This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft File: ziLsmUVCynrKrdWHJ-RgarRJAEA.mft (raw, json) Hash identifier: CUxk3Ka7xO3QJ5TPKohy2uI7YPQwm8WoOW2d/1ndsnA= Subject key identifier: 00:37:18:58:D3:44:06:53:64:8B:80:4D:FC:2E:08:07:61:69:08:7B Authority key identifier: CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40 Certificate issuer: /CN=ce22ec994542ca7acaadd58727e4606ab4490040 Certificate serial: 019C427E0E8BDFD09037140C00CA865971F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft Manifest number: 10F3 Signing time: Mon 09 Feb 2026 13:01:23 +0000 Manifest this update: Mon 09 Feb 2026 13:01:23 +0000 Manifest next update: Tue 10 Feb 2026 13:01:23 +0000 Files and hashes: 1: ziLsmUVCynrKrdWHJ-RgarRJAEA.crl (hash: TNrOKiMk4K5beHLzAButgWbemeaLXgirYgAA1TICLUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:0e:8b:df:d0:90:37:14:0c:00:ca:86:59:71:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce22ec994542ca7acaadd58727e4606ab4490040 Validity Not Before: Feb 9 13:01:23 2026 GMT Not After : Feb 10 13:01:23 2026 GMT Subject: CN=00371858d3440653648b804dfc2e08076169087b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:f1:ec:b8:81:57:c8:fa:32:58:f8:fb:f6:65: 47:81:5c:cd:ec:ab:7b:24:db:7b:28:f9:d6:a0:19: 25:36:61:65:b8:ee:19:00:02:34:5c:58:7a:1b:96: 29:db:f9:89:16:44:4a:ce:4a:0c:e0:c6:e7:67:48: f5:9f:f5:59:f4:55:e7:ee:9e:26:f3:45:5c:ab:94: d1:31:e3:bf:be:4b:58:42:cb:75:e3:67:44:5b:26: 16:31:d8:74:04:5c:26:42:df:a7:8b:c0:73:28:2c: ab:85:07:e3:7b:29:28:5c:0c:dc:9e:1e:3a:fb:30: 56:a2:35:52:f3:6c:d0:b9:6f:95:1e:1c:80:c4:44: 15:90:b1:00:c2:a9:65:d1:2b:5b:32:f2:e6:43:3c: 96:05:64:f1:1a:5e:51:d9:b7:e9:bf:e6:eb:13:f7: 18:00:c6:f6:88:a3:09:9c:f9:df:d9:d2:0d:7c:c0: 6f:f6:80:b5:fc:8c:98:5e:49:ad:f2:90:07:2b:89: 71:a0:30:d4:af:d1:b5:a0:fc:5e:41:0f:a7:42:de: 09:f0:21:f5:00:5f:fe:44:11:ff:fa:36:8f:00:6b: 13:99:06:56:dd:db:96:39:71:ee:e2:e1:1a:c2:6c: 0a:e9:72:e9:21:35:fb:d7:4e:25:c7:27:da:4f:81: 0f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:37:18:58:D3:44:06:53:64:8B:80:4D:FC:2E:08:07:61:69:08:7B X509v3 Authority Key Identifier: keyid:CE:22:EC:99:45:42:CA:7A:CA:AD:D5:87:27:E4:60:6A:B4:49:00:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ziLsmUVCynrKrdWHJ-RgarRJAEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/6d95f5-ceb5-4ae3-a943-b74a056dcbe3/1/ziLsmUVCynrKrdWHJ-RgarRJAEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:82:b3:11:62:65:2f:2d:1e:01:4e:cc:21:dd:75:b9:31:22: 5c:d5:7a:82:27:7d:f8:7b:9a:4a:63:fc:93:0b:91:42:98:de: 43:10:e9:e3:7e:b8:41:93:ff:e7:7b:f4:8b:e1:2d:d6:fa:22: 92:9f:9e:03:56:83:f3:7f:fc:eb:c2:e8:3a:44:60:12:63:93: 70:e7:ce:71:ec:6c:7f:3d:b8:7a:28:a1:7f:93:cd:52:42:76: 24:e4:92:33:de:dc:4a:66:cd:f4:fc:94:d4:0d:4b:7a:13:99: 8a:cd:a8:64:84:b4:c5:b5:e3:51:d2:4e:b1:d5:26:2b:b7:a7: 65:0b:b8:80:ae:a7:86:43:ab:8a:9f:f1:3c:bc:03:5e:3c:b9: 73:57:35:66:d5:1c:ce:33:f8:f8:6e:3f:8e:56:6c:83:b7:3e: ff:3e:c4:e9:6f:5f:f6:eb:ff:02:c2:b2:c6:2f:5d:57:36:16: 2f:8e:d6:ef:c9:f7:f0:86:a4:52:c4:63:cc:5e:9c:9e:bd:16: d3:18:5c:64:9a:51:c0:20:f8:06:20:63:10:70:fa:da:b1:7d: 90:66:cc:1b:1c:97:bc:af:67:ed:9e:eb:9c:19:e2:45:04:77: 56:49:77:ed:84:3d:d8:b3:1c:e2:f9:e8:2f:4b:8c:ec:4a:22: 57:56:ea:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfg6L39CQNxQMAMqGWXH5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlMjJlYzk5NDU0MmNhN2FjYWFkZDU4NzI3ZTQ2MDZhYjQ0 OTAwNDAwHhcNMjYwMjA5MTMwMTIzWhcNMjYwMjEwMTMwMTIzWjAzMTEwLwYDVQQD EygwMDM3MTg1OGQzNDQwNjUzNjQ4YjgwNGRmYzJlMDgwNzYxNjkwODdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fHsuIFXyPoyWPj79mVHgVzN7Kt7 JNt7KPnWoBklNmFluO4ZAAI0XFh6G5Yp2/mJFkRKzkoM4MbnZ0j1n/VZ9FXn7p4m 80Vcq5TRMeO/vktYQst142dEWyYWMdh0BFwmQt+ni8BzKCyrhQfjeykoXAzcnh46 +zBWojVS82zQuW+VHhyAxEQVkLEAwqll0StbMvLmQzyWBWTxGl5R2bfpv+brE/cY AMb2iKMJnPnf2dINfMBv9oC1/IyYXkmt8pAHK4lxoDDUr9G1oPxeQQ+nQt4J8CH1 AF/+RBH/+jaPAGsTmQZW3duWOXHu4uEawmwK6XLpITX7104lxyfaT4EPbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAA3GFjTRAZTZIuATfwuCAdhaQh7MB8GA1UdIwQY MBaAFM4i7JlFQsp6yq3VhyfkYGq0SQBAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMt Yjc0YTA1NmRjYmUzLzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy82ZDk1ZjUtY2ViNS00YWUzLWE5NDMtYjc0YTA1NmRjYmUz LzEvemlMc21VVkN5bnJLcmRXSEotUmdhclJKQUVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIKzEWJl Ly0eAU7MId11uTEiXNV6gid9+HuaSmP8kwuRQpjeQxDp4364QZP/53v0i+Et1voi kp+eA1aD83/868LoOkRgEmOTcOfOcexsfz24eiihf5PNUkJ2JOSSM97cSmbN9PyU 1A1LehOZis2oZIS0xbXjUdJOsdUmK7enZQu4gK6nhkOrip/xPLwDXjy5c1c1ZtUc zjP4+G4/jlZsg7c+/z7E6W9f9uv/AsKyxi9dVzYWL47W78n38IakUsRjzF6cnr0W 0xhcZJpRwCD4BiBjEHD62rF9kGbMGxyXvK9n7Z7rnBniRQR3Vkl37YQ92LMc4vno L0uM7EoiV1bqIw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:40 2026 by rpki-client