This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft File: Zr5SEJO7idx2JQsif39_umbiKNg.mft (raw, json) Hash identifier: EZ/gIbSnfk6/gIjVuARvvx8MITyu9mntIHhaIYXPzdw= Subject key identifier: A7:96:1A:C0:F9:B6:9E:A1:71:6E:5C:8E:25:7D:19:3F:D4:6C:D3:B6 Authority key identifier: 66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8 Certificate issuer: /CN=66be521093bb89dc76250b227f7f7fba66e228d8 Certificate serial: 019C43905F86E92C119427EDB246831EFC22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft Manifest number: 0364 Signing time: Mon 09 Feb 2026 18:01:00 +0000 Manifest this update: Mon 09 Feb 2026 18:01:00 +0000 Manifest next update: Tue 10 Feb 2026 18:01:00 +0000 Files and hashes: 1: Zr5SEJO7idx2JQsif39_umbiKNg.crl (hash: oIW8M3s8y4oAbJ76hJAmN1bY8ntfuAX7DmR/DlYEQYw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5f:86:e9:2c:11:94:27:ed:b2:46:83:1e:fc:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66be521093bb89dc76250b227f7f7fba66e228d8 Validity Not Before: Feb 9 18:01:00 2026 GMT Not After : Feb 10 18:01:00 2026 GMT Subject: CN=a7961ac0f9b69ea1716e5c8e257d193fd46cd3b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f5:88:d2:61:76:48:9c:54:33:4b:24:ac:7f: 8d:a5:3c:c4:62:c6:07:35:58:bf:31:dd:a2:70:54: 22:7c:24:48:57:61:ab:bd:44:dc:e6:2c:bc:c5:ac: a6:12:d0:22:15:8d:61:c8:aa:56:fa:e1:57:f2:96: 8e:e3:8f:53:8b:d0:d7:f9:b0:30:e3:fe:23:22:4f: f3:e4:88:69:bd:2e:16:48:ba:fc:b8:68:61:48:d0: 24:3d:04:d0:c6:af:8f:7c:11:4f:2c:6e:ef:fd:17: 49:92:f4:91:8c:ae:00:90:2a:cd:01:e7:04:1f:14: 29:f7:5d:53:94:de:4a:7d:00:46:c9:68:7d:82:2e: 29:03:6b:a6:31:14:5a:a1:ed:68:6d:5d:67:bd:ff: ee:82:b7:27:13:39:f8:fa:5c:62:f5:20:f6:87:67: 3a:e8:c4:ff:f4:d6:63:18:8b:10:34:9a:21:2b:cf: a0:ab:54:3d:c7:fc:95:e4:83:fa:38:20:75:94:53: a9:ed:cb:07:69:c9:2b:f5:3c:4b:87:09:76:95:88: 11:25:eb:08:96:b0:4d:6f:35:b3:01:03:76:c0:c5: 02:37:7b:e9:61:52:50:37:33:d0:26:b5:c1:f4:1b: 1a:2d:b9:fa:bb:8a:d3:45:01:5f:56:00:b6:d7:de: 6d:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:96:1A:C0:F9:B6:9E:A1:71:6E:5C:8E:25:7D:19:3F:D4:6C:D3:B6 X509v3 Authority Key Identifier: keyid:66:BE:52:10:93:BB:89:DC:76:25:0B:22:7F:7F:7F:BA:66:E2:28:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zr5SEJO7idx2JQsif39_umbiKNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/32f9b3-de2b-41f5-a949-90030d040ff7/1/Zr5SEJO7idx2JQsif39_umbiKNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:03:67:69:8a:06:b7:ab:4c:f2:20:ea:57:14:77:7a:97:8c: 2e:49:8a:9c:92:0b:07:2d:7a:02:ae:ec:33:67:fd:24:74:5b: 91:95:ae:ae:e4:81:45:83:8b:62:b2:af:9d:a2:c8:4c:6e:06: 4a:79:00:29:25:b0:13:0d:23:96:06:65:13:fe:e5:7c:c9:d0: 0e:3a:69:06:bc:7e:33:28:4b:fc:04:39:66:b6:29:d8:6a:58: 10:74:93:e5:bf:70:f8:59:17:cf:eb:d4:d0:2a:38:49:8a:ca: 5c:d8:ba:e5:23:55:71:dc:5d:b0:ae:f8:8c:65:34:89:ba:a7: 12:fb:75:72:b8:1e:12:23:39:15:6f:c0:86:87:c1:1d:96:69: 76:f4:6e:1b:44:2d:70:0d:61:7b:f1:2e:e5:ec:b0:f4:6a:9b: b4:3e:82:45:4f:a9:b1:aa:1d:9a:71:8a:45:18:d9:76:59:e2: 5f:44:1d:84:7c:ba:8e:f0:b4:7f:4e:17:25:1f:ca:5c:0b:1d: 48:d3:96:e8:df:d6:99:32:5a:3d:6b:fc:d9:9a:a3:0b:78:0e: e5:14:21:81:31:48:e4:f3:7a:7b:bb:10:ef:59:cd:28:ff:bb: 71:20:44:de:03:db:6f:43:a5:42:a9:61:b5:a1:91:c3:2a:5f: 7c:45:7a:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkF+G6SwRlCftskaDHvwiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2YmU1MjEwOTNiYjg5ZGM3NjI1MGIyMjdmN2Y3ZmJhNjZl MjI4ZDgwHhcNMjYwMjA5MTgwMTAwWhcNMjYwMjEwMTgwMTAwWjAzMTEwLwYDVQQD EyhhNzk2MWFjMGY5YjY5ZWExNzE2ZTVjOGUyNTdkMTkzZmQ0NmNkM2I2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvWI0mF2SJxUM0skrH+NpTzEYsYH NVi/Md2icFQifCRIV2GrvUTc5iy8xaymEtAiFY1hyKpW+uFX8paO449Ti9DX+bAw 4/4jIk/z5IhpvS4WSLr8uGhhSNAkPQTQxq+PfBFPLG7v/RdJkvSRjK4AkCrNAecE HxQp911TlN5KfQBGyWh9gi4pA2umMRRaoe1obV1nvf/ugrcnEzn4+lxi9SD2h2c6 6MT/9NZjGIsQNJohK8+gq1Q9x/yV5IP6OCB1lFOp7csHackr9TxLhwl2lYgRJesI lrBNbzWzAQN2wMUCN3vpYVJQNzPQJrXB9BsaLbn6u4rTRQFfVgC2195taQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeWGsD5tp6hcW5cjiV9GT/UbNO2MB8GA1UdIwQY MBaAFGa+UhCTu4ncdiULIn9/f7pm4ijYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zMmY5YjMtZGUyYi00MWY1LWE5NDkt OTAwMzBkMDQwZmY3LzEvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMC8zMmY5YjMtZGUyYi00MWY1LWE5NDktOTAwMzBkMDQwZmY3 LzEvWnI1U0VKTzdpZHgySlFzaWYzOV91bWJpS05nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhANnaYoG t6tM8iDqVxR3epeMLkmKnJILBy16Aq7sM2f9JHRbkZWuruSBRYOLYrKvnaLITG4G SnkAKSWwEw0jlgZlE/7lfMnQDjppBrx+MyhL/AQ5ZrYp2GpYEHST5b9w+FkXz+vU 0Co4SYrKXNi65SNVcdxdsK74jGU0ibqnEvt1crgeEiM5FW/AhofBHZZpdvRuG0Qt cA1he/Eu5eyw9GqbtD6CRU+psaodmnGKRRjZdlniX0QdhHy6jvC0f04XJR/KXAsd SNOW6N/WmTJaPWv82ZqjC3gO5RQhgTFI5PN6e7sQ71nNKP+7cSBE3gPbb0OlQqlh taGRwypffEV6rg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:53 2026 by rpki-client