This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft File: ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft (raw, json) Hash identifier: zsnw2/yG3mKqniCKFB9izC3323OoVKGYjPKb1ER+R1g= Subject key identifier: C6:9B:54:C0:68:1B:E9:9B:09:62:F7:55:21:FE:2F:B3:08:32:D3:85 Authority key identifier: 64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 Certificate issuer: /CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Certificate serial: 019C435942EA562F2988270C723303C3AB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft Manifest number: 0900 Signing time: Mon 09 Feb 2026 17:00:49 +0000 Manifest this update: Mon 09 Feb 2026 17:00:49 +0000 Manifest next update: Tue 10 Feb 2026 17:00:49 +0000 Files and hashes: 1: 5vsHr6Xl2tRUiexVlz3FOn-aeHo.roa (hash: 242jMsYVWeBLhjugJFcXOkAL1qz3e8MYr9rwKIXdUO0=) 2: ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl (hash: hSsSL89O6xjMR8iV9F5DXASZBRH1g4yS7fsJaVjOgrQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:42:ea:56:2f:29:88:27:0c:72:33:03:c3:ab:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d84b5f19b62048b22a6103d09f84d8153c7556 Validity Not Before: Feb 9 17:00:49 2026 GMT Not After : Feb 10 17:00:49 2026 GMT Subject: CN=c69b54c0681be99b0962f75521fe2fb30832d385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:8a:87:69:11:6c:ea:a1:5b:de:fb:e4:e8:18: f1:1d:70:6e:50:04:2d:ee:49:89:46:14:7b:a2:ed: 2e:fa:c0:ec:7f:6b:4a:95:69:0d:57:7a:4d:70:0b: 7d:e4:1c:ab:0d:25:b2:ed:d9:a2:88:47:04:e4:47: cb:bc:a4:e7:85:f0:b7:37:8b:7e:be:95:47:31:de: 2d:1e:f0:e7:8f:ec:21:5a:b4:63:bc:dc:b6:83:38: 88:b3:ba:77:ab:d3:be:5c:c1:2e:cd:e3:2a:95:13: ed:e9:ca:27:cf:81:a4:35:51:69:a2:65:30:d3:bd: c7:76:b6:c7:ae:7a:fa:16:3a:11:1e:30:8d:10:fa: cb:82:52:e2:95:c4:f5:d8:ff:82:e1:14:2b:c7:c3: c8:7e:85:27:9e:5e:41:5b:40:8e:54:de:61:76:e1: b6:ae:f7:98:a1:48:cc:e6:84:f0:97:98:d9:c7:c2: 31:eb:fd:3d:6e:98:a0:a9:fc:a7:69:62:a2:63:c0: da:c1:d2:de:98:d1:75:0f:78:37:97:04:70:48:25: 06:75:f2:e8:bd:df:b9:80:a3:f9:bc:6e:78:b0:25: 89:a0:7b:e8:36:be:43:d4:cf:c9:58:49:f9:c7:d0: 79:ef:3f:fe:13:bf:e2:24:e2:68:bd:14:d2:80:fa: f4:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:9B:54:C0:68:1B:E9:9B:09:62:F7:55:21:FE:2F:B3:08:32:D3:85 X509v3 Authority Key Identifier: keyid:64:D8:4B:5F:19:B6:20:48:B2:2A:61:03:D0:9F:84:D8:15:3C:75:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNhLXxm2IEiyKmED0J-E2BU8dVY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/bcb3fd-a96e-4c00-aa11-5db63bab9460/1/ZNhLXxm2IEiyKmED0J-E2BU8dVY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d2:57:ea:b3:02:5f:ba:27:30:d5:0e:fa:35:58:16:4a:33: dc:cd:31:09:a5:f4:49:c3:f3:9f:90:69:22:b0:ee:45:0e:ff: 15:f3:e3:5d:91:25:0f:65:04:89:63:09:3c:d5:aa:95:73:e3: 5c:df:d8:07:d6:30:47:ab:1f:ff:9b:58:ab:fd:48:35:11:1f: 25:6a:35:72:92:d4:7f:ee:a4:f4:b4:0a:01:c7:c5:c1:5d:d3: 59:b6:d0:a5:5f:44:a6:78:b1:38:20:98:53:9c:ca:5b:44:6c: 19:0b:87:03:33:96:82:4d:7a:93:c5:5b:05:7d:4f:8b:f1:6f: a6:7c:57:ab:8f:8f:ff:1f:51:64:69:91:66:49:23:a8:38:d4: 45:f1:cf:3d:39:85:3d:db:b9:8e:59:65:26:af:a5:4a:94:f0: 95:97:79:d7:e8:49:b9:99:c1:a6:ce:ce:9a:0c:b2:de:5e:17: 6b:5a:06:3b:8b:39:0f:09:e9:7a:78:09:12:5f:70:ed:68:85: f0:dd:3e:d6:6b:c3:6e:47:44:fb:4e:41:bd:8a:b6:b0:a8:be: ac:30:bc:56:91:e6:56:62:c8:16:34:8b:05:a3:ed:ba:fc:49: 6e:5b:e2:47:5d:b2:34:07:6e:ef:d9:eb:c5:b4:b9:6c:db:75: 25:d1:86:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWULqVi8piCcMcjMDw6tRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDg0YjVmMTliNjIwNDhiMjJhNjEwM2QwOWY4NGQ4MTUz Yzc1NTYwHhcNMjYwMjA5MTcwMDQ5WhcNMjYwMjEwMTcwMDQ5WjAzMTEwLwYDVQQD EyhjNjliNTRjMDY4MWJlOTliMDk2MmY3NTUyMWZlMmZiMzA4MzJkMzg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8oqHaRFs6qFb3vvk6BjxHXBuUAQt 7kmJRhR7ou0u+sDsf2tKlWkNV3pNcAt95ByrDSWy7dmiiEcE5EfLvKTnhfC3N4t+ vpVHMd4tHvDnj+whWrRjvNy2gziIs7p3q9O+XMEuzeMqlRPt6conz4GkNVFpomUw 073HdrbHrnr6FjoRHjCNEPrLglLilcT12P+C4RQrx8PIfoUnnl5BW0COVN5hduG2 rveYoUjM5oTwl5jZx8Ix6/09bpigqfynaWKiY8DawdLemNF1D3g3lwRwSCUGdfLo vd+5gKP5vG54sCWJoHvoNr5D1M/JWEn5x9B57z/+E7/iJOJovRTSgPr0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMabVMBoG+mbCWL3VSH+L7MIMtOFMB8GA1UdIwQY MBaAFGTYS18ZtiBIsiphA9CfhNgVPHVWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEt NWRiNjNiYWI5NDYwLzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi9iY2IzZmQtYTk2ZS00YzAwLWFhMTEtNWRiNjNiYWI5NDYw LzEvWk5oTFh4bTJJRWl5S21FRDBKLUUyQlU4ZFZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOtJX6rMC X7onMNUO+jVYFkoz3M0xCaX0ScPzn5BpIrDuRQ7/FfPjXZElD2UEiWMJPNWqlXPj XN/YB9YwR6sf/5tYq/1INREfJWo1cpLUf+6k9LQKAcfFwV3TWbbQpV9EpnixOCCY U5zKW0RsGQuHAzOWgk16k8VbBX1Pi/FvpnxXq4+P/x9RZGmRZkkjqDjURfHPPTmF Pdu5jlllJq+lSpTwlZd51+hJuZnBps7Omgyy3l4Xa1oGO4s5DwnpengJEl9w7WiF 8N0+1mvDbkdE+05BvYq2sKi+rDC8VpHmVmLIFjSLBaPtuvxJblviR12yNAdu79nr xbS5bNt1JdGGmg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:54 2026 by rpki-client