This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft File: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft (raw, json) Hash identifier: uGclx14bq/3sq2yAsu+UUWWGHmIz7Y7y7kcmvq9UpZI= Subject key identifier: B5:01:AB:75:F6:E9:BC:E8:1C:C6:12:9B:68:A2:A9:E3:14:5C:14:14 Authority key identifier: 65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A Certificate issuer: /CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a Certificate serial: 019C42EB32922F277ECA874AFE1AC03672ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft Manifest number: 14CF Signing time: Mon 09 Feb 2026 15:00:36 +0000 Manifest this update: Mon 09 Feb 2026 15:00:36 +0000 Manifest next update: Tue 10 Feb 2026 15:00:36 +0000 Files and hashes: 1: GZsPzmbA--FYrc4SNgLcVzZUS58.roa (hash: gCmBdutjh3s8CjQ+XZ5HjES4JuiIxCATlIX/+TCZL7A=) 2: ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl (hash: T89/GOWofXS9ISJz+ItwrUFJatBnGY95Cb20VOCoVT0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:32:92:2f:27:7e:ca:87:4a:fe:1a:c0:36:72:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d66329576c9c01b3cd8285f4b54b0170d8c39a Validity Not Before: Feb 9 15:00:36 2026 GMT Not After : Feb 10 15:00:36 2026 GMT Subject: CN=b501ab75f6e9bce81cc6129b68a2a9e3145c1414 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:a6:ba:a2:ec:a7:f6:d7:97:3a:d6:62:84:d2: 9e:8d:0d:b6:c2:14:8a:34:1d:01:39:5d:d6:f6:fa: 47:49:b4:ee:83:35:e3:36:fc:d7:bd:b0:d6:98:3d: 40:b1:2d:f4:79:38:99:99:f9:ee:85:0d:0c:99:27: 65:3c:ae:dd:81:98:9a:0c:51:04:d3:1e:c3:b3:2b: 16:46:16:76:b6:78:e7:d1:59:89:d4:94:b0:99:a2: 1c:15:28:de:e1:2e:ff:7f:c4:67:31:1e:18:28:36: 37:ac:44:e8:9e:39:21:1a:60:6e:1b:01:36:a5:90: 0c:c2:d7:07:d7:3c:6c:27:70:58:b5:69:c1:f4:ce: 73:82:83:8c:cd:84:1a:04:9c:16:ef:10:dc:9f:f6: 43:be:3a:35:c6:e7:28:3d:4e:a0:16:10:8c:27:aa: ae:0c:b2:2b:5a:74:62:a5:e7:3a:69:87:cb:33:0a: 14:92:a8:7f:de:e9:e7:88:8a:8c:e5:cd:e0:9f:b2: 0a:94:95:44:13:23:40:49:18:c7:d5:2a:a5:0b:4f: 37:7f:fb:14:33:6f:93:30:1c:29:0d:31:58:f5:c7: 02:6e:f6:0e:98:32:7e:79:b4:a6:80:ce:e0:27:31: 2d:d7:0a:a6:f6:a5:ff:db:af:dc:97:6e:23:d3:79: 79:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:01:AB:75:F6:E9:BC:E8:1C:C6:12:9B:68:A2:A9:E3:14:5C:14:14 X509v3 Authority Key Identifier: keyid:65:D6:63:29:57:6C:9C:01:B3:CD:82:85:F4:B5:4B:01:70:D8:C3:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d527f8-e5af-4820-a248-1e66505131ca/1/ZdZjKVdsnAGzzYKF9LVLAXDYw5o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:e1:c8:20:58:d0:3c:d0:68:71:d1:e3:48:13:a8:90:20:69: 8a:d0:76:2a:b1:a8:1d:17:ad:5d:d0:a0:ae:a1:33:cf:00:08: c8:4a:e0:8e:9f:c8:9d:af:e4:07:60:54:ed:0c:ab:ee:59:04: 8e:6c:f6:87:ef:df:15:02:52:c7:2a:22:49:33:42:60:28:71: 95:fd:4f:4e:14:5a:12:8f:75:cc:93:ba:39:83:11:33:52:1e: aa:12:ca:c8:92:79:e5:a5:96:aa:c7:34:e0:5f:04:68:86:4f: 3f:3f:ec:ed:c3:55:6a:2a:94:cb:e0:c4:ec:a4:a3:d0:be:65: 0d:f4:66:9b:0d:51:f6:07:22:3b:67:05:6b:d2:d6:4b:a6:76: 62:5e:4f:3b:26:c6:b0:91:7c:61:2a:79:78:9f:43:c2:54:f7: 62:52:e5:c9:66:94:59:0a:32:73:8d:ca:a7:75:cf:65:e7:fc: 80:ea:23:bd:65:f3:41:c5:0e:f9:b4:ea:3b:5d:8d:f0:54:eb: 1c:dd:65:bc:d9:73:e5:c2:09:dc:e2:5e:15:a9:14:ae:3c:21: fe:60:f0:ce:55:39:7d:78:34:21:87:4e:34:98:9f:c4:18:50: 4d:93:63:61:b4:b6:54:e1:67:e5:d7:96:5e:d6:63:70:24:38: 49:ac:51:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zKSLyd+yodK/hrANnLtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDY2MzI5NTc2YzljMDFiM2NkODI4NWY0YjU0YjAxNzBk OGMzOWEwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD EyhiNTAxYWI3NWY2ZTliY2U4MWNjNjEyOWI2OGEyYTllMzE0NWMxNDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ka6ouyn9teXOtZihNKejQ22whSK NB0BOV3W9vpHSbTugzXjNvzXvbDWmD1AsS30eTiZmfnuhQ0MmSdlPK7dgZiaDFEE 0x7DsysWRhZ2tnjn0VmJ1JSwmaIcFSje4S7/f8RnMR4YKDY3rETonjkhGmBuGwE2 pZAMwtcH1zxsJ3BYtWnB9M5zgoOMzYQaBJwW7xDcn/ZDvjo1xucoPU6gFhCMJ6qu DLIrWnRipec6aYfLMwoUkqh/3unniIqM5c3gn7IKlJVEEyNASRjH1SqlC083f/sU M2+TMBwpDTFY9ccCbvYOmDJ+ebSmgM7gJzEt1wqm9qX/26/cl24j03l5oQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLUBq3X26bzoHMYSm2iiqeMUXBQUMB8GA1UdIwQY MBaAFGXWYylXbJwBs82ChfS1SwFw2MOaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgt MWU2NjUwNTEzMWNhLzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9kNTI3ZjgtZTVhZi00ODIwLWEyNDgtMWU2NjUwNTEzMWNh LzEvWmRaaktWZHNuQUd6ellLRjlMVkxBWERZdzVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZuHIIFjQ PNBocdHjSBOokCBpitB2KrGoHRetXdCgrqEzzwAIyErgjp/Ina/kB2BU7Qyr7lkE jmz2h+/fFQJSxyoiSTNCYChxlf1PThRaEo91zJO6OYMRM1IeqhLKyJJ55aWWqsc0 4F8EaIZPPz/s7cNVaiqUy+DE7KSj0L5lDfRmmw1R9gciO2cFa9LWS6Z2Yl5POybG sJF8YSp5eJ9DwlT3YlLlyWaUWQoyc43Kp3XPZef8gOojvWXzQcUO+bTqO12N8FTr HN1lvNlz5cIJ3OJeFakUrjwh/mDwzlU5fXg0IYdONJifxBhQTZNjYbS2VOFn5deW XtZjcCQ4SaxRhQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:54 2026 by rpki-client