This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft File: zdCuQc2rVZhilkF4v-rjaElrB9c.mft (raw, json) Hash identifier: Oj+p3RPxFKPLFWzG1GXdeCyLSNWU7Y3ka/4lBDixuMk= Subject key identifier: F7:52:35:7F:E1:AD:47:79:D1:D7:74:51:75:74:72:58:84:C1:77:70 Authority key identifier: CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7 Certificate issuer: /CN=cdd0ae41cdab559862964178bfeae368496b07d7 Certificate serial: 019C427DD6F61F573A88B3062A76D5B5BB6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft Manifest number: 0EEF Signing time: Mon 09 Feb 2026 13:01:09 +0000 Manifest this update: Mon 09 Feb 2026 13:01:09 +0000 Manifest next update: Tue 10 Feb 2026 13:01:09 +0000 Files and hashes: 1: zdCuQc2rVZhilkF4v-rjaElrB9c.crl (hash: pvLxuZZ8TDa+kA/qRO8qbb9axo9s6matrLhKJp9WSVc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d6:f6:1f:57:3a:88:b3:06:2a:76:d5:b5:bb:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdd0ae41cdab559862964178bfeae368496b07d7 Validity Not Before: Feb 9 13:01:09 2026 GMT Not After : Feb 10 13:01:09 2026 GMT Subject: CN=f752357fe1ad4779d1d774517574725884c17770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7a:f1:e9:65:d4:59:f0:02:af:1c:6e:99:17: 00:e6:ab:1f:6d:14:75:82:b0:6f:c2:79:26:59:ad: c1:73:66:c6:7f:96:6d:23:d1:80:ec:1d:2b:45:6e: 0b:87:16:09:5d:84:cc:8d:f3:c9:e0:ff:54:6b:f8: 07:eb:34:a0:88:c1:ac:ec:2d:90:78:46:d8:58:38: 07:56:b5:26:c5:50:52:8e:d3:b5:08:eb:69:03:d4: 7d:8d:ce:49:32:77:c4:b9:11:02:0d:16:0f:6a:45: 6c:41:3e:cb:7c:5b:be:7c:55:ae:56:70:fd:f5:c0: 50:b0:57:ef:25:53:b8:92:aa:0c:e7:79:93:04:e4: 26:ee:82:51:c7:bc:0a:5f:f8:62:4f:e6:71:36:a2: 32:d4:92:9a:29:0f:6a:e8:da:d8:b4:4a:33:35:32: f5:03:c5:4d:1c:e5:e9:31:b1:b4:9d:39:68:73:dc: b1:26:e4:5b:ac:92:e7:d3:3d:4c:ef:fa:b1:5f:16: 0e:59:88:9c:c5:d2:59:ba:58:49:90:a4:b0:5b:b5: 0c:f7:68:ed:a7:8f:62:d6:15:ec:b6:99:bb:bc:54: 8d:f6:b7:19:65:41:ae:89:cc:24:9f:04:5d:72:0b: e6:31:95:b3:26:c2:df:02:4e:a3:46:91:ec:ac:26: 8b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:52:35:7F:E1:AD:47:79:D1:D7:74:51:75:74:72:58:84:C1:77:70 X509v3 Authority Key Identifier: keyid:CD:D0:AE:41:CD:AB:55:98:62:96:41:78:BF:EA:E3:68:49:6B:07:D7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zdCuQc2rVZhilkF4v-rjaElrB9c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/14d71e-e0d8-4fff-b3fa-428324a9244e/1/zdCuQc2rVZhilkF4v-rjaElrB9c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0c:6c:05:50:f5:56:f6:00:b3:57:55:a2:d3:41:a0:39:34: b4:18:bc:ae:26:b2:47:2e:0e:2f:82:3f:a2:28:fd:55:48:34: 97:f5:ed:06:5a:45:6b:53:65:27:88:00:bb:67:5b:f9:19:0c: 07:42:c6:d3:a8:d2:e5:47:72:34:62:47:80:c8:1d:91:a1:2e: b4:de:1a:63:fa:5a:1d:06:8a:95:2f:46:93:e1:af:ee:64:21: 11:35:25:b1:e3:82:f4:d1:46:69:38:ca:02:d6:86:52:48:29: cf:df:ca:a5:37:f0:94:bb:cd:c0:e4:33:70:e5:07:52:ba:b1: f9:1c:74:73:46:a4:23:29:26:76:e5:7c:f9:a5:57:4e:2f:e5: 5d:78:d8:f6:24:6f:19:ba:61:9c:df:ef:5a:f7:1c:db:dc:c4: 8f:0a:17:1b:30:7f:2b:dc:95:2f:39:94:16:98:02:b0:af:e0: 69:fc:76:1d:6b:4d:31:78:e3:ed:a0:7b:2b:2d:77:82:61:01: d9:d7:92:5a:fd:95:1c:e2:e1:d9:7f:a6:8e:08:0d:bd:8a:25: f9:50:d0:a4:fb:5c:e8:cf:3d:b3:95:50:2a:36:35:e9:2f:d2: 61:02:65:fe:72:14:90:c4:7e:d5:af:39:19:12:cf:18:be:fc: eb:f6:fa:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdb2H1c6iLMGKnbVtbtsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkZDBhZTQxY2RhYjU1OTg2Mjk2NDE3OGJmZWFlMzY4NDk2 YjA3ZDcwHhcNMjYwMjA5MTMwMTA5WhcNMjYwMjEwMTMwMTA5WjAzMTEwLwYDVQQD EyhmNzUyMzU3ZmUxYWQ0Nzc5ZDFkNzc0NTE3NTc0NzI1ODg0YzE3NzcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03rx6WXUWfACrxxumRcA5qsfbRR1 grBvwnkmWa3Bc2bGf5ZtI9GA7B0rRW4LhxYJXYTMjfPJ4P9Ua/gH6zSgiMGs7C2Q eEbYWDgHVrUmxVBSjtO1COtpA9R9jc5JMnfEuRECDRYPakVsQT7LfFu+fFWuVnD9 9cBQsFfvJVO4kqoM53mTBOQm7oJRx7wKX/hiT+ZxNqIy1JKaKQ9q6NrYtEozNTL1 A8VNHOXpMbG0nTloc9yxJuRbrJLn0z1M7/qxXxYOWYicxdJZulhJkKSwW7UM92jt p49i1hXstpm7vFSN9rcZZUGuicwknwRdcgvmMZWzJsLfAk6jRpHsrCaLLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPdSNX/hrUd50dd0UXV0cliEwXdwMB8GA1UdIwQY MBaAFM3QrkHNq1WYYpZBeL/q42hJawfXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvemRDdVFjMnJWWmhpbGtGNHYtcmphRWxyQjljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS8xNGQ3MWUtZTBkOC00ZmZmLWIzZmEt NDI4MzI0YTkyNDRlLzEvemRDdVFjMnJWWmhpbGtGNHYtcmphRWxyQjljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS8xNGQ3MWUtZTBkOC00ZmZmLWIzZmEtNDI4MzI0YTkyNDRl LzEvemRDdVFjMnJWWmhpbGtGNHYtcmphRWxyQjljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAwxsBVD1 VvYAs1dVotNBoDk0tBi8riayRy4OL4I/oij9VUg0l/XtBlpFa1NlJ4gAu2db+RkM B0LG06jS5UdyNGJHgMgdkaEutN4aY/paHQaKlS9Gk+Gv7mQhETUlseOC9NFGaTjK AtaGUkgpz9/KpTfwlLvNwOQzcOUHUrqx+Rx0c0akIykmduV8+aVXTi/lXXjY9iRv GbphnN/vWvcc29zEjwoXGzB/K9yVLzmUFpgCsK/gafx2HWtNMXjj7aB7Ky13gmEB 2deSWv2VHOLh2X+mjggNvYol+VDQpPtc6M89s5VQKjY16S/SYQJl/nIUkMR+1a85 GRLPGL786/b6Kg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:31 2026 by rpki-client