This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft File: zEUACR782QXnLqRfJ4JIZh8iWy8.mft (raw, json) Hash identifier: 2AfE1dMZYmVG8tUq8X1fZ/9Jg1c6PwcUw/oayGzuEYM= Subject key identifier: 6F:10:FB:E1:20:40:F7:A4:CE:CA:04:69:25:01:91:EA:EE:FD:48:0A Authority key identifier: CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F Certificate issuer: /CN=cc4500091efcd905e72ea45f278248661f225b2f Certificate serial: 019C42B42BB3DD6AEC75B3956C15EA008CBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft Manifest number: 02C4 Signing time: Mon 09 Feb 2026 14:00:29 +0000 Manifest this update: Mon 09 Feb 2026 14:00:29 +0000 Manifest next update: Tue 10 Feb 2026 14:00:29 +0000 Files and hashes: 1: zEUACR782QXnLqRfJ4JIZh8iWy8.crl (hash: 9H02u8ms+R4Do6NZwCyAhnFgi3caG2AFjZ3rkCoXokI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:2b:b3:dd:6a:ec:75:b3:95:6c:15:ea:00:8c:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc4500091efcd905e72ea45f278248661f225b2f Validity Not Before: Feb 9 14:00:29 2026 GMT Not After : Feb 10 14:00:29 2026 GMT Subject: CN=6f10fbe12040f7a4ceca0469250191eaeefd480a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:d7:0f:1f:9f:19:e9:76:3d:4e:2d:48:f4: ac:a6:1c:bd:12:32:7c:b8:12:a5:13:3a:82:12:60: 89:d9:8d:8d:09:26:5a:95:a9:e2:c3:e8:b9:43:71: 03:b8:f8:bb:3f:31:70:c0:f9:7c:d2:8f:83:55:5c: 8d:d9:0f:56:01:06:61:2d:d6:d1:71:d7:8a:40:61: ee:f1:59:86:93:2d:d0:52:d8:f3:32:ea:7b:6f:20: 01:e7:d8:f8:b2:fd:ed:a3:8a:dc:40:b1:c1:cc:a2: d1:fc:13:12:8a:6d:d6:82:e1:e3:1f:1a:79:0f:95: fa:40:33:5e:e6:d0:aa:6f:27:28:ae:43:9f:9b:86: d5:1f:9e:2a:7f:0a:03:42:1d:f9:31:83:ae:45:f7: 29:20:04:3c:0e:30:96:f8:a1:c4:f2:af:8e:83:4e: 5a:e9:88:fe:17:db:d3:46:4d:21:4c:fe:78:18:28: 65:af:37:c4:10:92:24:1d:01:b7:53:4c:cd:ba:69: 88:29:ee:28:9d:96:e6:d1:fa:48:98:11:67:21:de: e2:7b:4e:5e:39:16:49:ce:e2:a0:40:94:c0:7c:42: 98:ea:76:ef:92:d7:02:80:02:b7:2d:17:50:51:4b: b6:52:7e:b8:c6:b1:ad:27:cb:37:0c:9f:1d:2f:11: 32:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:10:FB:E1:20:40:F7:A4:CE:CA:04:69:25:01:91:EA:EE:FD:48:0A X509v3 Authority Key Identifier: keyid:CC:45:00:09:1E:FC:D9:05:E7:2E:A4:5F:27:82:48:66:1F:22:5B:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zEUACR782QXnLqRfJ4JIZh8iWy8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/be631f-4b67-4c0c-8137-4491401edc22/1/zEUACR782QXnLqRfJ4JIZh8iWy8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:3b:8b:ab:5d:9f:64:00:45:5c:02:3f:51:f1:ff:db:9e:ba: 25:91:63:08:53:ad:2a:9a:22:84:6d:27:fa:94:8a:fa:e7:d5: 41:2c:f1:c5:09:7f:32:2e:28:16:d8:37:a0:4a:a7:80:4f:e7: 53:92:4c:75:ac:a8:52:3e:49:34:32:e2:8d:3d:5e:44:bf:39: 31:45:fa:dc:6b:cc:ee:d9:fa:8f:27:56:8d:c2:03:e1:76:2e: 40:df:6a:c2:44:57:7d:96:4e:60:84:9f:f2:47:1f:2b:be:91: 62:f1:ec:23:6d:2a:8b:18:5b:d7:08:9b:65:d8:29:83:20:4c: 56:83:42:0b:66:46:56:ba:d9:1f:8b:b8:57:23:d3:3a:0e:8b: 2a:19:d0:bb:81:3c:c7:3f:54:ed:3d:b8:ea:4c:38:17:1f:61: 2a:c3:28:75:c4:3e:12:ad:39:bd:4d:52:81:d3:b3:e2:dd:f8: 8b:5c:61:f4:04:41:2a:8b:d6:b3:3b:30:b7:0c:d4:5c:4a:0f: 3c:e1:d8:2d:bc:b7:ad:5f:4b:cf:30:9a:ec:f7:36:c3:20:90: ad:b0:91:a0:c3:9e:a4:74:f3:d4:db:a8:4f:34:7b:41:f4:1c: f9:f1:6f:10:4f:e5:cc:56:87:02:98:a5:95:ff:4d:88:aa:46: 05:4f:8b:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtCuz3WrsdbOVbBXqAIy+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNjNDUwMDA5MWVmY2Q5MDVlNzJlYTQ1ZjI3ODI0ODY2MWYy MjViMmYwHhcNMjYwMjA5MTQwMDI5WhcNMjYwMjEwMTQwMDI5WjAzMTEwLwYDVQQD Eyg2ZjEwZmJlMTIwNDBmN2E0Y2VjYTA0NjkyNTAxOTFlYWVlZmQ0ODBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod3XDx+fGel2PU4tSPSsphy9EjJ8 uBKlEzqCEmCJ2Y2NCSZalaniw+i5Q3EDuPi7PzFwwPl80o+DVVyN2Q9WAQZhLdbR cdeKQGHu8VmGky3QUtjzMup7byAB59j4sv3to4rcQLHBzKLR/BMSim3WguHjHxp5 D5X6QDNe5tCqbycorkOfm4bVH54qfwoDQh35MYOuRfcpIAQ8DjCW+KHE8q+Og05a 6Yj+F9vTRk0hTP54GChlrzfEEJIkHQG3U0zNummIKe4onZbm0fpImBFnId7ie05e ORZJzuKgQJTAfEKY6nbvktcCgAK3LRdQUUu2Un64xrGtJ8s3DJ8dLxEy2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG8Q++EgQPekzsoEaSUBkeru/UgKMB8GA1UdIwQY MBaAFMxFAAke/NkF5y6kXyeCSGYfIlsvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzct NDQ5MTQwMWVkYzIyLzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9iZTYzMWYtNGI2Ny00YzBjLTgxMzctNDQ5MTQwMWVkYzIy LzEvekVVQUNSNzgyUVhuTHFSZko0SklaaDhpV3k4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezuLq12f ZABFXAI/UfH/2566JZFjCFOtKpoihG0n+pSK+ufVQSzxxQl/Mi4oFtg3oEqngE/n U5JMdayoUj5JNDLijT1eRL85MUX63GvM7tn6jydWjcID4XYuQN9qwkRXfZZOYISf 8kcfK76RYvHsI20qixhb1wibZdgpgyBMVoNCC2ZGVrrZH4u4VyPTOg6LKhnQu4E8 xz9U7T246kw4Fx9hKsModcQ+Eq05vU1SgdOz4t34i1xh9ARBKovWszswtwzUXEoP POHYLby3rV9LzzCa7Pc2wyCQrbCRoMOepHTz1NuoTzR7QfQc+fFvEE/lzFaHApil lf9NiKpGBU+Lqg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:42 2026 by rpki-client