This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft File: zQClIzLRIChgRQsg56vE9-Afdk4.mft (raw, json) Hash identifier: PsWKyLbkOtasm9NywySW35pKHvwfEFl2UIo3PCcPQAY= Subject key identifier: 9D:82:2D:F4:3E:31:E2:F4:5F:6D:E5:F7:03:E4:53:CC:3D:B5:48:18 Authority key identifier: CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E Certificate issuer: /CN=cd00a52332d1202860450b20e7abc4f7e01f764e Certificate serial: 019C42B41AE44F404C1DB8F0F09DDA50063C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft Manifest number: 0771 Signing time: Mon 09 Feb 2026 14:00:25 +0000 Manifest this update: Mon 09 Feb 2026 14:00:25 +0000 Manifest next update: Tue 10 Feb 2026 14:00:25 +0000 Files and hashes: 1: zQClIzLRIChgRQsg56vE9-Afdk4.crl (hash: 8BoyEN7F5+i6rsSOjM2Brp6oTHwgTT5Z/ZvVn2d0LWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:1a:e4:4f:40:4c:1d:b8:f0:f0:9d:da:50:06:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd00a52332d1202860450b20e7abc4f7e01f764e Validity Not Before: Feb 9 14:00:25 2026 GMT Not After : Feb 10 14:00:25 2026 GMT Subject: CN=9d822df43e31e2f45f6de5f703e453cc3db54818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:15:23:fa:c4:2f:e6:99:36:0c:eb:7a:1f:30: 07:08:ea:47:dd:45:b8:cd:79:cb:e3:9a:02:58:bd: 1a:e5:4e:74:07:be:8e:60:71:1d:50:f1:5b:08:ed: 59:01:ce:6b:76:8f:14:d7:82:3f:be:30:01:28:69: fe:61:3e:8b:be:2a:fb:a3:5e:ef:f0:b9:d4:ef:22: 47:31:73:a1:34:69:d4:c3:f0:33:9d:7c:bf:35:ef: e2:b9:83:eb:b6:80:f2:d4:8c:37:0a:e0:dc:e7:46: aa:34:ab:34:20:52:21:ed:7e:b3:1b:48:ad:ae:c4: a8:a6:97:52:e6:3a:d8:c9:87:c9:f3:86:e4:1e:d7: c7:10:20:59:57:2d:04:42:7b:c8:b9:98:7c:2f:cf: 41:66:54:eb:fd:d4:a8:cf:05:70:3b:2c:5e:82:6b: 7a:a0:5a:4f:4d:9b:5d:03:55:28:da:67:65:0d:e8: e2:cb:f5:36:5c:8f:ad:aa:16:a1:a6:ab:59:00:e8: 5f:32:40:37:ff:5e:62:f0:73:bf:47:2f:40:03:a1: 77:cd:ae:7f:79:f5:11:3a:47:34:b3:41:cd:b9:23: 8e:24:97:b6:0e:79:34:db:81:c9:b8:84:56:57:ce: 79:a4:d5:7f:3e:e3:8c:27:e6:c3:19:44:8c:2d:65: 43:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:82:2D:F4:3E:31:E2:F4:5F:6D:E5:F7:03:E4:53:CC:3D:B5:48:18 X509v3 Authority Key Identifier: keyid:CD:00:A5:23:32:D1:20:28:60:45:0B:20:E7:AB:C4:F7:E0:1F:76:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQClIzLRIChgRQsg56vE9-Afdk4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/54a75b-d90d-4cb4-bd5c-467fb40222a8/1/zQClIzLRIChgRQsg56vE9-Afdk4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:17:d9:33:8d:3c:78:79:69:26:cc:9e:51:64:bc:36:93:60: d4:7f:c0:c6:cc:2e:73:55:eb:89:3e:01:b8:cd:52:40:42:3c: de:a4:b8:57:17:30:6d:0f:9c:62:b4:3b:bd:21:69:35:bc:f9: 34:55:33:97:c8:02:87:fb:59:45:9f:d2:e0:7f:af:80:7e:a2: 9c:58:66:d4:4c:b7:59:85:fc:85:0f:32:60:1c:01:94:55:9c: 55:07:ba:5c:ea:a3:3f:20:24:62:35:b0:e6:88:53:27:a9:2c: f3:0b:03:7b:e7:57:40:d1:ab:de:6b:ca:dc:37:a9:96:76:98: 17:c0:44:21:02:91:02:c0:da:ef:b5:fd:c8:f8:8e:5a:64:f1: 39:26:86:e4:19:7c:88:8c:57:94:87:d5:dc:fe:92:c6:1a:ab: f8:42:a8:e7:91:a2:11:a7:f8:32:49:15:d7:1d:01:02:48:50: c3:8f:dc:cd:4a:75:71:7b:be:e8:06:e1:e8:b5:8e:d5:e1:e6: 4f:1e:46:8c:ee:b1:ec:82:e6:61:f9:e3:cc:86:94:e8:33:e3: 5a:f0:6d:93:59:47:fa:b7:66:c4:cc:eb:86:c6:b0:e6:a4:a0: 8e:e3:10:a5:34:b3:75:cd:b7:cb:76:ce:80:31:46:4e:51:a6: 7f:14:eb:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtBrkT0BMHbjw8J3aUAY8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkMDBhNTIzMzJkMTIwMjg2MDQ1MGIyMGU3YWJjNGY3ZTAx Zjc2NGUwHhcNMjYwMjA5MTQwMDI1WhcNMjYwMjEwMTQwMDI1WjAzMTEwLwYDVQQD Eyg5ZDgyMmRmNDNlMzFlMmY0NWY2ZGU1ZjcwM2U0NTNjYzNkYjU0ODE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwhUj+sQv5pk2DOt6HzAHCOpH3UW4 zXnL45oCWL0a5U50B76OYHEdUPFbCO1ZAc5rdo8U14I/vjABKGn+YT6Lvir7o17v 8LnU7yJHMXOhNGnUw/AznXy/Ne/iuYPrtoDy1Iw3CuDc50aqNKs0IFIh7X6zG0it rsSoppdS5jrYyYfJ84bkHtfHECBZVy0EQnvIuZh8L89BZlTr/dSozwVwOyxegmt6 oFpPTZtdA1Uo2mdlDejiy/U2XI+tqhahpqtZAOhfMkA3/15i8HO/Ry9AA6F3za5/ efUROkc0s0HNuSOOJJe2Dnk024HJuIRWV855pNV/PuOMJ+bDGUSMLWVD/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2CLfQ+MeL0X23l9wPkU8w9tUgYMB8GA1UdIwQY MBaAFM0ApSMy0SAoYEULIOerxPfgH3ZOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMt NDY3ZmI0MDIyMmE4LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC81NGE3NWItZDkwZC00Y2I0LWJkNWMtNDY3ZmI0MDIyMmE4 LzEvelFDbEl6TFJJQ2hnUlFzZzU2dkU5LUFmZGs0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxfZM408 eHlpJsyeUWS8NpNg1H/Axswuc1XriT4BuM1SQEI83qS4VxcwbQ+cYrQ7vSFpNbz5 NFUzl8gCh/tZRZ/S4H+vgH6inFhm1Ey3WYX8hQ8yYBwBlFWcVQe6XOqjPyAkYjWw 5ohTJ6ks8wsDe+dXQNGr3mvK3DeplnaYF8BEIQKRAsDa77X9yPiOWmTxOSaG5Bl8 iIxXlIfV3P6Sxhqr+EKo55GiEaf4MkkV1x0BAkhQw4/czUp1cXu+6Abh6LWO1eHm Tx5GjO6x7ILmYfnjzIaU6DPjWvBtk1lH+rdmxMzrhsaw5qSgjuMQpTSzdc23y3bO gDFGTlGmfxTrUw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:10 2026 by rpki-client