This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft File: kZ7Nu3kI36w6rapeSRbyhchQzLc.mft (raw, json) Hash identifier: VqbIdlbzheJiWxx/vq7ub6eYON0acTs+2Aqoactb0g4= Subject key identifier: 0B:0D:44:A1:DB:F9:CF:7B:63:C6:E7:69:A8:DD:CD:99:C1:14:13:FE Authority key identifier: 91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7 Certificate issuer: /CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7 Certificate serial: 019C41D851D8A0E1A8E5C9DF435F1A3EBCDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft Manifest number: 0180 Signing time: Mon 09 Feb 2026 10:00:21 +0000 Manifest this update: Mon 09 Feb 2026 10:00:21 +0000 Manifest next update: Tue 10 Feb 2026 10:00:21 +0000 Files and hashes: 1: kZ7Nu3kI36w6rapeSRbyhchQzLc.crl (hash: o80VZ/x6iNrdyk+o3zlKgxoe2poewOIdKsenp7o0Wmw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:51:d8:a0:e1:a8:e5:c9:df:43:5f:1a:3e:bc:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919ecdbb7908dfac3aadaa5e4916f285c850ccb7 Validity Not Before: Feb 9 10:00:21 2026 GMT Not After : Feb 10 10:00:21 2026 GMT Subject: CN=0b0d44a1dbf9cf7b63c6e769a8ddcd99c11413fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:57:4b:35:ef:1f:e5:5d:54:fc:8c:70:d2: de:19:f4:45:28:ae:b8:39:2f:d1:f6:ac:5a:74:78: 0e:70:be:6d:db:d5:80:44:7c:19:dd:cd:a8:81:6d: ad:4e:63:71:30:fe:d4:65:0a:7b:77:6d:d8:f4:ef: 88:d8:e1:51:6e:2d:bc:ce:14:b6:aa:06:fc:54:bb: 53:44:0d:fd:8a:42:fb:94:05:22:6b:89:ed:d0:c5: 8d:88:32:93:8d:bb:d1:43:c6:b5:bf:3e:1f:20:c1: 17:66:cb:ff:35:f4:6e:b8:2f:77:cf:b8:6a:a1:e2: 77:9d:e0:cd:db:d6:95:a6:d9:ac:8a:ee:dd:64:0b: f8:f2:7c:49:cf:ef:86:5f:96:76:db:33:f0:6f:12: ba:80:3d:67:cb:ec:6c:83:2a:eb:84:81:82:b2:28: 38:6e:de:05:88:30:ce:96:d2:6b:a8:f6:04:5e:f3: b2:fb:f7:92:d6:d2:d8:48:41:bf:58:35:e8:bc:51: cc:64:3c:61:98:3a:f5:7d:7a:cc:5d:b0:00:2e:6b: b9:f7:d6:8d:b5:fe:37:1b:d8:54:be:65:93:47:94: 09:e3:fb:8d:07:c9:81:dc:1c:51:38:2f:bb:44:b4: 8d:7f:26:9b:33:44:88:4a:a9:48:73:42:07:2d:39: 1c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:0D:44:A1:DB:F9:CF:7B:63:C6:E7:69:A8:DD:CD:99:C1:14:13:FE X509v3 Authority Key Identifier: keyid:91:9E:CD:BB:79:08:DF:AC:3A:AD:AA:5E:49:16:F2:85:C8:50:CC:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kZ7Nu3kI36w6rapeSRbyhchQzLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a91154-b917-415d-aac0-d503277d7406/1/kZ7Nu3kI36w6rapeSRbyhchQzLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:4e:11:f5:d6:ba:2f:2f:4a:32:c4:df:66:f0:04:8e:b7:a4: 8a:97:72:71:af:86:00:bf:6a:9c:00:ae:c5:7b:d8:b4:ea:48: f5:6c:a8:4b:2e:ee:49:01:c2:b0:3e:e1:2a:8a:b4:4e:64:46: 41:02:ad:0d:12:c9:2c:c7:37:d8:b9:10:80:64:23:ef:91:f3: 36:08:00:fe:09:d9:ce:c5:9e:c2:70:74:08:e6:67:30:89:6d: c8:10:0b:4e:c8:ff:34:b7:4e:0e:08:43:38:0d:4a:bb:e4:8c: d9:3f:74:86:bb:e2:50:5c:34:ae:15:f3:30:8c:41:c2:9e:f1: e9:2e:d0:19:a0:90:aa:77:c7:d4:ba:8e:b8:4c:32:d6:a8:63: f6:bf:97:f6:da:28:01:4d:04:d4:84:6d:de:fa:ea:12:a7:01: be:0a:28:d5:ca:59:e7:7b:d1:2b:2a:c2:6d:28:c6:22:fb:49: d6:62:90:07:19:8f:36:db:d6:77:a2:a8:f7:04:62:7e:9d:b9: 5e:ce:5e:83:e2:59:d5:da:a8:54:b2:97:6f:db:27:ff:14:14: bc:26:d1:f4:d0:f6:64:4c:45:9c:7b:02:78:e6:ea:73:49:57: 66:ca:01:9a:e7:e6:da:16:0f:f2:a0:37:06:42:06:2c:e9:93: 49:c6:8c:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2FHYoOGo5cnfQ18aPrzdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkxOWVjZGJiNzkwOGRmYWMzYWFkYWE1ZTQ5MTZmMjg1Yzg1 MGNjYjcwHhcNMjYwMjA5MTAwMDIxWhcNMjYwMjEwMTAwMDIxWjAzMTEwLwYDVQQD EygwYjBkNDRhMWRiZjljZjdiNjNjNmU3NjlhOGRkY2Q5OWMxMTQxM2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdlXSzXvH+VdVPyMcNLeGfRFKK64 OS/R9qxadHgOcL5t29WARHwZ3c2ogW2tTmNxMP7UZQp7d23Y9O+I2OFRbi28zhS2 qgb8VLtTRA39ikL7lAUia4nt0MWNiDKTjbvRQ8a1vz4fIMEXZsv/NfRuuC93z7hq oeJ3neDN29aVptmsiu7dZAv48nxJz++GX5Z22zPwbxK6gD1ny+xsgyrrhIGCsig4 bt4FiDDOltJrqPYEXvOy+/eS1tLYSEG/WDXovFHMZDxhmDr1fXrMXbAALmu599aN tf43G9hUvmWTR5QJ4/uNB8mB3BxROC+7RLSNfyabM0SISqlIc0IHLTkc/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsNRKHb+c97Y8bnaajdzZnBFBP+MB8GA1UdIwQY MBaAFJGezbt5CN+sOq2qXkkW8oXIUMy3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva1o3TnUza0kzNnc2cmFwZVNSYnloY2hRekxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAt ZDUwMzI3N2Q3NDA2LzEva1o3TnUza0kzNnc2cmFwZVNSYnloY2hRekxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS9hOTExNTQtYjkxNy00MTVkLWFhYzAtZDUwMzI3N2Q3NDA2 LzEva1o3TnUza0kzNnc2cmFwZVNSYnloY2hRekxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVk4R9da6 Ly9KMsTfZvAEjrekipdyca+GAL9qnACuxXvYtOpI9WyoSy7uSQHCsD7hKoq0TmRG QQKtDRLJLMc32LkQgGQj75HzNggA/gnZzsWewnB0COZnMIltyBALTsj/NLdODghD OA1Ku+SM2T90hrviUFw0rhXzMIxBwp7x6S7QGaCQqnfH1LqOuEwy1qhj9r+X9too AU0E1IRt3vrqEqcBvgoo1cpZ53vRKyrCbSjGIvtJ1mKQBxmPNtvWd6Ko9wRifp25 Xs5eg+JZ1dqoVLKXb9sn/xQUvCbR9ND2ZExFnHsCeObqc0lXZsoBmufm2hYP8qA3 BkIGLOmTScaMxA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:38 2026 by rpki-client