This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft File: zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft (raw, json) Hash identifier: GrYY6BOTybb8pgaUBDlB32WHBlat+LFmoQM9LnHW3Xg= Subject key identifier: 7C:3E:E9:5D:D3:87:B8:AB:75:BD:C0:1D:E5:3D:ED:02:9D:39:DB:59 Authority key identifier: CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 Certificate issuer: /CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Certificate serial: 019C42461E7B88240C071C51227AFAC45798 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft Manifest number: 0771 Signing time: Mon 09 Feb 2026 12:00:17 +0000 Manifest this update: Mon 09 Feb 2026 12:00:17 +0000 Manifest next update: Tue 10 Feb 2026 12:00:17 +0000 Files and hashes: 1: zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl (hash: 9lXXwpBnKs0iyEKruj0ZilfJWHihXHtq0e+Xwqy5XEM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:1e:7b:88:24:0c:07:1c:51:22:7a:fa:c4:57:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ceedaa36045146ebc584e71b5c1afa68a7399998 Validity Not Before: Feb 9 12:00:17 2026 GMT Not After : Feb 10 12:00:17 2026 GMT Subject: CN=7c3ee95dd387b8ab75bdc01de53ded029d39db59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:94:69:a2:d8:b7:04:bd:1b:95:3f:1b:96:ca: f2:66:7a:89:8b:88:5d:29:2a:e0:43:a3:12:fe:75: 09:88:c0:9d:db:33:f2:ff:ca:78:80:d6:cc:c2:77: 44:9f:40:2d:d9:18:b3:40:02:1e:f9:f2:1b:94:bb: bc:bc:88:6c:75:4a:21:91:28:30:0d:40:d0:fd:cb: b0:8b:34:64:d6:63:39:ce:0b:ac:50:92:cc:b4:f4: f3:94:3c:3e:9a:cf:e5:70:8e:9b:a1:e8:f9:50:9e: 3f:15:66:d6:b9:64:30:7e:fa:80:0b:4f:4f:cd:e5: 4e:04:1f:dd:c2:19:e8:f0:98:b2:5a:e6:72:44:f2: 26:02:0b:c3:59:db:a1:73:1c:b7:f4:57:42:cb:91: 78:d4:84:be:8a:76:cb:3f:89:0e:07:96:5d:22:5a: 16:02:ad:e5:cc:7b:c0:fd:b2:d2:86:0c:9f:a1:80: 21:6c:b2:38:54:7e:e9:91:63:c9:ee:cf:37:00:74: cd:a7:fa:23:70:c7:1f:29:10:c2:4a:96:c9:e5:5c: 97:99:13:47:9f:35:83:9a:d5:fd:45:75:b3:6c:18: 57:ca:35:35:46:88:e2:bb:5c:b2:60:ea:dc:13:69: 07:2b:68:fa:51:76:fa:a7:5a:e2:38:88:50:bd:17: 6d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3E:E9:5D:D3:87:B8:AB:75:BD:C0:1D:E5:3D:ED:02:9D:39:DB:59 X509v3 Authority Key Identifier: keyid:CE:ED:AA:36:04:51:46:EB:C5:84:E7:1B:5C:1A:FA:68:A7:39:99:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zu2qNgRRRuvFhOcbXBr6aKc5mZg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3e7ded-3d0e-4cec-963c-4431e4fcb382/1/zu2qNgRRRuvFhOcbXBr6aKc5mZg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:88:73:51:ab:bc:bc:c3:ef:5e:ba:a0:10:d1:96:e3:80:e2: a3:09:97:93:a6:c4:32:44:33:79:91:01:59:f2:cb:57:79:1b: 6e:c3:22:7a:f8:d7:f1:c0:bd:3d:d1:7c:c2:e8:b1:03:c8:a4: 07:ef:12:5f:33:4b:ad:c7:55:12:1b:c4:e5:a0:90:89:09:09: b6:12:e8:5f:b5:1f:88:48:f0:10:fe:da:06:2c:fe:f4:c8:da: 93:b8:22:8f:da:b2:c9:47:9d:e6:d4:ac:bc:ca:17:2a:e6:f5: f9:72:08:cc:f0:be:25:0c:a4:04:97:be:45:db:c3:57:f5:54: 4c:6e:a7:57:b9:36:5f:3e:e2:c5:82:59:11:e1:2c:96:63:7f: bf:9c:81:a3:dc:ea:49:39:91:3b:af:27:3d:df:16:7a:6d:50: 7f:b0:1a:d7:5d:75:82:77:24:4c:40:fd:00:5d:56:97:9b:6d: 86:ff:b6:86:6a:e4:47:22:78:77:29:1d:5d:3d:70:d0:fe:3f: c4:41:7e:32:0d:2b:3a:57:71:20:75:42:a9:0a:19:65:13:20: ca:93:80:bd:b7:5a:c7:e4:49:30:c7:d7:5b:5a:06:af:72:4b: 4b:e3:35:ab:62:f3:51:7d:46:b7:b5:07:f9:34:05:08:e5:50: 2d:9b:57:04 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRh57iCQMBxxRInr6xFeYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZWRhYTM2MDQ1MTQ2ZWJjNTg0ZTcxYjVjMWFmYTY4YTcz OTk5OTgwHhcNMjYwMjA5MTIwMDE3WhcNMjYwMjEwMTIwMDE3WjAzMTEwLwYDVQQD Eyg3YzNlZTk1ZGQzODdiOGFiNzViZGMwMWRlNTNkZWQwMjlkMzlkYjU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZRpoti3BL0blT8blsryZnqJi4hd KSrgQ6MS/nUJiMCd2zPy/8p4gNbMwndEn0At2RizQAIe+fIblLu8vIhsdUohkSgw DUDQ/cuwizRk1mM5zgusUJLMtPTzlDw+ms/lcI6boej5UJ4/FWbWuWQwfvqAC09P zeVOBB/dwhno8JiyWuZyRPImAgvDWduhcxy39FdCy5F41IS+inbLP4kOB5ZdIloW Aq3lzHvA/bLShgyfoYAhbLI4VH7pkWPJ7s83AHTNp/ojcMcfKRDCSpbJ5VyXmRNH nzWDmtX9RXWzbBhXyjU1Rojiu1yyYOrcE2kHK2j6UXb6p1riOIhQvRdtWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHw+6V3Th7irdb3AHeU97QKdOdtZMB8GA1UdIwQY MBaAFM7tqjYEUUbrxYTnG1wa+minOZmYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2Mt NDQzMWU0ZmNiMzgyLzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8zZTdkZWQtM2QwZS00Y2VjLTk2M2MtNDQzMWU0ZmNiMzgy LzEvenUycU5nUlJSdXZGaE9jYlhCcjZhS2M1bVpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlYhzUau8 vMPvXrqgENGW44DiowmXk6bEMkQzeZEBWfLLV3kbbsMievjX8cC9PdF8wuixA8ik B+8SXzNLrcdVEhvE5aCQiQkJthLoX7UfiEjwEP7aBiz+9Mjak7gij9qyyUed5tSs vMoXKub1+XIIzPC+JQykBJe+RdvDV/VUTG6nV7k2Xz7ixYJZEeEslmN/v5yBo9zq STmRO68nPd8Wem1Qf7Aa1111gnckTED9AF1Wl5tthv+2hmrkRyJ4dykdXT1w0P4/ xEF+Mg0rOldxIHVCqQoZZRMgypOAvbdax+RJMMfXW1oGr3JLS+M1q2LzUX1Gt7UH +TQFCOVQLZtXBA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:45 2026 by rpki-client