This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft File: zeICwBqCkO6VMl06Tzf_QOmWSPo.mft (raw, json) Hash identifier: r1+nHCXapnFI+MxCbSQI81z7cInX8OsF4n+MAYIWn3o= Subject key identifier: 9C:FE:D1:1A:12:43:67:E0:A5:E5:F8:DC:F7:08:46:A4:65:4B:4C:89 Authority key identifier: CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA Certificate issuer: /CN=cde202c01a8290ee95325d3a4f37ff40e99648fa Certificate serial: 019C4322EC64F04F22E4B863C70EEF0AF0AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft Manifest number: 1167 Signing time: Mon 09 Feb 2026 16:01:28 +0000 Manifest this update: Mon 09 Feb 2026 16:01:28 +0000 Manifest next update: Tue 10 Feb 2026 16:01:28 +0000 Files and hashes: 1: zeICwBqCkO6VMl06Tzf_QOmWSPo.crl (hash: L19z8k7ntSUR0jALtTQoNZkM2TitiHS2Lih46zcalPw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:ec:64:f0:4f:22:e4:b8:63:c7:0e:ef:0a:f0:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cde202c01a8290ee95325d3a4f37ff40e99648fa Validity Not Before: Feb 9 16:01:28 2026 GMT Not After : Feb 10 16:01:28 2026 GMT Subject: CN=9cfed11a124367e0a5e5f8dcf70846a4654b4c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:e5:f2:4a:2f:71:6a:80:0e:3a:a8:a5:b0:72: 8a:d7:9c:b5:f0:43:f2:61:34:5c:61:15:46:53:17: b3:ab:46:cd:f2:64:d9:14:64:f4:a5:1b:3b:13:d1: 5f:70:8b:31:63:30:e3:a6:19:3b:12:9d:2a:46:1e: 8a:f5:95:ba:0e:68:64:56:e9:6a:0f:5a:ba:81:cc: 54:65:d5:c6:ec:96:58:50:13:e0:a5:4c:25:ae:7d: 68:f1:6c:fd:71:69:5e:39:6e:60:83:c2:69:39:6a: 52:ad:ab:02:a9:ec:dd:6b:b7:2e:a8:64:a3:8d:ad: 0c:c7:aa:9e:9b:72:1a:80:e9:d9:47:d6:ff:7c:2e: ae:57:66:74:1e:f5:6f:5c:59:46:00:25:59:bd:45: ab:a8:3b:77:3f:ec:4f:da:30:b2:b1:6f:25:e2:96: a7:2c:11:f5:a8:cf:7d:93:fd:64:4d:24:05:6b:67: fc:77:c1:bf:99:53:39:91:ea:d0:9e:bb:cb:54:8d: ee:99:18:06:8a:ad:06:3a:75:7d:7e:5f:51:b9:29: 28:9d:53:e1:2f:cf:4e:a2:1f:17:9a:69:bd:71:19: 44:89:ac:e1:74:d1:72:09:89:83:5a:77:ff:d4:e8: ad:47:2a:0a:7e:f5:ab:8a:bd:8e:a1:8c:69:55:ce: 5e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:FE:D1:1A:12:43:67:E0:A5:E5:F8:DC:F7:08:46:A4:65:4B:4C:89 X509v3 Authority Key Identifier: keyid:CD:E2:02:C0:1A:82:90:EE:95:32:5D:3A:4F:37:FF:40:E9:96:48:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zeICwBqCkO6VMl06Tzf_QOmWSPo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0fce4e-10df-4f9d-bc8f-943782c79d0c/1/zeICwBqCkO6VMl06Tzf_QOmWSPo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:5d:2e:ff:cf:19:72:f5:fa:b5:9d:05:73:5b:0b:fe:cc:6d: 26:b7:e2:a5:79:5d:c2:ec:cd:a5:ce:f0:a2:46:04:04:78:c0: ff:3e:58:5b:a2:d6:32:0a:c7:33:d0:a5:33:be:8c:e2:95:94: 16:7a:20:68:8f:ea:2a:fb:1e:f2:a8:0e:af:7a:fc:d2:8f:b6: 24:63:f1:cd:79:fc:3e:a6:ee:5b:6e:70:48:eb:1b:8b:2a:bc: 20:a4:95:f5:01:6f:9c:23:c3:b3:06:9d:3f:59:e4:c1:92:05: 0c:d5:e9:58:61:df:8c:e6:d8:a7:61:a1:bc:a7:6b:71:9a:ce: 16:94:e2:36:5e:d0:7d:32:a0:f9:c2:17:d8:47:a6:91:36:21: 3d:3f:cc:1b:e8:c2:46:01:3e:f4:5d:8f:94:da:12:1f:a3:4d: 04:4e:cc:41:77:03:b1:96:6c:d1:4e:c5:64:cf:f6:f0:e1:82: b5:25:7f:c2:84:6f:e7:b5:c1:cc:2e:69:40:4e:72:49:ea:2d: 3c:fa:e9:96:5b:3f:d9:60:a8:23:b6:2f:52:4c:26:c8:8d:40: cd:9b:57:ce:58:83:5b:c3:56:42:01:55:54:6c:36:63:04:6f: d5:d8:1f:e8:d4:05:4e:3d:82:7a:bb:3f:b4:2c:a5:57:ef:c6: 91:7a:53:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIuxk8E8i5Lhjxw7vCvCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZTIwMmMwMWE4MjkwZWU5NTMyNWQzYTRmMzdmZjQwZTk5 NjQ4ZmEwHhcNMjYwMjA5MTYwMTI4WhcNMjYwMjEwMTYwMTI4WjAzMTEwLwYDVQQD Eyg5Y2ZlZDExYTEyNDM2N2UwYTVlNWY4ZGNmNzA4NDZhNDY1NGI0Yzg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7OXySi9xaoAOOqilsHKK15y18EPy YTRcYRVGUxezq0bN8mTZFGT0pRs7E9FfcIsxYzDjphk7Ep0qRh6K9ZW6DmhkVulq D1q6gcxUZdXG7JZYUBPgpUwlrn1o8Wz9cWleOW5gg8JpOWpSrasCqezda7cuqGSj ja0Mx6qem3IagOnZR9b/fC6uV2Z0HvVvXFlGACVZvUWrqDt3P+xP2jCysW8l4pan LBH1qM99k/1kTSQFa2f8d8G/mVM5kerQnrvLVI3umRgGiq0GOnV9fl9RuSkonVPh L89Ooh8Xmmm9cRlEiazhdNFyCYmDWnf/1OitRyoKfvWrir2OoYxpVc5eewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJz+0RoSQ2fgpeX43PcIRqRlS0yJMB8GA1UdIwQY MBaAFM3iAsAagpDulTJdOk83/0Dplkj6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYt OTQzNzgyYzc5ZDBjLzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Yy8wZmNlNGUtMTBkZi00ZjlkLWJjOGYtOTQzNzgyYzc5ZDBj LzEvemVJQ3dCcUNrTzZWTWwwNlR6Zl9RT21XU1BvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwF0u/88Z cvX6tZ0Fc1sL/sxtJrfipXldwuzNpc7wokYEBHjA/z5YW6LWMgrHM9ClM76M4pWU FnogaI/qKvse8qgOr3r80o+2JGPxzXn8PqbuW25wSOsbiyq8IKSV9QFvnCPDswad P1nkwZIFDNXpWGHfjObYp2GhvKdrcZrOFpTiNl7QfTKg+cIX2EemkTYhPT/MG+jC RgE+9F2PlNoSH6NNBE7MQXcDsZZs0U7FZM/28OGCtSV/woRv57XBzC5pQE5ySeot PPrplls/2WCoI7YvUkwmyI1AzZtXzliDW8NWQgFVVGw2YwRv1dgf6NQFTj2Cers/ tCylV+/GkXpT7w== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:21 2026 by rpki-client