This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft File: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft (raw, json) Hash identifier: 2z9FTJ43rRDN4SvRPidHdXrupLS+RYWpDsa5+oGp1V8= Subject key identifier: E1:17:DC:86:EA:ED:38:63:CB:05:5A:F2:52:F9:3F:27:4C:18:B6:E3 Authority key identifier: 65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 Certificate issuer: /CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Certificate serial: 019C4390548B75D284F238595AD0D4AFDFE2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft Manifest number: 1352 Signing time: Mon 09 Feb 2026 18:00:58 +0000 Manifest this update: Mon 09 Feb 2026 18:00:58 +0000 Manifest next update: Tue 10 Feb 2026 18:00:58 +0000 Files and hashes: 1: 07rXMz57aCvPfzZgqTtv0tfd--k.roa (hash: Zf7FLTeUlrTimYkYJqQH9p6Rab0OTFZZ2orzaq4XoQw=) 2: ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl (hash: oYcDF9NIrLsCL6ZXnnLWi1YZN0Ytny4DKetcHM16YD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:54:8b:75:d2:84:f2:38:59:5a:d0:d4:af:df:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65e0062e54a5fcb6a0c99e598557fed6f37a4629 Validity Not Before: Feb 9 18:00:58 2026 GMT Not After : Feb 10 18:00:58 2026 GMT Subject: CN=e117dc86eaed3863cb055af252f93f274c18b6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:19:c0:79:08:e5:7d:5f:88:cf:9c:93:f5:b8: 1a:87:87:c0:4c:e4:58:0a:d0:40:5f:2d:6e:38:87: d3:40:82:a5:71:79:9f:a0:8b:c4:41:78:12:20:93: b6:60:bb:6e:59:b6:66:2d:51:98:9f:33:1c:19:c5: 85:bc:4b:de:e8:39:3e:ab:12:c1:a0:79:31:03:e8: 4e:e9:86:1e:9f:4b:b2:f0:b1:c4:27:17:02:dd:6d: 06:7d:69:2c:03:74:10:a3:5f:97:2a:54:ae:1e:cc: d2:0a:fc:6c:8c:7e:bb:46:79:44:7d:6d:16:7f:b8: 38:c0:8b:41:86:a6:c8:7c:0d:a2:a4:fe:56:2f:04: d2:e5:68:32:c9:0c:2c:94:6f:45:2a:b7:c8:42:7d: 7e:c1:0a:52:41:d4:6b:0e:89:0b:03:5c:22:4a:f1: b0:99:7a:00:9d:fd:8c:55:90:a5:40:da:2e:59:fb: 73:42:21:94:5a:48:04:11:55:c8:04:2e:2a:5f:32: 13:74:d7:46:c0:1e:ab:5a:33:a3:bc:04:67:c9:5a: d0:a4:dd:40:ba:93:a3:b7:b0:c8:e7:ea:21:e3:22: 68:50:0e:dd:ff:46:10:18:e1:1a:cf:35:d8:95:d2: a2:6c:05:be:f2:2c:be:df:f2:bc:6a:de:aa:65:4c: b8:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:17:DC:86:EA:ED:38:63:CB:05:5A:F2:52:F9:3F:27:4C:18:B6:E3 X509v3 Authority Key Identifier: keyid:65:E0:06:2E:54:A5:FC:B6:A0:C9:9E:59:85:57:FE:D6:F3:7A:46:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/975e68-8662-43b9-8ed2-aae97e65015c/1/ZeAGLlSl_LagyZ5ZhVf-1vN6Rik.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:1c:ef:12:2d:d0:eb:73:13:0c:e1:d9:f7:28:17:4e:f2:d6: 2e:d2:20:0e:b8:7d:d9:23:e6:7b:84:8e:fe:78:60:8f:99:6d: 0a:51:11:36:25:ac:85:ef:88:c6:9a:39:b8:00:89:80:ae:96: b5:7c:64:75:0a:c8:d0:6b:50:84:64:60:16:0d:19:e7:af:ed: b8:a4:e7:35:49:68:d0:91:e3:04:8c:be:3c:df:40:c1:61:b3: 53:95:73:74:b7:9d:18:a4:fc:29:d7:d3:b7:b3:ca:e7:71:96: 0a:82:66:94:fc:54:da:f8:a1:59:a9:a3:2e:2a:46:43:f5:be: 77:2a:7e:d5:31:86:ed:5d:f6:04:6e:f8:19:34:6c:30:69:82: 3d:86:fd:a0:c8:71:82:9a:23:76:8b:56:e6:c4:23:2b:8c:ff: 77:b9:d6:a4:83:db:da:77:b5:1d:2b:ae:89:34:15:b7:dc:f4: b6:94:cf:92:77:1f:d0:a4:10:c6:b1:ff:69:99:28:fc:23:8c: cb:da:90:02:7c:3f:e4:33:6e:44:16:ad:53:a4:74:bc:b8:04: d5:5b:ec:6b:ed:cb:ee:cb:d9:40:29:b4:5b:91:88:3e:0f:7f: 5f:0a:2b:d8:e9:bd:84:56:4b:ac:53:80:5b:51:0c:05:dc:7f: f6:c7:58:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFSLddKE8jhZWtDUr9/iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZTAwNjJlNTRhNWZjYjZhMGM5OWU1OTg1NTdmZWQ2ZjM3 YTQ2MjkwHhcNMjYwMjA5MTgwMDU4WhcNMjYwMjEwMTgwMDU4WjAzMTEwLwYDVQQD EyhlMTE3ZGM4NmVhZWQzODYzY2IwNTVhZjI1MmY5M2YyNzRjMThiNmUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhnAeQjlfV+Iz5yT9bgah4fATORY CtBAXy1uOIfTQIKlcXmfoIvEQXgSIJO2YLtuWbZmLVGYnzMcGcWFvEve6Dk+qxLB oHkxA+hO6YYen0uy8LHEJxcC3W0GfWksA3QQo1+XKlSuHszSCvxsjH67RnlEfW0W f7g4wItBhqbIfA2ipP5WLwTS5WgyyQwslG9FKrfIQn1+wQpSQdRrDokLA1wiSvGw mXoAnf2MVZClQNouWftzQiGUWkgEEVXIBC4qXzITdNdGwB6rWjOjvARnyVrQpN1A upOjt7DI5+oh4yJoUA7d/0YQGOEazzXYldKibAW+8iy+3/K8at6qZUy4SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEX3Ibq7ThjywVa8lL5PydMGLbjMB8GA1UdIwQY MBaAFGXgBi5Upfy2oMmeWYVX/tbzekYpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDIt YWFlOTdlNjUwMTVjLzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC85NzVlNjgtODY2Mi00M2I5LThlZDItYWFlOTdlNjUwMTVj LzEvWmVBR0xsU2xfTGFneVo1WmhWZi0xdk42UmlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhBzvEi3Q 63MTDOHZ9ygXTvLWLtIgDrh92SPme4SO/nhgj5ltClERNiWshe+Ixpo5uACJgK6W tXxkdQrI0GtQhGRgFg0Z56/tuKTnNUlo0JHjBIy+PN9AwWGzU5VzdLedGKT8KdfT t7PK53GWCoJmlPxU2vihWamjLipGQ/W+dyp+1TGG7V32BG74GTRsMGmCPYb9oMhx gpojdotW5sQjK4z/d7nWpIPb2ne1HSuuiTQVt9z0tpTPkncf0KQQxrH/aZko/COM y9qQAnw/5DNuRBatU6R0vLgE1Vvsa+3L7svZQCm0W5GIPg9/Xwor2Om9hFZLrFOA W1EMBdx/9sdY/g== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:42 2026 by rpki-client