This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft File: ZEZaih6OQvGmDSeBmMMgrsDz99w.mft (raw, json) Hash identifier: WYlyc/G8tTuYFs9ONai6qlIDoYL2LzEKDHfpQ3NcP18= Subject key identifier: 69:A7:CC:28:8E:49:79:8A:B3:99:99:92:7F:72:D4:49:C5:89:AD:33 Authority key identifier: 64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC Certificate issuer: /CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc Certificate serial: 019C42EBB23B1FDBDD777A037FA00F569DBF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft Manifest number: 0CE1 Signing time: Mon 09 Feb 2026 15:01:08 +0000 Manifest this update: Mon 09 Feb 2026 15:01:08 +0000 Manifest next update: Tue 10 Feb 2026 15:01:08 +0000 Files and hashes: 1: GyI44ywFgDL-tIZOk-8lHYup6C0.roa (hash: G6Has1owART2ONYwMGdXhGXjBMiqm1IjR539vTMUHLc=) 2: ZEZaih6OQvGmDSeBmMMgrsDz99w.crl (hash: A6G0n8ojsMmFtvqDWaS+4SUs+slSml5MQvabI8hPodw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:b2:3b:1f:db:dd:77:7a:03:7f:a0:0f:56:9d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64465a8a1e8e42f1a60d278198c320aec0f3f7dc Validity Not Before: Feb 9 15:01:08 2026 GMT Not After : Feb 10 15:01:08 2026 GMT Subject: CN=69a7cc288e49798ab39999927f72d449c589ad33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:34:4a:af:e6:02:77:17:74:78:20:88:06:5b: 16:54:b3:a9:81:cc:14:57:36:a4:23:f1:c1:3e:54: 00:a8:20:3f:36:69:62:11:40:84:56:d1:c8:65:9f: aa:e3:dd:56:fe:fa:ff:63:32:ad:73:cc:4f:32:7b: 43:aa:e8:cd:91:cf:23:2f:74:16:46:63:91:32:4e: e8:0e:ed:f6:39:74:45:73:5c:39:a7:00:bd:d4:12: 95:98:87:b0:60:55:d8:28:9c:cb:cf:da:7c:9f:26: 9e:08:0d:a9:df:bd:82:13:bc:42:c2:6b:05:a2:a2: 82:d0:d2:0d:39:a1:bd:48:7f:91:2f:cc:52:3e:bb: c8:a8:62:ea:9d:ed:da:91:f9:10:6c:58:af:f8:2a: 2e:58:1d:de:6d:49:fa:d9:e8:86:83:f1:78:63:55: 79:c2:ed:5f:4f:29:73:ce:64:11:76:d6:26:50:35: 41:3c:51:d5:d3:a7:d2:c5:6b:4a:ca:1c:79:b7:cf: 74:3b:96:57:ec:23:85:d9:e8:81:7a:e1:d9:a6:e2: 44:25:6a:a1:8f:cc:c0:02:91:43:e6:1e:89:db:c8: 3c:49:4b:15:51:0e:fa:78:1c:11:8f:75:55:aa:ff: 30:82:6a:8f:65:f3:fb:64:ad:c0:2c:ee:9c:a6:9e: a4:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A7:CC:28:8E:49:79:8A:B3:99:99:92:7F:72:D4:49:C5:89:AD:33 X509v3 Authority Key Identifier: keyid:64:46:5A:8A:1E:8E:42:F1:A6:0D:27:81:98:C3:20:AE:C0:F3:F7:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEZaih6OQvGmDSeBmMMgrsDz99w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/338d33-72c6-4802-aefe-70e60edbc1e7/1/ZEZaih6OQvGmDSeBmMMgrsDz99w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:56:68:e6:a9:99:3e:61:dc:56:43:92:f2:d5:21:29:7b:28: db:18:c2:d4:cc:f9:9d:80:c3:64:33:63:9d:95:04:20:7b:02: 72:c3:cb:2e:98:75:13:7a:12:53:80:6f:30:df:fc:fd:65:79: b2:16:e2:74:43:d6:9c:d0:11:b4:6c:16:97:6f:04:bd:9b:d7: ae:48:6c:c8:b9:24:93:2e:7b:95:f5:ec:42:6e:2e:93:1b:b7: ff:f7:89:5d:9e:15:a1:81:c0:4d:2f:d3:43:83:85:45:cf:65: 10:2f:41:ab:c9:f7:4b:a7:78:75:dd:36:f3:a6:6c:a3:d5:7c: 84:30:39:65:67:57:d5:d8:df:72:e5:e2:24:35:81:3e:0d:60: 43:cd:fd:a2:20:c8:d1:a1:3c:87:91:d8:7b:3a:bc:12:a2:cb: 77:3f:bf:51:24:9f:b4:95:51:92:41:f9:7f:21:81:97:1f:0e: da:01:aa:68:97:91:81:44:6b:db:6c:13:31:c0:31:dc:c4:8d: 01:2a:38:01:20:ce:72:41:1a:ca:c7:0b:fb:f8:21:0e:72:9d: 13:4d:9e:c0:f8:cf:16:c9:a9:06:ad:72:b4:c5:88:2d:b1:e2: d8:07:13:a8:c6:45:9b:f8:f6:e5:c8:87:07:3b:ef:7f:8c:55: 79:f0:b8:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC67I7H9vdd3oDf6APVp2/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NDY1YThhMWU4ZTQyZjFhNjBkMjc4MTk4YzMyMGFlYzBm M2Y3ZGMwHhcNMjYwMjA5MTUwMTA4WhcNMjYwMjEwMTUwMTA4WjAzMTEwLwYDVQQD Eyg2OWE3Y2MyODhlNDk3OThhYjM5OTk5OTI3ZjcyZDQ0OWM1ODlhZDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyTRKr+YCdxd0eCCIBlsWVLOpgcwU VzakI/HBPlQAqCA/NmliEUCEVtHIZZ+q491W/vr/YzKtc8xPMntDqujNkc8jL3QW RmORMk7oDu32OXRFc1w5pwC91BKVmIewYFXYKJzLz9p8nyaeCA2p372CE7xCwmsF oqKC0NINOaG9SH+RL8xSPrvIqGLqne3akfkQbFiv+CouWB3ebUn62eiGg/F4Y1V5 wu1fTylzzmQRdtYmUDVBPFHV06fSxWtKyhx5t890O5ZX7COF2eiBeuHZpuJEJWqh j8zAApFD5h6J28g8SUsVUQ76eBwRj3VVqv8wgmqPZfP7ZK3ALO6cpp6kWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmnzCiOSXmKs5mZkn9y1EnFia0zMB8GA1UdIwQY MBaAFGRGWooejkLxpg0ngZjDIK7A8/fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUt NzBlNjBlZGJjMWU3LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNy8zMzhkMzMtNzJjNi00ODAyLWFlZmUtNzBlNjBlZGJjMWU3 LzEvWkVaYWloNk9RdkdtRFNlQm1NTWdyc0R6OTl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASFZo5qmZ PmHcVkOS8tUhKXso2xjC1Mz5nYDDZDNjnZUEIHsCcsPLLph1E3oSU4BvMN/8/WV5 shbidEPWnNARtGwWl28EvZvXrkhsyLkkky57lfXsQm4ukxu3//eJXZ4VoYHATS/T Q4OFRc9lEC9Bq8n3S6d4dd0286Zso9V8hDA5ZWdX1djfcuXiJDWBPg1gQ839oiDI 0aE8h5HYezq8EqLLdz+/USSftJVRkkH5fyGBlx8O2gGqaJeRgURr22wTMcAx3MSN ASo4ASDOckEayscL+/ghDnKdE02ewPjPFsmpBq1ytMWILbHi2AcTqMZFm/j25ciH Bzvvf4xVefC4SQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:59 2026 by rpki-client