This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft File: ZmW8l5kwxe64oYSlqQOei5nuMK8.mft (raw, json) Hash identifier: TRDPf7j2l5O31DMkgyOymgUm1aPGRVbNk5SbgW2RT8U= Subject key identifier: 3E:07:31:A0:1A:44:62:E8:5A:CC:32:A2:99:D1:F8:6D:84:C0:78:55 Authority key identifier: 66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF Certificate issuer: /CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af Certificate serial: 019C42EBA57777AA805D2E5C6003301B880F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 15:01:05 +0000 Manifest this update: Mon 09 Feb 2026 15:01:05 +0000 Manifest next update: Tue 10 Feb 2026 15:01:05 +0000 Files and hashes: 1: ZmW8l5kwxe64oYSlqQOei5nuMK8.crl (hash: DcmPf+9phqVAuPnrHYWUbwjEucmy4oxooLSOR3QxHgM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:a5:77:77:aa:80:5d:2e:5c:60:03:30:1b:88:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6665bc979930c5eeb8a184a5a9039e8b99ee30af Validity Not Before: Feb 9 15:01:05 2026 GMT Not After : Feb 10 15:01:05 2026 GMT Subject: CN=3e0731a01a4462e85acc32a299d1f86d84c07855 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2e:54:05:ed:4d:fc:c5:d8:2a:7c:d2:90:7f: b7:85:96:79:20:29:15:f7:c0:17:c9:ce:09:73:95: d1:9c:7e:2c:59:3a:02:54:31:98:2a:51:bb:7e:30: 01:47:5b:cf:3b:1a:4d:83:fc:f1:36:d9:c7:65:a6: 2d:20:5a:6b:72:6f:ce:8c:ad:49:fc:fb:f0:b4:d0: b4:1a:2e:5b:b7:e3:80:dc:ea:51:69:9e:43:e8:ed: 65:40:22:93:2e:6f:7a:3d:8e:fa:46:78:a7:72:af: 09:78:06:51:4c:83:75:a1:cc:95:7c:6b:4f:8d:70: 3a:ca:18:b5:85:d5:43:72:9f:ef:fa:40:01:2a:2a: 6a:f1:58:1c:0d:56:69:d2:01:57:99:56:1f:40:b5: 5a:23:73:3c:48:76:80:ae:d3:df:bf:60:60:e2:49: 36:84:d3:f7:c7:3b:5b:1f:d2:ba:f4:2a:3d:1a:f3: bb:57:73:cb:1f:05:26:78:e5:e2:9d:73:70:e7:69: 8b:c2:e9:9f:4e:1d:ef:67:24:4e:71:fe:cd:af:84: 67:84:f8:a7:6d:dc:8d:10:7f:fc:8d:72:d0:eb:31: 6b:77:62:f3:a9:cf:db:30:72:d8:f8:15:e2:b7:fe: 3c:0b:4e:1c:70:b6:ad:4a:81:e9:f7:62:36:74:af: 23:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:07:31:A0:1A:44:62:E8:5A:CC:32:A2:99:D1:F8:6D:84:C0:78:55 X509v3 Authority Key Identifier: keyid:66:65:BC:97:99:30:C5:EE:B8:A1:84:A5:A9:03:9E:8B:99:EE:30:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZmW8l5kwxe64oYSlqQOei5nuMK8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/3367a1-f00d-425b-a1c1-c2cb7479fbee/1/ZmW8l5kwxe64oYSlqQOei5nuMK8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:b9:9c:aa:87:71:65:98:7e:2f:24:b9:f0:e6:76:f6:55:a6: 7f:8d:b3:89:84:07:db:6a:b5:00:08:9e:67:c7:7c:12:80:ce: 89:e3:5a:48:e0:9f:b2:19:a1:33:52:83:fc:02:7d:7c:2f:40: 4e:ff:a4:ef:c7:e6:75:bb:a6:8f:b7:33:e0:1b:bd:1b:68:d2: 9d:83:50:f0:14:e9:eb:74:bd:23:a5:d7:01:f0:db:d2:4e:f1: 96:43:cf:5d:d8:34:c8:fd:9e:9c:3d:66:8d:f2:af:93:ca:ba: 2c:8d:d1:c2:2a:da:0b:2a:ac:2e:6f:3c:fd:ed:41:c7:38:b7: 23:8c:20:83:7c:d3:ca:48:b4:27:77:f5:85:87:43:74:02:49: 42:a4:64:4f:11:09:87:68:f4:8c:76:a9:78:3d:c5:34:8e:74: 2e:ca:74:29:4d:1a:5a:1d:1a:08:f7:a0:b7:28:ed:40:ea:eb: c8:d9:ed:de:f6:02:bb:c3:be:05:68:dc:fc:0d:15:96:e9:6a: 45:37:6a:3c:76:ac:bc:96:16:d3:69:d3:78:7f:de:8f:e6:83: 59:e1:6e:7f:08:1d:fb:36:5c:fe:5b:22:84:bc:20:4b:4f:60: 83:dc:3d:9d:d4:0f:0f:f7:1e:35:42:a5:cd:a7:bf:f2:b1:93: 13:dd:63:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC66V3d6qAXS5cYAMwG4gPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2NjViYzk3OTkzMGM1ZWViOGExODRhNWE5MDM5ZThiOTll ZTMwYWYwHhcNMjYwMjA5MTUwMTA1WhcNMjYwMjEwMTUwMTA1WjAzMTEwLwYDVQQD EygzZTA3MzFhMDFhNDQ2MmU4NWFjYzMyYTI5OWQxZjg2ZDg0YzA3ODU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArC5UBe1N/MXYKnzSkH+3hZZ5ICkV 98AXyc4Jc5XRnH4sWToCVDGYKlG7fjABR1vPOxpNg/zxNtnHZaYtIFprcm/OjK1J /PvwtNC0Gi5bt+OA3OpRaZ5D6O1lQCKTLm96PY76Rnincq8JeAZRTIN1ocyVfGtP jXA6yhi1hdVDcp/v+kABKipq8VgcDVZp0gFXmVYfQLVaI3M8SHaArtPfv2Bg4kk2 hNP3xztbH9K69Co9GvO7V3PLHwUmeOXinXNw52mLwumfTh3vZyROcf7Nr4RnhPin bdyNEH/8jXLQ6zFrd2Lzqc/bMHLY+BXit/48C04ccLatSoHp92I2dK8jJQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD4HMaAaRGLoWswyopnR+G2EwHhVMB8GA1UdIwQY MBaAFGZlvJeZMMXuuKGEpakDnouZ7jCvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWm1XOGw1a3d4ZTY0b1lTbHFRT2VpNW51TUs4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zMzY3YTEtZjAwZC00MjViLWExYzEt YzJjYjc0NzlmYmVlLzEvWm1XOGw1a3d4ZTY0b1lTbHFRT2VpNW51TUs4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS8zMzY3YTEtZjAwZC00MjViLWExYzEtYzJjYjc0NzlmYmVl LzEvWm1XOGw1a3d4ZTY0b1lTbHFRT2VpNW51TUs4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLmcqodx ZZh+LyS58OZ29lWmf42ziYQH22q1AAieZ8d8EoDOieNaSOCfshmhM1KD/AJ9fC9A Tv+k78fmdbumj7cz4Bu9G2jSnYNQ8BTp63S9I6XXAfDb0k7xlkPPXdg0yP2enD1m jfKvk8q6LI3RwiraCyqsLm88/e1Bxzi3I4wgg3zTyki0J3f1hYdDdAJJQqRkTxEJ h2j0jHapeD3FNI50Lsp0KU0aWh0aCPegtyjtQOrryNnt3vYCu8O+BWjc/A0Vlulq RTdqPHasvJYW02nTeH/ej+aDWeFufwgd+zZc/lsihLwgS09gg9w9ndQPD/ceNUKl zae/8rGTE91jMQ== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:55 2026 by rpki-client