This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft File: _zEXrp1q4OHko4t0mrv52eSSwoU.mft (raw, json) Hash identifier: 0qsGa8SPmywd/neOIPsdDppurkUF9/JyHlGagbtZ62w= Subject key identifier: 21:4F:4A:01:03:DF:88:CB:63:98:1A:E8:4F:AB:E1:CD:B0:16:21:7B Authority key identifier: FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85 Certificate issuer: /CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285 Certificate serial: 019C432312C23D6C8F50FE6EC92C5920BC66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft Manifest number: 03BA Signing time: Mon 09 Feb 2026 16:01:37 +0000 Manifest this update: Mon 09 Feb 2026 16:01:37 +0000 Manifest next update: Tue 10 Feb 2026 16:01:37 +0000 Files and hashes: 1: _zEXrp1q4OHko4t0mrv52eSSwoU.crl (hash: OIlgACzYTFTOUehgMK172F+WmNKQaY80SZmLpZnhWlI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:23:12:c2:3d:6c:8f:50:fe:6e:c9:2c:59:20:bc:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff3117ae9d6ae0e1e4a38b749abbf9d9e492c285 Validity Not Before: Feb 9 16:01:37 2026 GMT Not After : Feb 10 16:01:37 2026 GMT Subject: CN=214f4a0103df88cb63981ae84fabe1cdb016217b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:de:57:0c:0a:90:eb:d2:bb:e8:17:d4:b5:c4: 30:ed:c5:11:d0:8b:b5:02:8e:5e:61:e2:04:80:a5: f7:5d:28:28:54:a0:69:84:36:67:13:3e:90:68:2b: d2:21:c1:d0:ea:4b:e4:36:6b:1a:1a:e8:25:f6:2d: 59:d2:b2:37:54:e0:3d:82:2b:16:58:d9:86:5c:5e: 2a:6f:a1:95:07:b7:e4:ba:9d:e2:fa:77:04:b2:77: b6:c2:d9:ae:b4:39:f7:1f:69:2d:00:2d:8f:23:c2: b2:95:53:10:ef:49:0e:9a:dc:43:da:78:53:cf:6f: 9a:f3:b5:18:74:76:52:4e:5d:4d:69:0d:e3:7e:a3: dc:16:ba:1a:e2:20:3d:56:67:2b:d8:31:5d:9a:85: 77:1f:03:d9:37:3f:d0:66:1e:53:bd:5d:ae:9f:fa: 4d:84:61:46:04:af:0a:31:3f:c2:24:ef:be:8b:2f: 44:70:6e:15:d3:95:fb:3b:a7:d4:a9:7f:31:61:66: 32:2c:84:24:58:a0:f1:08:cd:f8:4d:9e:bb:5f:05: 0f:96:91:c8:cf:ec:bf:2e:62:47:b9:b6:f2:4e:f2: 62:e6:e1:da:e6:bb:12:93:3b:1e:e0:0f:b3:b2:cb: 2a:7d:01:aa:1e:da:94:be:3c:37:62:af:cc:17:5c: e2:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:4F:4A:01:03:DF:88:CB:63:98:1A:E8:4F:AB:E1:CD:B0:16:21:7B X509v3 Authority Key Identifier: keyid:FF:31:17:AE:9D:6A:E0:E1:E4:A3:8B:74:9A:BB:F9:D9:E4:92:C2:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zEXrp1q4OHko4t0mrv52eSSwoU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/ffe72a-5cbb-42fe-a1bb-472be3e7c8d4/1/_zEXrp1q4OHko4t0mrv52eSSwoU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:74:a2:64:e6:ba:fa:1b:bc:b0:16:2b:94:1b:7b:08:8e:4a: 86:0e:23:c0:ac:17:29:19:0e:ad:cf:0c:2b:4b:00:cf:15:85: bf:92:2d:07:fb:29:7e:15:2f:51:c5:78:71:39:9d:d8:87:c5: e5:64:de:26:7b:10:f2:f6:0c:f7:52:06:42:fc:83:2c:57:91: 8d:71:9a:ed:cc:e9:ac:8e:54:09:27:41:30:a1:53:78:2b:a3: e9:9b:c6:98:24:24:46:ca:46:82:bd:0b:4d:85:81:35:03:08: af:c5:d4:57:2c:d5:71:c9:58:b3:d4:28:a7:2e:78:b5:58:85: b4:37:9a:c6:69:14:e1:ed:59:1b:12:94:bd:ba:0c:44:65:fe: 8f:85:5e:e9:cb:9f:68:08:da:8f:99:09:39:0b:e2:f3:7c:53: c2:33:b3:e0:03:1d:f8:c1:05:78:0c:47:de:4b:4b:f1:12:e0: e7:2c:e1:fd:e1:36:f8:e8:38:df:7a:f8:13:85:39:ca:c9:30: d3:3b:bc:36:d0:a8:83:e8:55:1c:4b:d3:53:27:49:b1:3a:08: 88:bd:c2:27:a9:cc:02:d1:14:d8:06:2b:7b:41:2f:3e:6b:f8: 90:57:0d:16:45:c5:a3:90:69:39:68:a5:94:1d:44:2d:99:1d: 64:bb:3f:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIxLCPWyPUP5uySxZILxmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmMzExN2FlOWQ2YWUwZTFlNGEzOGI3NDlhYmJmOWQ5ZTQ5 MmMyODUwHhcNMjYwMjA5MTYwMTM3WhcNMjYwMjEwMTYwMTM3WjAzMTEwLwYDVQQD EygyMTRmNGEwMTAzZGY4OGNiNjM5ODFhZTg0ZmFiZTFjZGIwMTYyMTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd5XDAqQ69K76BfUtcQw7cUR0Iu1 Ao5eYeIEgKX3XSgoVKBphDZnEz6QaCvSIcHQ6kvkNmsaGugl9i1Z0rI3VOA9gisW WNmGXF4qb6GVB7fkup3i+ncEsne2wtmutDn3H2ktAC2PI8KylVMQ70kOmtxD2nhT z2+a87UYdHZSTl1NaQ3jfqPcFroa4iA9Vmcr2DFdmoV3HwPZNz/QZh5TvV2un/pN hGFGBK8KMT/CJO++iy9EcG4V05X7O6fUqX8xYWYyLIQkWKDxCM34TZ67XwUPlpHI z+y/LmJHubbyTvJi5uHa5rsSkzse4A+zsssqfQGqHtqUvjw3Yq/MF1zinQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCFPSgED34jLY5ga6E+r4c2wFiF7MB8GA1UdIwQY MBaAFP8xF66dauDh5KOLdJq7+dnkksKFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmIt NDcyYmUzZTdjOGQ0LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mZmU3MmEtNWNiYi00MmZlLWExYmItNDcyYmUzZTdjOGQ0 LzEvX3pFWHJwMXE0T0hrbzR0MG1ydjUyZVNTd29VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX3SiZOa6 +hu8sBYrlBt7CI5Khg4jwKwXKRkOrc8MK0sAzxWFv5ItB/spfhUvUcV4cTmd2IfF 5WTeJnsQ8vYM91IGQvyDLFeRjXGa7czprI5UCSdBMKFTeCuj6ZvGmCQkRspGgr0L TYWBNQMIr8XUVyzVcclYs9Qopy54tViFtDeaxmkU4e1ZGxKUvboMRGX+j4Ve6cuf aAjaj5kJOQvi83xTwjOz4AMd+MEFeAxH3ktL8RLg5yzh/eE2+Og433r4E4U5yskw 0zu8NtCog+hVHEvTUydJsToIiL3CJ6nMAtEU2AYre0EvPmv4kFcNFkXFo5BpOWil lB1ELZkdZLs/ig== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:25 2026 by rpki-client