This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft File: Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft (raw, json) Hash identifier: 2jQ0oH6osGmMJrw4YuOHQKxPMh7/0lfgF1+Z4CuxtzE= Subject key identifier: 8E:5D:4C:C7:F0:B4:4C:37:86:6F:3C:01:53:64:A6:8B:11:4C:7A:5E Authority key identifier: 67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21 Certificate issuer: /CN=67cc77931dbb0e9e229c7217652b76aef4002721 Certificate serial: 019C424684BD915AE6B4BEEAEC686CA4A50A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft Manifest number: 02C5 Signing time: Mon 09 Feb 2026 12:00:43 +0000 Manifest this update: Mon 09 Feb 2026 12:00:43 +0000 Manifest next update: Tue 10 Feb 2026 12:00:43 +0000 Files and hashes: 1: Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl (hash: BlMd17uKrf5TIio/bmVM8m8ZEIdoVP1FnudWDN0pIm8=) 2: z3h7NH6N5wijAwMYVRinzlp5MD8.roa (hash: FU3UxZOkfnfaPhBOfubHG6bYn2mXYkfBh0IbGxObMkQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:84:bd:91:5a:e6:b4:be:ea:ec:68:6c:a4:a5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67cc77931dbb0e9e229c7217652b76aef4002721 Validity Not Before: Feb 9 12:00:43 2026 GMT Not After : Feb 10 12:00:43 2026 GMT Subject: CN=8e5d4cc7f0b44c37866f3c015364a68b114c7a5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:51:63:1f:d5:9c:c6:9f:d9:0e:39:2c:15:37: 7c:a0:9e:81:1d:07:f5:f1:c2:87:f8:ce:f5:62:bd: dd:ab:db:ad:99:7a:55:89:e3:4f:d0:b3:21:d7:f1: 24:67:17:02:b6:4c:82:0f:14:b3:f7:1e:9e:f0:b7: 0d:1d:cb:d8:06:8b:79:e9:a7:ff:29:07:6c:d6:4b: 3c:c0:a2:87:d8:b2:c1:5c:73:34:9c:c3:9a:8b:d4: 05:ef:25:4e:54:f1:e7:af:6f:20:51:f8:02:0a:b8: ee:cb:c3:b8:45:3a:41:0a:62:f2:53:9a:5c:4e:4b: 6f:4b:6d:05:06:bc:f7:54:3d:bd:2b:ff:36:bb:80: 9d:dc:fa:80:bf:ce:80:1b:74:b4:ed:b2:ca:bd:c5: e9:c8:72:5b:eb:95:76:4c:d4:1b:16:ee:3c:8e:4d: e0:99:c4:a2:74:76:20:ac:8c:9b:cc:01:5a:c0:71: 02:9f:83:02:c2:aa:38:39:17:9c:ad:f1:ba:ea:89: a2:22:5e:34:5f:60:7b:94:03:2b:97:b6:66:dc:aa: 5f:eb:6e:8c:1e:a6:15:f2:2d:3e:bc:d7:7b:d4:36: cb:db:99:24:fa:c5:0c:6d:d7:62:e1:ee:1a:20:db: 56:21:85:89:71:05:e2:de:55:c6:51:86:fc:39:47: a3:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:5D:4C:C7:F0:B4:4C:37:86:6F:3C:01:53:64:A6:8B:11:4C:7A:5E X509v3 Authority Key Identifier: keyid:67:CC:77:93:1D:BB:0E:9E:22:9C:72:17:65:2B:76:AE:F4:00:27:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8x3kx27Dp4inHIXZSt2rvQAJyE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6934fd-0ffb-468e-871d-4b46f3d3373f/1/Z8x3kx27Dp4inHIXZSt2rvQAJyE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:eb:a5:c1:f3:a7:c0:38:83:d9:d1:2b:e9:b9:0a:a5:00:3a: 74:94:26:f1:e6:51:de:43:e4:12:1f:2f:b6:45:ac:b5:2e:fe: 7c:6c:02:cc:8e:3f:48:0e:28:c0:a0:dc:ba:ad:ad:3a:a0:17: 1c:02:e8:7d:c8:0b:99:6c:88:d4:97:80:f0:ef:6c:96:af:ab: 25:a3:bc:aa:c2:a0:83:31:0a:fc:3e:31:1d:af:8f:99:c5:62: 06:f7:1d:de:23:e7:3c:56:0a:ef:4b:7e:05:c3:2c:55:71:31: ea:12:2c:ad:e9:f4:82:07:a8:3e:9a:61:fe:20:ad:3d:52:c0: 0e:8d:91:8f:05:6e:8a:90:68:f0:97:45:25:5f:63:0c:26:f1: 74:33:53:fa:77:a4:6e:cb:3d:58:f1:0b:27:28:95:ae:f2:c6: e0:52:cf:19:dc:76:2f:90:8d:60:c5:28:eb:51:06:f2:d9:c1: 36:a7:69:16:68:b5:c7:b1:56:ff:79:84:67:2d:f1:ac:22:8a: 90:9e:a9:f6:03:2a:12:b9:ea:35:64:5f:54:68:59:a9:27:0c: f2:7c:a9:85:97:15:1f:78:71:eb:9f:8e:10:32:0e:28:70:c4: 07:00:87:83:42:fd:7d:3b:57:e7:9b:85:7e:50:5c:52:e6:67: 2f:bf:b4:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRoS9kVrmtL7q7GhspKUKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3Y2M3NzkzMWRiYjBlOWUyMjljNzIxNzY1MmI3NmFlZjQw MDI3MjEwHhcNMjYwMjA5MTIwMDQzWhcNMjYwMjEwMTIwMDQzWjAzMTEwLwYDVQQD Eyg4ZTVkNGNjN2YwYjQ0YzM3ODY2ZjNjMDE1MzY0YTY4YjExNGM3YTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVFjH9Wcxp/ZDjksFTd8oJ6BHQf1 8cKH+M71Yr3dq9utmXpVieNP0LMh1/EkZxcCtkyCDxSz9x6e8LcNHcvYBot56af/ KQds1ks8wKKH2LLBXHM0nMOai9QF7yVOVPHnr28gUfgCCrjuy8O4RTpBCmLyU5pc TktvS20FBrz3VD29K/82u4Cd3PqAv86AG3S07bLKvcXpyHJb65V2TNQbFu48jk3g mcSidHYgrIybzAFawHECn4MCwqo4ORecrfG66omiIl40X2B7lAMrl7Zm3Kpf626M HqYV8i0+vNd71DbL25kk+sUMbddi4e4aINtWIYWJcQXi3lXGUYb8OUej4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI5dTMfwtEw3hm88AVNkposRTHpeMB8GA1UdIwQY MBaAFGfMd5Mduw6eIpxyF2Urdq70ACchMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQt NGI0NmYzZDMzNzNmLzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82OTM0ZmQtMGZmYi00NjhlLTg3MWQtNGI0NmYzZDMzNzNm LzEvWjh4M2t4MjdEcDRpbkhJWFpTdDJydlFBSnlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeulwfOn wDiD2dEr6bkKpQA6dJQm8eZR3kPkEh8vtkWstS7+fGwCzI4/SA4owKDcuq2tOqAX HALofcgLmWyI1JeA8O9slq+rJaO8qsKggzEK/D4xHa+PmcViBvcd3iPnPFYK70t+ BcMsVXEx6hIsren0ggeoPpph/iCtPVLADo2RjwVuipBo8JdFJV9jDCbxdDNT+nek bss9WPELJyiVrvLG4FLPGdx2L5CNYMUo61EG8tnBNqdpFmi1x7FW/3mEZy3xrCKK kJ6p9gMqErnqNWRfVGhZqScM8nyphZcVH3hx65+OEDIOKHDEBwCHg0L9fTtX55uF flBcUuZnL7+0iA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:52 2026 by rpki-client