This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft File: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft (raw, json) Hash identifier: ydeT+SyX/xS9dwTmMe5IlX6zg6GJ92whgOohQ0AuZBI= Subject key identifier: 7B:80:CE:F2:E7:C7:F3:6D:26:2F:77:2D:C0:30:D7:50:23:AB:69:FA Authority key identifier: CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E Certificate issuer: /CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Certificate serial: 019C41D8C2E1C45DEB2F90514A34E900CA53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft Manifest number: 118D Signing time: Mon 09 Feb 2026 10:00:50 +0000 Manifest this update: Mon 09 Feb 2026 10:00:50 +0000 Manifest next update: Tue 10 Feb 2026 10:00:50 +0000 Files and hashes: 1: 2Lj6KAHa7H9f4SxUIEO7Uz1pweY.roa (hash: gFIOx1qhwOYwQbgborzlAfR9qq8vv6N65dglePA77l4=) 2: zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl (hash: o6squRTjIR6Vtc7GiO0Ewqj45YVAxo/GE228DWII2fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:c2:e1:c4:5d:eb:2f:90:51:4a:34:e9:00:ca:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc9fa0b30d5455ad67fb07e099f0fa95f8b6c19e Validity Not Before: Feb 9 10:00:50 2026 GMT Not After : Feb 10 10:00:50 2026 GMT Subject: CN=7b80cef2e7c7f36d262f772dc030d75023ab69fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a6:fd:74:82:ce:97:41:40:a6:52:51:d7:d2: 9f:5f:43:c0:e2:b6:73:b2:2e:c4:ab:7e:2f:f1:a8: 44:a5:78:f0:da:32:89:d2:b5:d0:37:11:87:07:37: 17:4c:e3:a2:ed:18:05:1d:d0:30:cc:a0:7b:96:15: de:49:0c:06:75:f2:ab:21:40:e3:9c:d1:82:f2:5f: e4:ba:fa:9a:33:81:5c:c9:ae:8b:82:6b:a9:d6:1f: 7a:a6:25:6a:59:6b:af:4a:f8:a2:c4:42:03:84:b5: a6:8d:f6:a3:12:ce:d7:00:b2:97:96:59:02:ae:a0: d4:3d:19:00:17:3b:6f:35:50:9c:f4:a0:5d:e3:8a: cf:54:25:33:54:6c:d4:d5:7a:ea:bb:49:6f:1f:f3: c3:2d:39:8f:8c:3c:e5:85:fc:48:7f:97:15:8b:b7: 84:3c:2c:85:16:a9:6e:23:9b:5a:b0:b9:3a:71:8a: 52:e4:b8:6a:e8:a1:58:18:4b:f9:c4:e6:7b:69:20: 43:ba:c7:d9:3d:e7:18:95:69:29:88:e0:23:73:b8: 45:17:28:06:e7:a5:9a:2c:4b:a0:97:f9:d2:e7:7d: 9e:50:72:ee:51:68:2e:95:26:7a:38:b4:b2:e3:cd: bd:ac:ce:69:63:b5:86:b0:d1:40:cf:51:c3:39:87: 94:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:80:CE:F2:E7:C7:F3:6D:26:2F:77:2D:C0:30:D7:50:23:AB:69:FA X509v3 Authority Key Identifier: keyid:CC:9F:A0:B3:0D:54:55:AD:67:FB:07:E0:99:F0:FA:95:F8:B6:C1:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/4883d4-8479-4447-af67-1e6ca2f0d155/1/zJ-gsw1UVa1n-wfgmfD6lfi2wZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:6d:57:9a:1e:9d:ab:7f:20:6c:ea:40:15:80:e5:01:ba:6c: f6:a7:d8:42:44:ee:b5:1e:7c:fe:73:d7:d5:9d:a7:d5:b7:3f: 00:6d:53:17:8c:05:7c:52:b5:60:c6:e7:d1:77:dc:c6:fb:23: 5c:d6:0b:f5:1d:a9:28:c0:79:ea:62:43:3f:f0:34:15:b1:c6: 64:39:24:8d:c1:2c:6e:4f:59:0b:cb:b4:fd:90:bd:16:fb:3b: 1c:b6:73:72:eb:7a:bf:82:39:cb:a2:d0:3b:25:01:2f:0d:a7: 09:e7:66:75:c1:a3:52:a4:6b:e6:e8:6e:ee:cb:4f:88:b4:3c: 90:8f:34:65:6f:b8:22:ae:88:5d:c9:4a:32:e0:09:25:37:91: 8f:68:3a:d7:79:38:19:19:2b:68:db:6e:ae:8d:b1:60:4f:01: 3d:7b:07:d1:28:a3:60:62:6c:7f:c5:4f:0c:c6:50:b6:cd:d6: 42:ce:19:70:39:0b:3d:97:13:59:cb:1f:53:02:0c:97:8d:7f: e5:32:1d:11:0f:78:ea:2a:89:2b:95:4d:60:63:3e:73:35:e3: c5:5b:b1:73:70:7c:e2:73:96:2b:b6:f1:29:23:3b:bc:38:06: d7:f6:7d:94:15:e7:eb:fc:0f:da:04:bb:9f:9d:3f:d4:7f:f3: 29:b2:0d:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2MLhxF3rL5BRSjTpAMpTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjOWZhMGIzMGQ1NDU1YWQ2N2ZiMDdlMDk5ZjBmYTk1Zjhi NmMxOWUwHhcNMjYwMjA5MTAwMDUwWhcNMjYwMjEwMTAwMDUwWjAzMTEwLwYDVQQD Eyg3YjgwY2VmMmU3YzdmMzZkMjYyZjc3MmRjMDMwZDc1MDIzYWI2OWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKb9dILOl0FAplJR19KfX0PA4rZz si7Eq34v8ahEpXjw2jKJ0rXQNxGHBzcXTOOi7RgFHdAwzKB7lhXeSQwGdfKrIUDj nNGC8l/kuvqaM4Fcya6Lgmup1h96piVqWWuvSviixEIDhLWmjfajEs7XALKXllkC rqDUPRkAFztvNVCc9KBd44rPVCUzVGzU1Xrqu0lvH/PDLTmPjDzlhfxIf5cVi7eE PCyFFqluI5tasLk6cYpS5Lhq6KFYGEv5xOZ7aSBDusfZPecYlWkpiOAjc7hFFygG 56WaLEugl/nS532eUHLuUWgulSZ6OLSy4829rM5pY7WGsNFAz1HDOYeUxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHuAzvLnx/NtJi93LcAw11Ajq2n6MB8GA1UdIwQY MBaAFMyfoLMNVFWtZ/sH4Jnw+pX4tsGeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjct MWU2Y2EyZjBkMTU1LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC80ODgzZDQtODQ3OS00NDQ3LWFmNjctMWU2Y2EyZjBkMTU1 LzEvekotZ3N3MVVWYTFuLXdmZ21mRDZsZmkyd1o0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPG1Xmh6d q38gbOpAFYDlAbps9qfYQkTutR58/nPX1Z2n1bc/AG1TF4wFfFK1YMbn0Xfcxvsj XNYL9R2pKMB56mJDP/A0FbHGZDkkjcEsbk9ZC8u0/ZC9Fvs7HLZzcut6v4I5y6LQ OyUBLw2nCedmdcGjUqRr5uhu7stPiLQ8kI80ZW+4Iq6IXclKMuAJJTeRj2g613k4 GRkraNturo2xYE8BPXsH0SijYGJsf8VPDMZQts3WQs4ZcDkLPZcTWcsfUwIMl41/ 5TIdEQ946iqJK5VNYGM+czXjxVuxc3B84nOWK7bxKSM7vDgG1/Z9lBXn6/wP2gS7 n50/1H/zKbIN4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:34 2026 by rpki-client