This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json) Hash identifier: lKTyONOcmcjCosTjk6/IKxBQRU/9wqPnJ62a7gBCPRI= Subject key identifier: 0F:A8:DB:6B:48:DE:E7:5A:D4:4C:A6:3B:22:DA:37:31:91:45:7D:34 Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99 Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99 Certificate serial: 019C43FDF313071CAEBBD1D7D5D069831434 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 20:00:42 +0000 Manifest this update: Mon 09 Feb 2026 20:00:42 +0000 Manifest next update: Tue 10 Feb 2026 20:00:42 +0000 Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: dy5Xuctx4JusWjTA1sE3VhaGdf50x2xbrAG0ZN+ew/o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:f3:13:07:1c:ae:bb:d1:d7:d5:d0:69:83:14:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99 Validity Not Before: Feb 9 20:00:42 2026 GMT Not After : Feb 10 20:00:42 2026 GMT Subject: CN=0fa8db6b48dee75ad44ca63b22da373191457d34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:41:fd:31:a2:c7:07:57:99:6f:9f:3c:86:5f: 55:80:0d:5c:41:8c:93:bd:27:34:63:36:e6:09:aa: 82:7a:cb:fd:b0:5b:0a:89:a8:1a:31:61:ca:b8:a4: 61:d0:8a:eb:23:27:f4:a3:bf:af:08:bc:0a:2a:e2: 59:f4:a1:5b:7a:77:60:99:62:ae:8f:73:95:1a:79: 81:49:e0:2a:99:52:ee:4a:53:eb:66:0e:e1:73:cf: 33:7a:34:49:ce:a3:4f:f0:ae:45:96:7f:26:7c:f3: ec:8f:49:9c:d9:0e:04:5b:8c:f3:1e:06:e4:95:3f: ce:a8:19:96:cb:6e:be:fb:77:fb:23:1d:ca:21:84: b5:74:9c:ab:9e:d9:9b:03:38:91:50:fb:46:06:c8: 4a:59:65:21:f6:a5:b8:fa:a5:c6:89:00:64:98:df: 59:cf:08:e1:5a:fe:b6:72:cd:f3:3a:8c:70:ac:3f: c7:9f:26:9f:2b:9c:bb:16:33:f3:eb:7d:7e:92:6d: e0:c4:17:cb:ed:35:0d:2b:a6:14:c8:e4:b2:c3:c4: 2a:be:62:cf:78:3c:ac:cb:b8:c0:7d:07:f9:52:19: 70:39:32:f2:e3:92:8a:2c:cd:96:83:e2:93:f6:74: 0c:af:b3:a4:67:b8:11:e2:5c:48:50:43:3e:66:e4: 85:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A8:DB:6B:48:DE:E7:5A:D4:4C:A6:3B:22:DA:37:31:91:45:7D:34 X509v3 Authority Key Identifier: keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:27:df:1e:ea:2d:93:79:4f:8c:83:aa:5f:41:5e:c9:42:50: 30:61:6f:bf:53:a0:87:3d:78:fd:59:9e:e3:bb:9f:a6:01:7a: b1:69:a4:7d:46:a2:9c:e0:e5:60:d9:0b:7f:77:b5:75:7c:f6: 40:d1:03:0c:58:d9:16:62:e0:07:d1:4a:68:1e:38:de:ca:30: de:f0:dd:b6:2d:10:3a:88:fa:bd:63:51:50:15:1a:33:45:d1: f9:c9:85:3b:36:2d:4e:6e:56:ae:97:81:3b:da:b9:18:c0:2f: 65:e7:dc:cd:d7:90:69:5f:f3:94:8a:b8:5e:b4:16:71:68:d6: 44:8e:ac:aa:06:a3:63:20:52:20:49:4c:88:42:75:ae:b4:56: e2:44:fd:fa:7b:5a:48:a6:ca:1f:c4:d5:6c:d0:77:8f:6c:4b: ee:61:d1:13:40:39:62:5d:3a:73:9c:71:02:f8:b5:7e:e5:3c: a0:1d:53:df:0e:81:86:c2:9a:73:d8:14:d6:91:57:b6:29:95: 66:65:ec:5b:c3:5f:0e:9c:8c:b7:72:f3:77:b3:35:bb:21:7c: ca:9e:e4:20:d3:5d:fc:70:a7:9b:98:35:e2:82:83:9d:bf:3f: 3b:7e:06:4b:9a:88:27:1f:d9:12:e0:ca:c8:db:bc:0c:16:3d: 79:e9:fb:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/fMTBxyuu9HX1dBpgxQ0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjM1OTY1NDZkNDYyMGIwMmE5NjQyZjA4Yjc3Y2ZlNjUw MmFlOTkwHhcNMjYwMjA5MjAwMDQyWhcNMjYwMjEwMjAwMDQyWjAzMTEwLwYDVQQD EygwZmE4ZGI2YjQ4ZGVlNzVhZDQ0Y2E2M2IyMmRhMzczMTkxNDU3ZDM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUH9MaLHB1eZb588hl9VgA1cQYyT vSc0YzbmCaqCesv9sFsKiagaMWHKuKRh0IrrIyf0o7+vCLwKKuJZ9KFbendgmWKu j3OVGnmBSeAqmVLuSlPrZg7hc88zejRJzqNP8K5Fln8mfPPsj0mc2Q4EW4zzHgbk lT/OqBmWy26++3f7Ix3KIYS1dJyrntmbAziRUPtGBshKWWUh9qW4+qXGiQBkmN9Z zwjhWv62cs3zOoxwrD/HnyafK5y7FjPz631+km3gxBfL7TUNK6YUyOSyw8QqvmLP eDysy7jAfQf5UhlwOTLy45KKLM2Wg+KT9nQMr7OkZ7gR4lxIUEM+ZuSFpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA+o22tI3uda1EymOyLaNzGRRX00MB8GA1UdIwQY MBaAFK/zWWVG1GILAqlkLwi3fP5lAq6ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjct MmFiOWFmOTM4NDM0LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS8wMjk5ZjQtZDAwZC00NTdjLWJiNjctMmFiOWFmOTM4NDM0 LzEvcl9OWlpVYlVZZ3NDcVdRdkNMZDhfbVVDcnBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGiffHuot k3lPjIOqX0FeyUJQMGFvv1Oghz14/Vme47ufpgF6sWmkfUainODlYNkLf3e1dXz2 QNEDDFjZFmLgB9FKaB443sow3vDdti0QOoj6vWNRUBUaM0XR+cmFOzYtTm5WrpeB O9q5GMAvZefczdeQaV/zlIq4XrQWcWjWRI6sqgajYyBSIElMiEJ1rrRW4kT9+nta SKbKH8TVbNB3j2xL7mHRE0A5Yl06c5xxAvi1fuU8oB1T3w6BhsKac9gU1pFXtimV ZmXsW8NfDpyMt3Lzd7M1uyF8yp7kINNd/HCnm5g14oKDnb8/O34GS5qIJx/ZEuDK yNu8DBY9een7lg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:46:07 2026 by rpki-client