: 5a:4a:9a:52:65:5b:38:13:6a:05:eb:8f:7c:5c:15: ad:06:3a:ee:27:11:2a:c9:a1:26:ee:18:9c:23:db: eb:27:f0:64:e4:f0:7f:19:b4:3d:4b:5d:ff:d2:df: 8f:40:b5:e5:d0:c0:25:91:24:5c:3b:14:f6:af:ef: 86:27:4f:1a:f0:25:45:7c:44:6f:da:fe:51:d5:9a: d6:8c:ec:0e:c7:b4:b7:9c:d6:2c:fd:55:d8:2e:bc: 0f:70:46:f5:17:ed:5d:a8:43:b8:ec:d5:a9:77:62: 60:7c:50:8d:4a:58:08:94:43:e9:b4:1d:ae:27:ac: c2:fc:48:71:85:47:74:e1:55:9f:e0:e6:46:7a:74: 4a:46:b1:71:4b:aa:c3:a6:d3:11:d5:01:b9:ed:50: f7:ed:c0:89:0c:65:53:0c:50:29:33:39:3a:17:3c: e6:35:36:66:07:29:6e:3d:a6:e7:92:d2:be:9b:97: 17:a8:57:dc:2a:8f:73:96:93:27:c9:3a:46:ab:4e: 3d:01:57:71:98:f9:ba:77:01:5f:d5:f9:8d:17:28: cb:d6:10:84:67:c9:c9:a2:5e:e1:a1:5a:c2:3b:7b: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:C3:DE:C0:E9:C2:BC:5F:14:8E:3B:2C:BD:3A:57:B4:95:C1:9A:40 X509v3 Authority Key Identifier: keyid:CC:13:BE:84:71:8F:55:1C:24:14:77:F2:2A:04:1C:73:4E:B9:7D:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zBO-hHGPVRwkFHfyKgQcc065fcU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/6bcac1-e30f-4ba7-a74e-741d55c99802/1/zBO-hHGPVRwkFHfyKgQcc065fcU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:9f:50:09:2f:f4:c6:ff:20:7e:74:54:57:e3:6b:fc:d7:ec: 72:11:29:1e:99:ea:68:7e:2e:af:a2:d8:1d:18:94:b3:6d:08: 56:01:5d:c1:20:9f:d4:0e:fa:f8:0b:7b:0b:65:cd:05:dd:62: 1a:49:5c:84:3b:10:e8:53:ce:a4:81:e3:88:76:c6:42:03:58: 72:da:7c:c7:5c:6a:29:9d:f9:29:fc:31:55:94:04:f4:c0:30: 83:3c:65:10:6f:9e:51:c2:1f:d7:31:14:6d:66:f2:e9:76:f1: 2d:af:b9:c4:57:b3:f7:63:02:de:68:ff:37:cd:60:11:f2:5d: 4d:25:09:21:18:02:62:a4:a6:c2:32:0b:83:5e:a2:f6:c4:da: 43:e7:2a:8f:b3:38:d1:20:5c:27:2b:0e:a9:ee:7d:a3:e5:d0: 65:ae:c8:a4:ba:e2:88:5f:ce:48:cf:3d:f5:e6:e8:b8:29:91: 7d:97:5b:6f:8c:4f:2a:60:d6:f6:26:9a:71:4d:65:d9:79:33: 36:4f:64:f7:7d:93:cb:33:07:16:51:8d:c6:dd:dd:35:0e:42: 4e:15:5b:e0:3c:cd:28:0c:b4:73:5e:7b:17:75:d3:4d:f3:09: 7a:7c:46:19:5d:b5:c4:20:19:31:94:00:0e:69:d8:db:55:1c: 6a:8c:06:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtIXJT23MkcdHo+iTYtdPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjMTNiZTg0NzE4ZjU1MWMyNDE0NzdmMjJhMDQxYzczNGVi OTdkYzUwHhcNMjYwMjA5MTQwMDUyWhcNMjYwMjEwMTQwMDUyWjAzMTEwLwYDVQQD EyhjNmMzZGVjMGU5YzJiYzVmMTQ4ZTNiMmNiZDNhNTdiNDk1YzE5YTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6lE2s8a6HL4CktjwWFb4qwfGDGv nywwtr4XAOhaSppSZVs4E2oF6498XBWtBjruJxEqyaEm7hicI9vrJ/Bk5PB/GbQ9 S13/0t+PQLXl0MAlkSRcOxT2r++GJ08a8CVFfERv2v5R1ZrWjOwOx7S3nNYs/VXY LrwPcEb1F+1dqEO47NWpd2JgfFCNSlgIlEPptB2uJ6zC/EhxhUd04VWf4OZGenRK RrFxS6rDptMR1QG57VD37cCJDGVTDFApMzk6FzzmNTZmByluPabnktK+m5cXqFfc Ko9zlpMnyTpGq049AVdxmPm6dwFf1fmNFyjL1hCEZ8nJol7hoVrCO3tMuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMbD3sDpwrxfFI47LL06V7SVwZpAMB8GA1UdIwQY MBaAFMwTvoRxj1UcJBR38ioEHHNOuX3FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUt NzQxZDU1Yzk5ODAyLzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS82YmNhYzEtZTMwZi00YmE3LWE3NGUtNzQxZDU1Yzk5ODAy LzEvekJPLWhIR1BWUndrRkhmeUtnUWNjMDY1ZmNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe59QCS/0 xv8gfnRUV+Nr/NfschEpHpnqaH4ur6LYHRiUs20IVgFdwSCf1A76+At7C2XNBd1i GklchDsQ6FPOpIHjiHbGQgNYctp8x1xqKZ35KfwxVZQE9MAwgzxlEG+eUcIf1zEU bWby6XbxLa+5xFez92MC3mj/N81gEfJdTSUJIRgCYqSmwjILg16i9sTaQ+cqj7M4 0SBcJysOqe59o+XQZa7IpLriiF/OSM899ebouCmRfZdbb4xPKmDW9iaacU1l2Xkz Nk9k932TyzMHFlGNxt3dNQ5CThVb4DzNKAy0c157F3XTTfMJenxGGV21xCAZMZQA DmnY21UcaowGug== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:23 2026 by rpki-client