This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft File: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft (raw, json) Hash identifier: alwtp3uQ2BF1TWip7yL0Z3tkftNBM2+IqW24NtDEIOU= Subject key identifier: 50:1F:7E:50:3B:FB:B1:4D:C6:45:F9:C6:88:2A:AE:0C:B6:DC:FF:CC Authority key identifier: 67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4 Certificate issuer: /CN=678c923ae3ace3a10860d1f817a8d750c15354c4 Certificate serial: 019C41D87C0FCDBC20705DEFA3822C55ED96 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft Manifest number: 0F49 Signing time: Mon 09 Feb 2026 10:00:32 +0000 Manifest this update: Mon 09 Feb 2026 10:00:32 +0000 Manifest next update: Tue 10 Feb 2026 10:00:32 +0000 Files and hashes: 1: Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl (hash: Mr3HwNcK7kqrjmINE219DnvVIjGVo3JZOKj5RAwDpD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:7c:0f:cd:bc:20:70:5d:ef:a3:82:2c:55:ed:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=678c923ae3ace3a10860d1f817a8d750c15354c4 Validity Not Before: Feb 9 10:00:32 2026 GMT Not After : Feb 10 10:00:32 2026 GMT Subject: CN=501f7e503bfbb14dc645f9c6882aae0cb6dcffcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:ca:6e:1f:32:4e:8a:41:f4:ec:ac:66:94: 44:f8:ea:15:9b:3b:fd:85:dd:e7:06:cb:ef:2c:42: 3a:5a:0c:d1:16:68:6c:8e:14:58:3f:14:e9:82:85: 6a:1b:16:21:8d:42:9d:90:e8:9b:a1:fb:37:b6:fe: 19:b9:c3:21:0d:85:8a:1e:00:9a:f9:61:d1:34:df: f7:1e:f3:af:95:97:e0:39:27:d5:07:f8:84:ce:13: a6:fb:b1:2c:72:ad:dd:78:ef:b1:1c:e5:20:9d:38: fe:68:ef:8e:77:6d:ed:f3:c0:09:51:9f:8a:a3:55: 19:54:e3:8a:df:ab:8b:00:1b:44:e3:60:cd:e2:49: 9f:95:71:ea:3c:2f:c1:e1:2a:dc:c1:f2:36:9a:4d: ad:6b:e2:d4:74:cf:9e:cb:6a:70:86:53:57:45:38: a4:08:a8:e0:3c:22:91:00:4d:0a:a1:26:67:0b:9f: 9f:1d:b7:fc:75:e5:ba:3f:65:1f:62:f7:95:21:74: 3c:0c:2c:19:9f:b6:6c:70:88:03:2f:85:bd:ee:ab: 44:bc:24:11:2c:89:ea:8a:68:ef:64:c7:03:74:ec: c6:c8:53:10:9e:18:44:56:52:4d:6d:e8:1a:c4:60: 64:3e:36:c2:8f:d1:b2:a5:32:df:b7:79:cc:88:57: cf:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:1F:7E:50:3B:FB:B1:4D:C6:45:F9:C6:88:2A:AE:0C:B6:DC:FF:CC X509v3 Authority Key Identifier: keyid:67:8C:92:3A:E3:AC:E3:A1:08:60:D1:F8:17:A8:D7:50:C1:53:54:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/93/81a019-2137-4646-bc69-db0d616a8891/1/Z4ySOuOs46EIYNH4F6jXUMFTVMQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e5:01:34:ff:69:dc:47:5d:3b:d7:c7:86:b7:5a:e4:6b:c7: f7:93:fd:e4:04:54:ec:61:bd:a6:d2:84:de:44:21:49:07:a6: f7:5d:bc:e5:f0:bd:f8:3e:7c:c3:59:9e:22:0d:25:1d:cd:25: ff:a6:63:b8:a2:97:ed:ef:04:5f:21:34:c3:c5:13:9d:39:0d: 8e:a3:5c:9a:d5:b6:2b:97:46:21:b0:3c:d1:cf:de:c3:84:fc: 78:37:d4:8a:db:f0:14:9a:94:ad:74:6d:9f:6d:0c:97:f0:57: 45:40:37:b3:97:77:32:8b:e6:2e:39:ab:6c:3d:7e:f2:c4:af: 29:91:db:26:3e:1c:d1:a9:36:a3:e0:1c:ac:cd:1e:0d:3a:00: 26:30:98:7d:d0:7c:52:b3:11:bd:c4:b7:17:cc:65:40:34:ab: 14:95:2a:f1:31:c3:92:77:e5:49:ce:77:bd:c5:e2:d1:22:2c: 96:d8:fb:d8:86:8f:7c:33:fb:7c:1d:fb:62:1b:6b:e9:b0:78: 37:80:f4:c3:85:56:34:d4:cb:6e:36:4d:a1:a2:0d:66:e3:67: 8b:0b:f2:b1:54:ab:06:94:ad:a9:dc:f3:82:27:23:13:03:d9: 94:2c:c9:06:27:99:a0:45:cc:5d:22:07:44:d1:8b:e4:88:50: 51:e8:f9:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HwPzbwgcF3vo4IsVe2WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3OGM5MjNhZTNhY2UzYTEwODYwZDFmODE3YThkNzUwYzE1 MzU0YzQwHhcNMjYwMjA5MTAwMDMyWhcNMjYwMjEwMTAwMDMyWjAzMTEwLwYDVQQD Eyg1MDFmN2U1MDNiZmJiMTRkYzY0NWY5YzY4ODJhYWUwY2I2ZGNmZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/Kbh8yTopB9OysZpRE+OoVmzv9 hd3nBsvvLEI6WgzRFmhsjhRYPxTpgoVqGxYhjUKdkOibofs3tv4ZucMhDYWKHgCa +WHRNN/3HvOvlZfgOSfVB/iEzhOm+7Escq3deO+xHOUgnTj+aO+Od23t88AJUZ+K o1UZVOOK36uLABtE42DN4kmflXHqPC/B4SrcwfI2mk2ta+LUdM+ey2pwhlNXRTik CKjgPCKRAE0KoSZnC5+fHbf8deW6P2UfYveVIXQ8DCwZn7ZscIgDL4W97qtEvCQR LInqimjvZMcDdOzGyFMQnhhEVlJNbegaxGBkPjbCj9GypTLft3nMiFfPWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFAfflA7+7FNxkX5xogqrgy23P/MMB8GA1UdIwQY MBaAFGeMkjrjrOOhCGDR+Beo11DBU1TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjkt ZGIwZDYxNmE4ODkxLzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85My84MWEwMTktMjEzNy00NjQ2LWJjNjktZGIwZDYxNmE4ODkx LzEvWjR5U091T3M0NkVJWU5INEY2alhVTUZUVk1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfeUBNP9p 3EddO9fHhrda5GvH95P95ARU7GG9ptKE3kQhSQem91285fC9+D58w1meIg0lHc0l /6ZjuKKX7e8EXyE0w8UTnTkNjqNcmtW2K5dGIbA80c/ew4T8eDfUitvwFJqUrXRt n20Ml/BXRUA3s5d3MovmLjmrbD1+8sSvKZHbJj4c0ak2o+AcrM0eDToAJjCYfdB8 UrMRvcS3F8xlQDSrFJUq8THDknflSc53vcXi0SIsltj72IaPfDP7fB37Yhtr6bB4 N4D0w4VWNNTLbjZNoaINZuNniwvysVSrBpStqdzzgicjEwPZlCzJBieZoEXMXSIH RNGL5IhQUej5Bw== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:01 2026 by rpki-client