This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft File: ZZM7eU5VgCwQRah18DOqDKdKD74.mft (raw, json) Hash identifier: KfrDqsL9b2jSfQyKj1VIIAKgw5h8OvnIKAURuIEZN6E= Subject key identifier: BB:A8:B3:82:C1:F9:F1:4B:72:E6:8D:B6:AC:D5:1F:E7:5C:F8:74:69 Authority key identifier: 65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE Certificate issuer: /CN=65933b794e55802c1045a875f033aa0ca74a0fbe Certificate serial: 019C43FD93E2F4EF65D2376D9EA7DB01C71E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft Manifest number: 1577 Signing time: Mon 09 Feb 2026 20:00:17 +0000 Manifest this update: Mon 09 Feb 2026 20:00:17 +0000 Manifest next update: Tue 10 Feb 2026 20:00:17 +0000 Files and hashes: 1: ZZM7eU5VgCwQRah18DOqDKdKD74.crl (hash: UbzydP3hE9vc+1de139Z5jaT2j+7E3f6SKpSK2HVogc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:93:e2:f4:ef:65:d2:37:6d:9e:a7:db:01:c7:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65933b794e55802c1045a875f033aa0ca74a0fbe Validity Not Before: Feb 9 20:00:17 2026 GMT Not After : Feb 10 20:00:17 2026 GMT Subject: CN=bba8b382c1f9f14b72e68db6acd51fe75cf87469 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:02:70:96:ad:22:7c:a9:76:ae:f1:32:1a:5d: 53:ac:f8:f2:33:4a:2e:e9:dc:9a:d1:2d:4f:1f:8b: bc:5f:83:1d:4d:a5:00:9d:5c:e1:50:0e:23:1d:30: 1e:75:b9:f2:20:a4:1c:56:4b:0b:eb:68:aa:c6:71: 78:b1:48:bc:c9:19:65:75:12:c5:0b:17:c2:da:d5: b0:55:6e:e0:c2:f6:99:db:e2:61:27:3b:df:ac:72: 1c:db:ae:6d:bf:6c:e5:69:c5:f0:af:b0:dd:13:c3: 28:ff:e4:93:27:c9:bc:a0:75:36:3b:42:46:1f:19: 60:47:3d:ed:63:d2:64:a5:c0:3e:93:2d:0a:32:34: 14:a3:84:44:40:78:c4:31:68:30:1b:31:27:29:1e: 71:2c:d0:a1:81:1d:29:d4:2e:86:a0:ab:6f:ed:d3: 3e:ee:3b:fe:fc:d9:25:82:0b:e1:6c:aa:cf:b2:84: c5:25:ff:52:c5:85:07:43:e4:84:f6:6c:3f:f3:f6: 46:ce:c6:a7:82:1d:d2:63:9a:e5:ef:80:f9:1b:45: 00:d0:84:e3:25:2a:ad:e8:35:74:94:5a:a3:7b:a3: 97:51:69:4f:40:23:ba:a7:ef:b2:01:c3:cb:38:1f: 21:cd:af:1a:86:74:e0:c3:0f:c2:c4:86:a2:44:ae: ce:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:A8:B3:82:C1:F9:F1:4B:72:E6:8D:B6:AC:D5:1F:E7:5C:F8:74:69 X509v3 Authority Key Identifier: keyid:65:93:3B:79:4E:55:80:2C:10:45:A8:75:F0:33:AA:0C:A7:4A:0F:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZZM7eU5VgCwQRah18DOqDKdKD74.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/335135-d55e-4cb7-b4a7-fa764576bd8e/1/ZZM7eU5VgCwQRah18DOqDKdKD74.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ca:44:ff:79:77:5c:7e:ce:d3:63:e1:16:ea:c6:3c:77:c0: 39:d2:2c:51:17:68:00:9c:c0:c8:67:b8:26:e0:5b:4e:df:d9: 36:eb:fb:c7:46:d6:54:d4:8b:00:58:e5:f1:6e:b3:26:19:e9: ba:52:ed:06:50:38:90:38:fa:a0:70:ec:b9:32:e6:c8:96:3e: 6e:e4:d0:f7:c5:29:34:b6:01:96:f5:be:6a:6d:94:ed:51:51: 1a:1b:22:b1:42:d3:a3:76:8d:14:9a:49:57:c3:19:77:f9:8c: 5a:f0:26:ae:8f:8c:5d:96:f0:0d:79:7c:1d:ac:53:03:8b:f9: 4e:24:a6:32:cd:db:5d:e2:61:ed:5f:b7:9b:5e:38:4d:f2:f9: 30:f7:50:c3:7d:89:87:a3:10:5c:92:16:57:9d:ed:ad:39:c6: 62:22:80:fa:3a:98:8b:d1:54:d3:2f:cb:c7:29:20:5f:5a:f9: 4b:76:92:b7:57:f5:c5:53:7b:f5:99:16:6d:4d:a1:f2:51:77: 44:11:9e:23:b0:57:ff:1c:af:95:50:d5:c7:a4:57:9f:86:d9: f7:fd:ce:58:d8:de:77:f2:57:be:e7:a5:7d:15:57:8f:44:db: b8:69:f0:89:e5:7f:be:92:e9:aa:c4:51:99:76:88:bc:b7:5b: 8c:aa:5f:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/ZPi9O9l0jdtnqfbAcceMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1OTMzYjc5NGU1NTgwMmMxMDQ1YTg3NWYwMzNhYTBjYTc0 YTBmYmUwHhcNMjYwMjA5MjAwMDE3WhcNMjYwMjEwMjAwMDE3WjAzMTEwLwYDVQQD EyhiYmE4YjM4MmMxZjlmMTRiNzJlNjhkYjZhY2Q1MWZlNzVjZjg3NDY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQJwlq0ifKl2rvEyGl1TrPjyM0ou 6dya0S1PH4u8X4MdTaUAnVzhUA4jHTAedbnyIKQcVksL62iqxnF4sUi8yRlldRLF CxfC2tWwVW7gwvaZ2+JhJzvfrHIc265tv2zlacXwr7DdE8Mo/+STJ8m8oHU2O0JG HxlgRz3tY9JkpcA+ky0KMjQUo4REQHjEMWgwGzEnKR5xLNChgR0p1C6GoKtv7dM+ 7jv+/NklggvhbKrPsoTFJf9SxYUHQ+SE9mw/8/ZGzsangh3SY5rl74D5G0UA0ITj JSqt6DV0lFqje6OXUWlPQCO6p++yAcPLOB8hza8ahnTgww/CxIaiRK7OEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLuos4LB+fFLcuaNtqzVH+dc+HRpMB8GA1UdIwQY MBaAFGWTO3lOVYAsEEWodfAzqgynSg++MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTct ZmE3NjQ1NzZiZDhlLzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi8zMzUxMzUtZDU1ZS00Y2I3LWI0YTctZmE3NjQ1NzZiZDhl LzEvWlpNN2VVNVZnQ3dRUmFoMThET3FES2RLRDc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8pE/3l3 XH7O02PhFurGPHfAOdIsURdoAJzAyGe4JuBbTt/ZNuv7x0bWVNSLAFjl8W6zJhnp ulLtBlA4kDj6oHDsuTLmyJY+buTQ98UpNLYBlvW+am2U7VFRGhsisULTo3aNFJpJ V8MZd/mMWvAmro+MXZbwDXl8HaxTA4v5TiSmMs3bXeJh7V+3m144TfL5MPdQw32J h6MQXJIWV53trTnGYiKA+jqYi9FU0y/LxykgX1r5S3aSt1f1xVN79ZkWbU2h8lF3 RBGeI7BX/xyvlVDVx6RXn4bZ9/3OWNjed/JXvuelfRVXj0TbuGnwieV/vpLpqsRR mXaIvLdbjKpfmw== -----END CERTIFICATE-----Generated at Tue Feb 10 02:54:59 2026 by rpki-client