This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft File: ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft (raw, json) Hash identifier: zfU9xXrdIweXMNIGd5fhgeaB+nuyp5mGhsrPQJBULXM= Subject key identifier: 06:63:4C:E9:D6:83:7F:0A:46:3E:15:A6:E2:71:13:9E:B2:96:BD:54 Authority key identifier: 64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95 Certificate issuer: /CN=64d7f7e174179a133e30c660edfa86e74a40dd95 Certificate serial: 019C427DD2F932BB70817E7D95533A82A724 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 13:01:08 +0000 Manifest this update: Mon 09 Feb 2026 13:01:08 +0000 Manifest next update: Tue 10 Feb 2026 13:01:08 +0000 Files and hashes: 1: ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl (hash: u9Q5E3d1Lgay7ZsaMuZrP9ezJC6gaihEtT4JNFtAWns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d2:f9:32:bb:70:81:7e:7d:95:53:3a:82:a7:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64d7f7e174179a133e30c660edfa86e74a40dd95 Validity Not Before: Feb 9 13:01:08 2026 GMT Not After : Feb 10 13:01:08 2026 GMT Subject: CN=06634ce9d6837f0a463e15a6e271139eb296bd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:e3:52:10:7d:22:34:16:e1:8c:35:32:74:e6: 17:8c:74:06:cd:d5:c2:62:15:c7:29:53:ff:d9:b7: a9:47:3d:58:8e:51:95:98:b7:fc:50:6e:96:e6:c8: 0e:b1:40:20:4b:ac:aa:85:fd:9d:1c:b0:7d:66:c8: 28:94:fc:2a:a1:22:4c:b3:b3:26:56:bb:f3:92:53: 47:9e:20:8b:ac:be:a5:22:8e:8a:42:6f:53:fe:1f: b1:a0:c0:79:b0:d0:ff:1c:6e:8a:89:1f:f9:ca:d0: d0:4e:f5:92:b0:93:aa:08:40:ed:a0:b9:b4:5c:80: c4:be:1a:2e:22:ac:c4:12:02:73:16:3f:31:90:63: 9f:c8:b3:ca:ae:aa:e5:06:0f:47:89:a4:87:f9:7a: 53:5f:d6:b1:79:4f:aa:50:5f:e3:d0:0f:08:b0:22: e8:83:2a:41:e6:8a:88:06:1c:e5:8d:08:0b:af:43: 25:f8:03:4c:e4:27:55:fd:38:40:4b:f6:16:d5:72: 95:f1:5e:1a:ee:9a:48:85:81:e2:d7:b2:4b:38:a3: c0:82:ce:92:00:d8:aa:f7:eb:79:6c:de:58:b0:5c: fe:c7:9e:13:67:00:88:7d:35:56:e3:ce:d0:99:0f: 2d:d7:dc:32:83:55:8e:2e:95:74:6e:72:9c:f5:28: cb:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:63:4C:E9:D6:83:7F:0A:46:3E:15:A6:E2:71:13:9E:B2:96:BD:54 X509v3 Authority Key Identifier: keyid:64:D7:F7:E1:74:17:9A:13:3E:30:C6:60:ED:FA:86:E7:4A:40:DD:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNf34XQXmhM-MMZg7fqG50pA3ZU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/983caa-ef05-460f-a20a-4162465b9880/1/ZNf34XQXmhM-MMZg7fqG50pA3ZU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:cb:3f:50:e4:73:e3:f1:d9:5b:a4:2c:43:78:d8:1c:b0:36: 03:38:17:ad:35:78:4b:70:ad:7f:7b:a4:be:c3:b4:c6:ee:6c: f9:7d:66:94:10:a3:8d:fd:16:69:02:ff:3d:f3:01:63:0c:35: 56:28:7f:7e:f1:c4:22:c7:6c:9e:7c:90:65:97:c9:db:99:eb: bf:b7:8c:cc:87:9c:e7:5d:61:1a:9c:f3:d0:c4:56:60:50:2a: 92:d2:f4:4b:29:f6:70:13:29:66:69:4e:c8:82:e7:9f:d3:bb: c8:cf:46:df:45:68:33:6a:54:a1:a2:fd:a9:3f:12:a1:49:02: fb:76:15:e8:ca:b5:4c:36:61:53:d6:67:4a:31:04:39:ce:c9: f5:08:ae:98:4c:0d:04:4d:7f:75:ba:ec:a4:72:57:c8:bc:ec: c6:7b:3c:ed:f4:bc:6a:c1:92:3a:05:86:6c:2b:49:e8:e0:68: 0e:2c:96:b2:63:71:0d:eb:f4:27:5f:5b:bf:ee:ea:70:55:04: 23:67:a7:91:78:84:eb:87:69:79:a5:36:27:fc:7b:71:22:8a: ed:92:5b:5c:6b:47:17:29:e8:11:6f:f0:23:60:ac:dd:7d:98: 98:16:50:53:8f:85:31:b1:4f:8c:d8:40:82:cb:14:76:ae:25: c0:c9:39:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdL5MrtwgX59lVM6gqckMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZDdmN2UxNzQxNzlhMTMzZTMwYzY2MGVkZmE4NmU3NGE0 MGRkOTUwHhcNMjYwMjA5MTMwMTA4WhcNMjYwMjEwMTMwMTA4WjAzMTEwLwYDVQQD EygwNjYzNGNlOWQ2ODM3ZjBhNDYzZTE1YTZlMjcxMTM5ZWIyOTZiZDU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8uNSEH0iNBbhjDUydOYXjHQGzdXC YhXHKVP/2bepRz1YjlGVmLf8UG6W5sgOsUAgS6yqhf2dHLB9ZsgolPwqoSJMs7Mm VrvzklNHniCLrL6lIo6KQm9T/h+xoMB5sND/HG6KiR/5ytDQTvWSsJOqCEDtoLm0 XIDEvhouIqzEEgJzFj8xkGOfyLPKrqrlBg9HiaSH+XpTX9axeU+qUF/j0A8IsCLo gypB5oqIBhzljQgLr0Ml+ANM5CdV/ThAS/YW1XKV8V4a7ppIhYHi17JLOKPAgs6S ANiq9+t5bN5YsFz+x54TZwCIfTVW487QmQ8t19wyg1WOLpV0bnKc9SjLnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAZjTOnWg38KRj4VpuJxE56ylr1UMB8GA1UdIwQY MBaAFGTX9+F0F5oTPjDGYO36hudKQN2VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEt NDE2MjQ2NWI5ODgwLzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNS85ODNjYWEtZWYwNS00NjBmLWEyMGEtNDE2MjQ2NWI5ODgw LzEvWk5mMzRYUVhtaE0tTU1aZzdmcUc1MHBBM1pVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYMs/UORz 4/HZW6QsQ3jYHLA2AzgXrTV4S3Ctf3ukvsO0xu5s+X1mlBCjjf0WaQL/PfMBYww1 Vih/fvHEIsdsnnyQZZfJ25nrv7eMzIec511hGpzz0MRWYFAqktL0Syn2cBMpZmlO yILnn9O7yM9G30VoM2pUoaL9qT8SoUkC+3YV6Mq1TDZhU9ZnSjEEOc7J9QiumEwN BE1/dbrspHJXyLzsxns87fS8asGSOgWGbCtJ6OBoDiyWsmNxDev0J19bv+7qcFUE I2enkXiE64dpeaU2J/x7cSKK7ZJbXGtHFynoEW/wI2Cs3X2YmBZQU4+FMbFPjNhA gssUdq4lwMk5vA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:45:07 2026 by rpki-client