This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft File: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft (raw, json) Hash identifier: NlKCCZD9bk0EKg++Wa9iOW31re7KHZwtp5KO0GYN2aI= Subject key identifier: 41:17:5F:2C:E7:D2:DD:6A:04:C6:FD:47:3B:68:9C:3B:A9:0E:66:E8 Authority key identifier: 64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 Certificate issuer: /CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Certificate serial: 019C42EBA12398A6939333A62B56E8B1445E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 15:01:04 +0000 Manifest this update: Mon 09 Feb 2026 15:01:04 +0000 Manifest next update: Tue 10 Feb 2026 15:01:04 +0000 Files and hashes: 1: ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl (hash: lpnS/ZkFrDN3Y7o6X9QyT5NG1NZoaWFWi0TlkRfc6NA=) 2: x8ylXyHKFLaCsjlaJO4VWKyWI_4.roa (hash: 7vnEm2NdMdejMyVEM/bfqmw0nAnwn/zb7nuUX/UxYl0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:a1:23:98:a6:93:93:33:a6:2b:56:e8:b1:44:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64e90627021adcfa5624342d3e5f8b48035acfb4 Validity Not Before: Feb 9 15:01:04 2026 GMT Not After : Feb 10 15:01:04 2026 GMT Subject: CN=41175f2ce7d2dd6a04c6fd473b689c3ba90e66e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:de:3d:6a:13:c5:17:e6:76:cf:de:31:01:89: 30:a0:87:02:6b:1d:5b:6f:08:68:9c:80:70:61:4e: 8d:e0:d8:26:05:e6:98:ad:28:c8:b7:3a:16:b5:f0: d3:e7:f5:e4:5b:dc:20:aa:cf:ff:f8:33:2a:ea:0f: 0a:6f:ff:29:57:4b:e8:f6:d1:1a:7e:f2:9a:de:49: 36:28:b3:30:65:58:4c:de:32:28:45:67:34:2e:7b: be:cc:4b:a3:06:a8:57:df:e2:16:7d:63:19:cc:b7: bc:ed:89:3f:ff:0f:b7:53:b9:42:93:30:60:01:c9: 94:8f:f6:26:13:56:84:d0:37:be:b5:4f:ed:0b:c5: c8:5d:17:1e:7c:30:97:ab:74:d0:c0:51:d1:46:4c: e8:25:af:a8:66:e4:e5:a7:8c:08:e4:a1:bb:50:25: ff:77:96:a0:13:86:77:96:d6:ea:4f:5d:45:d2:87: bc:a6:51:ec:15:ac:bd:4f:98:89:a8:aa:1b:74:16: 8e:a4:00:05:9c:ef:29:88:7f:17:48:bf:59:ad:46: f9:89:40:f5:07:bb:51:f4:76:5e:2d:24:b0:df:de: 91:e8:c0:8f:c6:ed:b3:89:3d:c3:52:03:c7:bb:b7: 22:59:a6:d7:39:12:fc:63:5f:29:25:bf:29:e6:2c: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:5F:2C:E7:D2:DD:6A:04:C6:FD:47:3B:68:9C:3B:A9:0E:66:E8 X509v3 Authority Key Identifier: keyid:64:E9:06:27:02:1A:DC:FA:56:24:34:2D:3E:5F:8B:48:03:5A:CF:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6e3fba-4d3a-43cb-babf-5f2882de3ec7/1/ZOkGJwIa3PpWJDQtPl-LSANaz7Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6b:27:88:be:75:22:cd:e7:4c:40:03:92:6c:85:37:fe:2e: 72:79:90:07:dc:9b:07:15:1f:5e:ee:fc:bb:e3:ea:2c:ae:20: 9f:dd:35:83:a5:12:d6:38:56:c6:5d:2c:8f:77:2b:51:77:45: d3:8f:02:d8:cf:28:2e:c5:35:2a:3a:0f:ac:53:60:2e:54:19: 14:8c:3f:8f:26:1b:2b:24:92:7d:b5:82:7b:59:e8:0b:4f:81: 99:c8:0e:0e:5b:5c:c5:eb:ae:91:64:9e:0c:4e:4a:7d:fd:f4: 3e:03:22:09:dd:de:be:78:f2:7a:42:7f:b1:78:de:44:6c:21: e6:18:0e:bf:bd:db:76:8c:93:7f:6e:d0:e2:c2:55:29:72:fe: 56:1a:b2:d6:89:33:2d:ba:ab:59:c2:e7:93:e6:c0:ac:cd:cf: ec:cf:95:d9:ae:db:50:2b:76:41:2f:c8:8c:e0:15:02:44:fd: ac:f5:42:04:51:9d:84:78:71:11:ce:bc:1d:62:4b:85:8a:b3: b3:81:87:0b:f2:67:ad:93:ae:9e:8b:3d:74:66:35:92:31:2d: 5a:54:d7:d6:2c:f1:a6:c1:a0:02:dc:ff:35:eb:28:dd:36:e4: 3f:8e:62:28:c1:76:cc:c6:9c:5c:74:9b:6c:a3:b5:19:5f:af: 9e:43:c4:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66EjmKaTkzOmK1bosUReMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZTkwNjI3MDIxYWRjZmE1NjI0MzQyZDNlNWY4YjQ4MDM1 YWNmYjQwHhcNMjYwMjA5MTUwMTA0WhcNMjYwMjEwMTUwMTA0WjAzMTEwLwYDVQQD Eyg0MTE3NWYyY2U3ZDJkZDZhMDRjNmZkNDczYjY4OWMzYmE5MGU2NmU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9N49ahPFF+Z2z94xAYkwoIcCax1b bwhonIBwYU6N4NgmBeaYrSjItzoWtfDT5/XkW9wgqs//+DMq6g8Kb/8pV0vo9tEa fvKa3kk2KLMwZVhM3jIoRWc0Lnu+zEujBqhX3+IWfWMZzLe87Yk//w+3U7lCkzBg AcmUj/YmE1aE0De+tU/tC8XIXRcefDCXq3TQwFHRRkzoJa+oZuTlp4wI5KG7UCX/ d5agE4Z3ltbqT11F0oe8plHsFay9T5iJqKobdBaOpAAFnO8piH8XSL9ZrUb5iUD1 B7tR9HZeLSSw396R6MCPxu2ziT3DUgPHu7ciWabXORL8Y18pJb8p5iwL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEEXXyzn0t1qBMb9RztonDupDmboMB8GA1UdIwQY MBaAFGTpBicCGtz6ViQ0LT5fi0gDWs+0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYt NWYyODgyZGUzZWM3LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy82ZTNmYmEtNGQzYS00M2NiLWJhYmYtNWYyODgyZGUzZWM3 LzEvWk9rR0p3SWEzUHBXSkRRdFBsLUxTQU5hejdRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWsniL51 Is3nTEADkmyFN/4ucnmQB9ybBxUfXu78u+PqLK4gn901g6US1jhWxl0sj3crUXdF 048C2M8oLsU1KjoPrFNgLlQZFIw/jyYbKySSfbWCe1noC0+BmcgODltcxeuukWSe DE5Kff30PgMiCd3evnjyekJ/sXjeRGwh5hgOv73bdoyTf27Q4sJVKXL+Vhqy1okz LbqrWcLnk+bArM3P7M+V2a7bUCt2QS/IjOAVAkT9rPVCBFGdhHhxEc68HWJLhYqz s4GHC/JnrZOunos9dGY1kjEtWlTX1izxpsGgAtz/Neso3TbkP45iKMF2zMacXHSb bKO1GV+vnkPEJQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:54 2026 by rpki-client