This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft File: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft (raw, json) Hash identifier: VmyXU+gGlx+Kahigi53fCq7Q1qn68btEzna6Nn+HO6w= Subject key identifier: C6:61:81:5A:56:C4:CF:24:1E:5C:40:53:81:72:EF:6A:FC:54:4B:57 Authority key identifier: B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C Certificate issuer: /CN=b19d46a6a336353a90f174fa990fc2241201eb1c Certificate serial: 019C42469F3E89DA81B5194419FD0CEE476F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft Manifest number: 0796 Signing time: Mon 09 Feb 2026 12:00:50 +0000 Manifest this update: Mon 09 Feb 2026 12:00:50 +0000 Manifest next update: Tue 10 Feb 2026 12:00:50 +0000 Files and hashes: 1: sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl (hash: Gw52vjUvv4rKWz3wzA9z+504l9o0PxX6qhhK2/uHvTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9f:3e:89:da:81:b5:19:44:19:fd:0c:ee:47:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b19d46a6a336353a90f174fa990fc2241201eb1c Validity Not Before: Feb 9 12:00:50 2026 GMT Not After : Feb 10 12:00:50 2026 GMT Subject: CN=c661815a56c4cf241e5c40538172ef6afc544b57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:c5:04:9f:c1:9b:e0:65:58:da:f4:86:77: b3:01:75:ce:1b:c2:6b:02:bc:b6:9f:f8:20:e9:d8: fc:b4:c1:58:9a:e7:15:57:94:c8:92:5f:28:2c:a5: fb:61:7a:a6:a8:e5:10:5e:8f:0c:10:80:2f:6a:2e: 0c:a2:21:32:68:99:17:c8:ff:b6:7d:86:0a:97:50: ce:59:39:cd:ff:ea:bc:dd:d6:36:f0:fe:fb:fd:a1: ba:de:64:a9:c6:70:f9:67:4f:c0:b3:c7:79:92:29: 50:1c:22:c2:34:29:55:bf:0e:43:3f:74:44:f7:0b: a0:b5:b2:2c:b3:26:23:16:9f:6b:b6:5e:d2:f2:ff: fd:3c:8b:81:4c:75:58:4d:ef:55:8e:8b:55:43:4f: fb:f5:e1:5b:31:94:ad:3d:fe:e9:4d:f3:83:c1:ef: 7f:74:36:b1:f2:bb:05:cf:44:45:99:06:93:58:b3: 4c:84:82:62:82:cb:9e:92:ce:a9:36:6d:73:b6:b0: b9:07:c5:73:10:7d:78:04:26:ca:34:e3:f8:08:76: 27:f3:3f:4d:89:a3:0e:a6:a2:b0:d1:94:7a:07:08: 17:27:88:49:c7:45:de:76:5f:bd:cb:74:d9:66:d9: 4e:30:92:81:9e:1a:17:46:9d:01:52:df:66:db:33: e7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:61:81:5A:56:C4:CF:24:1E:5C:40:53:81:72:EF:6A:FC:54:4B:57 X509v3 Authority Key Identifier: keyid:B1:9D:46:A6:A3:36:35:3A:90:F1:74:FA:99:0F:C2:24:12:01:EB:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/66/e2f4e1-a70a-4ca1-921c-594c69fb0711/1/sZ1GpqM2NTqQ8XT6mQ_CJBIB6xw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:5b:0b:cf:dc:7c:4d:69:2f:f1:54:f9:f7:4e:25:c6:7c:18: 90:b7:08:41:09:d2:11:3e:83:06:f3:24:fb:dd:a7:04:e1:90: d1:b1:37:00:76:fd:5c:34:5b:d2:8f:a1:f7:0d:3f:32:71:11: 2c:a5:35:ee:12:a9:ce:45:ec:94:fc:aa:df:7f:85:af:2c:e3: 4e:1b:cf:28:43:47:87:61:ab:ae:9b:dc:5c:ae:5a:89:64:1f: 06:c3:7a:39:03:20:f5:4a:dd:7a:88:f1:f4:ff:05:91:ba:4b: 13:e7:e4:4e:c2:a6:3d:4f:9e:a5:e8:ea:68:df:6f:0d:b2:6c: 17:44:2c:d1:4d:f6:bf:f7:4d:e2:0e:9f:6e:54:78:36:1a:fd: 89:49:32:61:ec:0d:6a:e7:1d:18:91:b6:e0:e6:1b:0f:ac:1c: 49:bc:09:63:ea:27:4d:ef:21:77:46:56:cc:c2:cc:78:28:b3: 00:22:4b:d2:aa:78:f7:66:26:35:60:07:ba:fa:d5:1d:6a:0d: 10:51:32:09:d9:23:c2:e1:12:e0:d8:f4:c6:67:1b:d6:b4:a1: 1a:7d:2d:31:66:5c:74:ba:4f:9e:c8:a6:85:83:86:2d:71:cb: 56:f4:a1:3b:39:30:8e:5a:b9:3d:82:22:63:15:b4:22:f6:ef: aa:e7:40:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRp8+idqBtRlEGf0M7kdvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxOWQ0NmE2YTMzNjM1M2E5MGYxNzRmYTk5MGZjMjI0MTIw MWViMWMwHhcNMjYwMjA5MTIwMDUwWhcNMjYwMjEwMTIwMDUwWjAzMTEwLwYDVQQD EyhjNjYxODE1YTU2YzRjZjI0MWU1YzQwNTM4MTcyZWY2YWZjNTQ0YjU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCbFBJ/Bm+BlWNr0hnezAXXOG8Jr Ary2n/gg6dj8tMFYmucVV5TIkl8oLKX7YXqmqOUQXo8MEIAvai4MoiEyaJkXyP+2 fYYKl1DOWTnN/+q83dY28P77/aG63mSpxnD5Z0/As8d5kilQHCLCNClVvw5DP3RE 9wugtbIssyYjFp9rtl7S8v/9PIuBTHVYTe9VjotVQ0/79eFbMZStPf7pTfODwe9/ dDax8rsFz0RFmQaTWLNMhIJigsueks6pNm1ztrC5B8VzEH14BCbKNOP4CHYn8z9N iaMOpqKw0ZR6BwgXJ4hJx0Xedl+9y3TZZtlOMJKBnhoXRp0BUt9m2zPn2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZhgVpWxM8kHlxAU4Fy72r8VEtXMB8GA1UdIwQY MBaAFLGdRqajNjU6kPF0+pkPwiQSAescMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMt NTk0YzY5ZmIwNzExLzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ni9lMmY0ZTEtYTcwYS00Y2ExLTkyMWMtNTk0YzY5ZmIwNzEx LzEvc1oxR3BxTTJOVHFROFhUNm1RX0NKQklCNnh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXlsLz9x8 TWkv8VT5904lxnwYkLcIQQnSET6DBvMk+92nBOGQ0bE3AHb9XDRb0o+h9w0/MnER LKU17hKpzkXslPyq33+FryzjThvPKENHh2GrrpvcXK5aiWQfBsN6OQMg9Urdeojx 9P8FkbpLE+fkTsKmPU+epejqaN9vDbJsF0Qs0U32v/dN4g6fblR4Nhr9iUkyYewN aucdGJG24OYbD6wcSbwJY+onTe8hd0ZWzMLMeCizACJL0qp492YmNWAHuvrVHWoN EFEyCdkjwuES4Nj0xmcb1rShGn0tMWZcdLpPnsimhYOGLXHLVvShOzkwjlq5PYIi YxW0IvbvqudAVg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:53 2026 by rpki-client