This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft File: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft (raw, json) Hash identifier: Zfjlb88V++nN82znEhK554FARNNnJI7qRDcR/O6GKzI= Subject key identifier: A6:7B:77:48:EC:7C:8F:0E:24:65:D0:09:88:51:10:CC:98:38:97:B5 Authority key identifier: CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 Certificate issuer: /CN=cda104577266ec9b146736c8cc9da7366b1d9781 Certificate serial: 019C43902B0A3839A2233C629B39C53DA9FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 18:00:47 +0000 Manifest this update: Mon 09 Feb 2026 18:00:47 +0000 Manifest next update: Tue 10 Feb 2026 18:00:47 +0000 Files and hashes: 1: zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl (hash: AWxa2NuUS7SkIbARDq7gWETVHUZUqmxL9syzjw6a74c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:2b:0a:38:39:a2:23:3c:62:9b:39:c5:3d:a9:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda104577266ec9b146736c8cc9da7366b1d9781 Validity Not Before: Feb 9 18:00:47 2026 GMT Not After : Feb 10 18:00:47 2026 GMT Subject: CN=a67b7748ec7c8f0e2465d009885110cc983897b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:28:c8:db:46:39:41:46:1d:be:76:ed:29:dc: 9a:fb:a9:2d:7f:61:64:26:01:86:dc:a3:b4:f0:67: 3a:bc:e8:e6:e3:ba:8b:4c:85:6a:7e:97:c5:62:e0: ac:23:f0:0f:a4:08:e3:b0:72:5a:3b:1e:89:d9:1c: 65:64:c2:50:19:0e:54:07:58:0c:1a:01:d0:1a:0d: 54:82:ea:e4:8a:a6:73:fb:9f:d5:27:c3:9c:ab:51: f4:67:14:b2:0b:27:3d:75:13:b6:f1:a7:f2:08:55: 4a:46:15:ec:be:5b:a9:d1:d1:e4:bd:0c:02:16:cc: b6:2d:47:ea:0f:2d:e4:c4:4a:29:6b:ed:a8:e6:b2: 56:51:17:72:72:a8:7f:d7:6b:89:75:cb:28:6a:72: 23:1b:86:d1:5f:8b:63:bb:50:ba:f3:8b:b5:fe:6a: 19:7d:8a:9e:c6:42:db:42:98:11:5b:e0:c2:2a:63: c7:92:f7:53:93:ac:7e:f0:fa:4c:e0:dc:57:3f:4c: a3:65:f7:fc:a5:62:7a:0d:e7:62:c1:27:c1:ab:c0: da:49:93:1b:01:ac:8f:3c:1b:27:af:3a:be:1c:64: 04:e0:1c:44:06:94:e7:29:ac:0d:58:90:2f:e4:e3: 07:f6:25:e3:ab:98:14:79:a8:11:8e:ef:04:31:32: eb:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:7B:77:48:EC:7C:8F:0E:24:65:D0:09:88:51:10:CC:98:38:97:B5 X509v3 Authority Key Identifier: keyid:CD:A1:04:57:72:66:EC:9B:14:67:36:C8:CC:9D:A7:36:6B:1D:97:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1d265a-6a57-4ced-bdf6-5fb09f21c607/1/zaEEV3Jm7JsUZzbIzJ2nNmsdl4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:45:f4:2f:47:7f:bd:52:d4:2c:a0:c1:b2:59:17:22:90:c1: cf:e3:db:9d:07:d3:d9:1d:16:3c:d5:be:f8:5b:e3:09:f4:4a: f8:04:b3:4f:d9:5f:ea:e5:b0:a3:b4:77:82:ad:b5:18:ea:17: 09:89:d5:57:fa:5b:d0:d1:cf:12:2b:09:55:3c:78:d9:d7:11: e5:b8:77:ab:23:18:5f:6f:9f:f5:27:8e:d3:45:53:35:0e:cb: 2c:32:33:22:92:d8:70:f4:82:f6:5e:ca:e6:3f:42:39:d6:da: b5:e9:7e:e2:4a:af:70:3a:ec:5f:aa:57:6b:da:21:a5:15:6d: 3c:30:b1:14:6a:e6:6d:3b:da:ca:ab:e7:e9:c9:e8:af:2c:b8: 06:14:08:76:15:a3:86:85:7f:ca:26:64:ad:cf:15:85:cb:9d: f4:8a:dc:66:a4:f9:95:ab:57:ac:78:19:9d:b1:3e:06:84:19: 6a:bb:96:ac:85:7d:52:bc:6a:48:12:5a:20:e1:6d:f6:e2:aa: 4b:7a:40:10:11:b0:3a:f6:89:aa:05:b2:33:5e:74:d1:84:93: 66:51:6c:03:bd:16:82:d8:7d:c0:b2:cf:63:88:b9:b2:08:c1: 60:20:aa:c2:bb:18:f3:09:27:f4:36:cc:e3:9c:2a:92:e4:5e: 16:cd:fa:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkCsKODmiIzximznFPan6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkYTEwNDU3NzI2NmVjOWIxNDY3MzZjOGNjOWRhNzM2NmIx ZDk3ODEwHhcNMjYwMjA5MTgwMDQ3WhcNMjYwMjEwMTgwMDQ3WjAzMTEwLwYDVQQD EyhhNjdiNzc0OGVjN2M4ZjBlMjQ2NWQwMDk4ODUxMTBjYzk4Mzg5N2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqijI20Y5QUYdvnbtKdya+6ktf2Fk JgGG3KO08Gc6vOjm47qLTIVqfpfFYuCsI/APpAjjsHJaOx6J2RxlZMJQGQ5UB1gM GgHQGg1UgurkiqZz+5/VJ8Ocq1H0ZxSyCyc9dRO28afyCFVKRhXsvlup0dHkvQwC Fsy2LUfqDy3kxEopa+2o5rJWURdycqh/12uJdcsoanIjG4bRX4tju1C684u1/moZ fYqexkLbQpgRW+DCKmPHkvdTk6x+8PpM4NxXP0yjZff8pWJ6DediwSfBq8DaSZMb AayPPBsnrzq+HGQE4BxEBpTnKawNWJAv5OMH9iXjq5gUeagRju8EMTLrowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZ7d0jsfI8OJGXQCYhREMyYOJe1MB8GA1UdIwQY MBaAFM2hBFdyZuybFGc2yMydpzZrHZeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYt NWZiMDlmMjFjNjA3LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC8xZDI2NWEtNmE1Ny00Y2VkLWJkZjYtNWZiMDlmMjFjNjA3 LzEvemFFRVYzSm03SnNVWnpiSXpKMm5ObXNkbDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF0X0L0d/ vVLULKDBslkXIpDBz+PbnQfT2R0WPNW++FvjCfRK+ASzT9lf6uWwo7R3gq21GOoX CYnVV/pb0NHPEisJVTx42dcR5bh3qyMYX2+f9SeO00VTNQ7LLDIzIpLYcPSC9l7K 5j9COdbatel+4kqvcDrsX6pXa9ohpRVtPDCxFGrmbTvayqvn6cnoryy4BhQIdhWj hoV/yiZkrc8Vhcud9IrcZqT5latXrHgZnbE+BoQZaruWrIV9UrxqSBJaIOFt9uKq S3pAEBGwOvaJqgWyM1500YSTZlFsA70Wgth9wLLPY4i5sgjBYCCqwrsY8wkn9DbM 45wqkuReFs360Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:14 2026 by rpki-client