This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft File: z32kMRhYgiWjduwhScczbEYzZEA.mft (raw, json) Hash identifier: PvxLWDpD1fpKz1isIPWZRQYGk4ZXxZq945i+kwm9cUg= Subject key identifier: 6F:F9:FA:F4:5D:91:D8:7A:3B:3F:E6:02:B7:43:55:AD:18:5E:63:B4 Authority key identifier: CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40 Certificate issuer: /CN=cf7da43118588225a376ec2149c7336c46336440 Certificate serial: 019C42EAEB8330E839E597C8D7D77B72F391 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft Manifest number: 102E Signing time: Mon 09 Feb 2026 15:00:17 +0000 Manifest this update: Mon 09 Feb 2026 15:00:17 +0000 Manifest next update: Tue 10 Feb 2026 15:00:17 +0000 Files and hashes: 1: z32kMRhYgiWjduwhScczbEYzZEA.crl (hash: v8ADmGHPBpxi3Q3XroG8dwHYsOYqg4x7j+QxFreQQkY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:ea:eb:83:30:e8:39:e5:97:c8:d7:d7:7b:72:f3:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf7da43118588225a376ec2149c7336c46336440 Validity Not Before: Feb 9 15:00:17 2026 GMT Not After : Feb 10 15:00:17 2026 GMT Subject: CN=6ff9faf45d91d87a3b3fe602b74355ad185e63b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:e2:0e:23:66:92:b0:e4:22:e3:f3:05:f3:d1: 31:71:e8:bf:14:a9:e7:5d:5f:a8:6d:87:f5:f2:4d: 21:bd:8e:e4:77:29:9f:e9:34:74:a5:5b:4b:58:7a: 2c:54:78:12:c9:b0:9d:10:dc:88:02:e0:79:48:9b: 12:66:8e:15:8e:58:f3:ed:48:f8:4a:8d:a1:11:45: 93:cf:ad:fc:8c:4d:65:5f:59:ad:09:db:79:3b:db: e9:1b:17:ad:66:d6:94:54:ea:32:d0:5d:16:29:4c: 31:e0:f5:e7:3f:ed:9d:c7:1a:8c:4e:9a:12:cb:a9: 11:7c:e4:af:9b:07:51:26:7f:22:41:38:d9:76:17: fe:f9:a8:49:68:28:b8:33:be:f8:3e:ed:e6:6a:68: 4e:ba:cc:d3:e3:dc:60:f6:69:62:32:d4:0f:56:0d: ff:18:c5:8f:e8:ce:53:f4:f1:7f:6b:a0:ff:7a:8a: 7b:48:93:27:6e:73:33:d7:ec:6b:c6:53:77:56:a8: 60:55:89:43:7d:c6:85:6c:6e:22:d4:26:05:33:99: f7:c0:b3:11:1e:91:7d:8a:09:75:01:7b:3f:6e:38: 93:d1:a6:77:ea:51:8a:3e:c6:9e:fd:bb:10:0f:7f: 80:aa:7d:f6:5e:5f:90:c4:16:e9:0a:1e:b5:f4:b7: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:FA:F4:5D:91:D8:7A:3B:3F:E6:02:B7:43:55:AD:18:5E:63:B4 X509v3 Authority Key Identifier: keyid:CF:7D:A4:31:18:58:82:25:A3:76:EC:21:49:C7:33:6C:46:33:64:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z32kMRhYgiWjduwhScczbEYzZEA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e4a75-cb58-44aa-9dd5-c5f17eab41d5/1/z32kMRhYgiWjduwhScczbEYzZEA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f7:ad:16:b2:4f:b8:74:4f:3d:7e:14:43:77:2c:f5:78:43: fa:0e:f0:d3:29:45:fa:65:f0:9b:75:dd:31:60:0e:bd:25:0e: 86:f7:48:99:49:b9:16:9b:52:7e:a6:bf:59:45:ab:46:41:51: 55:70:c1:4e:67:30:70:3c:4a:a7:9d:ca:a8:eb:8c:aa:20:28: fa:be:41:d4:e4:c5:eb:2b:b5:ba:85:a8:68:83:10:72:99:4c: 54:6d:56:28:d5:03:07:07:63:5b:a3:2a:19:7f:71:7a:96:99: 8e:de:95:54:83:a8:50:1e:ea:7d:00:ba:a7:39:08:78:31:e7: b4:d4:99:fa:64:4d:7a:8c:a0:cb:f0:c8:b1:d7:b1:6d:b8:3f: a5:70:ff:04:1c:3d:5a:f9:fb:65:d6:1b:d0:49:7d:43:32:c8: 1d:fc:d7:32:b9:04:e8:8b:e1:3c:61:7c:f4:63:cb:b9:b4:ec: 74:b5:ca:ab:ef:cc:a9:09:02:02:b6:9e:f2:77:67:12:e4:2c: bb:e0:a2:d8:af:df:e3:86:c5:ec:dd:ff:1d:8a:5b:25:22:ee: c7:ce:33:9c:54:54:47:e6:a8:62:84:f7:cf:f6:49:35:cb:0a: 51:1f:9d:7b:a6:ac:07:72:5d:da:7f:a5:6f:68:31:b9:58:6a: 9a:19:93:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6uuDMOg55ZfI19d7cvORMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmN2RhNDMxMTg1ODgyMjVhMzc2ZWMyMTQ5YzczMzZjNDYz MzY0NDAwHhcNMjYwMjA5MTUwMDE3WhcNMjYwMjEwMTUwMDE3WjAzMTEwLwYDVQQD Eyg2ZmY5ZmFmNDVkOTFkODdhM2IzZmU2MDJiNzQzNTVhZDE4NWU2M2I0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OIOI2aSsOQi4/MF89Excei/FKnn XV+obYf18k0hvY7kdymf6TR0pVtLWHosVHgSybCdENyIAuB5SJsSZo4Vjljz7Uj4 So2hEUWTz638jE1lX1mtCdt5O9vpGxetZtaUVOoy0F0WKUwx4PXnP+2dxxqMTpoS y6kRfOSvmwdRJn8iQTjZdhf++ahJaCi4M774Pu3mamhOuszT49xg9mliMtQPVg3/ GMWP6M5T9PF/a6D/eop7SJMnbnMz1+xrxlN3VqhgVYlDfcaFbG4i1CYFM5n3wLMR HpF9igl1AXs/bjiT0aZ36lGKPsae/bsQD3+Aqn32Xl+QxBbpCh619Lc3rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG/5+vRdkdh6Oz/mArdDVa0YXmO0MB8GA1UdIwQY MBaAFM99pDEYWIIlo3bsIUnHM2xGM2RAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUt YzVmMTdlYWI0MWQ1LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8wZTRhNzUtY2I1OC00NGFhLTlkZDUtYzVmMTdlYWI0MWQ1 LzEvejMya01SaFlnaVdqZHV3aFNjY3piRVl6WkVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPetFrJP uHRPPX4UQ3cs9XhD+g7w0ylF+mXwm3XdMWAOvSUOhvdImUm5FptSfqa/WUWrRkFR VXDBTmcwcDxKp53KqOuMqiAo+r5B1OTF6yu1uoWoaIMQcplMVG1WKNUDBwdjW6Mq GX9xepaZjt6VVIOoUB7qfQC6pzkIeDHntNSZ+mRNeoygy/DIsdexbbg/pXD/BBw9 Wvn7ZdYb0El9QzLIHfzXMrkE6IvhPGF89GPLubTsdLXKq+/MqQkCArae8ndnEuQs u+Ci2K/f44bF7N3/HYpbJSLux84znFRUR+aoYoT3z/ZJNcsKUR+de6asB3Jd2n+l b2gxuVhqmhmTPw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:09 2026 by rpki-client