This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft File: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft (raw, json) Hash identifier: 30QJ98Vn8WkOwR+53rBHkls/ZM8wz5xOtObv5zy5d2I= Subject key identifier: 99:38:82:AB:78:73:D2:B8:4D:C1:A8:46:09:9C:C0:D3:0E:A1:4C:16 Authority key identifier: 64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D Certificate issuer: /CN=642e36ff8cd9c91599bb3fecec106643d9f2168d Certificate serial: 019C42B49565DBBBB06D27B54AD3B1CE11A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft Manifest number: 12D3 Signing time: Mon 09 Feb 2026 14:00:56 +0000 Manifest this update: Mon 09 Feb 2026 14:00:56 +0000 Manifest next update: Tue 10 Feb 2026 14:00:56 +0000 Files and hashes: 1: PT62C61CPHdRc2fJbDVDuVJRXj0.roa (hash: QoRuxKV7gftAIFcmKvKd/abqm9YeDR7k0cYgqnasPfc=) 2: ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl (hash: +ZLdzsuH5C50gAUvPlo0k9ncK5/i8P9rJVxCUESmsZc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:95:65:db:bb:b0:6d:27:b5:4a:d3:b1:ce:11:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=642e36ff8cd9c91599bb3fecec106643d9f2168d Validity Not Before: Feb 9 14:00:56 2026 GMT Not After : Feb 10 14:00:56 2026 GMT Subject: CN=993882ab7873d2b84dc1a846099cc0d30ea14c16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c9:08:40:f2:71:e7:3e:82:1d:48:74:08:f9: 60:f9:c9:cd:b6:bf:87:f6:d1:23:4c:f5:7b:44:33: 26:c3:77:1e:a7:8a:85:d7:d1:68:44:b6:bf:b0:dc: 6b:88:bb:95:07:a3:fd:74:5f:01:c2:9e:41:3a:62: a5:29:2e:a2:8b:2f:d3:ce:5c:8c:8b:50:3e:f6:9f: 1a:11:1a:bf:3d:c4:19:b4:9f:68:fa:ee:bb:5b:b6: b0:95:22:9c:2f:7d:1d:e1:34:b9:8e:d3:69:8e:fe: 76:33:eb:b3:f1:c4:98:dd:a3:88:00:34:69:fd:77: 61:f2:55:84:b3:13:a9:43:80:c9:ba:7f:3b:4f:52: 4d:7d:cd:e5:3c:93:df:bc:a6:8b:55:a2:fc:82:62: 03:5f:69:4b:ef:0f:29:cf:78:fc:9e:63:1b:dd:3f: f9:b3:0a:1f:92:2b:8f:48:bb:7f:c1:ae:ed:64:e9: 76:89:c7:5b:24:2f:d9:5f:ff:3c:e0:6c:f1:3d:28: e5:f9:25:d3:89:d5:a3:b5:b4:9c:5c:72:12:46:d3: dc:ed:49:05:a8:6c:54:60:d2:fa:1b:4b:fd:4a:a2: 6e:79:37:22:f3:c9:48:84:07:65:9f:96:fe:d4:44: 59:48:8d:52:65:69:bf:56:d8:c4:96:11:41:23:c6: 79:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:38:82:AB:78:73:D2:B8:4D:C1:A8:46:09:9C:C0:D3:0E:A1:4C:16 X509v3 Authority Key Identifier: keyid:64:2E:36:FF:8C:D9:C9:15:99:BB:3F:EC:EC:10:66:43:D9:F2:16:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/71a2cb-e43b-4059-86e4-505092092f43/1/ZC42_4zZyRWZuz_s7BBmQ9nyFo0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:31:7c:06:72:d4:60:59:a1:65:9f:f4:71:2d:99:41:02:ef: f1:dc:b4:97:cb:a9:93:5e:4e:ab:f1:82:b6:c5:9c:c0:b3:c1: 58:3b:c2:0c:2f:af:d2:77:33:b9:27:15:9f:49:f5:34:7c:f5: 58:a3:a4:b5:4f:28:d3:cf:65:1d:4e:78:9e:20:15:14:d0:fc: ae:83:34:25:4f:6a:ff:8a:4e:f1:94:06:43:f6:de:92:a6:f4: d9:17:36:23:17:67:8c:da:ff:71:30:e1:e5:6b:63:5f:e1:09: 8d:d0:06:fd:a6:8c:ba:31:91:34:1d:92:ef:ab:d0:5c:dc:70: 7b:04:ea:1b:9b:36:10:e7:e5:d6:ad:95:12:3b:c4:08:b3:0a: f8:9b:05:30:30:43:84:cc:9c:09:49:3b:18:c0:4b:0e:fb:ae: 1d:22:f8:10:5b:0c:18:26:0d:c6:72:1b:8b:cd:8e:df:93:f4: 7d:bd:cd:93:2a:51:e4:5c:8f:89:d6:72:cf:09:8a:78:2e:50: 3f:28:19:33:4e:d1:3b:a7:64:6f:05:96:68:a6:d8:ae:b3:e3: 5b:ee:bc:53:63:f9:27:5e:87:00:46:30:11:ad:f8:9c:c8:9f: 9d:a7:70:3f:c2:54:4a:06:48:30:98:20:6d:56:4b:7e:23:35: 83:4d:6e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJVl27uwbSe1StOxzhGhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MmUzNmZmOGNkOWM5MTU5OWJiM2ZlY2VjMTA2NjQzZDlm MjE2OGQwHhcNMjYwMjA5MTQwMDU2WhcNMjYwMjEwMTQwMDU2WjAzMTEwLwYDVQQD Eyg5OTM4ODJhYjc4NzNkMmI4NGRjMWE4NDYwOTljYzBkMzBlYTE0YzE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8kIQPJx5z6CHUh0CPlg+cnNtr+H 9tEjTPV7RDMmw3cep4qF19FoRLa/sNxriLuVB6P9dF8Bwp5BOmKlKS6iiy/TzlyM i1A+9p8aERq/PcQZtJ9o+u67W7awlSKcL30d4TS5jtNpjv52M+uz8cSY3aOIADRp /Xdh8lWEsxOpQ4DJun87T1JNfc3lPJPfvKaLVaL8gmIDX2lL7w8pz3j8nmMb3T/5 swofkiuPSLt/wa7tZOl2icdbJC/ZX/884GzxPSjl+SXTidWjtbScXHISRtPc7UkF qGxUYNL6G0v9SqJueTci88lIhAdln5b+1ERZSI1SZWm/VtjElhFBI8Z5qQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJk4gqt4c9K4TcGoRgmcwNMOoUwWMB8GA1UdIwQY MBaAFGQuNv+M2ckVmbs/7OwQZkPZ8haNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQt NTA1MDkyMDkyZjQzLzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy83MWEyY2ItZTQzYi00MDU5LTg2ZTQtNTA1MDkyMDkyZjQz LzEvWkM0Ml80elp5UldadXpfczdCQm1ROW55Rm8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzF8BnLU YFmhZZ/0cS2ZQQLv8dy0l8upk15Oq/GCtsWcwLPBWDvCDC+v0nczuScVn0n1NHz1 WKOktU8o089lHU54niAVFND8roM0JU9q/4pO8ZQGQ/bekqb02Rc2IxdnjNr/cTDh 5WtjX+EJjdAG/aaMujGRNB2S76vQXNxwewTqG5s2EOfl1q2VEjvECLMK+JsFMDBD hMycCUk7GMBLDvuuHSL4EFsMGCYNxnIbi82O35P0fb3NkypR5FyPidZyzwmKeC5Q PygZM07RO6dkbwWWaKbYrrPjW+68U2P5J16HAEYwEa34nMifnadwP8JUSgZIMJgg bVZLfiM1g01uAQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:57 2026 by rpki-client