This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft File: zSC8r3ISPi2fXieIazg5t0JEELc.mft (raw, json) Hash identifier: Uoc4xqYsXoDJqsbOGLPD26jFaRXngqA6pL80Sm76TPY= Subject key identifier: 60:E4:6F:FF:07:57:24:48:08:A7:57:73:50:E9:43:ED:DA:A9:E1:43 Authority key identifier: CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7 Certificate issuer: /CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7 Certificate serial: 019C427D08F9EF64B7CE3D8CEA7C5E0F7B64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft Manifest number: 0DFE Signing time: Mon 09 Feb 2026 13:00:16 +0000 Manifest this update: Mon 09 Feb 2026 13:00:16 +0000 Manifest next update: Tue 10 Feb 2026 13:00:16 +0000 Files and hashes: 1: MxSa_Y12ZkKW1wWb8756TfNw_Aw.roa (hash: EaKZOSwf60cJtDMMGuhN9/rV4xuZMLDks62/ENEPebA=) 2: zSC8r3ISPi2fXieIazg5t0JEELc.crl (hash: h95BMMwrsJ/65h/IYCzkb4OEfHbcDl2L9rxYSsF/dgU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:08:f9:ef:64:b7:ce:3d:8c:ea:7c:5e:0f:7b:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd20bcaf72123e2d9f5e27886b3839b7424410b7 Validity Not Before: Feb 9 13:00:16 2026 GMT Not After : Feb 10 13:00:16 2026 GMT Subject: CN=60e46fff0757244808a7577350e943eddaa9e143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b9:7f:08:d2:9a:d6:10:9d:bb:31:46:c8:95: 4f:0a:3e:23:13:61:48:e2:b1:b4:7d:07:7c:ed:7b: d1:90:f8:57:5c:b5:5f:76:65:d8:15:2b:86:4c:f1: 13:26:ba:fb:0e:4b:78:c2:71:47:30:8e:10:63:40: 9c:a6:ca:06:11:16:92:34:05:e3:6e:0d:6c:ca:fb: 65:ca:94:bb:e1:cd:16:65:8a:c3:0a:11:11:ee:7b: a7:fc:c1:4b:4a:db:11:1c:47:9b:8f:a6:c1:99:f1: ec:18:6a:62:3c:54:74:90:fd:02:64:c7:cb:ed:c9: 96:3e:64:32:3b:8e:b9:4e:3d:d8:1c:27:5b:5d:02: b2:c6:ab:f6:5b:00:87:c4:07:49:13:33:d3:54:8f: 3a:f7:7a:f9:19:f3:84:9d:7d:d5:81:95:b5:e3:65: 03:a2:f5:6e:74:6c:2a:66:11:a9:e2:98:b3:59:e7: 20:d3:59:26:a3:1b:2d:99:fb:95:50:2a:ed:2f:f6: b6:bd:08:c2:b8:91:08:38:ca:b5:cc:7c:4d:4b:6a: dc:4a:aa:20:41:b2:8a:91:ed:38:b4:51:a6:aa:6b: 16:77:72:0e:9a:24:97:5b:36:35:32:75:c5:6a:a2: 1d:f7:37:86:50:86:55:75:3e:a7:62:6b:ce:a5:ac: f1:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E4:6F:FF:07:57:24:48:08:A7:57:73:50:E9:43:ED:DA:A9:E1:43 X509v3 Authority Key Identifier: keyid:CD:20:BC:AF:72:12:3E:2D:9F:5E:27:88:6B:38:39:B7:42:44:10:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zSC8r3ISPi2fXieIazg5t0JEELc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/44cf6a-dcbf-4335-9bdf-0f82c1ba1806/1/zSC8r3ISPi2fXieIazg5t0JEELc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:4b:7b:97:f8:5f:65:33:a7:ca:f3:b3:ff:60:71:ac:aa:f7: 54:5b:d0:eb:b1:e1:8b:fd:fa:0b:d0:2d:2e:78:5e:49:77:d5: 29:4f:31:55:23:09:50:1b:9b:4a:93:bf:d7:b5:4a:dd:a8:73: fe:f6:36:b3:9d:d9:e9:78:7b:13:a4:00:c9:cf:48:fd:b0:d3: aa:8a:4e:8c:27:b8:7b:78:53:7c:45:4b:92:b8:01:3d:d7:e1: 0e:0b:a4:8b:4d:ce:8e:f0:6a:cb:b8:a0:e8:e0:0e:43:c4:97: a6:a1:1a:ba:52:e4:de:78:ef:ef:30:98:b6:cb:2c:aa:b3:ac: be:1f:d8:75:93:f9:4d:99:ec:ea:6c:c5:bd:97:57:f7:d0:5c: 2b:d8:83:67:cf:5d:51:4d:73:92:91:fd:f5:06:a3:b6:96:03: d6:94:be:62:33:1e:2d:96:3f:c0:06:4a:56:70:df:8a:86:78: 1a:8e:4d:af:9d:b6:d5:b0:8b:6a:f6:32:e1:c3:fe:61:00:d9: f4:60:91:f3:d9:a3:c0:1e:30:25:4f:08:15:dc:f7:65:98:50: 02:39:31:4d:27:2c:74:31:ea:fd:b2:3d:43:16:20:a5:7b:fc: c7:a1:71:cb:b6:d2:5e:94:5c:7a:bf:b9:97:e8:60:1f:82:f0: f4:60:27:50 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQj572S3zj2M6nxeD3tkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMjBiY2FmNzIxMjNlMmQ5ZjVlMjc4ODZiMzgzOWI3NDI0 NDEwYjcwHhcNMjYwMjA5MTMwMDE2WhcNMjYwMjEwMTMwMDE2WjAzMTEwLwYDVQQD Eyg2MGU0NmZmZjA3NTcyNDQ4MDhhNzU3NzM1MGU5NDNlZGRhYTllMTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rl/CNKa1hCduzFGyJVPCj4jE2FI 4rG0fQd87XvRkPhXXLVfdmXYFSuGTPETJrr7Dkt4wnFHMI4QY0CcpsoGERaSNAXj bg1syvtlypS74c0WZYrDChER7nun/MFLStsRHEebj6bBmfHsGGpiPFR0kP0CZMfL 7cmWPmQyO465Tj3YHCdbXQKyxqv2WwCHxAdJEzPTVI8693r5GfOEnX3VgZW142UD ovVudGwqZhGp4pizWecg01kmoxstmfuVUCrtL/a2vQjCuJEIOMq1zHxNS2rcSqog QbKKke04tFGmqmsWd3IOmiSXWzY1MnXFaqId9zeGUIZVdT6nYmvOpazxkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDkb/8HVyRICKdXc1DpQ+3aqeFDMB8GA1UdIwQY MBaAFM0gvK9yEj4tn14niGs4ObdCRBC3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYt MGY4MmMxYmExODA2LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy80NGNmNmEtZGNiZi00MzM1LTliZGYtMGY4MmMxYmExODA2 LzEvelNDOHIzSVNQaTJmWGllSWF6ZzV0MEpFRUxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0t7l/hf ZTOnyvOz/2BxrKr3VFvQ67Hhi/36C9AtLnheSXfVKU8xVSMJUBubSpO/17VK3ahz /vY2s53Z6Xh7E6QAyc9I/bDTqopOjCe4e3hTfEVLkrgBPdfhDguki03OjvBqy7ig 6OAOQ8SXpqEaulLk3njv7zCYtsssqrOsvh/YdZP5TZns6mzFvZdX99BcK9iDZ89d UU1zkpH99QajtpYD1pS+YjMeLZY/wAZKVnDfioZ4Go5Nr5221bCLavYy4cP+YQDZ 9GCR89mjwB4wJU8IFdz3ZZhQAjkxTScsdDHq/bI9QxYgpXv8x6Fxy7bSXpRcer+5 l+hgH4Lw9GAnUA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:37 2026 by rpki-client