This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft File: z_-U05EdBEp2YYbXaqSgkTbYnXw.mft (raw, json) Hash identifier: lqtLdVMHgWVLGRX9TqOD3hKmYKepCdRPoUN2JX2hQ64= Subject key identifier: AE:10:E2:DF:C1:13:08:31:C5:0F:07:6F:2B:CA:C7:1D:52:28:4B:30 Authority key identifier: CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C Certificate issuer: /CN=cfff94d3911d044a766186d76aa4a09136d89d7c Certificate serial: 019C4321CACC7C6754AAD87AF5DEE0B90B86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft Manifest number: 119D Signing time: Mon 09 Feb 2026 16:00:13 +0000 Manifest this update: Mon 09 Feb 2026 16:00:13 +0000 Manifest next update: Tue 10 Feb 2026 16:00:13 +0000 Files and hashes: 1: z_-U05EdBEp2YYbXaqSgkTbYnXw.crl (hash: ij2TR07S6bw1fms/xgJPhlz5ygBobqtVccFI9aPdDsM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:ca:cc:7c:67:54:aa:d8:7a:f5:de:e0:b9:0b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfff94d3911d044a766186d76aa4a09136d89d7c Validity Not Before: Feb 9 16:00:13 2026 GMT Not After : Feb 10 16:00:13 2026 GMT Subject: CN=ae10e2dfc1130831c50f076f2bcac71d52284b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:69:e8:e8:b6:50:5b:d2:e5:51:8f:5a:93:6a: f4:34:ef:35:20:fc:b6:68:d1:71:82:98:5f:12:24: 84:d4:ac:a4:98:31:e5:bb:68:8e:4d:56:8b:61:a3: 65:07:fc:9f:97:da:b0:fa:56:e2:85:97:8e:2d:18: 61:8e:3f:cc:31:b1:89:4a:24:89:7c:27:9e:08:b1: 08:f6:5d:8d:70:8d:93:f9:c2:35:fe:e5:50:0f:1f: c0:3b:b2:1a:a4:e9:ac:dc:f8:0b:85:da:d5:a7:29: b4:2a:66:06:63:ef:c6:c9:77:b7:dc:4a:a6:e3:4b: 30:07:35:cd:29:d2:90:09:6a:e9:12:f2:f0:51:7d: c5:50:a1:0a:5e:c5:18:83:d4:35:f1:58:5c:18:22: 82:7f:a6:08:5a:1b:9b:9a:5d:9d:53:4e:ef:0c:5b: c4:79:7c:9e:bc:69:14:90:7d:ad:f0:1e:22:7e:6c: de:8c:c5:98:00:31:4b:33:58:2f:90:f8:13:bc:d1: 89:77:58:48:74:1d:55:95:bd:0e:90:e6:e9:b0:12: 69:42:c5:b9:ad:32:42:a4:1d:30:b9:c7:7d:c2:65: 15:82:74:14:15:36:50:c3:1c:b6:ae:83:0b:74:84: 0b:ef:0e:7d:d9:27:58:9e:9c:fa:5e:cf:55:65:d2: 39:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:10:E2:DF:C1:13:08:31:C5:0F:07:6F:2B:CA:C7:1D:52:28:4B:30 X509v3 Authority Key Identifier: keyid:CF:FF:94:D3:91:1D:04:4A:76:61:86:D7:6A:A4:A0:91:36:D8:9D:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_-U05EdBEp2YYbXaqSgkTbYnXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9586c1-053c-435f-ba0b-e95ae2d143ad/1/z_-U05EdBEp2YYbXaqSgkTbYnXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:44:7a:6c:c4:8a:5c:25:4e:47:1d:24:8c:7a:23:42:4c:f7: 70:db:99:60:8d:15:34:fa:ec:37:4b:38:51:41:f0:97:17:eb: ae:a3:5a:db:76:9b:da:c5:b2:12:67:78:63:16:65:4f:51:f1: 97:73:f5:40:b9:81:05:f0:3d:01:02:31:bc:0d:6e:fa:46:58: 98:70:eb:05:cd:f3:60:89:d8:2e:30:ca:df:08:46:f7:71:00: d2:e5:d1:c7:15:d0:de:25:d9:c4:82:fa:4b:e7:de:2a:32:9d: 83:88:50:d2:9d:64:5f:33:3b:f4:e8:0d:9d:0f:ec:3f:6d:09: 34:e5:6b:f5:55:bc:bd:c9:ba:e8:3c:20:48:59:98:d2:cd:1c: b6:f4:68:05:97:7c:a0:45:61:c8:9d:46:cc:16:fe:f6:35:20: a0:1f:38:3e:08:7f:2e:3a:99:e7:93:0a:05:f9:55:88:a8:49: c6:56:e9:23:a6:d5:67:c9:01:7b:2b:d2:ed:f6:eb:94:c1:62: 40:4b:3f:39:93:b9:aa:c7:a2:57:53:1a:3f:10:8d:e6:b5:de: c0:d2:78:c8:ab:a1:e2:be:82:77:0c:9a:30:e8:84:23:a9:3a: 53:62:f6:36:03:3c:27:9d:a6:9d:a8:f5:2b:46:79:c7:93:60: d6:38:4a:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIcrMfGdUqth69d7guQuGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZmY5NGQzOTExZDA0NGE3NjYxODZkNzZhYTRhMDkxMzZk ODlkN2MwHhcNMjYwMjA5MTYwMDEzWhcNMjYwMjEwMTYwMDEzWjAzMTEwLwYDVQQD EyhhZTEwZTJkZmMxMTMwODMxYzUwZjA3NmYyYmNhYzcxZDUyMjg0YjMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2no6LZQW9LlUY9ak2r0NO81IPy2 aNFxgphfEiSE1KykmDHlu2iOTVaLYaNlB/yfl9qw+lbihZeOLRhhjj/MMbGJSiSJ fCeeCLEI9l2NcI2T+cI1/uVQDx/AO7IapOms3PgLhdrVpym0KmYGY+/GyXe33Eqm 40swBzXNKdKQCWrpEvLwUX3FUKEKXsUYg9Q18VhcGCKCf6YIWhubml2dU07vDFvE eXyevGkUkH2t8B4ifmzejMWYADFLM1gvkPgTvNGJd1hIdB1Vlb0OkObpsBJpQsW5 rTJCpB0wucd9wmUVgnQUFTZQwxy2roMLdIQL7w592SdYnpz6Xs9VZdI55wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4Q4t/BEwgxxQ8HbyvKxx1SKEswMB8GA1UdIwQY MBaAFM//lNORHQRKdmGG12qkoJE22J18MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel8tVTA1RWRCRXAyWVliWGFxU2drVGJZblh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS85NTg2YzEtMDUzYy00MzVmLWJhMGIt ZTk1YWUyZDE0M2FkLzEvel8tVTA1RWRCRXAyWVliWGFxU2drVGJZblh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS85NTg2YzEtMDUzYy00MzVmLWJhMGItZTk1YWUyZDE0M2Fk LzEvel8tVTA1RWRCRXAyWVliWGFxU2drVGJZblh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE0R6bMSK XCVORx0kjHojQkz3cNuZYI0VNPrsN0s4UUHwlxfrrqNa23ab2sWyEmd4YxZlT1Hx l3P1QLmBBfA9AQIxvA1u+kZYmHDrBc3zYInYLjDK3whG93EA0uXRxxXQ3iXZxIL6 S+feKjKdg4hQ0p1kXzM79OgNnQ/sP20JNOVr9VW8vcm66DwgSFmY0s0ctvRoBZd8 oEVhyJ1GzBb+9jUgoB84Pgh/LjqZ55MKBflViKhJxlbpI6bVZ8kBeyvS7fbrlMFi QEs/OZO5qseiV1MaPxCN5rXewNJ4yKuh4r6CdwyaMOiEI6k6U2L2NgM8J52mnaj1 K0Z5x5Ng1jhKUg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:27 2026 by rpki-client