This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft File: z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft (raw, json) Hash identifier: HqSLngHIBMpM0VkHGpYAqMJYFp75a+ubworiFmzeWDg= Subject key identifier: 9A:09:A5:8F:03:8E:85:D8:DB:35:8A:D4:25:8A:9F:6F:01:D6:06:5A Authority key identifier: CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6 Certificate issuer: /CN=cfc7008c6f91722dc3b127527558ebdabc680ce6 Certificate serial: 019C4322BB084EBB445276340648ED0B7FB4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft Manifest number: 1170 Signing time: Mon 09 Feb 2026 16:01:15 +0000 Manifest this update: Mon 09 Feb 2026 16:01:15 +0000 Manifest next update: Tue 10 Feb 2026 16:01:15 +0000 Files and hashes: 1: z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl (hash: 1tNvg7FFlmvgwl+bI9djPIQKP8gP4/OD0rqCipUNpzY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:bb:08:4e:bb:44:52:76:34:06:48:ed:0b:7f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfc7008c6f91722dc3b127527558ebdabc680ce6 Validity Not Before: Feb 9 16:01:15 2026 GMT Not After : Feb 10 16:01:15 2026 GMT Subject: CN=9a09a58f038e85d8db358ad4258a9f6f01d6065a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:50:e0:91:bd:a2:a0:9d:10:16:61:8d:b2: 1b:8f:88:38:95:9e:41:db:fc:23:28:8a:9d:84:db: e2:e5:df:11:f7:b2:9e:ea:78:1f:db:ca:9a:0a:26: 76:86:df:cd:84:6e:0e:ea:b1:89:25:97:62:5d:5c: 4b:ad:84:39:79:56:25:cf:dd:09:bf:99:9b:1c:86: da:01:7d:ab:d7:7e:cb:cc:5f:22:32:ab:a5:19:fe: 17:82:f6:5a:24:7a:98:09:38:ba:96:5f:91:4a:38: 88:43:0e:63:aa:20:07:ed:50:28:a2:35:8b:be:01: 86:d9:0f:03:ae:0d:db:87:6a:53:c5:b0:1f:dd:91: 6a:1d:0e:25:c3:f1:15:62:02:30:b8:64:24:58:c8: 46:8e:a3:54:55:e9:3f:3f:49:fe:5f:4c:26:b4:5b: c0:f4:a0:0d:16:25:30:57:df:c8:e6:27:5b:87:c6: 7b:06:82:ef:dc:f7:0c:a3:23:db:0e:54:ad:57:2f: 83:9f:01:9c:44:14:bc:d8:69:d0:99:92:03:6c:95: 7e:79:36:73:29:1c:1b:da:ca:2b:d0:7d:cf:ad:fa: e8:59:41:0c:08:bb:ae:71:c7:75:95:8d:93:05:32: f8:35:5e:d8:22:af:c2:a8:1d:ae:ac:e3:90:95:cf: 4c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:09:A5:8F:03:8E:85:D8:DB:35:8A:D4:25:8A:9F:6F:01:D6:06:5A X509v3 Authority Key Identifier: keyid:CF:C7:00:8C:6F:91:72:2D:C3:B1:27:52:75:58:EB:DA:BC:68:0C:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8cAjG-Rci3DsSdSdVjr2rxoDOY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4168da-e65c-47b6-bb61-36f24ad4a04f/1/z8cAjG-Rci3DsSdSdVjr2rxoDOY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:5d:0f:28:a9:7c:b4:af:a0:f9:f0:f0:ab:d7:fa:e1:17:b1: f8:a1:97:ad:d5:c4:be:40:ff:a8:37:e7:39:27:bc:d3:f9:43: 16:ba:8e:e8:84:94:7b:ee:c2:cc:7d:6a:06:b9:34:14:c1:55: 52:13:00:1f:f6:ed:5f:4c:3b:83:32:3c:27:93:02:03:c7:df: 9c:ee:ba:f4:99:10:ec:17:ea:7b:87:64:fd:4d:50:44:4a:83: 1e:f3:f2:3c:08:13:28:84:ee:25:ad:05:67:fc:17:a1:7d:9d: 77:10:3a:d2:c4:83:57:f7:a2:d4:c9:6a:8f:2e:dd:9c:b9:d8: 8c:3e:b9:42:5e:49:86:51:2c:c4:60:85:3b:6d:b8:46:07:23: c7:ad:9c:c7:eb:cb:a0:94:35:a3:a1:c2:ff:a0:36:43:87:37: 35:66:a3:2f:0a:fd:c8:81:25:4b:cd:c6:0e:d3:7b:a2:af:95: a6:6a:39:c3:51:c3:e6:02:98:dc:c0:ba:0e:30:5b:e2:f4:7b: f3:68:ab:a1:e6:f1:c8:55:3f:70:8d:f9:b0:86:0f:e0:b0:e4: 4e:6c:61:37:05:a0:70:1c:04:67:65:2b:d0:7b:c3:bc:f8:7b: bb:8a:50:15:1d:38:7b:84:34:00:26:91:de:c9:29:a6:46:da: a8:e3:e8:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrsITrtEUnY0BkjtC3+0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYzcwMDhjNmY5MTcyMmRjM2IxMjc1Mjc1NThlYmRhYmM2 ODBjZTYwHhcNMjYwMjA5MTYwMTE1WhcNMjYwMjEwMTYwMTE1WjAzMTEwLwYDVQQD Eyg5YTA5YTU4ZjAzOGU4NWQ4ZGIzNThhZDQyNThhOWY2ZjAxZDYwNjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6FQ4JG9oqCdEBZhjbIbj4g4lZ5B 2/wjKIqdhNvi5d8R97Ke6ngf28qaCiZ2ht/NhG4O6rGJJZdiXVxLrYQ5eVYlz90J v5mbHIbaAX2r137LzF8iMqulGf4XgvZaJHqYCTi6ll+RSjiIQw5jqiAH7VAoojWL vgGG2Q8Drg3bh2pTxbAf3ZFqHQ4lw/EVYgIwuGQkWMhGjqNUVek/P0n+X0wmtFvA 9KANFiUwV9/I5idbh8Z7BoLv3PcMoyPbDlStVy+DnwGcRBS82GnQmZIDbJV+eTZz KRwb2sor0H3PrfroWUEMCLuuccd1lY2TBTL4NV7YIq/CqB2urOOQlc9MJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJoJpY8DjoXY2zWK1CWKn28B1gZaMB8GA1UdIwQY MBaAFM/HAIxvkXItw7EnUnVY69q8aAzmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEt MzZmMjRhZDRhMDRmLzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS80MTY4ZGEtZTY1Yy00N2I2LWJiNjEtMzZmMjRhZDRhMDRm LzEvejhjQWpHLVJjaTNEc1NkU2RWanIycnhvRE9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl10PKKl8 tK+g+fDwq9f64Rex+KGXrdXEvkD/qDfnOSe80/lDFrqO6ISUe+7CzH1qBrk0FMFV UhMAH/btX0w7gzI8J5MCA8ffnO669JkQ7Bfqe4dk/U1QREqDHvPyPAgTKITuJa0F Z/wXoX2ddxA60sSDV/ei1Mlqjy7dnLnYjD65Ql5JhlEsxGCFO224Rgcjx62cx+vL oJQ1o6HC/6A2Q4c3NWajLwr9yIElS83GDtN7oq+Vpmo5w1HD5gKY3MC6DjBb4vR7 82iroebxyFU/cI35sIYP4LDkTmxhNwWgcBwEZ2Ur0HvDvPh7u4pQFR04e4Q0ACaR 3skppkbaqOPokw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:26:52 2026 by rpki-client