This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft File: Z7xlI-d4s702dMb5intsaL8Kju4.mft (raw, json) Hash identifier: 5YFz+sJ68akUCrxbgZCurN43OJ5YpjzO0JzN9t2varo= Subject key identifier: 70:BC:10:C3:9D:9B:6E:45:08:D5:94:C5:83:E8:E9:35:BD:AD:AC:93 Authority key identifier: 67:BC:65:23:E7:78:B3:BD:36:74:C6:F9:8A:7B:6C:68:BF:0A:8E:EE Certificate issuer: /CN=67bc6523e778b3bd3674c6f98a7b6c68bf0a8eee Certificate serial: 019C4390C75F83CBCBA50BF0F6965B44DED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft Manifest number: 27 Signing time: Mon 09 Feb 2026 18:01:27 +0000 Manifest this update: Mon 09 Feb 2026 18:01:27 +0000 Manifest next update: Tue 10 Feb 2026 18:01:27 +0000 Files and hashes: 1: Z7xlI-d4s702dMb5intsaL8Kju4.crl (hash: kmiNX3l+xgwjb35cx75lwv20VxgoNBwdpjwZz1eGUuI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.crl rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft rsync://rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c7:5f:83:cb:cb:a5:0b:f0:f6:96:5b:44:de:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67bc6523e778b3bd3674c6f98a7b6c68bf0a8eee Validity Not Before: Feb 9 18:01:27 2026 GMT Not After : Feb 10 18:01:27 2026 GMT Subject: CN=70bc10c39d9b6e4508d594c583e8e935bdadac93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:19:cb:f0:f7:f8:c8:f7:3c:6c:2b:dd:53:db: a8:ce:06:bc:2e:1a:eb:e3:93:e0:01:4b:fa:e4:31: 63:c2:7c:7a:c5:4d:de:eb:42:1b:25:0f:e8:ca:62: 6e:4a:f2:10:86:91:97:11:40:af:8c:d7:70:cb:10: 49:33:60:57:ad:d1:a6:f0:bc:44:d8:c9:36:ee:09: 8f:fc:62:f7:dd:4b:3f:ce:ff:8f:d7:7e:e6:5b:94: 51:fa:48:b4:4f:fc:91:4a:bc:e1:ba:a2:82:46:6b: a6:07:47:ac:1d:72:e1:26:9d:20:31:b7:ff:48:f0: 6c:a3:77:5e:58:a7:25:23:f1:fd:0b:22:cd:54:89: bb:8c:c9:4b:2e:6f:6b:ce:e5:6e:44:af:2f:b4:8d: 20:1a:60:f8:ce:e8:b2:f9:0d:78:e9:67:7c:56:a7: 41:b2:ea:fd:ac:fd:7e:c2:79:34:c8:9f:8e:3c:1b: 28:c6:9b:66:e3:e5:f1:4c:58:d9:50:86:1e:40:89: 84:d2:d6:0c:92:78:84:52:56:e5:70:bf:46:a4:08: 71:d3:4e:5f:7c:4d:d2:db:d1:0c:6d:f7:b8:82:83: d2:9c:85:f3:e2:5a:70:2f:c8:95:20:61:b3:fa:31: fe:a2:e5:70:ff:07:f8:8d:9c:ef:76:99:32:de:c0: ee:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:BC:10:C3:9D:9B:6E:45:08:D5:94:C5:83:E8:E9:35:BD:AD:AC:93 X509v3 Authority Key Identifier: keyid:67:BC:65:23:E7:78:B3:BD:36:74:C6:F9:8A:7B:6C:68:BF:0A:8E:EE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7xlI-d4s702dMb5intsaL8Kju4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/d8c868-960f-4334-a146-2b8756a098ec/1/Z7xlI-d4s702dMb5intsaL8Kju4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:bf:32:65:93:75:ab:61:d8:52:6c:b4:43:20:c6:bc:82:cf: 05:84:6f:0b:9a:c6:28:d0:92:bf:87:4d:cb:44:af:4c:1f:82: 68:2b:3e:88:4c:82:97:eb:09:d1:b1:63:fd:2d:21:27:a9:b9: ed:72:51:3b:0f:f2:81:ea:ee:ed:e1:63:3b:76:7d:02:58:28: 9d:24:76:27:6c:80:98:af:b8:80:ce:c5:d9:fa:9b:c1:da:54: f1:36:d2:ff:6e:98:2a:48:02:96:65:06:98:c0:01:9a:12:59: a3:1b:06:c0:df:94:d1:b0:8f:c4:93:12:1e:45:29:fd:d2:b7: d9:ea:64:55:c7:12:15:2f:08:13:5f:65:23:a7:98:96:7f:0f: 41:88:de:92:7a:7b:f2:3a:77:8b:48:6c:19:3e:3b:a8:41:69: c0:5e:ce:77:4c:7b:8f:b3:fc:3c:68:de:75:24:b8:47:4b:69: e6:e2:aa:47:31:44:33:21:2f:7e:9c:74:bc:28:a2:d5:72:a1: 4c:38:3a:f0:44:5c:cb:db:bc:40:66:cd:6a:4d:76:ef:a1:6d: 9d:99:b6:7d:45:32:ca:1e:56:7b:bf:2b:1c:64:78:fb:24:c8: e9:0d:0c:8d:a7:c9:b4:1d:5e:22:a2:6b:56:a4:8e:27:40:af: b3:6c:d3:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMdfg8vLpQvw9pZbRN7VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY3YmM2NTIzZTc3OGIzYmQzNjc0YzZmOThhN2I2YzY4YmYw YThlZWUwHhcNMjYwMjA5MTgwMTI3WhcNMjYwMjEwMTgwMTI3WjAzMTEwLwYDVQQD Eyg3MGJjMTBjMzlkOWI2ZTQ1MDhkNTk0YzU4M2U4ZTkzNWJkYWRhYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBnL8Pf4yPc8bCvdU9uozga8Lhrr 45PgAUv65DFjwnx6xU3e60IbJQ/oymJuSvIQhpGXEUCvjNdwyxBJM2BXrdGm8LxE 2Mk27gmP/GL33Us/zv+P137mW5RR+ki0T/yRSrzhuqKCRmumB0esHXLhJp0gMbf/ SPBso3deWKclI/H9CyLNVIm7jMlLLm9rzuVuRK8vtI0gGmD4zuiy+Q146Wd8VqdB sur9rP1+wnk0yJ+OPBsoxptm4+XxTFjZUIYeQImE0tYMkniEUlblcL9GpAhx005f fE3S29EMbfe4goPSnIXz4lpwL8iVIGGz+jH+ouVw/wf4jZzvdpky3sDulQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHC8EMOdm25FCNWUxYPo6TW9rayTMB8GA1UdIwQY MBaAFGe8ZSPneLO9NnTG+Yp7bGi/Co7uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWjd4bEktZDRzNzAyZE1iNWludHNhTDhLanU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9kOGM4NjgtOTYwZi00MzM0LWExNDYt MmI4NzU2YTA5OGVjLzEvWjd4bEktZDRzNzAyZE1iNWludHNhTDhLanU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi9kOGM4NjgtOTYwZi00MzM0LWExNDYtMmI4NzU2YTA5OGVj LzEvWjd4bEktZDRzNzAyZE1iNWludHNhTDhLanU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUb8yZZN1 q2HYUmy0QyDGvILPBYRvC5rGKNCSv4dNy0SvTB+CaCs+iEyCl+sJ0bFj/S0hJ6m5 7XJROw/ygeru7eFjO3Z9AlgonSR2J2yAmK+4gM7F2fqbwdpU8TbS/26YKkgClmUG mMABmhJZoxsGwN+U0bCPxJMSHkUp/dK32epkVccSFS8IE19lI6eYln8PQYjeknp7 8jp3i0hsGT47qEFpwF7Od0x7j7P8PGjedSS4R0tp5uKqRzFEMyEvfpx0vCii1XKh TDg68ERcy9u8QGbNak1276FtnZm2fUUyyh5We78rHGR4+yTI6Q0MjafJtB1eIqJr VqSOJ0Cvs2zTuQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:38:31 2026 by rpki-client