This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft File: ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft (raw, json) Hash identifier: EqggIOduuvk9M2AVxW9IPk271qIqQZtkZvL3w2o41LI= Subject key identifier: AC:D4:54:B6:6C:22:FF:23:47:39:4B:29:64:28:74:E3:94:83:DA:EF Authority key identifier: 64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92 Certificate issuer: /CN=64b90f34525f80025ea77cb618e7519982ab8592 Certificate serial: 019C4322180EFA564245DD73E43865C5C454 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 16:00:33 +0000 Manifest this update: Mon 09 Feb 2026 16:00:33 +0000 Manifest next update: Tue 10 Feb 2026 16:00:33 +0000 Files and hashes: 1: ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl (hash: +GT1usK/RWjHJEaIHkQO6oonWtNy9q+vVRfgJSkLTJA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:18:0e:fa:56:42:45:dd:73:e4:38:65:c5:c4:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b90f34525f80025ea77cb618e7519982ab8592 Validity Not Before: Feb 9 16:00:33 2026 GMT Not After : Feb 10 16:00:33 2026 GMT Subject: CN=acd454b66c22ff2347394b29642874e39483daef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9e:6d:41:23:80:61:7d:ad:e0:d6:66:ab:a6: 4f:32:77:8d:c2:92:65:28:31:eb:47:60:70:7a:6c: 91:f4:9a:24:fa:6a:46:28:ad:d1:3e:71:2d:d5:fb: 4c:4c:0d:98:cc:56:b4:9b:4b:0a:b3:75:f1:00:14: 19:cb:12:18:1e:34:40:11:a8:9f:c3:d8:ba:32:18: 84:ba:01:9e:a2:4c:24:f4:5f:97:b3:88:5d:7b:ea: ac:11:dc:eb:24:11:cb:40:89:ed:12:d9:d2:c8:51: 7f:99:52:fd:ca:fe:c5:85:47:3d:4a:ae:73:27:55: be:70:fe:0e:fc:b4:9a:1e:7a:19:57:cd:a5:7f:07: 8d:04:1e:f6:e1:67:7f:80:2b:c3:4d:09:d8:e6:21: 6b:67:25:f5:20:e2:a7:fa:7c:d3:06:29:cc:e4:41: f3:3e:10:ea:e5:36:9a:8c:af:11:6b:ae:9e:21:c6: 40:83:50:07:15:94:41:33:f6:69:6e:29:a4:74:9e: 96:7d:8d:b0:9a:36:63:e9:e8:43:67:4c:01:8e:97: a2:dc:70:c4:c8:12:eb:5e:5e:66:2e:dd:81:8c:a4: 19:82:34:5d:e7:99:7c:77:3f:1f:19:ee:59:0f:22: a4:10:67:60:8c:df:36:93:c2:2f:2c:56:a4:67:ac: f7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D4:54:B6:6C:22:FF:23:47:39:4B:29:64:28:74:E3:94:83:DA:EF X509v3 Authority Key Identifier: keyid:64:B9:0F:34:52:5F:80:02:5E:A7:7C:B6:18:E7:51:99:82:AB:85:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLkPNFJfgAJep3y2GOdRmYKrhZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c7a7f5-e3a2-493b-a8bd-7bdb672e0c54/1/ZLkPNFJfgAJep3y2GOdRmYKrhZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:69:a8:5e:85:0d:09:09:54:e8:2c:01:3c:f6:6d:94:eb:3a: 7d:9f:1e:c5:0a:ee:61:07:9e:22:a2:18:6e:6d:d7:ba:76:24: a3:2b:28:91:98:a2:47:0c:c1:91:4b:48:71:77:0b:47:6f:7e: 7c:eb:b2:71:34:56:1d:22:07:a2:09:7c:d3:83:40:12:0b:ac: a4:9a:23:22:f4:8a:cd:be:14:7d:e6:a9:9e:d8:06:2f:04:d0: ec:29:da:fd:3f:43:bd:cb:8f:5d:3a:fc:96:a2:85:59:6a:b8: 9b:4e:f2:79:83:c7:bc:73:b0:ee:da:45:4e:f7:70:74:03:2d: d1:24:57:b9:2c:d7:2f:9f:d2:61:35:7b:f2:7c:5b:5b:0e:e0: b6:09:9d:75:2f:7b:92:0e:04:6e:04:5f:9b:9f:65:b9:0c:14: 8a:b6:17:f7:85:35:65:93:ca:04:f6:92:9c:ac:81:f3:b1:12: be:21:45:d1:a5:05:b0:4e:85:b3:a9:a9:70:37:28:79:5e:58: be:7d:a4:22:f1:08:43:4c:02:73:31:68:bc:d5:12:b4:ef:fa: 22:ca:94:4a:e6:60:cc:68:3c:5e:4b:25:36:24:66:8d:68:45: 05:61:2e:78:59:04:62:13:32:d0:53:a6:d6:28:c3:04:bd:fd: de:2f:68:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIhgO+lZCRd1z5DhlxcRUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjkwZjM0NTI1ZjgwMDI1ZWE3N2NiNjE4ZTc1MTk5ODJh Yjg1OTIwHhcNMjYwMjA5MTYwMDMzWhcNMjYwMjEwMTYwMDMzWjAzMTEwLwYDVQQD EyhhY2Q0NTRiNjZjMjJmZjIzNDczOTRiMjk2NDI4NzRlMzk0ODNkYWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ5tQSOAYX2t4NZmq6ZPMneNwpJl KDHrR2BwemyR9Jok+mpGKK3RPnEt1ftMTA2YzFa0m0sKs3XxABQZyxIYHjRAEaif w9i6MhiEugGeokwk9F+Xs4hde+qsEdzrJBHLQIntEtnSyFF/mVL9yv7FhUc9Sq5z J1W+cP4O/LSaHnoZV82lfweNBB724Wd/gCvDTQnY5iFrZyX1IOKn+nzTBinM5EHz PhDq5TaajK8Ra66eIcZAg1AHFZRBM/ZpbimkdJ6WfY2wmjZj6ehDZ0wBjpei3HDE yBLrXl5mLt2BjKQZgjRd55l8dz8fGe5ZDyKkEGdgjN82k8IvLFakZ6z3PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKzUVLZsIv8jRzlLKWQodOOUg9rvMB8GA1UdIwQY MBaAFGS5DzRSX4ACXqd8thjnUZmCq4WSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9jN2E3ZjUtZTNhMi00OTNiLWE4YmQt N2JkYjY3MmUwYzU0LzEvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC9jN2E3ZjUtZTNhMi00OTNiLWE4YmQtN2JkYjY3MmUwYzU0 LzEvWkxrUE5GSmZnQUplcDN5MkdPZFJtWUtyaFpJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACmmoXoUN CQlU6CwBPPZtlOs6fZ8exQruYQeeIqIYbm3XunYkoysokZiiRwzBkUtIcXcLR29+ fOuycTRWHSIHogl804NAEguspJojIvSKzb4UfeapntgGLwTQ7Cna/T9DvcuPXTr8 lqKFWWq4m07yeYPHvHOw7tpFTvdwdAMt0SRXuSzXL5/SYTV78nxbWw7gtgmddS97 kg4EbgRfm59luQwUirYX94U1ZZPKBPaSnKyB87ESviFF0aUFsE6Fs6mpcDcoeV5Y vn2kIvEIQ0wCczFovNUStO/6IsqUSuZgzGg8XkslNiRmjWhFBWEueFkEYhMy0FOm 1ijDBL393i9oNA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:54 2026 by rpki-client