This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft File: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft (raw, json) Hash identifier: urTLa3+/x9ydrmwT7BHUPXhRAdj3BSKVh8Ok1LTwY84= Subject key identifier: 76:5F:7A:10:72:44:57:A2:14:BE:BB:5E:3A:1C:AF:62:21:0F:D8:31 Authority key identifier: CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49 Certificate issuer: /CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49 Certificate serial: 019C427E2F6B2935CACEC8760CB96C713AA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft Manifest number: 0AEC Signing time: Mon 09 Feb 2026 13:01:31 +0000 Manifest this update: Mon 09 Feb 2026 13:01:31 +0000 Manifest next update: Tue 10 Feb 2026 13:01:31 +0000 Files and hashes: 1: zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl (hash: FnVn8oxlFxbsOVi6fCSK7xim0e7tnBM7sord5mDgb/8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7e:2f:6b:29:35:ca:ce:c8:76:0c:b9:6c:71:3a:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf2e3d1fff9bd5479a1330f88fa2ec07c0eaec49 Validity Not Before: Feb 9 13:01:31 2026 GMT Not After : Feb 10 13:01:31 2026 GMT Subject: CN=765f7a10724457a214bebb5e3a1caf62210fd831 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fc:5c:6f:62:b6:a9:f0:15:0e:e7:3d:d6:7e: 99:1f:9a:73:00:84:9f:43:23:c3:69:2d:55:1f:1e: 60:09:c1:28:5b:aa:87:32:25:45:71:f2:4c:ab:e1: 28:73:a1:2e:de:65:47:6b:67:09:5f:f6:29:fb:2f: 12:46:99:46:f0:bb:83:13:5e:17:48:83:8a:ea:26: 2e:8b:cd:19:a1:a8:84:d2:7e:67:46:2c:fc:27:54: 88:2e:a2:70:3c:d4:23:62:68:c6:b9:ac:aa:aa:28: 84:00:9c:90:e7:45:dc:f6:47:6d:70:21:cf:67:65: ff:aa:a0:20:ee:28:ec:dc:d6:a3:25:27:7c:c4:6d: 5a:e8:bb:9f:6f:9e:65:b3:26:bd:b1:85:13:19:ab: 07:ed:15:12:5c:9e:b4:26:6c:b8:0e:ef:1d:f6:ed: 74:65:f0:ed:9b:b6:4e:e4:50:15:a5:ba:00:2a:ba: 49:da:8a:12:1b:b0:fd:e3:ce:e8:6b:4a:9e:16:32: 25:c3:2c:ea:60:7d:14:e3:04:19:a6:16:cd:24:d6: 46:eb:e4:0d:5a:f4:ae:1d:e6:aa:3f:5a:9c:92:85: e8:ec:79:3c:25:11:09:4c:73:cc:a3:fd:4c:74:80: eb:50:02:72:21:53:c7:d4:b0:de:39:31:c6:cb:58: 1c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5F:7A:10:72:44:57:A2:14:BE:BB:5E:3A:1C:AF:62:21:0F:D8:31 X509v3 Authority Key Identifier: keyid:CF:2E:3D:1F:FF:9B:D5:47:9A:13:30:F8:8F:A2:EC:07:C0:EA:EC:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/8bc0d1-7348-4c66-8043-531235e55b23/1/zy49H_-b1UeaEzD4j6LsB8Dq7Ek.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:24:cf:96:ae:75:2c:cf:3f:fb:1b:8d:83:0e:71:5e:ab:dc: f9:20:f5:1f:04:2c:e4:fb:6b:8d:ed:bb:d7:40:c3:d2:01:4d: 9a:8f:46:cc:1d:6c:6a:4a:4b:fc:13:31:33:f5:e6:03:83:0e: 71:d1:c2:8a:4d:c7:41:14:b7:fe:73:6f:6c:0a:76:14:6b:b4: e7:c3:46:6e:66:76:8c:04:08:9f:fb:a8:d4:e4:2c:ed:df:87: 21:c8:dc:93:8e:80:0c:47:dd:8c:55:7d:5a:20:8c:7a:c4:02: 0f:f4:aa:92:df:4f:7d:a7:5b:08:49:c5:48:e5:b2:c0:07:8a: 6c:0b:e7:f2:91:f3:99:ad:19:2a:c2:76:ce:4d:c2:dd:79:1c: 0a:9e:86:78:a9:7e:6f:93:1f:6b:af:ec:2f:34:49:87:de:d4: d9:b0:f8:f6:c8:2e:9d:a7:66:56:a6:a0:39:40:8d:9f:f9:4e: 1f:c5:bd:02:33:4e:ab:d5:0c:63:95:d6:91:f4:6a:b9:62:b3: a8:13:e2:50:a6:93:cc:bb:f8:4f:56:d4:4b:7c:0d:14:f6:f8: 73:78:09:42:22:91:9e:44:ba:36:bd:ad:f8:12:08:80:02:f5: 1a:67:71:35:18:83:95:ca:d6:59:7e:14:dd:32:0a:4c:f2:b1: af:92:67:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfi9rKTXKzsh2DLlscTqjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMmUzZDFmZmY5YmQ1NDc5YTEzMzBmODhmYTJlYzA3YzBl YWVjNDkwHhcNMjYwMjA5MTMwMTMxWhcNMjYwMjEwMTMwMTMxWjAzMTEwLwYDVQQD Eyg3NjVmN2ExMDcyNDQ1N2EyMTRiZWJiNWUzYTFjYWY2MjIxMGZkODMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/xcb2K2qfAVDuc91n6ZH5pzAISf QyPDaS1VHx5gCcEoW6qHMiVFcfJMq+Eoc6Eu3mVHa2cJX/Yp+y8SRplG8LuDE14X SIOK6iYui80ZoaiE0n5nRiz8J1SILqJwPNQjYmjGuayqqiiEAJyQ50Xc9kdtcCHP Z2X/qqAg7ijs3NajJSd8xG1a6Lufb55lsya9sYUTGasH7RUSXJ60Jmy4Du8d9u10 ZfDtm7ZO5FAVpboAKrpJ2ooSG7D9487oa0qeFjIlwyzqYH0U4wQZphbNJNZG6+QN WvSuHeaqP1qckoXo7Hk8JREJTHPMo/1MdIDrUAJyIVPH1LDeOTHGy1gcQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZfehByRFeiFL67Xjocr2IhD9gxMB8GA1UdIwQY MBaAFM8uPR//m9VHmhMw+I+i7AfA6uxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMt NTMxMjM1ZTU1YjIzLzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy84YmMwZDEtNzM0OC00YzY2LTgwNDMtNTMxMjM1ZTU1YjIz LzEvenk0OUhfLWIxVWVhRXpENGo2THNCOERxN0VrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjSTPlq51 LM8/+xuNgw5xXqvc+SD1HwQs5Ptrje2710DD0gFNmo9GzB1sakpL/BMxM/XmA4MO cdHCik3HQRS3/nNvbAp2FGu058NGbmZ2jAQIn/uo1OQs7d+HIcjck46ADEfdjFV9 WiCMesQCD/Sqkt9PfadbCEnFSOWywAeKbAvn8pHzma0ZKsJ2zk3C3XkcCp6GeKl+ b5Mfa6/sLzRJh97U2bD49sgunadmVqagOUCNn/lOH8W9AjNOq9UMY5XWkfRquWKz qBPiUKaTzLv4T1bUS3wNFPb4c3gJQiKRnkS6Nr2t+BIIgAL1GmdxNRiDlcrWWX4U 3TIKTPKxr5JnQQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:44 2026 by rpki-client