This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft File: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft (raw, json) Hash identifier: i6x9p+pfFliUzC4YOF/OrJIoJ9hvMWYO3bdbounbdDw= Subject key identifier: 46:AF:EE:11:B7:45:99:94:97:6A:61:97:E9:C0:60:F0:F7:03:FE:90 Authority key identifier: 67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43 Certificate issuer: /CN=67e07ef4e7e4b684082198e4ec92144344c41843 Certificate serial: 019C45479C1E4C62BFB9CCFE39A22E8C4629 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft Manifest number: 0407 Signing time: Tue 10 Feb 2026 02:00:46 +0000 Manifest this update: Tue 10 Feb 2026 02:00:46 +0000 Manifest next update: Wed 11 Feb 2026 02:00:46 +0000 Files and hashes: 1: 6q6FFP59V1iZ5mjSs0C-bMaEVi4.roa (hash: 7kD8hB6sSAR0ZTznrHLFw4wEeWx6SBRTYXwBBQFgLak=) 2: Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl (hash: wU8HHJ6rlFahyrSC8ql6+mRF4emwTfyRxCJ5muuzE9w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:9c:1e:4c:62:bf:b9:cc:fe:39:a2:2e:8c:46:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67e07ef4e7e4b684082198e4ec92144344c41843 Validity Not Before: Feb 10 02:00:46 2026 GMT Not After : Feb 11 02:00:46 2026 GMT Subject: CN=46afee11b7459994976a6197e9c060f0f703fe90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c1:c9:04:41:92:f4:6e:8d:59:50:c9:da:0a: 89:b4:11:d9:88:1e:a9:70:c8:9d:9d:2a:81:b8:bb: 12:35:ed:1a:af:e5:54:c3:cf:ba:71:58:73:c7:90: 00:57:6e:58:89:03:71:1a:f6:be:f5:96:b1:29:ad: 66:c3:d8:cb:a8:4d:42:c0:36:29:62:2a:8a:10:ce: 4e:79:4f:e9:06:3a:75:08:be:ca:94:5f:8f:8d:c0: 45:c7:6b:a9:5f:07:26:44:b8:87:d4:64:7e:db:6f: ad:7a:8a:95:55:07:76:b3:fd:95:98:72:bf:03:e2: 75:ed:be:e4:f1:b7:c1:e1:09:e1:34:93:fc:e3:f6: 9b:e8:ec:3d:d8:5c:31:1f:54:34:46:6e:8f:4f:a9: 57:e6:8d:bb:59:2b:aa:51:41:ae:bf:b1:82:a1:7e: a1:bd:ac:24:ec:6b:21:74:82:f0:38:2d:22:c7:b1: 1f:0b:ac:19:ee:cf:0f:2a:04:72:04:5a:62:0f:8e: 37:c1:b7:47:e2:77:ab:71:ca:ab:a3:f1:e2:cd:7e: dc:72:69:89:43:ff:e8:7f:05:43:30:96:9a:45:51: 01:f5:77:46:9a:f7:2a:d3:db:24:0f:88:d4:6b:93: b4:54:1d:f8:75:00:3e:cd:a3:7e:72:a6:98:2c:27: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:AF:EE:11:B7:45:99:94:97:6A:61:97:E9:C0:60:F0:F7:03:FE:90 X509v3 Authority Key Identifier: keyid:67:E0:7E:F4:E7:E4:B6:84:08:21:98:E4:EC:92:14:43:44:C4:18:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/44f63e-f33d-4f22-8dfb-af6f338bcec2/1/Z-B-9OfktoQIIZjk7JIUQ0TEGEM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:1b:1b:f6:fa:7b:c5:99:1c:70:c9:f1:6e:73:d6:5d:7d:06: 38:6c:ff:1a:6c:8a:d3:77:f6:97:b4:5c:2e:b4:be:9d:12:27: b2:20:de:26:dd:33:31:29:31:57:ab:52:dd:d7:cf:e3:1e:bd: 6f:cd:ef:cd:f1:1c:92:ab:a8:0b:d9:5d:6e:6f:be:09:8a:e0: c9:14:b0:f1:74:e6:d5:01:3d:31:30:f5:38:f3:b0:19:37:88: 99:4e:71:26:35:a8:64:eb:e9:92:44:e9:ad:80:1a:8b:b5:93: c1:dc:fb:48:5c:ec:96:b6:18:7c:0c:36:b4:e2:17:de:db:de: 12:55:28:ca:81:ca:70:20:1b:0c:d2:1c:6c:41:42:02:a4:d7: 43:4e:d3:5b:ee:90:e1:9d:05:da:6e:24:f1:a3:8b:bc:8e:ef: 79:50:96:e2:46:c0:f7:72:f3:c4:f5:11:d1:0e:61:55:72:b2: 25:9b:16:13:1d:13:52:45:f2:70:b2:c5:a1:76:d0:87:73:6a: c6:83:76:44:68:66:5e:18:23:5a:11:26:ef:bc:16:e4:32:33: 54:0f:81:3e:e8:60:b0:af:fc:3f:0d:0b:58:50:b1:26:11:ef: 7f:02:52:16:43:d5:cb:7c:ad:02:3b:5f:55:06:7f:b1:c5:0d: 29:30:9a:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFR5weTGK/ucz+OaIujEYpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZTA3ZWY0ZTdlNGI2ODQwODIxOThlNGVjOTIxNDQzNDRj NDE4NDMwHhcNMjYwMjEwMDIwMDQ2WhcNMjYwMjExMDIwMDQ2WjAzMTEwLwYDVQQD Eyg0NmFmZWUxMWI3NDU5OTk0OTc2YTYxOTdlOWMwNjBmMGY3MDNmZTkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAssHJBEGS9G6NWVDJ2gqJtBHZiB6p cMidnSqBuLsSNe0ar+VUw8+6cVhzx5AAV25YiQNxGva+9ZaxKa1mw9jLqE1CwDYp YiqKEM5OeU/pBjp1CL7KlF+PjcBFx2upXwcmRLiH1GR+22+teoqVVQd2s/2VmHK/ A+J17b7k8bfB4QnhNJP84/ab6Ow92FwxH1Q0Rm6PT6lX5o27WSuqUUGuv7GCoX6h vawk7GshdILwOC0ix7EfC6wZ7s8PKgRyBFpiD443wbdH4nerccqro/HizX7ccmmJ Q//ofwVDMJaaRVEB9XdGmvcq09skD4jUa5O0VB34dQA+zaN+cqaYLCekWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEav7hG3RZmUl2phl+nAYPD3A/6QMB8GA1UdIwQY MBaAFGfgfvTn5LaECCGY5OySFENExBhDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmIt YWY2ZjMzOGJjZWMyLzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC80NGY2M2UtZjMzZC00ZjIyLThkZmItYWY2ZjMzOGJjZWMy LzEvWi1CLTlPZmt0b1FJSVpqazdKSVVRMFRFR0VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxsb9vp7 xZkccMnxbnPWXX0GOGz/GmyK03f2l7RcLrS+nRInsiDeJt0zMSkxV6tS3dfP4x69 b83vzfEckquoC9ldbm++CYrgyRSw8XTm1QE9MTD1OPOwGTeImU5xJjWoZOvpkkTp rYAai7WTwdz7SFzslrYYfAw2tOIX3tveElUoyoHKcCAbDNIcbEFCAqTXQ07TW+6Q 4Z0F2m4k8aOLvI7veVCW4kbA93LzxPUR0Q5hVXKyJZsWEx0TUkXycLLFoXbQh3Nq xoN2RGhmXhgjWhEm77wW5DIzVA+BPuhgsK/8Pw0LWFCxJhHvfwJSFkPVy3ytAjtf VQZ/scUNKTCa4Q== -----END CERTIFICATE-----Generated at Tue Feb 10 04:19:39 2026 by rpki-client