This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft File: ZWo7XAkm87RZeYDaUImcKOpqa9k.mft (raw, json) Hash identifier: FeklaymfT0It9wE5N1H8sveD3oitys9B93Q3Rm5jWN4= Subject key identifier: 17:80:19:F8:E6:60:C3:4E:3A:BC:7E:55:32:48:3C:DC:80:D9:0D:E1 Authority key identifier: 65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9 Certificate issuer: /CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9 Certificate serial: 019C41A1E28626CB7E48374C20B34ADB7D38 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft Manifest number: 0BD2 Signing time: Mon 09 Feb 2026 09:00:54 +0000 Manifest this update: Mon 09 Feb 2026 09:00:54 +0000 Manifest next update: Tue 10 Feb 2026 09:00:54 +0000 Files and hashes: 1: ZWo7XAkm87RZeYDaUImcKOpqa9k.crl (hash: 3JAvaXmdd4JkrLqrvQdKt1J5RK2YUd/j8faLHhVOTng=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:e2:86:26:cb:7e:48:37:4c:20:b3:4a:db:7d:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656a3b5c0926f3b4597980da50899c28ea6a6bd9 Validity Not Before: Feb 9 09:00:54 2026 GMT Not After : Feb 10 09:00:54 2026 GMT Subject: CN=178019f8e660c34e3abc7e5532483cdc80d90de1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:dd:fc:33:d5:4c:5f:a1:4f:2b:1c:0e:95:83: 3b:66:49:94:18:bc:eb:10:2b:f2:f9:b0:8b:20:6b: bb:3d:cd:75:f7:6a:cb:f3:fd:8b:79:19:8d:8b:f6: 35:7d:f4:fa:0a:cb:18:f6:2f:2e:c4:be:05:b7:5d: 4a:85:49:99:09:2c:87:a8:1b:c1:6b:14:59:df:5e: 66:d5:4c:cd:50:7a:9e:86:5f:c4:89:b0:74:56:9d: 69:aa:06:c3:b9:39:d1:b9:a2:39:01:d4:40:1e:c8: db:e6:5d:ff:3f:01:54:62:80:df:cf:34:49:d3:d0: 50:28:79:05:59:e7:91:db:b9:68:f7:d6:77:c6:93: c0:cb:fc:1c:71:8f:bd:63:24:26:2e:a7:78:86:c5: 56:0f:78:41:cd:27:7e:30:30:ec:91:89:d1:ef:03: 7c:4f:ee:20:d0:3f:fc:a7:eb:18:fa:df:a3:c8:18: bd:d5:c3:74:cf:ea:60:22:6a:72:2e:8c:3f:19:98: 4b:8a:73:b7:df:c9:24:82:1b:d2:75:4d:d3:d6:66: 73:dd:e6:00:ac:23:0a:9b:65:06:46:82:3e:a6:08: 8f:81:cf:54:bf:56:02:c1:e5:d1:90:7a:60:47:a1: 8a:89:13:d4:76:ec:ff:34:b7:59:11:1d:b5:6e:8a: 73:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:80:19:F8:E6:60:C3:4E:3A:BC:7E:55:32:48:3C:DC:80:D9:0D:E1 X509v3 Authority Key Identifier: keyid:65:6A:3B:5C:09:26:F3:B4:59:79:80:DA:50:89:9C:28:EA:6A:6B:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZWo7XAkm87RZeYDaUImcKOpqa9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/36c1a9-4a22-4550-b3c8-4cd8b438f815/1/ZWo7XAkm87RZeYDaUImcKOpqa9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:2b:02:66:59:f4:b9:33:76:c8:2d:75:af:07:9d:da:26:7b: b0:47:5a:fa:86:10:22:fc:95:ad:d7:f6:d8:7d:98:07:6d:08: f8:26:b7:f1:13:41:75:70:f3:ff:3f:7b:4b:53:d3:f2:cc:90: ae:de:39:3b:68:f8:70:0e:3e:49:59:86:bf:fd:e8:ac:c9:3b: 25:32:e0:64:c9:a9:39:fa:f9:09:78:9b:5c:52:bd:86:b3:21: 3d:aa:0a:f2:db:73:d0:6e:f7:f3:75:4e:e0:5f:d6:99:dc:26: 33:57:6f:b0:ad:83:03:cc:2e:30:23:8f:6a:66:2e:bf:da:85: be:d7:69:86:f8:a5:41:9b:63:61:04:9c:b9:3a:70:f3:61:bd: 60:88:e3:d6:18:ad:72:bc:15:20:df:2c:b2:51:4b:0a:33:83: 3f:7d:8b:71:41:d6:26:98:41:85:8c:e6:4f:76:eb:1c:b0:bf: 50:14:1a:b5:ee:b9:5c:17:85:75:0d:6d:3b:97:fe:c4:9c:9b: 97:c4:4e:79:97:e9:f6:0b:a0:0c:68:ca:a0:25:46:d9:82:f5: f1:33:ce:92:11:89:78:98:10:56:b7:f3:e8:cf:b7:ff:39:53: bf:cf:16:be:96:eb:d1:ad:dc:b4:8c:a1:2f:95:41:09:41:f5: c9:52:72:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoeKGJst+SDdMILNK2304MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NmEzYjVjMDkyNmYzYjQ1OTc5ODBkYTUwODk5YzI4ZWE2 YTZiZDkwHhcNMjYwMjA5MDkwMDU0WhcNMjYwMjEwMDkwMDU0WjAzMTEwLwYDVQQD EygxNzgwMTlmOGU2NjBjMzRlM2FiYzdlNTUzMjQ4M2NkYzgwZDkwZGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2N38M9VMX6FPKxwOlYM7ZkmUGLzr ECvy+bCLIGu7Pc1192rL8/2LeRmNi/Y1ffT6CssY9i8uxL4Ft11KhUmZCSyHqBvB axRZ315m1UzNUHqehl/EibB0Vp1pqgbDuTnRuaI5AdRAHsjb5l3/PwFUYoDfzzRJ 09BQKHkFWeeR27lo99Z3xpPAy/wccY+9YyQmLqd4hsVWD3hBzSd+MDDskYnR7wN8 T+4g0D/8p+sY+t+jyBi91cN0z+pgImpyLow/GZhLinO338kkghvSdU3T1mZz3eYA rCMKm2UGRoI+pgiPgc9Uv1YCweXRkHpgR6GKiRPUduz/NLdZER21bopzXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBeAGfjmYMNOOrx+VTJIPNyA2Q3hMB8GA1UdIwQY MBaAFGVqO1wJJvO0WXmA2lCJnCjqamvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgt NGNkOGI0MzhmODE1LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS8zNmMxYTktNGEyMi00NTUwLWIzYzgtNGNkOGI0MzhmODE1 LzEvWldvN1hBa204N1JaZVlEYVVJbWNLT3BxYTlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCsCZln0 uTN2yC11rwed2iZ7sEda+oYQIvyVrdf22H2YB20I+Ca38RNBdXDz/z97S1PT8syQ rt45O2j4cA4+SVmGv/3orMk7JTLgZMmpOfr5CXibXFK9hrMhPaoK8ttz0G7383VO 4F/WmdwmM1dvsK2DA8wuMCOPamYuv9qFvtdphvilQZtjYQScuTpw82G9YIjj1hit crwVIN8sslFLCjODP32LcUHWJphBhYzmT3brHLC/UBQate65XBeFdQ1tO5f+xJyb l8ROeZfp9gugDGjKoCVG2YL18TPOkhGJeJgQVrfz6M+3/zlTv88Wvpbr0a3ctIyh L5VBCUH1yVJyuA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:28:38 2026 by rpki-client