This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft File: zzep8CHigQ2Eshji9pmyb1NXXmE.mft (raw, json) Hash identifier: OFJTcafwwg3KeuFBqlenSLwNjM633ym1qEJlDjerWMU= Subject key identifier: 3F:33:4B:62:7E:A7:5B:33:A2:41:08:15:5B:55:91:86:DF:4C:B0:44 Authority key identifier: CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61 Certificate issuer: /CN=cf37a9f021e2810d84b218e2f699b26f53575e61 Certificate serial: 019C4390C08FE835BED996B03C58BEFDB67D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft Manifest number: 030C Signing time: Mon 09 Feb 2026 18:01:25 +0000 Manifest this update: Mon 09 Feb 2026 18:01:25 +0000 Manifest next update: Tue 10 Feb 2026 18:01:25 +0000 Files and hashes: 1: zzep8CHigQ2Eshji9pmyb1NXXmE.crl (hash: gt8UqHT9z8+gd0beKm6I0Peu2psBROogm5bcmPUKDas=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c0:8f:e8:35:be:d9:96:b0:3c:58:be:fd:b6:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf37a9f021e2810d84b218e2f699b26f53575e61 Validity Not Before: Feb 9 18:01:25 2026 GMT Not After : Feb 10 18:01:25 2026 GMT Subject: CN=3f334b627ea75b33a24108155b559186df4cb044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:54:79:70:23:0c:d1:45:fc:40:ec:39:7c:7d: dc:56:0f:dc:c5:fe:e9:45:77:9a:71:49:e0:07:7c: 42:fd:5e:08:80:92:0b:38:8a:ca:5c:f8:b5:0e:46: 4e:a9:2b:b0:32:82:3a:72:fb:49:39:5a:1d:9c:57: fd:c8:4a:40:7b:71:de:60:40:fa:78:8e:8d:08:31: e3:e5:c9:d0:31:18:06:eb:af:a7:86:b5:05:5a:26: cf:e6:14:ae:7a:e0:0a:47:27:73:8a:4d:20:75:14: 20:2d:83:8a:b1:c7:58:a8:dc:3c:ba:3a:40:b9:9f: 82:5b:37:a9:dd:e8:12:de:76:b8:1e:bc:86:cc:50: ab:58:99:e8:8c:ad:cd:59:41:c4:4c:06:a1:1c:e4: 09:9b:ee:f3:a4:a2:0d:7d:28:25:9e:09:31:f2:b0: 5e:59:74:31:2d:c7:69:82:25:59:55:32:fc:89:60: a9:63:9e:e5:bb:7a:12:8a:e8:71:65:1c:6e:c0:8d: dc:d9:da:c3:c5:b2:53:f6:45:8d:d0:3e:a0:96:7e: bf:80:44:e8:5b:33:9e:17:a5:4f:21:0d:ab:da:3a: a1:60:78:12:53:64:2c:90:11:92:59:80:0f:46:27: e6:d6:a5:80:11:a2:bf:d9:86:49:f1:34:93:24:0d: 81:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:33:4B:62:7E:A7:5B:33:A2:41:08:15:5B:55:91:86:DF:4C:B0:44 X509v3 Authority Key Identifier: keyid:CF:37:A9:F0:21:E2:81:0D:84:B2:18:E2:F6:99:B2:6F:53:57:5E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zzep8CHigQ2Eshji9pmyb1NXXmE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3e5050-d59b-47f0-80ad-8e395ef246f6/1/zzep8CHigQ2Eshji9pmyb1NXXmE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ef:22:6e:d6:b9:e4:74:96:a2:46:1a:0d:26:65:46:e9:53: c7:36:02:b2:84:22:eb:24:5c:9e:4c:6f:e5:08:2b:6b:3d:fa: 8f:fb:85:ed:21:a0:7d:39:08:d8:3e:c6:21:35:c0:1b:87:12: 6d:f4:c3:2e:85:a8:e9:4a:9e:14:78:06:ed:29:9a:4d:8a:e3: 7f:4c:25:19:8f:4c:10:0a:8d:0e:5d:f3:25:4d:aa:41:08:4c: 8a:b9:36:bf:34:73:34:10:fe:4b:93:75:09:2a:39:ab:e4:91: 27:6f:93:a6:db:d8:36:cc:ec:7d:ac:eb:7a:60:c1:42:0f:5a: 5e:be:9d:36:df:ef:0f:2a:bc:0f:a3:a6:14:07:36:cd:bf:57: ad:38:ec:80:be:6f:86:a6:98:d9:c8:77:ec:6a:2a:00:2f:7f: d4:21:67:d2:ab:83:27:ba:93:7a:9f:00:88:b9:6a:ab:c3:4b: f5:1f:59:10:11:96:27:df:fb:31:65:b8:f4:c2:ab:98:c2:35: 4e:c9:b9:36:a9:bb:a3:b6:5e:ae:db:50:95:d4:f7:15:3e:55: 76:6c:f4:a2:5e:c4:f1:8d:b0:3c:d1:38:41:11:3e:af:e2:1d: f3:ef:9b:36:c9:9d:ca:2f:96:65:fa:fc:f3:47:f9:85:5c:7f: 12:a5:74:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMCP6DW+2ZawPFi+/bZ9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMzdhOWYwMjFlMjgxMGQ4NGIyMThlMmY2OTliMjZmNTM1 NzVlNjEwHhcNMjYwMjA5MTgwMTI1WhcNMjYwMjEwMTgwMTI1WjAzMTEwLwYDVQQD EygzZjMzNGI2MjdlYTc1YjMzYTI0MTA4MTU1YjU1OTE4NmRmNGNiMDQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFR5cCMM0UX8QOw5fH3cVg/cxf7p RXeacUngB3xC/V4IgJILOIrKXPi1DkZOqSuwMoI6cvtJOVodnFf9yEpAe3HeYED6 eI6NCDHj5cnQMRgG66+nhrUFWibP5hSueuAKRydzik0gdRQgLYOKscdYqNw8ujpA uZ+CWzep3egS3na4HryGzFCrWJnojK3NWUHETAahHOQJm+7zpKINfSglngkx8rBe WXQxLcdpgiVZVTL8iWCpY57lu3oSiuhxZRxuwI3c2drDxbJT9kWN0D6gln6/gETo WzOeF6VPIQ2r2jqhYHgSU2QskBGSWYAPRifm1qWAEaK/2YZJ8TSTJA2BTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8zS2J+p1szokEIFVtVkYbfTLBEMB8GA1UdIwQY MBaAFM83qfAh4oENhLIY4vaZsm9TV15hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8zZTUwNTAtZDU5Yi00N2YwLTgwYWQt OGUzOTVlZjI0NmY2LzEvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMi8zZTUwNTAtZDU5Yi00N2YwLTgwYWQtOGUzOTVlZjI0NmY2 LzEvenplcDhDSGlnUTJFc2hqaTlwbXliMU5YWG1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUu8ibta5 5HSWokYaDSZlRulTxzYCsoQi6yRcnkxv5Qgraz36j/uF7SGgfTkI2D7GITXAG4cS bfTDLoWo6UqeFHgG7SmaTYrjf0wlGY9MEAqNDl3zJU2qQQhMirk2vzRzNBD+S5N1 CSo5q+SRJ2+TptvYNszsfazremDBQg9aXr6dNt/vDyq8D6OmFAc2zb9XrTjsgL5v hqaY2ch37GoqAC9/1CFn0quDJ7qTep8AiLlqq8NL9R9ZEBGWJ9/7MWW49MKrmMI1 Tsm5Nqm7o7ZerttQldT3FT5Vdmz0ol7E8Y2wPNE4QRE+r+Id8++bNsmdyi+WZfr8 80f5hVx/EqV0Gw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:10 2026 by rpki-client