This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft File: Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft (raw, json) Hash identifier: rtkotDbR6Ujzb4oEK5BuXIA+SBpL7SixD5TEWm50WYs= Subject key identifier: FD:44:B2:F0:E7:48:07:E4:6F:3A:88:D0:80:37:6C:97:D6:E5:85:04 Authority key identifier: 66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3 Certificate issuer: /CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3 Certificate serial: 019C43229675FD8B8E75EF3F5E0D0E2702DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft Manifest number: 0C1C Signing time: Mon 09 Feb 2026 16:01:06 +0000 Manifest this update: Mon 09 Feb 2026 16:01:06 +0000 Manifest next update: Tue 10 Feb 2026 16:01:06 +0000 Files and hashes: 1: Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl (hash: mQZCy1BpBkoPeUKKWmsBISiNcoKyQDEZWF/Q3QkqL3Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:96:75:fd:8b:8e:75:ef:3f:5e:0d:0e:27:02:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661f2da6c2df94a7d05a7ee401fcfe3168640ac3 Validity Not Before: Feb 9 16:01:06 2026 GMT Not After : Feb 10 16:01:06 2026 GMT Subject: CN=fd44b2f0e74807e46f3a88d080376c97d6e58504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:89:48:f2:ba:ca:e5:10:33:be:ce:a1:44:5e: 9a:7f:e3:2b:91:b0:42:43:10:89:8b:0d:33:b3:9d: be:f6:77:1f:c8:ef:ec:7a:3f:cc:24:72:c0:97:eb: cf:e7:ce:65:e5:a2:af:b8:a4:10:8e:b2:ef:90:d7: 21:87:ce:ba:b8:33:76:a6:8b:54:4e:e1:c5:8f:5b: 51:6f:f3:11:9d:ec:73:bc:70:97:b4:d0:37:6b:e3: 7e:78:7d:18:61:0c:ce:83:6d:35:7d:2e:2e:77:ef: ae:03:c6:38:0a:0c:f7:c4:a3:57:3a:aa:2b:65:10: e0:9c:62:5a:9e:61:b5:a3:2c:b6:d4:33:73:73:cc: 66:20:6e:69:97:ec:33:46:6e:a2:96:d1:13:eb:f0: 31:84:df:5a:4a:8f:73:60:5e:db:82:44:88:ef:1d: 84:31:80:1f:92:d0:34:4d:0f:6e:f2:85:18:5e:07: 19:16:f9:33:43:3c:6a:a6:62:d0:23:eb:e8:55:55: ed:0c:15:b3:43:b3:47:76:e2:32:25:3a:2b:72:7e: e3:3f:96:04:f5:a9:39:62:68:8d:c1:de:48:d6:d1: 7a:38:4a:d5:9d:a3:1b:cf:7a:ba:c4:b8:7f:f4:ee: 21:fd:7b:23:f6:a6:b6:1f:ed:5a:2b:1a:14:43:63: dd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:B2:F0:E7:48:07:E4:6F:3A:88:D0:80:37:6C:97:D6:E5:85:04 X509v3 Authority Key Identifier: keyid:66:1F:2D:A6:C2:DF:94:A7:D0:5A:7E:E4:01:FC:FE:31:68:64:0A:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zh8tpsLflKfQWn7kAfz-MWhkCsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/792dde-16b4-4d72-931b-0a71fb92d42a/1/Zh8tpsLflKfQWn7kAfz-MWhkCsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:f1:ce:95:d4:f2:fe:c5:9a:0c:c9:bf:56:2a:49:7d:ac:f7: 4e:82:cc:13:90:42:1b:9b:5a:13:8e:90:d0:d1:85:c9:b0:93: 90:1b:e3:a5:b2:83:6f:b0:9e:45:81:91:0f:8d:76:7e:8c:2a: 18:99:90:8f:eb:db:f8:4b:40:06:6d:51:cb:3d:95:5c:95:2b: 4a:fa:e4:45:1e:ba:b7:ce:3e:dc:3e:4d:99:38:11:de:78:a7: 12:b1:e6:f4:c3:91:7a:8a:77:54:6f:60:90:75:2b:73:ab:4c: 88:14:60:dd:b3:93:3c:af:27:d4:06:b8:70:24:0b:cc:12:27: 70:5a:0e:39:63:b0:3f:d6:d9:1f:89:41:9b:d0:ab:f6:51:f7: 17:e5:82:4e:7b:49:ec:f0:ad:aa:fb:05:db:a3:7d:ab:2a:01: e7:d1:a0:03:e9:44:5f:80:2d:e8:21:a7:13:22:c0:8a:11:f2: 39:34:09:07:ae:67:ba:90:50:8e:5a:e0:93:8a:cb:6c:e1:e5: ac:60:ae:42:00:b4:42:a0:0c:8e:08:c9:50:3f:01:38:7b:fd: c5:1e:07:81:44:07:a1:09:02:3e:0a:1c:71:18:fa:ab:65:d0: 3b:ae:09:a8:d3:f5:89:19:22:62:6f:16:bf:fb:f1:d2:ca:c1: 7b:9c:07:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIpZ1/YuOde8/Xg0OJwLcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2MWYyZGE2YzJkZjk0YTdkMDVhN2VlNDAxZmNmZTMxNjg2 NDBhYzMwHhcNMjYwMjA5MTYwMTA2WhcNMjYwMjEwMTYwMTA2WjAzMTEwLwYDVQQD EyhmZDQ0YjJmMGU3NDgwN2U0NmYzYTg4ZDA4MDM3NmM5N2Q2ZTU4NTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4lI8rrK5RAzvs6hRF6af+MrkbBC QxCJiw0zs52+9ncfyO/sej/MJHLAl+vP585l5aKvuKQQjrLvkNchh866uDN2potU TuHFj1tRb/MRnexzvHCXtNA3a+N+eH0YYQzOg201fS4ud++uA8Y4Cgz3xKNXOqor ZRDgnGJanmG1oyy21DNzc8xmIG5pl+wzRm6iltET6/AxhN9aSo9zYF7bgkSI7x2E MYAfktA0TQ9u8oUYXgcZFvkzQzxqpmLQI+voVVXtDBWzQ7NHduIyJTorcn7jP5YE 9ak5YmiNwd5I1tF6OErVnaMbz3q6xLh/9O4h/Xsj9qa2H+1aKxoUQ2PdqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1EsvDnSAfkbzqI0IA3bJfW5YUEMB8GA1UdIwQY MBaAFGYfLabC35Sn0Fp+5AH8/jFoZArDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWIt MGE3MWZiOTJkNDJhLzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS83OTJkZGUtMTZiNC00ZDcyLTkzMWItMGE3MWZiOTJkNDJh LzEvWmg4dHBzTGZsS2ZRV243a0Fmei1NV2hrQ3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2vHOldTy /sWaDMm/VipJfaz3ToLME5BCG5taE46Q0NGFybCTkBvjpbKDb7CeRYGRD412fowq GJmQj+vb+EtABm1Ryz2VXJUrSvrkRR66t84+3D5NmTgR3ninErHm9MOReop3VG9g kHUrc6tMiBRg3bOTPK8n1Aa4cCQLzBIncFoOOWOwP9bZH4lBm9Cr9lH3F+WCTntJ 7PCtqvsF26N9qyoB59GgA+lEX4At6CGnEyLAihHyOTQJB65nupBQjlrgk4rLbOHl rGCuQgC0QqAMjgjJUD8BOHv9xR4HgUQHoQkCPgoccRj6q2XQO64JqNP1iRkiYm8W v/vx0srBe5wHEw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:16 2026 by rpki-client