This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft File: zQHNoDArgT6xRVea2B9e19KcAgk.mft (raw, json) Hash identifier: iMR8RQWxkD5Tq1fO3ZRzA9//pmfLiP73CbKVwRxj8ac= Subject key identifier: 26:A0:25:BE:BF:7D:66:B7:9D:E5:DF:DA:E7:7D:50:E4:77:9F:24:00 Authority key identifier: CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09 Certificate issuer: /CN=cd01cda0302b813eb145579ad81f5ed7d29c0209 Certificate serial: 019C42460CD3CECB61325C311D4E4D530316 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft Manifest number: 0D5F Signing time: Mon 09 Feb 2026 12:00:12 +0000 Manifest this update: Mon 09 Feb 2026 12:00:12 +0000 Manifest next update: Tue 10 Feb 2026 12:00:12 +0000 Files and hashes: 1: O2gYXWLOZ1baGkkO6V4ffkZOf14.roa (hash: 0azU39AJWRQ9GwuVFR5XGckgzC3aJ2sgglAZkdjKoC0=) 2: zQHNoDArgT6xRVea2B9e19KcAgk.crl (hash: /lD6GoEDCzxXSgSSRrk75b2hG64h+lPQbTIDyunnfjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:0c:d3:ce:cb:61:32:5c:31:1d:4e:4d:53:03:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd01cda0302b813eb145579ad81f5ed7d29c0209 Validity Not Before: Feb 9 12:00:12 2026 GMT Not After : Feb 10 12:00:12 2026 GMT Subject: CN=26a025bebf7d66b79de5dfdae77d50e4779f2400 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:47:66:a2:38:6f:c5:7d:39:45:be:f7:07:b9: ee:b6:27:42:62:97:5e:ad:82:35:d5:33:53:8d:e2: 25:fc:1b:d1:c6:c2:30:f3:e3:8c:ab:ef:05:e0:c0: 32:eb:4d:84:fa:52:5f:c2:5a:a7:eb:27:d0:93:a5: ac:28:1d:f6:a8:c7:96:98:a0:49:dd:d0:fc:af:81: c6:7a:08:fd:be:21:f3:fb:3b:5c:ae:63:45:57:b8: bc:f2:d4:d3:5d:d9:da:a9:61:71:b6:28:ca:c6:b4: 90:27:9f:1c:00:18:83:9d:4b:00:c7:83:0d:54:44: df:54:01:77:b5:7e:63:00:38:16:0e:25:a5:b8:13: a5:d3:79:e2:7a:02:df:30:94:0b:bb:30:54:2c:9f: f2:0c:ec:43:52:2c:59:03:da:1c:83:3f:00:21:5f: e8:44:f6:6f:8a:7f:0f:df:5b:50:2d:6d:92:9a:5a: 3d:c3:dd:43:44:5f:cd:de:61:03:77:7a:82:ec:5b: f6:13:98:2d:e1:86:01:7b:d1:d7:9c:62:27:83:2d: 47:af:97:c2:cc:4f:5a:2c:18:2b:18:84:08:69:ff: ca:94:0e:f5:b2:25:2b:7a:3c:cb:d0:a1:5f:f5:f0: dd:2d:6e:43:5e:e2:4c:8b:ad:1b:05:fb:cc:32:7e: 32:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A0:25:BE:BF:7D:66:B7:9D:E5:DF:DA:E7:7D:50:E4:77:9F:24:00 X509v3 Authority Key Identifier: keyid:CD:01:CD:A0:30:2B:81:3E:B1:45:57:9A:D8:1F:5E:D7:D2:9C:02:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQHNoDArgT6xRVea2B9e19KcAgk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3e3483-1845-442d-a59a-dd72550d78ac/1/zQHNoDArgT6xRVea2B9e19KcAgk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:15:1f:6d:93:60:a7:e1:c9:64:3a:75:84:a5:20:ff:c9:7b: 46:f0:34:d3:02:5e:20:19:2f:68:26:c8:3b:40:8a:b6:b9:b7: d5:bb:f8:e3:e9:c7:dc:57:28:46:e7:96:24:6d:8d:30:f4:fc: a6:66:53:57:aa:6a:bd:9f:06:b5:f6:ed:75:53:b0:2f:6e:d4: f0:18:c0:5b:c0:58:f2:d8:cb:14:3c:77:6f:d5:d6:38:24:82: d5:51:86:95:57:82:97:7f:94:66:0e:cc:ed:3c:7e:75:1b:60: ad:37:f7:56:42:ab:63:a1:b4:4a:e6:c7:f3:25:7a:dd:c9:d6: c9:ff:cc:f1:3b:9b:56:ae:3a:b0:f9:48:f3:b6:0a:b6:50:26: 7e:e9:6b:30:c6:ca:46:c1:a5:f0:86:32:c7:6a:38:2d:f2:e8: 90:83:fb:c8:a9:f6:5d:c0:45:bf:54:8f:d9:aa:e3:3e:c7:0f: 04:e8:1a:55:bb:9b:74:81:87:93:57:80:4e:df:f5:4e:4b:fe: 2b:a4:63:03:1e:e3:5b:2e:35:b1:9e:f8:42:3d:b6:c8:0a:08: 76:6b:98:51:0c:36:c4:47:6c:19:bb:c2:7b:82:66:db:15:23: 20:f8:ec:e3:36:32:cf:51:c5:8b:4e:2e:1b:15:7b:44:5f:56: ab:ce:9a:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRgzTzsthMlwxHU5NUwMWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDFjZGEwMzAyYjgxM2ViMTQ1NTc5YWQ4MWY1ZWQ3ZDI5 YzAyMDkwHhcNMjYwMjA5MTIwMDEyWhcNMjYwMjEwMTIwMDEyWjAzMTEwLwYDVQQD EygyNmEwMjViZWJmN2Q2NmI3OWRlNWRmZGFlNzdkNTBlNDc3OWYyNDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3kdmojhvxX05Rb73B7nutidCYpde rYI11TNTjeIl/BvRxsIw8+OMq+8F4MAy602E+lJfwlqn6yfQk6WsKB32qMeWmKBJ 3dD8r4HGegj9viHz+ztcrmNFV7i88tTTXdnaqWFxtijKxrSQJ58cABiDnUsAx4MN VETfVAF3tX5jADgWDiWluBOl03niegLfMJQLuzBULJ/yDOxDUixZA9ocgz8AIV/o RPZvin8P31tQLW2Smlo9w91DRF/N3mEDd3qC7Fv2E5gt4YYBe9HXnGIngy1Hr5fC zE9aLBgrGIQIaf/KlA71siUrejzL0KFf9fDdLW5DXuJMi60bBfvMMn4ywwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCagJb6/fWa3neXf2ud9UOR3nyQAMB8GA1UdIwQY MBaAFM0BzaAwK4E+sUVXmtgfXtfSnAIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEt ZGQ3MjU1MGQ3OGFjLzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy8zZTM0ODMtMTg0NS00NDJkLWE1OWEtZGQ3MjU1MGQ3OGFj LzEvelFITm9EQXJnVDZ4UlZlYTJCOWUxOUtjQWdrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhRUfbZNg p+HJZDp1hKUg/8l7RvA00wJeIBkvaCbIO0CKtrm31bv44+nH3FcoRueWJG2NMPT8 pmZTV6pqvZ8GtfbtdVOwL27U8BjAW8BY8tjLFDx3b9XWOCSC1VGGlVeCl3+UZg7M 7Tx+dRtgrTf3VkKrY6G0SubH8yV63cnWyf/M8TubVq46sPlI87YKtlAmfulrMMbK RsGl8IYyx2o4LfLokIP7yKn2XcBFv1SP2arjPscPBOgaVbubdIGHk1eATt/1Tkv+ K6RjAx7jWy41sZ74Qj22yAoIdmuYUQw2xEdsGbvCe4Jm2xUjIPjs4zYyz1HFi04u GxV7RF9Wq86aEQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:01 2026 by rpki-client