This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft File: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft (raw, json) Hash identifier: NYNLLPbw8e0lpanWtDr1S/7VbONKklRhJ+LQeh3P+aE= Subject key identifier: E6:8B:90:23:53:DD:65:F5:E8:4F:65:BE:FE:5A:02:87:3C:7A:C7:51 Authority key identifier: 67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A Certificate issuer: /CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Certificate serial: 019C43FE2C7A87AEA440C2CB5D839CDF0DDA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft Manifest number: 0FDA Signing time: Mon 09 Feb 2026 20:00:56 +0000 Manifest this update: Mon 09 Feb 2026 20:00:56 +0000 Manifest next update: Tue 10 Feb 2026 20:00:56 +0000 Files and hashes: 1: Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl (hash: gJ0kg42XMWWxR7dE0Kq78uFTUbO643GaqBikwprKeZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:2c:7a:87:ae:a4:40:c2:cb:5d:83:9c:df:0d:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67f2f09fa38a38bc80cff82e0c7b47b37916398a Validity Not Before: Feb 9 20:00:56 2026 GMT Not After : Feb 10 20:00:56 2026 GMT Subject: CN=e68b902353dd65f5e84f65befe5a02873c7ac751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8b:14:cb:1e:26:64:80:c2:8b:04:c5:39:86: d2:45:59:21:b6:9a:70:3e:a2:fa:a5:6d:9e:e9:31: 2a:a4:c7:cc:33:0b:5e:42:c0:43:e2:09:28:ca:0e: 00:7e:fb:3a:1c:ce:e9:03:f4:b9:dd:1d:59:e1:cf: ed:29:ed:7a:f5:84:1c:06:3f:8f:73:82:e4:54:27: df:16:cb:6b:c1:c9:d6:8d:d0:27:1c:33:bf:be:5d: 6c:ea:51:77:6d:ef:b7:1f:4c:b1:35:5b:90:4c:d8: f9:03:3a:48:cc:8e:76:68:ba:9d:f8:bb:8f:b5:ff: 73:09:8f:69:8b:3f:c4:94:04:65:f6:0c:bb:9f:e3: 6d:e2:35:d5:27:44:c0:cd:ca:cb:46:86:7f:2b:d4: 02:cb:5b:0b:8d:03:70:be:eb:47:49:27:90:32:23: 7f:cf:89:58:88:9f:6a:3b:29:c2:9a:20:ea:94:7a: ae:90:36:02:9c:8f:2f:6a:8a:f1:84:b9:01:28:fa: d4:fc:05:3c:dd:3a:16:74:cb:18:b2:d3:61:80:d1: 36:f3:d6:cf:05:2b:26:5f:87:f4:69:9d:a3:e5:b4: 97:37:54:ce:c6:7a:54:d4:f7:71:70:fe:4e:b2:e6: 0f:6e:6b:af:49:e8:a0:34:53:69:d2:0b:60:23:80: 06:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:90:23:53:DD:65:F5:E8:4F:65:BE:FE:5A:02:87:3C:7A:C7:51 X509v3 Authority Key Identifier: keyid:67:F2:F0:9F:A3:8A:38:BC:80:CF:F8:2E:0C:7B:47:B3:79:16:39:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3de75-b72e-41f2-a56d-f9997e19126c/1/Z_Lwn6OKOLyAz_guDHtHs3kWOYo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:ff:5a:d7:4b:31:46:ac:bb:d8:aa:fd:47:cb:db:a5:9e:48: 45:7b:17:30:b5:6f:2a:63:2f:85:a1:a4:58:06:ea:e8:13:49: ca:5b:20:21:84:ea:0c:bc:b6:8c:cd:d2:c8:32:b4:74:3d:81: 64:0f:5b:d5:06:cc:d3:6f:0a:52:be:c3:be:da:f5:ac:31:9c: b3:e3:47:ee:ca:99:36:2d:23:93:71:2c:52:d7:7f:17:c3:2b: 6d:a4:c1:07:a9:29:99:f5:79:6e:f7:42:f3:7b:99:f2:02:df: 52:a2:ba:9e:8e:85:45:05:b6:b0:78:8b:db:80:b0:b9:e9:60: 0b:47:68:c9:0f:8d:57:41:0e:16:6b:ac:3e:6c:0e:53:9b:93: 7a:b2:59:b6:89:16:81:72:0f:ae:21:5c:ec:02:b4:22:fe:af: 23:8d:08:b1:49:83:b1:73:67:b6:22:84:d6:9b:12:50:1d:51: da:59:46:92:cf:da:55:5a:16:d6:a2:ea:8c:99:ab:b5:85:d4: 25:54:6a:e3:ae:92:24:bd:5d:b9:08:83:42:29:8d:2d:3f:f3: 3b:b4:26:89:db:0d:22:d9:e4:65:72:c4:68:53:30:89:19:cc: b7:d0:3d:9d:79:bb:e7:00:55:6d:91:27:e7:c9:d8:5b:dc:a7: 11:d4:dc:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ix6h66kQMLLXYOc3w3aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3ZjJmMDlmYTM4YTM4YmM4MGNmZjgyZTBjN2I0N2IzNzkx NjM5OGEwHhcNMjYwMjA5MjAwMDU2WhcNMjYwMjEwMjAwMDU2WjAzMTEwLwYDVQQD EyhlNjhiOTAyMzUzZGQ2NWY1ZTg0ZjY1YmVmZTVhMDI4NzNjN2FjNzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqosUyx4mZIDCiwTFOYbSRVkhtppw PqL6pW2e6TEqpMfMMwteQsBD4gkoyg4Afvs6HM7pA/S53R1Z4c/tKe169YQcBj+P c4LkVCffFstrwcnWjdAnHDO/vl1s6lF3be+3H0yxNVuQTNj5AzpIzI52aLqd+LuP tf9zCY9piz/ElARl9gy7n+Nt4jXVJ0TAzcrLRoZ/K9QCy1sLjQNwvutHSSeQMiN/ z4lYiJ9qOynCmiDqlHqukDYCnI8vaorxhLkBKPrU/AU83ToWdMsYstNhgNE289bP BSsmX4f0aZ2j5bSXN1TOxnpU1PdxcP5OsuYPbmuvSeigNFNp0gtgI4AG6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOaLkCNT3WX16E9lvv5aAoc8esdRMB8GA1UdIwQY MBaAFGfy8J+jiji8gM/4Lgx7R7N5FjmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQt Zjk5OTdlMTkxMjZjLzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni9iM2RlNzUtYjcyZS00MWYyLWE1NmQtZjk5OTdlMTkxMjZj LzEvWl9Md242T0tPTHlBel9ndURIdEhzM2tXT1lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvP9a10sx Rqy72Kr9R8vbpZ5IRXsXMLVvKmMvhaGkWAbq6BNJylsgIYTqDLy2jM3SyDK0dD2B ZA9b1QbM028KUr7Dvtr1rDGcs+NH7sqZNi0jk3EsUtd/F8MrbaTBB6kpmfV5bvdC 83uZ8gLfUqK6no6FRQW2sHiL24CwuelgC0doyQ+NV0EOFmusPmwOU5uTerJZtokW gXIPriFc7AK0Iv6vI40IsUmDsXNntiKE1psSUB1R2llGks/aVVoW1qLqjJmrtYXU JVRq466SJL1duQiDQimNLT/zO7QmidsNItnkZXLEaFMwiRnMt9A9nXm75wBVbZEn 58nYW9ynEdTc3g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:31 2026 by rpki-client