This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft File: ZKcVa4qon3bk04rywQn7wUkXsIY.mft (raw, json) Hash identifier: v3hrxKx8qYGHQ9JCKWSj0H0ZyU17JfT/yCTEyTCZhb8= Subject key identifier: AB:D8:22:70:91:AE:38:4E:4C:7C:51:88:9D:7C:F9:2F:D6:EA:6C:6E Authority key identifier: 64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 Certificate issuer: /CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Certificate serial: 019C42B461CF25997210C8435D8739924FA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft Manifest number: 10BF Signing time: Mon 09 Feb 2026 14:00:43 +0000 Manifest this update: Mon 09 Feb 2026 14:00:43 +0000 Manifest next update: Tue 10 Feb 2026 14:00:43 +0000 Files and hashes: 1: ZKcVa4qon3bk04rywQn7wUkXsIY.crl (hash: oNRYCIxQmtsl15Mkb+/Ig+lMhVSDGY2FnGjvPCCc3Ac=) 2: cMLXGA_6lhirTspoM9xrh1-1Z2c.roa (hash: tb3jenRFfrVxLNPvDmSsDeJNfF95+Hv8OEEMT0bRA9M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:61:cf:25:99:72:10:c8:43:5d:87:39:92:4f:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64a7156b8aa89f76e4d38af2c109fbc14917b086 Validity Not Before: Feb 9 14:00:43 2026 GMT Not After : Feb 10 14:00:43 2026 GMT Subject: CN=abd8227091ae384e4c7c51889d7cf92fd6ea6c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:75:68:3a:56:49:24:7f:42:f0:1e:b9:2b:90: 17:0e:14:8f:95:a6:ad:b3:47:a9:ae:5d:a1:bc:8d: 46:91:ae:ef:d4:e8:af:b8:5f:f9:53:db:d9:25:8d: 5b:1d:60:66:b6:4e:30:54:6a:ad:37:48:e0:98:a5: b3:49:8e:56:4a:27:c1:43:51:d7:33:0f:7c:d5:d6: 71:cd:4d:6d:b4:3a:66:a9:94:25:cd:5b:5a:8d:b8: 8c:3f:5b:49:28:1b:ad:28:f0:5d:2e:f0:f2:5e:1b: 16:bf:5e:d6:6b:dd:78:51:c9:35:d8:eb:1a:ff:69: 26:bb:b4:a0:57:71:02:cf:53:c5:de:0c:d7:23:2f: df:8a:39:99:f1:63:8e:cb:93:69:b9:24:e3:0d:b4: 25:fd:53:4f:38:99:8a:4a:2f:e5:ef:f0:5a:a4:41: 5c:6f:8e:f9:bb:e6:83:1b:b0:4a:56:27:ad:96:b7: 17:1a:79:73:49:08:e7:95:eb:40:a5:c1:2f:64:9e: de:b9:6d:22:7c:fd:03:04:d1:0f:db:57:a3:4f:b7: cf:9a:52:60:d5:28:15:0b:7d:d7:5c:c3:72:77:74: 0e:72:7f:17:20:b9:e5:f4:27:a9:96:c9:a5:25:8e: 2a:ba:43:7e:60:67:30:a1:f9:9b:a7:18:64:8e:12: ac:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:D8:22:70:91:AE:38:4E:4C:7C:51:88:9D:7C:F9:2F:D6:EA:6C:6E X509v3 Authority Key Identifier: keyid:64:A7:15:6B:8A:A8:9F:76:E4:D3:8A:F2:C1:09:FB:C1:49:17:B0:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZKcVa4qon3bk04rywQn7wUkXsIY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df62d-5d57-4d7e-9444-5351f1bde72f/1/ZKcVa4qon3bk04rywQn7wUkXsIY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:61:65:d4:a1:06:32:d2:e1:b6:b0:bd:80:d8:28:fe:b1:3f: 3a:d8:04:c4:00:f7:bc:4a:e2:d8:73:69:19:2c:17:37:e3:95: 4b:64:7d:4b:87:1e:ff:e5:3c:84:42:95:32:ed:a7:5b:b1:0f: 33:bb:c9:13:34:8d:7d:92:dd:e7:17:28:84:20:fd:71:60:9e: 96:84:a1:f9:6b:62:80:cf:13:59:2b:ad:51:8b:f7:9e:0d:08: ec:90:7f:d1:56:73:64:ca:aa:d0:ee:eb:4c:ac:c5:15:5c:3a: 14:a4:de:23:d4:15:75:04:21:f2:6b:76:ab:01:e8:dc:7a:07: 0c:24:2a:56:5b:37:eb:23:61:a1:34:a1:da:64:81:0f:6c:ff: ff:5b:66:25:a7:82:bd:30:db:f4:40:a3:08:71:69:46:20:68: 14:ca:ba:1b:f8:c0:7a:14:1a:f8:d3:cb:89:12:a6:cb:92:fc: 6a:6d:d8:73:6b:62:70:33:00:e2:23:44:64:ab:0c:4e:98:43: cd:de:3d:92:ca:af:d6:ea:19:74:ae:40:04:4b:54:32:9a:a6: 17:10:ee:94:02:cf:4c:74:ce:d0:0c:d1:fd:af:fb:5c:d6:d8: 2b:b8:3c:21:24:de:d9:9b:59:2d:14:d1:69:87:5a:c9:83:68: 41:b7:e7:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtGHPJZlyEMhDXYc5kk+mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YTcxNTZiOGFhODlmNzZlNGQzOGFmMmMxMDlmYmMxNDkx N2IwODYwHhcNMjYwMjA5MTQwMDQzWhcNMjYwMjEwMTQwMDQzWjAzMTEwLwYDVQQD EyhhYmQ4MjI3MDkxYWUzODRlNGM3YzUxODg5ZDdjZjkyZmQ2ZWE2YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnVoOlZJJH9C8B65K5AXDhSPlaat s0eprl2hvI1Gka7v1OivuF/5U9vZJY1bHWBmtk4wVGqtN0jgmKWzSY5WSifBQ1HX Mw981dZxzU1ttDpmqZQlzVtajbiMP1tJKButKPBdLvDyXhsWv17Wa914Uck12Osa /2kmu7SgV3ECz1PF3gzXIy/fijmZ8WOOy5NpuSTjDbQl/VNPOJmKSi/l7/BapEFc b475u+aDG7BKVietlrcXGnlzSQjnletApcEvZJ7euW0ifP0DBNEP21ejT7fPmlJg 1SgVC33XXMNyd3QOcn8XILnl9CeplsmlJY4qukN+YGcwofmbpxhkjhKsnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKvYInCRrjhOTHxRiJ18+S/W6mxuMB8GA1UdIwQY MBaAFGSnFWuKqJ925NOK8sEJ+8FJF7CGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQt NTM1MWYxYmRlNzJmLzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8zZGY2MmQtNWQ1Ny00ZDdlLTk0NDQtNTM1MWYxYmRlNzJm LzEvWktjVmE0cW9uM2JrMDRyeXdRbjd3VWtYc0lZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAImFl1KEG MtLhtrC9gNgo/rE/OtgExAD3vEri2HNpGSwXN+OVS2R9S4ce/+U8hEKVMu2nW7EP M7vJEzSNfZLd5xcohCD9cWCeloSh+WtigM8TWSutUYv3ng0I7JB/0VZzZMqq0O7r TKzFFVw6FKTeI9QVdQQh8mt2qwHo3HoHDCQqVls36yNhoTSh2mSBD2z//1tmJaeC vTDb9ECjCHFpRiBoFMq6G/jAehQa+NPLiRKmy5L8am3Yc2ticDMA4iNEZKsMTphD zd49ksqv1uoZdK5ABEtUMpqmFxDulALPTHTO0AzR/a/7XNbYK7g8ISTe2ZtZLRTR aYdayYNoQbfnmA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:33 2026 by rpki-client