This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft File: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft (raw, json) Hash identifier: CcMSuZ+rs7icS88xgpzuPSoOxwyAH8kJU4jfhvH04yM= Subject key identifier: 7B:12:6F:64:D1:D8:CB:9B:85:CF:92:C3:C8:27:B6:5C:FD:CD:48:F4 Authority key identifier: 67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D Certificate issuer: /CN=67864477fe948bf47b9179718c3698eeff58111d Certificate serial: 019C427D2B3B17316353CAFD11CF8001F402 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 13:00:25 +0000 Manifest this update: Mon 09 Feb 2026 13:00:25 +0000 Manifest next update: Tue 10 Feb 2026 13:00:25 +0000 Files and hashes: 1: Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl (hash: AfWO6DOFEp2WCAC8PhMthp4J7A7GTg+x7azmZllQuw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2b:3b:17:31:63:53:ca:fd:11:cf:80:01:f4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67864477fe948bf47b9179718c3698eeff58111d Validity Not Before: Feb 9 13:00:25 2026 GMT Not After : Feb 10 13:00:25 2026 GMT Subject: CN=7b126f64d1d8cb9b85cf92c3c827b65cfdcd48f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:52:00:3a:d2:98:ce:fd:2e:38:3b:c2:eb: 5d:ee:df:b2:60:e2:3d:0f:33:90:13:bd:ec:f3:92: d0:c0:75:a5:75:c4:0f:fe:30:ed:50:93:af:17:48: cd:a8:d9:9f:aa:81:ab:0e:91:aa:e9:a1:88:b0:c0: 6d:58:ed:08:b0:a5:4d:34:42:9f:e2:c2:e3:cd:ff: a0:e5:f6:f9:fd:1a:b8:8b:a7:38:d7:1b:8d:13:b5: 2e:af:35:69:7c:73:a4:1f:40:2b:87:c9:87:64:83: 0b:e5:83:82:e2:b7:76:b7:0d:f4:b2:90:ca:dc:6f: 2b:4d:aa:d3:ca:02:a0:67:0b:30:a6:7f:42:13:9a: 37:a1:b9:b5:34:44:10:ac:b2:8d:75:6c:1e:ed:e4: ef:a2:db:bf:c2:92:1c:e5:80:0c:6c:de:3f:a1:70: 4b:52:99:23:73:c6:b3:ab:48:0a:61:3d:7f:e8:a7: 54:bf:cb:16:fb:be:0a:06:bb:d2:62:0e:9b:39:21: 2b:a6:5e:66:7f:2c:1e:46:81:c3:51:f3:38:c9:34: a1:09:9b:9c:63:7c:7c:3e:c0:7a:c0:9a:51:fe:4f: de:f3:cd:44:77:8a:06:d1:2f:05:25:d9:57:91:7a: ae:ed:45:79:17:04:35:18:9d:52:24:b4:9f:91:f5: a4:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:12:6F:64:D1:D8:CB:9B:85:CF:92:C3:C8:27:B6:5C:FD:CD:48:F4 X509v3 Authority Key Identifier: keyid:67:86:44:77:FE:94:8B:F4:7B:91:79:71:8C:36:98:EE:FF:58:11:1D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/5b961b-bc25-493c-af38-834ae47ad47b/1/Z4ZEd_6Ui_R7kXlxjDaY7v9YER0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:e8:ee:18:25:b3:07:f6:c4:bb:37:8b:84:4d:9d:9d:75:30: 0a:9a:5f:ec:4b:f0:2c:d3:d8:06:5e:23:0f:e8:88:0c:c8:63: 9c:a6:ee:5a:fb:50:7f:45:04:44:db:16:2a:fc:ce:77:c3:34: e9:79:9b:c1:46:ea:d4:e2:fd:67:27:37:19:1f:83:35:8c:07: 0a:74:eb:96:6b:8b:08:38:2e:99:57:e7:37:db:48:d5:18:d2: df:b8:c0:39:f0:6f:8a:ae:e2:38:7d:fe:0f:f5:5a:bc:88:bb: 0f:f8:58:5f:e1:9f:73:8a:8f:5a:7b:da:28:9e:63:a7:44:91: 4c:ad:0a:e5:65:2e:74:8d:a1:b2:75:08:75:44:c0:c6:7b:7d: 76:c5:7e:01:a0:f3:5f:36:1f:80:76:49:df:4a:cc:e2:d7:90: e0:44:9f:65:75:f4:ec:c6:c8:98:5d:f3:c0:b1:ea:08:16:ed: 97:71:b5:51:08:9f:bf:ed:b3:e2:b4:81:8c:97:8c:b7:17:9c: 6a:e3:e2:68:4a:23:8c:f4:b7:b2:fe:8f:2d:44:c9:93:79:0c: b2:8a:3b:c3:e1:49:f2:74:9b:f3:68:a1:48:89:57:3f:e9:0d: 7f:6d:06:b3:01:79:d1:29:cf:53:df:b9:49:8d:85:31:28:ff: c8:cb:61:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSs7FzFjU8r9Ec+AAfQCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ODY0NDc3ZmU5NDhiZjQ3YjkxNzk3MThjMzY5OGVlZmY1 ODExMWQwHhcNMjYwMjA5MTMwMDI1WhcNMjYwMjEwMTMwMDI1WjAzMTEwLwYDVQQD Eyg3YjEyNmY2NGQxZDhjYjliODVjZjkyYzNjODI3YjY1Y2ZkY2Q0OGY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG1SADrSmM79Ljg7wutd7t+yYOI9 DzOQE73s85LQwHWldcQP/jDtUJOvF0jNqNmfqoGrDpGq6aGIsMBtWO0IsKVNNEKf 4sLjzf+g5fb5/Rq4i6c41xuNE7UurzVpfHOkH0Arh8mHZIML5YOC4rd2tw30spDK 3G8rTarTygKgZwswpn9CE5o3obm1NEQQrLKNdWwe7eTvotu/wpIc5YAMbN4/oXBL Upkjc8azq0gKYT1/6KdUv8sW+74KBrvSYg6bOSErpl5mfyweRoHDUfM4yTShCZuc Y3x8PsB6wJpR/k/e881Ed4oG0S8FJdlXkXqu7UV5FwQ1GJ1SJLSfkfWkMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHsSb2TR2Mubhc+Sw8gntlz9zUj0MB8GA1UdIwQY MBaAFGeGRHf+lIv0e5F5cYw2mO7/WBEdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgt ODM0YWU0N2FkNDdiLzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS81Yjk2MWItYmMyNS00OTNjLWFmMzgtODM0YWU0N2FkNDdi LzEvWjRaRWRfNlVpX1I3a1hseGpEYVk3djlZRVIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1OjuGCWz B/bEuzeLhE2dnXUwCppf7EvwLNPYBl4jD+iIDMhjnKbuWvtQf0UERNsWKvzOd8M0 6XmbwUbq1OL9Zyc3GR+DNYwHCnTrlmuLCDgumVfnN9tI1RjS37jAOfBviq7iOH3+ D/VavIi7D/hYX+Gfc4qPWnvaKJ5jp0SRTK0K5WUudI2hsnUIdUTAxnt9dsV+AaDz XzYfgHZJ30rM4teQ4ESfZXX07MbImF3zwLHqCBbtl3G1UQifv+2z4rSBjJeMtxec auPiaEojjPS3sv6PLUTJk3kMsoo7w+FJ8nSb82ihSIlXP+kNf20GswF50SnPU9+5 SY2FMSj/yMthrg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:00:04 2026 by rpki-client