This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft File: mzk18I1_BlLdhWIgBXxGSu1SDhI.mft (raw, json) Hash identifier: qnm5qZ5ICRTrgQ7PnMjKS/QA+rJzWJEF7KzgustRmYE= Subject key identifier: 37:3D:F0:DE:86:15:92:12:D1:24:7C:5C:D1:7F:15:9A:EE:17:AB:10 Authority key identifier: 9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12 Certificate issuer: /CN=9b3935f08d7f0652dd856220057c464aed520e12 Certificate serial: 019C4322C635C2C81AAE840D73057119937F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 16:01:18 +0000 Manifest this update: Mon 09 Feb 2026 16:01:18 +0000 Manifest next update: Tue 10 Feb 2026 16:01:18 +0000 Files and hashes: 1: mzk18I1_BlLdhWIgBXxGSu1SDhI.crl (hash: Md6PR4xb+nJoo7Z3C73TZO2/bE55TDDddr3up1OBrfQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c6:35:c2:c8:1a:ae:84:0d:73:05:71:19:93:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3935f08d7f0652dd856220057c464aed520e12 Validity Not Before: Feb 9 16:01:18 2026 GMT Not After : Feb 10 16:01:18 2026 GMT Subject: CN=373df0de86159212d1247c5cd17f159aee17ab10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:46:cb:e5:89:78:b4:fb:0d:12:08:f0:57:c3: 4f:7d:6a:19:db:3d:4a:cb:4e:86:63:6e:d3:88:b3: 51:f7:45:ab:3d:d5:56:1d:a7:33:04:db:93:b1:51: 37:fd:83:f7:cf:33:9f:41:e9:64:e6:7f:b0:87:ad: ac:9a:2f:11:cd:87:d6:88:a3:0e:b7:2d:ea:85:f4: 5b:4c:4e:4c:7c:26:3a:7a:b7:e3:fa:cb:ec:3b:be: a5:6b:1b:9b:83:60:17:2f:ca:fb:f2:2e:99:46:83: c1:b8:96:91:64:b4:18:2d:ec:4e:a0:d0:4b:52:25: e8:17:60:d9:3b:a3:45:17:a7:b7:a0:0e:8e:c0:7d: e3:cb:69:11:e5:e2:b5:51:fa:7f:ee:5d:9c:8a:e8: eb:0c:92:7f:44:ab:d5:31:75:c1:e9:7b:b0:c7:a8: 99:ef:e5:2e:67:80:19:cf:90:e1:40:ea:d2:d3:78: 63:56:36:db:af:62:0b:4b:4a:04:07:1e:ea:a8:42: de:c5:f4:83:c3:07:2a:92:70:5f:99:f7:78:61:5e: 39:30:8c:e7:90:37:36:32:0e:9d:2d:9c:88:7b:7f: da:6b:37:ab:63:d3:41:c5:7e:1d:b3:49:3c:e2:c8: 30:94:5a:85:33:37:2f:e8:c5:41:6e:b3:85:f8:94: bc:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:3D:F0:DE:86:15:92:12:D1:24:7C:5C:D1:7F:15:9A:EE:17:AB:10 X509v3 Authority Key Identifier: keyid:9B:39:35:F0:8D:7F:06:52:DD:85:62:20:05:7C:46:4A:ED:52:0E:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzk18I1_BlLdhWIgBXxGSu1SDhI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1ba252-93c1-4159-95a7-0e011761b1b1/1/mzk18I1_BlLdhWIgBXxGSu1SDhI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:12:31:2d:ab:be:64:dd:71:82:47:b4:37:d7:58:0a:96:94: 3e:5c:fa:eb:22:9c:aa:4e:69:d4:27:26:95:87:7a:77:f3:27: 18:8d:fc:91:24:fb:bb:03:11:d3:a7:fc:31:ee:cb:87:16:2b: 4f:62:25:c3:a8:c1:1f:6c:e9:cd:07:bd:b5:10:21:f9:c5:94: ca:85:13:b3:b2:45:f0:ca:fb:43:d9:d9:7d:06:b7:67:da:7f: 40:5d:66:12:55:94:46:a6:33:06:47:82:9d:e0:48:11:20:7c: 3f:e1:7a:cb:1c:83:95:4f:ba:4d:94:89:91:8e:4d:53:04:52: 6e:25:45:3a:cf:3c:1c:86:b5:c4:d2:4c:9c:08:28:58:e4:02: ad:5c:25:41:e6:ae:4c:65:56:ce:86:62:d7:96:78:12:12:53: b0:19:e5:79:2f:29:26:9c:3f:91:a5:b8:f8:fc:7e:86:3a:17: aa:93:a2:b0:e7:81:04:16:a3:d6:cf:44:31:74:d4:61:d2:6c: 06:4d:4c:25:84:e7:4f:0e:85:93:3f:ac:d6:e8:a6:91:d4:43: be:bf:89:42:bf:a8:76:78:73:37:ba:03:7c:3b:38:8f:fe:b9: 18:68:2d:8e:eb:9e:be:a7:6e:00:2a:58:08:d2:4d:bd:92:5d: dc:f3:e0:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsY1wsgaroQNcwVxGZN/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzkzNWYwOGQ3ZjA2NTJkZDg1NjIyMDA1N2M0NjRhZWQ1 MjBlMTIwHhcNMjYwMjA5MTYwMTE4WhcNMjYwMjEwMTYwMTE4WjAzMTEwLwYDVQQD EygzNzNkZjBkZTg2MTU5MjEyZDEyNDdjNWNkMTdmMTU5YWVlMTdhYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx0bL5Yl4tPsNEgjwV8NPfWoZ2z1K y06GY27TiLNR90WrPdVWHaczBNuTsVE3/YP3zzOfQelk5n+wh62smi8RzYfWiKMO ty3qhfRbTE5MfCY6erfj+svsO76laxubg2AXL8r78i6ZRoPBuJaRZLQYLexOoNBL UiXoF2DZO6NFF6e3oA6OwH3jy2kR5eK1Ufp/7l2ciujrDJJ/RKvVMXXB6Xuwx6iZ 7+UuZ4AZz5DhQOrS03hjVjbbr2ILS0oEBx7qqELexfSDwwcqknBfmfd4YV45MIzn kDc2Mg6dLZyIe3/aazerY9NBxX4ds0k84sgwlFqFMzcv6MVBbrOF+JS85QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDc98N6GFZIS0SR8XNF/FZruF6sQMB8GA1UdIwQY MBaAFJs5NfCNfwZS3YViIAV8RkrtUg4SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xYmEyNTItOTNjMS00MTU5LTk1YTct MGUwMTE3NjFiMWIxLzEvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xYmEyNTItOTNjMS00MTU5LTk1YTctMGUwMTE3NjFiMWIx LzEvbXprMThJMV9CbExkaFdJZ0JYeEdTdTFTRGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORIxLau+ ZN1xgke0N9dYCpaUPlz66yKcqk5p1CcmlYd6d/MnGI38kST7uwMR06f8Me7LhxYr T2Ilw6jBH2zpzQe9tRAh+cWUyoUTs7JF8Mr7Q9nZfQa3Z9p/QF1mElWURqYzBkeC neBIESB8P+F6yxyDlU+6TZSJkY5NUwRSbiVFOs88HIa1xNJMnAgoWOQCrVwlQeau TGVWzoZi15Z4EhJTsBnleS8pJpw/kaW4+Px+hjoXqpOisOeBBBaj1s9EMXTUYdJs Bk1MJYTnTw6Fkz+s1uimkdRDvr+JQr+odnhzN7oDfDs4j/65GGgtjuuevqduACpY CNJNvZJd3PPg4g== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:08 2026 by rpki-client