This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft File: zEseS1uaUAMbWdQZcyGgmahXBUA.mft (raw, json) Hash identifier: XwgY/NC4K+Pf0f8PT1R6tOkguNMbqFFlSw2mZMxJ0E4= Subject key identifier: 98:D2:23:17:3A:FA:9A:FD:7C:31:43:4A:E6:4A:3E:7B:5A:F8:E1:AF Authority key identifier: CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 Certificate issuer: /CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Certificate serial: 019C42EAF58BC98720A41A85DD023B6C9312 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 15:00:20 +0000 Manifest this update: Mon 09 Feb 2026 15:00:20 +0000 Manifest next update: Tue 10 Feb 2026 15:00:20 +0000 Files and hashes: 1: zEseS1uaUAMbWdQZcyGgmahXBUA.crl (hash: HAvHywkMxoXchTpPSMx4jS0vm4LTHUb4O1EQO1RbCyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:f5:8b:c9:87:20:a4:1a:85:dd:02:3b:6c:93:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4b1e4b5b9a50031b59d4197321a099a8570540 Validity Not Before: Feb 9 15:00:20 2026 GMT Not After : Feb 10 15:00:20 2026 GMT Subject: CN=98d223173afa9afd7c31434ae64a3e7b5af8e1af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:e0:84:9d:22:73:a8:87:7d:91:e6:cb:d0:54: 83:cb:77:19:9b:0c:98:7a:85:d3:b1:89:15:2f:b2: 15:68:83:50:fd:d9:97:73:d5:93:5a:a6:d8:fa:f5: 91:a6:55:61:e9:62:0b:ca:39:88:27:06:0f:34:7e: a8:75:a4:55:96:7a:b9:aa:3d:fd:5f:12:a5:65:49: 9a:08:8f:f5:ea:2d:d0:7f:90:f8:a5:d5:5d:6f:03: 61:e9:a7:c1:6e:37:3b:1a:af:63:09:b9:0d:bf:e5: 3d:be:4a:39:87:a5:71:05:0c:e1:67:1a:80:13:63: 53:51:03:87:95:ba:b3:04:7c:53:9c:be:c4:02:75: bd:80:e2:9a:6e:be:91:60:80:0e:39:48:77:a0:6e: 95:f6:e4:18:26:6a:86:08:02:99:ee:8c:af:be:71: 78:92:b3:64:79:10:49:93:58:9c:a2:74:0b:f6:e2: a5:b0:b4:33:ce:9b:51:b4:62:3e:86:f7:00:7a:82: cc:3f:73:d9:a3:75:cf:89:7f:95:f2:ff:50:23:58: b9:28:27:ba:88:e4:05:51:41:09:f3:0f:fa:3a:19: 7a:87:40:3d:a3:9d:fb:b4:71:83:29:34:63:f4:72: 92:78:34:fb:3a:c8:ce:ce:61:99:98:df:0b:98:8b: 63:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D2:23:17:3A:FA:9A:FD:7C:31:43:4A:E6:4A:3E:7B:5A:F8:E1:AF X509v3 Authority Key Identifier: keyid:CC:4B:1E:4B:5B:9A:50:03:1B:59:D4:19:73:21:A0:99:A8:57:05:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEseS1uaUAMbWdQZcyGgmahXBUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/08/72cf2f-a781-4b57-b862-735a3fae6216/1/zEseS1uaUAMbWdQZcyGgmahXBUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:2d:fa:f1:1f:81:ee:4d:5a:b8:01:13:0c:41:a1:7f:7c:69: db:06:ff:87:d4:86:c0:d7:01:5a:e1:16:e9:48:4d:fd:1c:ea: f3:c3:4a:d2:ff:b0:f2:a9:03:0c:6b:7c:88:e8:07:87:02:a6: 66:8b:ad:86:f2:51:4f:17:66:71:46:21:9c:a6:1a:2c:dc:1c: a0:1c:92:e1:88:1b:59:7b:ff:f1:8e:81:1b:fc:ff:e9:dc:c3: 9f:a5:50:d1:eb:bc:8b:9c:47:2f:00:96:ee:ae:ee:e3:62:31: 23:f8:2e:6d:40:f3:4d:b5:0a:6d:79:3f:c0:26:cb:99:50:e2: 08:aa:52:68:a3:1c:00:d4:80:3a:c7:da:e0:42:b3:44:bb:9c: b9:9e:54:92:24:95:07:71:34:ee:29:40:a2:cb:35:88:1e:21: 4e:e7:54:7b:4d:40:a4:88:1a:96:68:65:02:d9:d7:78:58:09: da:94:84:c0:50:73:c8:5c:bf:68:fe:17:51:10:14:14:bc:0b: ea:ea:fa:b5:9a:33:c7:f1:ed:08:60:a1:11:28:ae:5b:e5:2b: f1:09:13:f2:e8:73:db:09:8b:43:f2:67:64:6d:99:c8:80:1f: 4e:6c:cb:61:c7:74:d1:e4:12:70:94:92:a2:10:16:95:fe:45: 6b:08:7d:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6vWLyYcgpBqF3QI7bJMSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNGIxZTRiNWI5YTUwMDMxYjU5ZDQxOTczMjFhMDk5YTg1 NzA1NDAwHhcNMjYwMjA5MTUwMDIwWhcNMjYwMjEwMTUwMDIwWjAzMTEwLwYDVQQD Eyg5OGQyMjMxNzNhZmE5YWZkN2MzMTQzNGFlNjRhM2U3YjVhZjhlMWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uCEnSJzqId9kebL0FSDy3cZmwyY eoXTsYkVL7IVaINQ/dmXc9WTWqbY+vWRplVh6WILyjmIJwYPNH6odaRVlnq5qj39 XxKlZUmaCI/16i3Qf5D4pdVdbwNh6afBbjc7Gq9jCbkNv+U9vko5h6VxBQzhZxqA E2NTUQOHlbqzBHxTnL7EAnW9gOKabr6RYIAOOUh3oG6V9uQYJmqGCAKZ7oyvvnF4 krNkeRBJk1iconQL9uKlsLQzzptRtGI+hvcAeoLMP3PZo3XPiX+V8v9QI1i5KCe6 iOQFUUEJ8w/6Ohl6h0A9o537tHGDKTRj9HKSeDT7OsjOzmGZmN8LmItjZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjSIxc6+pr9fDFDSuZKPnta+OGvMB8GA1UdIwQY MBaAFMxLHktbmlADG1nUGXMhoJmoVwVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjIt NzM1YTNmYWU2MjE2LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOC83MmNmMmYtYTc4MS00YjU3LWI4NjItNzM1YTNmYWU2MjE2 LzEvekVzZVMxdWFVQU1iV2RRWmN5R2dtYWhYQlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjS368R+B 7k1auAETDEGhf3xp2wb/h9SGwNcBWuEW6UhN/Rzq88NK0v+w8qkDDGt8iOgHhwKm ZouthvJRTxdmcUYhnKYaLNwcoByS4YgbWXv/8Y6BG/z/6dzDn6VQ0eu8i5xHLwCW 7q7u42IxI/gubUDzTbUKbXk/wCbLmVDiCKpSaKMcANSAOsfa4EKzRLucuZ5UkiSV B3E07ilAoss1iB4hTudUe01ApIgalmhlAtnXeFgJ2pSEwFBzyFy/aP4XURAUFLwL 6ur6tZozx/HtCGChESiuW+Ur8QkT8uhz2wmLQ/JnZG2ZyIAfTmzLYcd00eQScJSS ohAWlf5Fawh9Qw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:44 2026 by rpki-client