This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft File: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json) Hash identifier: lfG2dVCagQgMxR75M2DsMoBGXYBFmPW0ChaDMV9ZwfQ= Subject key identifier: F9:E1:E0:F1:36:02:D1:A1:92:B5:CC:88:C0:D9:19:29:67:1B:AA:56 Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B Certificate issuer: /CN=65fa270083376517168285f97c2f0de43dc1763b Certificate serial: 019C43224E938AD53CDD6C80C42B977D3D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft Manifest number: 0E65 Signing time: Mon 09 Feb 2026 16:00:47 +0000 Manifest this update: Mon 09 Feb 2026 16:00:47 +0000 Manifest next update: Tue 10 Feb 2026 16:00:47 +0000 Files and hashes: 1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: PuZgBnK0l33ftoSULnsyjrag+jab3CDxLUFfoqFUhhI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:4e:93:8a:d5:3c:dd:6c:80:c4:2b:97:7d:3d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b Validity Not Before: Feb 9 16:00:47 2026 GMT Not After : Feb 10 16:00:47 2026 GMT Subject: CN=f9e1e0f13602d1a192b5cc88c0d91929671baa56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:4c:0f:dc:0e:62:a3:e5:14:e5:35:4f:5d: 47:7f:db:f1:04:ae:4f:eb:c1:e5:3c:39:c7:90:4a: 8c:9d:86:c7:4f:2f:cf:fb:90:dc:6b:38:ef:fb:d5: a7:45:f8:76:46:09:44:72:72:23:f5:a6:93:b3:db: 39:91:90:75:1c:63:ac:ac:ca:06:71:11:ef:c1:ac: e5:40:98:38:15:28:98:5c:b0:90:32:c2:f3:6a:2d: ec:9e:de:53:ac:01:e1:0b:67:62:54:af:a0:3f:f1: 44:bb:d3:38:fc:f3:23:48:57:13:57:8b:30:21:40: bf:f1:c5:9b:25:bf:8d:2d:b6:f4:d8:de:b9:6a:fb: 93:b0:6b:4b:51:05:c8:4e:1f:3f:5f:d1:c4:52:4c: 84:a0:ad:f4:b4:89:05:a7:63:47:07:8c:68:80:ee: 7f:e1:71:60:79:6b:75:2a:c8:0a:8f:d7:a5:15:c5: 9d:f5:b0:4a:bf:93:25:55:1c:4d:e1:76:73:23:84: 49:8d:a1:b7:1e:57:40:e8:19:2b:a5:56:d4:5f:c5: c6:06:db:16:66:a4:75:5f:15:73:ee:52:af:78:0e: 05:a7:1a:50:d3:14:0f:bf:bf:a8:17:32:fd:72:02: 0f:8b:72:9f:05:5d:df:9c:9d:aa:be:5a:bc:a6:e3: b3:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E1:E0:F1:36:02:D1:A1:92:B5:CC:88:C0:D9:19:29:67:1B:AA:56 X509v3 Authority Key Identifier: keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:03:ea:2f:fc:ea:f8:1a:0f:fd:48:a2:3a:e3:46:82:22: b2:ee:2a:4c:fd:0c:3e:53:f0:c5:ce:a1:a4:fb:3d:d4:46:d7: 97:e6:4c:c0:1e:a6:3b:35:29:5d:25:b3:cc:bd:02:9a:00:ea: ed:38:3a:3b:10:37:c3:bd:da:3e:96:bb:d5:5b:8c:1d:67:84: e4:8a:73:8e:8a:c9:7d:3d:6c:e4:a0:45:3e:97:a9:3e:3c:a7: 0c:ee:73:7e:45:97:33:c7:76:1e:d6:a6:e9:8d:1d:8e:9d:62: 70:84:4a:d3:13:cd:3c:75:77:8a:97:dd:7d:08:e7:f8:16:c2: de:12:1d:95:c1:2b:82:90:23:a2:08:0f:2d:58:b1:5a:33:82: 9e:63:f0:bb:01:bb:98:40:77:a8:1f:26:f0:48:9c:87:53:45: 94:9f:9d:f5:4e:b3:b0:62:3c:95:1d:96:cd:ff:e9:4a:13:52: 9c:21:0d:07:58:66:9a:16:cf:bf:0f:e7:6d:de:3b:36:26:98: 3d:a8:44:69:ec:0f:41:af:73:8c:06:6c:2c:f8:01:81:ea:b5: 47:8a:ac:66:aa:e2:fb:9d:00:01:49:6f:cc:56:14:59:9a:5c: fa:bf:18:aa:c9:f4:24:06:4b:c6:fa:04:55:14:3e:bf:91:00: e6:7f:85:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIk6TitU83WyAxCuXfT1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj MTc2M2IwHhcNMjYwMjA5MTYwMDQ3WhcNMjYwMjEwMTYwMDQ3WjAzMTEwLwYDVQQD EyhmOWUxZTBmMTM2MDJkMWExOTJiNWNjODhjMGQ5MTkyOTY3MWJhYTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCdMD9wOYqPlFOU1T11Hf9vxBK5P 68HlPDnHkEqMnYbHTy/P+5Dcazjv+9WnRfh2RglEcnIj9aaTs9s5kZB1HGOsrMoG cRHvwazlQJg4FSiYXLCQMsLzai3snt5TrAHhC2diVK+gP/FEu9M4/PMjSFcTV4sw IUC/8cWbJb+NLbb02N65avuTsGtLUQXITh8/X9HEUkyEoK30tIkFp2NHB4xogO5/ 4XFgeWt1KsgKj9elFcWd9bBKv5MlVRxN4XZzI4RJjaG3HldA6BkrpVbUX8XGBtsW ZqR1XxVz7lKveA4FpxpQ0xQPv7+oFzL9cgIPi3KfBV3fnJ2qvlq8puOz5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPnh4PE2AtGhkrXMiMDZGSlnG6pWMB8GA1UdIwQY MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0 LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhocD6i/8 6vgaD/1IojrjRoIisu4qTP0MPlPwxc6hpPs91EbXl+ZMwB6mOzUpXSWzzL0CmgDq 7Tg6OxA3w73aPpa71VuMHWeE5IpzjorJfT1s5KBFPpepPjynDO5zfkWXM8d2Htam 6Y0djp1icIRK0xPNPHV3ipfdfQjn+BbC3hIdlcErgpAjoggPLVixWjOCnmPwuwG7 mEB3qB8m8Eich1NFlJ+d9U6zsGI8lR2Wzf/pShNSnCENB1hmmhbPvw/nbd47NiaY PahEaewPQa9zjAZsLPgBgeq1R4qsZqri+50AAUlvzFYUWZpc+r8Yqsn0JAZLxvoE VRQ+v5EA5n+FuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:03 2026 by rpki-client