This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft File: zWv2DrCPHiOrqLp5fBFyREzhW3E.mft (raw, json) Hash identifier: 0pKTs8e/7BZQaNixW7aoTz2HnAynUrlZzwm/X4kdcAg= Subject key identifier: 80:C2:3D:66:61:64:0F:93:40:AB:0A:B7:CC:33:B2:60:10:EB:3C:20 Authority key identifier: CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71 Certificate issuer: /CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71 Certificate serial: 019C4323171F615209411DF4828204FDF643 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft Manifest number: 12BE Signing time: Mon 09 Feb 2026 16:01:39 +0000 Manifest this update: Mon 09 Feb 2026 16:01:39 +0000 Manifest next update: Tue 10 Feb 2026 16:01:39 +0000 Files and hashes: 1: zWv2DrCPHiOrqLp5fBFyREzhW3E.crl (hash: 3CRxxL81D5FAD2xbFDbPPhq4w9BMyGVGW0fBI9h/HUI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:17:1f:61:52:09:41:1d:f4:82:82:04:fd:f6:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd6bf60eb08f1e23aba8ba797c1172444ce15b71 Validity Not Before: Feb 9 16:01:39 2026 GMT Not After : Feb 10 16:01:39 2026 GMT Subject: CN=80c23d6661640f9340ab0ab7cc33b26010eb3c20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:0f:ba:f6:8c:ce:7f:ba:f8:0c:83:d6:f9: 4d:b9:18:b5:43:87:36:5a:39:46:93:1b:3d:73:66: 54:00:1e:1c:3c:96:23:33:87:58:e5:04:f2:2c:9b: 5a:cf:b7:1f:f2:d6:8d:12:ad:55:ec:d7:ad:33:14: d3:38:52:6f:ff:81:64:38:82:cc:a1:89:06:30:f4: 9a:33:6e:52:33:60:e1:bc:99:7d:df:fc:fa:0b:f2: 65:6f:30:ae:58:0b:22:c6:44:ab:43:5a:5e:43:3c: 84:1f:99:0c:66:8d:a7:11:02:6b:94:5d:bb:cc:a1: ba:67:38:21:bc:49:3a:01:a1:a2:21:21:8f:8f:e7: 86:71:b0:0b:43:7c:ea:38:74:bf:e9:8f:9a:89:cc: ec:e6:56:25:b0:1f:48:0b:d9:38:83:45:3e:e5:30: 45:f7:c5:58:75:34:ff:45:a5:7d:a2:75:db:7e:35: e0:4e:07:39:94:92:a1:36:33:14:46:a6:e9:37:0b: b4:68:a3:1d:6b:c1:6b:5d:23:82:77:ae:d6:fe:e2: ad:7e:f6:d8:74:9f:8d:8b:0d:9a:b3:19:08:19:bf: 12:7f:f6:e3:9a:df:67:e6:8e:7d:0f:c8:33:f9:75: 24:78:f0:5f:15:3b:40:fa:73:6a:23:9f:f9:ae:55: 7a:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C2:3D:66:61:64:0F:93:40:AB:0A:B7:CC:33:B2:60:10:EB:3C:20 X509v3 Authority Key Identifier: keyid:CD:6B:F6:0E:B0:8F:1E:23:AB:A8:BA:79:7C:11:72:44:4C:E1:5B:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zWv2DrCPHiOrqLp5fBFyREzhW3E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87567-6dd8-4a60-921e-2a0722ae1644/1/zWv2DrCPHiOrqLp5fBFyREzhW3E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f1:6b:3a:48:11:95:64:89:eb:0a:a7:0e:97:8f:6a:be:6d: ef:61:49:58:43:10:ba:b9:6b:01:9d:f9:0f:d2:58:21:bd:f9: 77:c0:66:69:9d:cd:a2:a0:79:10:97:30:f1:bf:99:5c:19:ba: 4b:46:61:15:ed:d4:c3:2d:15:1d:28:e4:97:10:ea:f6:2b:42: d1:c9:f0:62:d3:6b:44:be:9e:b1:27:0e:97:26:ee:8c:25:b8: 04:98:8b:f4:2c:ed:86:a4:2d:79:4a:76:5c:49:73:af:64:27: ea:89:41:38:ea:7a:83:60:26:ce:2b:9d:a2:03:e7:9a:a0:6a: 7b:42:4b:42:81:79:e8:22:29:bd:3b:e8:bb:c9:0d:04:86:e1: 96:38:64:ff:4e:b8:dc:50:19:05:ab:63:f7:ab:3f:98:94:39: 56:27:65:f0:ff:15:3a:7e:ad:b6:5d:0e:18:21:74:50:91:b8: c0:7a:6f:d2:8f:5b:72:38:79:3f:30:ae:9e:89:c5:87:8b:30: dd:d0:72:19:30:41:38:00:cd:dc:ce:32:d4:a1:6f:47:14:8d: 39:ac:f3:9e:d1:7e:24:bc:48:a1:2c:d0:66:ca:f0:b5:4f:9c: 45:b0:9b:a4:76:f2:d5:1d:59:bb:08:38:bc:3a:6d:96:9d:d1: 9b:0d:9c:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIxcfYVIJQR30goIE/fZDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkNmJmNjBlYjA4ZjFlMjNhYmE4YmE3OTdjMTE3MjQ0NGNl MTViNzEwHhcNMjYwMjA5MTYwMTM5WhcNMjYwMjEwMTYwMTM5WjAzMTEwLwYDVQQD Eyg4MGMyM2Q2NjYxNjQwZjkzNDBhYjBhYjdjYzMzYjI2MDEwZWIzYzIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3wPuvaMzn+6+AyD1vlNuRi1Q4c2 WjlGkxs9c2ZUAB4cPJYjM4dY5QTyLJtaz7cf8taNEq1V7NetMxTTOFJv/4FkOILM oYkGMPSaM25SM2DhvJl93/z6C/JlbzCuWAsixkSrQ1peQzyEH5kMZo2nEQJrlF27 zKG6ZzghvEk6AaGiISGPj+eGcbALQ3zqOHS/6Y+aiczs5lYlsB9IC9k4g0U+5TBF 98VYdTT/RaV9onXbfjXgTgc5lJKhNjMURqbpNwu0aKMda8FrXSOCd67W/uKtfvbY dJ+Niw2asxkIGb8Sf/bjmt9n5o59D8gz+XUkePBfFTtA+nNqI5/5rlV6BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIDCPWZhZA+TQKsKt8wzsmAQ6zwgMB8GA1UdIwQY MBaAFM1r9g6wjx4jq6i6eXwRckRM4VtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUt MmEwNzIyYWUxNjQ0LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOS9lODc1NjctNmRkOC00YTYwLTkyMWUtMmEwNzIyYWUxNjQ0 LzEveld2MkRyQ1BIaU9ycUxwNWZCRnlSRXpoVzNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl/FrOkgR lWSJ6wqnDpePar5t72FJWEMQurlrAZ35D9JYIb35d8BmaZ3NoqB5EJcw8b+ZXBm6 S0ZhFe3Uwy0VHSjklxDq9itC0cnwYtNrRL6esScOlybujCW4BJiL9CzthqQteUp2 XElzr2Qn6olBOOp6g2AmziudogPnmqBqe0JLQoF56CIpvTvou8kNBIbhljhk/064 3FAZBatj96s/mJQ5Vidl8P8VOn6ttl0OGCF0UJG4wHpv0o9bcjh5PzCunonFh4sw 3dByGTBBOADN3M4y1KFvRxSNOazzntF+JLxIoSzQZsrwtU+cRbCbpHby1R1Zuwg4 vDptlp3Rmw2cPw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:10:12 2026 by rpki-client