This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft File: ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft (raw, json) Hash identifier: WagpuUZSBL1hGcUS0NfBmJLeVw9CWvQkiaGR7iOJrTI= Subject key identifier: 0C:0F:DF:DD:9D:6D:02:0D:00:3B:7D:CB:38:BD:24:A5:BE:41:19:F9 Authority key identifier: 64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D Certificate issuer: /CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d Certificate serial: 019C4321F36FCEFE126922375B7CD22C2794 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft Manifest number: 07AA Signing time: Mon 09 Feb 2026 16:00:24 +0000 Manifest this update: Mon 09 Feb 2026 16:00:24 +0000 Manifest next update: Tue 10 Feb 2026 16:00:24 +0000 Files and hashes: 1: ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl (hash: JUX7nkU9DTfjxzdaWw1Fixn/xoyEbUliFN+cBCIh3hM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:f3:6f:ce:fe:12:69:22:37:5b:7c:d2:2c:27:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6478bdecfbd35d3f17c3906e62f93eb2bb113e5d Validity Not Before: Feb 9 16:00:24 2026 GMT Not After : Feb 10 16:00:24 2026 GMT Subject: CN=0c0fdfdd9d6d020d003b7dcb38bd24a5be4119f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:82:33:a6:94:23:7c:d4:e4:01:a6:e2:06:a4: 6c:40:11:61:47:26:02:8a:9e:7f:09:6a:13:50:3d: a8:ca:d6:96:f4:7c:dd:67:f8:ef:e6:38:5a:39:3b: 85:f0:62:45:b1:1f:f5:83:64:20:0d:28:47:a9:b5: 52:ba:bc:17:15:fb:ce:46:b4:d5:55:ac:2b:38:eb: fd:9d:24:da:e8:0c:f7:3b:08:01:0c:35:45:18:7c: e8:fe:2d:79:6d:d2:de:0e:46:93:ee:87:23:18:30: 59:dc:5c:04:26:33:88:ac:37:f0:0f:42:c6:c5:9c: 62:9e:63:8c:7f:83:e7:13:c7:4b:36:a4:f1:79:ba: 48:68:81:11:b9:58:ea:2b:f9:9b:5f:d3:f0:ea:5b: 2e:8d:9a:6f:18:65:e6:42:b1:50:ae:1e:24:84:dc: 9d:d2:47:8d:6e:24:df:94:a8:9c:bb:09:7a:cd:04: 3b:a1:ab:13:5b:c0:5c:29:be:f5:c7:d6:6d:39:44: 9e:ac:16:10:36:8a:82:db:cd:a1:c2:e6:9a:16:2e: 56:d2:4d:86:04:41:ea:f5:c4:e4:15:ce:c2:49:13: 24:23:37:39:ff:f4:ed:cb:8f:f3:0f:a9:d7:f7:fc: 0e:79:9c:22:0b:5d:24:82:6d:7a:c7:c3:17:36:5c: d8:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:0F:DF:DD:9D:6D:02:0D:00:3B:7D:CB:38:BD:24:A5:BE:41:19:F9 X509v3 Authority Key Identifier: keyid:64:78:BD:EC:FB:D3:5D:3F:17:C3:90:6E:62:F9:3E:B2:BB:11:3E:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHi97PvTXT8Xw5BuYvk-srsRPl0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/383922-bca3-48e7-a4e8-6fe58c36364d/1/ZHi97PvTXT8Xw5BuYvk-srsRPl0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:dc:56:0c:6b:76:e0:11:dd:d1:d7:0c:dd:18:ab:8d:bf:69: 51:92:ef:71:de:82:a6:8b:7f:de:28:47:bc:53:19:6d:e8:52: 11:eb:ac:77:6c:8e:66:2b:a2:0d:d1:62:eb:73:82:5d:de:27: 48:73:e1:5f:60:3f:57:de:66:44:a0:58:d0:e0:44:e1:05:ed: 2d:f3:b1:e2:9c:b8:2d:e9:af:18:e6:70:30:ba:a7:65:a1:91: 30:86:e9:7e:24:18:75:3c:26:85:dd:69:85:d8:8c:59:a3:7a: fd:a0:e2:5a:bf:02:fe:53:c9:c1:25:6a:d3:c3:40:39:f9:4a: 98:36:b6:14:ac:d3:fe:02:26:63:ad:b2:e1:c7:87:dd:41:71: a7:85:04:20:26:b2:9f:89:37:71:97:d0:cb:14:01:bc:96:73: a8:bd:77:52:ea:61:5c:34:af:c3:8d:5f:e4:e1:f8:85:cf:df: 0c:b9:74:9a:05:33:ef:66:27:77:3b:30:41:4b:e2:c7:00:6c: cb:37:53:4a:11:0d:04:03:66:5a:6d:d2:05:5a:a6:4b:c1:9b: fd:d0:40:d4:72:b2:34:90:d1:0c:86:2a:22:17:6d:ce:bd:1e: de:65:fb:db:d1:9b:84:87:a8:c3:74:b1:62:70:e2:6a:fb:37: 31:01:b3:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIfNvzv4SaSI3W3zSLCeUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0NzhiZGVjZmJkMzVkM2YxN2MzOTA2ZTYyZjkzZWIyYmIx MTNlNWQwHhcNMjYwMjA5MTYwMDI0WhcNMjYwMjEwMTYwMDI0WjAzMTEwLwYDVQQD EygwYzBmZGZkZDlkNmQwMjBkMDAzYjdkY2IzOGJkMjRhNWJlNDExOWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8IIzppQjfNTkAabiBqRsQBFhRyYC ip5/CWoTUD2oytaW9HzdZ/jv5jhaOTuF8GJFsR/1g2QgDShHqbVSurwXFfvORrTV VawrOOv9nSTa6Az3OwgBDDVFGHzo/i15bdLeDkaT7ocjGDBZ3FwEJjOIrDfwD0LG xZxinmOMf4PnE8dLNqTxebpIaIERuVjqK/mbX9Pw6lsujZpvGGXmQrFQrh4khNyd 0keNbiTflKicuwl6zQQ7oasTW8BcKb71x9ZtOUSerBYQNoqC282hwuaaFi5W0k2G BEHq9cTkFc7CSRMkIzc5//Tty4/zD6nX9/wOeZwiC10kgm16x8MXNlzYkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwP392dbQINADt9yzi9JKW+QRn5MB8GA1UdIwQY MBaAFGR4vez7010/F8OQbmL5PrK7ET5dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgt NmZlNThjMzYzNjRkLzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni8zODM5MjItYmNhMy00OGU3LWE0ZTgtNmZlNThjMzYzNjRk LzEvWkhpOTdQdlRYVDhYdzVCdVl2ay1zcnNSUGwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdxWDGt2 4BHd0dcM3Rirjb9pUZLvcd6Cpot/3ihHvFMZbehSEeusd2yOZiuiDdFi63OCXd4n SHPhX2A/V95mRKBY0OBE4QXtLfOx4py4LemvGOZwMLqnZaGRMIbpfiQYdTwmhd1p hdiMWaN6/aDiWr8C/lPJwSVq08NAOflKmDa2FKzT/gImY62y4ceH3UFxp4UEICay n4k3cZfQyxQBvJZzqL13UuphXDSvw41f5OH4hc/fDLl0mgUz72YndzswQUvixwBs yzdTShENBANmWm3SBVqmS8Gb/dBA1HKyNJDRDIYqIhdtzr0e3mX729GbhIeow3Sx YnDiavs3MQGzmg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:53:31 2026 by rpki-client