This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft File: z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft (raw, json) Hash identifier: 1mbo7ii1FMfPJYRjRxKjmSAsN4q2p1jYXHdavltKzWQ= Subject key identifier: 46:21:77:3D:68:62:C0:04:C0:9B:CD:45:A5:13:EC:3C:92:16:9F:C8 Authority key identifier: CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06 Certificate issuer: /CN=cf7f5c598059e1ae5976c81ea2b826697ee19906 Certificate serial: 019C43FE7C566D52E8EB84AAAA9FE032FA19 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft Manifest number: 06AF Signing time: Mon 09 Feb 2026 20:01:17 +0000 Manifest this update: Mon 09 Feb 2026 20:01:17 +0000 Manifest next update: Tue 10 Feb 2026 20:01:17 +0000 Files and hashes: 1: z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl (hash: MUamGMRcSkHkCjqQIJQotSxETZvw3qg9RetKVolV52g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:7c:56:6d:52:e8:eb:84:aa:aa:9f:e0:32:fa:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf7f5c598059e1ae5976c81ea2b826697ee19906 Validity Not Before: Feb 9 20:01:17 2026 GMT Not After : Feb 10 20:01:17 2026 GMT Subject: CN=4621773d6862c004c09bcd45a513ec3c92169fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:16:ee:e3:3d:13:0d:a7:1a:43:cc:89:93:5f: b7:d6:43:54:32:ea:c1:fe:15:e3:b9:0c:21:23:2c: b0:5a:cb:1e:6d:31:1a:4e:7a:03:f7:e2:00:b5:dd: d1:ac:4b:56:ce:73:87:76:0b:17:af:23:a2:8f:a5: 3a:26:ff:d0:71:89:bd:b5:97:3c:47:63:e4:24:b2: e2:cb:60:ae:b3:a4:48:f8:67:5f:e6:ea:ae:4e:a6: 0a:1a:a9:d9:4c:42:8a:a3:18:20:7e:03:ab:b5:9e: ad:e3:e5:71:d7:ec:de:83:15:2b:5b:12:79:58:aa: a2:b1:f3:1b:58:0d:02:f4:1f:b4:ec:e6:e1:c3:91: 3d:14:24:1d:d2:c2:02:38:a1:29:d7:89:52:a0:d5: a3:ec:b5:2f:9b:9e:11:cd:6c:e7:27:aa:b7:62:9b: f3:f1:38:c3:a4:7c:92:d7:3e:15:44:ae:2e:b1:d5: 28:3b:55:bc:75:29:8d:1b:b3:ed:89:12:b5:3c:81: da:3a:5a:b6:59:ed:72:f9:77:82:c6:9e:0d:41:7f: 9b:04:4b:b0:12:ff:b9:e6:28:72:d9:06:05:db:1c: 9f:89:40:81:e5:b4:15:32:77:4c:82:7b:1b:e8:5a: 1a:14:c6:ea:37:f6:25:7c:7c:07:fa:ac:95:1d:23: 68:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:21:77:3D:68:62:C0:04:C0:9B:CD:45:A5:13:EC:3C:92:16:9F:C8 X509v3 Authority Key Identifier: keyid:CF:7F:5C:59:80:59:E1:AE:59:76:C8:1E:A2:B8:26:69:7E:E1:99:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z39cWYBZ4a5ZdsgeorgmaX7hmQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ef9479-2994-449c-9d9c-e1dc69e333df/1/z39cWYBZ4a5ZdsgeorgmaX7hmQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:62:90:24:ac:8c:d1:ff:a3:08:3f:84:95:37:29:de:1d:e1: f8:9e:13:11:59:74:c0:a0:7b:ed:40:d4:cc:a5:b6:d5:c8:12: 4f:1e:70:68:9f:88:3b:0a:72:ab:43:ed:d7:80:8b:43:48:9f: df:61:36:e0:ad:bc:ea:9f:20:7f:9a:d5:04:9a:80:a6:af:36: 80:de:d5:40:34:57:93:dd:18:8e:df:af:59:de:4a:06:c3:7a: 19:f3:a4:24:56:80:d9:b8:af:92:de:97:39:c0:e6:ea:aa:8e: 5b:78:16:fa:5f:e1:be:9c:20:0f:1d:59:bb:8e:53:dc:5a:79: a2:6e:49:84:08:91:a1:36:3f:7b:a0:a8:4e:c4:08:96:57:48: 0a:43:31:b6:7e:d2:d7:e4:0b:4b:b8:af:c5:e4:d1:5b:9b:5d: 8b:00:af:91:aa:24:c7:9b:3d:f3:58:42:05:a8:1e:4b:c1:3e: 47:60:3b:69:d1:a3:f0:4b:44:b4:9d:51:72:c9:71:06:8d:56: a9:d2:5d:7d:4e:1c:4c:a5:2a:57:32:22:6e:35:f2:bc:32:10: 13:e4:4e:e3:52:a6:68:e1:19:b6:a1:53:28:2c:10:2d:ef:41: 67:6f:8a:bd:33:90:c7:b8:a5:51:bc:c7:0e:86:6e:ed:47:82: 55:2e:68:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/nxWbVLo64Sqqp/gMvoZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmN2Y1YzU5ODA1OWUxYWU1OTc2YzgxZWEyYjgyNjY5N2Vl MTk5MDYwHhcNMjYwMjA5MjAwMTE3WhcNMjYwMjEwMjAwMTE3WjAzMTEwLwYDVQQD Eyg0NjIxNzczZDY4NjJjMDA0YzA5YmNkNDVhNTEzZWMzYzkyMTY5ZmM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBbu4z0TDacaQ8yJk1+31kNUMurB /hXjuQwhIyywWssebTEaTnoD9+IAtd3RrEtWznOHdgsXryOij6U6Jv/QcYm9tZc8 R2PkJLLiy2Cus6RI+Gdf5uquTqYKGqnZTEKKoxggfgOrtZ6t4+Vx1+zegxUrWxJ5 WKqisfMbWA0C9B+07Obhw5E9FCQd0sICOKEp14lSoNWj7LUvm54RzWznJ6q3Ypvz 8TjDpHyS1z4VRK4usdUoO1W8dSmNG7PtiRK1PIHaOlq2We1y+XeCxp4NQX+bBEuw Ev+55ihy2QYF2xyfiUCB5bQVMndMgnsb6FoaFMbqN/YlfHwH+qyVHSNoqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEYhdz1oYsAEwJvNRaUT7DySFp/IMB8GA1UdIwQY MBaAFM9/XFmAWeGuWXbIHqK4Jml+4ZkGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejM5Y1dZQlo0YTVaZHNnZW9yZ21hWDdobVFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9lZjk0NzktMjk5NC00NDljLTlkOWMt ZTFkYzY5ZTMzM2RmLzEvejM5Y1dZQlo0YTVaZHNnZW9yZ21hWDdobVFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC9lZjk0NzktMjk5NC00NDljLTlkOWMtZTFkYzY5ZTMzM2Rm LzEvejM5Y1dZQlo0YTVaZHNnZW9yZ21hWDdobVFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIWKQJKyM 0f+jCD+ElTcp3h3h+J4TEVl0wKB77UDUzKW21cgSTx5waJ+IOwpyq0Pt14CLQ0if 32E24K286p8gf5rVBJqApq82gN7VQDRXk90Yjt+vWd5KBsN6GfOkJFaA2bivkt6X OcDm6qqOW3gW+l/hvpwgDx1Zu45T3Fp5om5JhAiRoTY/e6CoTsQIlldICkMxtn7S 1+QLS7ivxeTRW5tdiwCvkaokx5s981hCBageS8E+R2A7adGj8EtEtJ1RcslxBo1W qdJdfU4cTKUqVzIibjXyvDIQE+RO41KmaOEZtqFTKCwQLe9BZ2+KvTOQx7ilUbzH DoZu7UeCVS5o3A== -----END CERTIFICATE-----Generated at Tue Feb 10 01:21:34 2026 by rpki-client