This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.mft File: zLfkuuY5q25cvGjwVqk6dBzrW1c.mft (raw, json) Hash identifier: AEI3G+43tlzRdl7EZagjbTjf+Y0Bc70gfSYQTsXGeSo= Subject key identifier: 4C:A8:6D:DC:16:AF:9A:77:6F:43:8A:3E:20:F3:9D:CD:34:DB:3A:3C Authority key identifier: CC:B7:E4:BA:E6:39:AB:6E:5C:BC:68:F0:56:A9:3A:74:1C:EB:5B:57 Certificate issuer: /CN=ccb7e4bae639ab6e5cbc68f056a93a741ceb5b57 Certificate serial: 019C42466ECB59FCCE3263844A3D124751E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zLfkuuY5q25cvGjwVqk6dBzrW1c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.mft Manifest number: 03 Signing time: Mon 09 Feb 2026 12:00:37 +0000 Manifest this update: Mon 09 Feb 2026 12:00:37 +0000 Manifest next update: Tue 10 Feb 2026 12:00:37 +0000 Files and hashes: 1: 2hSPx6rYzToH0pWcWn39SaZkcxE.asa (hash: 52CB2Qc9c7IoeeGlVxpb69JAcbfNq968NJtdyxkcVBQ=) 2: zLfkuuY5q25cvGjwVqk6dBzrW1c.crl (hash: bgvY3DVcwBMz5zrD+J064boWO5uZyGCqvdanyWPSh8c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.crl rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.mft rsync://rpki.ripe.net/repository/DEFAULT/zLfkuuY5q25cvGjwVqk6dBzrW1c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:6e:cb:59:fc:ce:32:63:84:4a:3d:12:47:51:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ccb7e4bae639ab6e5cbc68f056a93a741ceb5b57 Validity Not Before: Feb 9 12:00:37 2026 GMT Not After : Feb 10 12:00:37 2026 GMT Subject: CN=4ca86ddc16af9a776f438a3e20f39dcd34db3a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c7:f4:84:86:d2:18:5a:05:1c:b8:39:06:1a: 86:83:bc:d4:97:11:27:03:51:3e:fe:72:32:de:ae: 0e:93:35:09:ab:8e:5c:32:83:72:b6:31:ff:87:54: 55:b0:88:a0:53:db:6e:80:79:b3:0f:0e:fa:47:e5: 96:07:0f:69:fb:ef:a0:88:84:fe:9a:96:04:8e:a1: eb:f5:be:7c:ee:55:90:0a:7f:2d:c5:c1:37:31:da: 8c:c8:95:06:5b:c7:7f:d7:79:14:79:c2:b1:1f:2b: 11:0a:54:ca:89:cc:9c:44:1f:60:b5:25:3f:d4:da: 1b:ba:0d:8c:9d:73:5a:73:b0:e6:0e:30:ab:ab:d0: 21:16:b3:05:c0:27:d9:b6:4d:47:17:9a:0e:cf:c9: 0d:36:7e:15:c6:ed:63:98:f0:83:0e:45:bf:7a:4e: be:fc:b2:1a:a1:3b:88:24:03:62:56:82:7d:7f:ff: 81:f8:ea:a2:64:5c:09:43:97:44:79:a9:a6:46:6b: ca:1b:63:dc:3a:36:a6:7a:d8:29:a9:cb:ce:2b:ab: fc:f0:04:f9:8d:cd:e6:79:3f:79:85:11:ca:8e:35: 31:e7:96:e5:2f:e3:1b:bc:ba:5d:7f:4b:df:4a:4c: d8:c8:5d:49:c5:9a:91:e4:05:0e:ef:51:26:12:ed: 00:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:A8:6D:DC:16:AF:9A:77:6F:43:8A:3E:20:F3:9D:CD:34:DB:3A:3C X509v3 Authority Key Identifier: keyid:CC:B7:E4:BA:E6:39:AB:6E:5C:BC:68:F0:56:A9:3A:74:1C:EB:5B:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zLfkuuY5q25cvGjwVqk6dBzrW1c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/478ffa-91a8-483a-b2e9-48617f501699/1/zLfkuuY5q25cvGjwVqk6dBzrW1c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b0:8e:7a:61:85:a7:f5:88:ef:c4:bd:a4:c1:db:f5:1d:15: 43:26:72:ee:0c:a0:01:90:a8:88:66:33:e4:2b:83:6c:31:88: 5d:df:25:6a:40:c2:dd:c8:ec:aa:0d:17:45:ae:4e:c1:3f:0f: d4:5c:5b:08:a2:51:87:06:4b:40:2a:d8:d0:56:8c:70:6c:ce: 50:69:e8:da:b9:85:5f:3f:e6:3b:21:de:bd:bc:43:9b:f3:0a: 07:b7:53:c3:dd:60:df:0c:d2:9a:c0:a2:7a:9d:ee:95:44:26: ab:cb:4c:39:47:78:e1:f9:b6:9f:92:de:a7:21:a9:c4:7d:66: 8c:b2:96:f4:36:ab:21:02:33:9e:f9:05:f0:e5:af:41:d1:2e: a4:ac:ed:13:4a:90:15:fe:c1:d7:b9:fb:9d:05:5e:25:39:5c: 45:a9:5f:24:d4:8f:34:42:94:29:5b:39:6e:6e:95:42:a2:c8: 8e:9d:37:47:ae:67:8c:45:4b:56:c5:60:49:e0:16:42:a8:93: 8a:8c:98:a8:45:f4:25:c1:c3:2d:7f:5d:e4:cb:26:b7:6f:11: 46:6b:17:58:56:88:6b:bf:ba:0b:18:39:83:9b:31:a8:42:04: cb:a6:10:c5:2c:cd:ab:94:c2:f8:c6:d2:c3:61:5d:94:53:b2: 38:c4:b5:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRm7LWfzOMmOESj0SR1HnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjYjdlNGJhZTYzOWFiNmU1Y2JjNjhmMDU2YTkzYTc0MWNl YjViNTcwHhcNMjYwMjA5MTIwMDM3WhcNMjYwMjEwMTIwMDM3WjAzMTEwLwYDVQQD Eyg0Y2E4NmRkYzE2YWY5YTc3NmY0MzhhM2UyMGYzOWRjZDM0ZGIzYTNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMf0hIbSGFoFHLg5BhqGg7zUlxEn A1E+/nIy3q4OkzUJq45cMoNytjH/h1RVsIigU9tugHmzDw76R+WWBw9p+++giIT+ mpYEjqHr9b587lWQCn8txcE3MdqMyJUGW8d/13kUecKxHysRClTKicycRB9gtSU/ 1Nobug2MnXNac7DmDjCrq9AhFrMFwCfZtk1HF5oOz8kNNn4Vxu1jmPCDDkW/ek6+ /LIaoTuIJANiVoJ9f/+B+OqiZFwJQ5dEeammRmvKG2PcOjametgpqcvOK6v88AT5 jc3meT95hRHKjjUx55blL+MbvLpdf0vfSkzYyF1JxZqR5AUO71EmEu0A6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEyobdwWr5p3b0OKPiDznc002zo8MB8GA1UdIwQY MBaAFMy35LrmOatuXLxo8FapOnQc61tXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekxma3V1WTVxMjVjdkdqd1ZxazZkQnpyVzFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi80NzhmZmEtOTFhOC00ODNhLWIyZTkt NDg2MTdmNTAxNjk5LzEvekxma3V1WTVxMjVjdkdqd1ZxazZkQnpyVzFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNi80NzhmZmEtOTFhOC00ODNhLWIyZTktNDg2MTdmNTAxNjk5 LzEvekxma3V1WTVxMjVjdkdqd1ZxazZkQnpyVzFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrCOemGF p/WI78S9pMHb9R0VQyZy7gygAZCoiGYz5CuDbDGIXd8lakDC3cjsqg0XRa5OwT8P 1FxbCKJRhwZLQCrY0FaMcGzOUGno2rmFXz/mOyHevbxDm/MKB7dTw91g3wzSmsCi ep3ulUQmq8tMOUd44fm2n5LepyGpxH1mjLKW9DarIQIznvkF8OWvQdEupKztE0qQ Ff7B17n7nQVeJTlcRalfJNSPNEKUKVs5bm6VQqLIjp03R65njEVLVsVgSeAWQqiT ioyYqEX0JcHDLX9d5Msmt28RRmsXWFaIa7+6Cxg5g5sxqEIEy6YQxSzNq5TC+MbS w2FdlFOyOMS1lA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:48:01 2026 by rpki-client