This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft File: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft (raw, json) Hash identifier: MXucQ4+MVAD4lt/Spxk38vT1p8f/pSjPQM/Or736d2U= Subject key identifier: D4:36:E8:1B:50:8E:10:F5:1E:A7:95:F4:BA:9B:94:90:E6:B4:58:98 Authority key identifier: 67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD Certificate issuer: /CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Certificate serial: 019C439056F031FDE8DFCE21A006ECE6E365 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft Manifest number: 14D0 Signing time: Mon 09 Feb 2026 18:00:58 +0000 Manifest this update: Mon 09 Feb 2026 18:00:58 +0000 Manifest next update: Tue 10 Feb 2026 18:00:58 +0000 Files and hashes: 1: ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl (hash: IOOUtAt5EU5in9LgNSYWtwMJroE/Bs5zQolUjV+FfDU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:56:f0:31:fd:e8:df:ce:21:a0:06:ec:e6:e3:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6710490967528ca0b6a0a9cb73643c9ad2cc1bbd Validity Not Before: Feb 9 18:00:58 2026 GMT Not After : Feb 10 18:00:58 2026 GMT Subject: CN=d436e81b508e10f51ea795f4ba9b9490e6b45898 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:14:ae:93:ba:8c:e3:17:0e:18:77:ab:f5:d1: e6:90:ac:0f:dc:6c:69:dc:04:68:9b:ae:df:9b:e1: 92:ff:40:92:47:8c:9f:3a:fb:4b:fa:c9:3e:f6:67: b4:4e:ca:5b:8c:44:ac:28:7d:b8:07:10:fc:21:4f: b1:6d:8d:95:76:0e:29:43:50:3a:81:70:5f:52:38: 84:a6:49:23:40:aa:ad:0b:0b:c1:44:32:29:ca:d3: 87:af:f2:be:b9:4e:07:d9:0c:06:14:f9:84:98:26: 22:3e:85:c1:6d:28:d4:ea:8f:95:d4:d2:96:35:e1: 05:ec:f9:aa:fb:92:9d:68:de:d9:37:bb:a9:c4:df: 35:05:da:35:b4:60:4b:14:f2:29:e3:99:2b:89:a4: a4:9e:eb:5e:27:25:f8:98:82:03:0d:c5:a6:7e:66: 65:95:6a:32:4a:f4:ce:7a:c1:6f:84:ef:13:84:50: bc:a9:da:c5:1b:34:3c:b4:60:f1:f6:5c:b9:71:9f: ed:36:0d:a6:c0:8b:d6:67:8d:4e:7a:70:9d:68:c9: 34:dd:36:8e:41:35:24:77:14:da:db:ec:4f:ef:ee: 26:47:70:93:3e:11:eb:d7:6f:b4:22:50:2b:50:9d: 4e:cf:38:ea:4e:1e:7a:cf:dc:4e:a5:54:cd:8d:a3: c3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:36:E8:1B:50:8E:10:F5:1E:A7:95:F4:BA:9B:94:90:E6:B4:58:98 X509v3 Authority Key Identifier: keyid:67:10:49:09:67:52:8C:A0:B6:A0:A9:CB:73:64:3C:9A:D2:CC:1B:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/95d245-8828-41e0-8ea8-f0ae023ab592/1/ZxBJCWdSjKC2oKnLc2Q8mtLMG70.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:b5:82:5d:60:d9:e8:df:ee:6d:11:7a:ea:f8:c7:ee:a4:df: ef:73:5f:7c:fc:95:4a:ee:66:d9:77:07:f4:16:5f:66:42:c8: 97:8b:64:f6:39:01:ca:7e:23:52:cf:fa:e2:10:a9:17:7c:5a: 2a:a7:cc:71:f8:93:a5:bc:21:c7:a4:93:f3:f5:3a:71:1c:36: 28:4c:21:a7:7c:53:ea:00:73:5d:6d:30:5c:7b:50:34:44:e2: 18:a0:45:0d:c1:54:b1:3a:fa:c5:e5:19:9d:f1:46:da:b0:b6: 49:b8:6c:c4:4b:0f:b4:93:59:24:55:43:4b:cf:ac:a8:40:bd: db:f4:92:bf:52:ef:02:7c:38:f0:62:2a:f0:44:44:71:b6:ef: e8:49:1f:80:91:bf:a6:ad:1c:40:66:ff:9e:14:18:72:e1:08: 8c:c3:9a:1d:c0:59:bc:4c:12:a9:ba:fb:8d:e3:44:3e:65:ea: 04:29:67:1f:1f:bf:d9:e9:6f:f5:54:31:f0:8b:6e:1f:58:4e: ef:76:02:40:03:dc:72:10:55:59:69:fc:86:fb:f6:cf:b7:56: 53:15:e1:e7:4f:09:16:81:da:49:41:97:b7:8f:69:0b:b6:a4: 13:a7:b7:e3:5b:3d:b3:fb:d7:a1:b6:0b:bf:00:b3:e8:06:62: 70:d9:1b:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFbwMf3o384hoAbs5uNlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3MTA0OTA5Njc1MjhjYTBiNmEwYTljYjczNjQzYzlhZDJj YzFiYmQwHhcNMjYwMjA5MTgwMDU4WhcNMjYwMjEwMTgwMDU4WjAzMTEwLwYDVQQD EyhkNDM2ZTgxYjUwOGUxMGY1MWVhNzk1ZjRiYTliOTQ5MGU2YjQ1ODk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxSuk7qM4xcOGHer9dHmkKwP3Gxp 3ARom67fm+GS/0CSR4yfOvtL+sk+9me0TspbjESsKH24BxD8IU+xbY2Vdg4pQ1A6 gXBfUjiEpkkjQKqtCwvBRDIpytOHr/K+uU4H2QwGFPmEmCYiPoXBbSjU6o+V1NKW NeEF7Pmq+5KdaN7ZN7upxN81Bdo1tGBLFPIp45kriaSknuteJyX4mIIDDcWmfmZl lWoySvTOesFvhO8ThFC8qdrFGzQ8tGDx9ly5cZ/tNg2mwIvWZ41OenCdaMk03TaO QTUkdxTa2+xP7+4mR3CTPhHr12+0IlArUJ1OzzjqTh56z9xOpVTNjaPDPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNQ26BtQjhD1HqeV9LqblJDmtFiYMB8GA1UdIwQY MBaAFGcQSQlnUoygtqCpy3NkPJrSzBu9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgt ZjBhZTAyM2FiNTkyLzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NWQyNDUtODgyOC00MWUwLThlYTgtZjBhZTAyM2FiNTky LzEvWnhCSkNXZFNqS0Myb0tuTGMyUThtdExNRzcwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxrWCXWDZ 6N/ubRF66vjH7qTf73NffPyVSu5m2XcH9BZfZkLIl4tk9jkByn4jUs/64hCpF3xa KqfMcfiTpbwhx6ST8/U6cRw2KEwhp3xT6gBzXW0wXHtQNETiGKBFDcFUsTr6xeUZ nfFG2rC2SbhsxEsPtJNZJFVDS8+sqEC92/SSv1LvAnw48GIq8EREcbbv6EkfgJG/ pq0cQGb/nhQYcuEIjMOaHcBZvEwSqbr7jeNEPmXqBClnHx+/2elv9VQx8ItuH1hO 73YCQAPcchBVWWn8hvv2z7dWUxXh508JFoHaSUGXt49pC7akE6e341s9s/vXobYL vwCz6AZicNkbVg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:54 2026 by rpki-client