This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft File: zsUHpaHlUBp61jVTNazf5j2ryQs.mft (raw, json) Hash identifier: XZjrFI+qCfTN8KYofeWCtnuP79yDiqoLvwKd0hFkgUM= Subject key identifier: 97:01:31:E6:00:06:8B:B8:68:9A:F2:C3:8A:A4:CF:B6:CE:31:16:D4 Authority key identifier: CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B Certificate issuer: /CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b Certificate serial: 019C427D2B39FE26CF3CB2E81BD816E12129 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 13:00:25 +0000 Manifest this update: Mon 09 Feb 2026 13:00:25 +0000 Manifest next update: Tue 10 Feb 2026 13:00:25 +0000 Files and hashes: 1: zsUHpaHlUBp61jVTNazf5j2ryQs.crl (hash: LVozK1J+S3stTMShIFYBQbgGDGII+LkNTlrcLqzzxws=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:2b:39:fe:26:cf:3c:b2:e8:1b:d8:16:e1:21:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cec507a5a1e5501a7ad6355335acdfe63dabc90b Validity Not Before: Feb 9 13:00:25 2026 GMT Not After : Feb 10 13:00:25 2026 GMT Subject: CN=970131e600068bb8689af2c38aa4cfb6ce3116d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:6e:01:7f:34:50:f8:21:70:d5:42:24:53: 41:c3:97:03:16:fe:9b:fa:ef:83:21:3b:e6:f9:f8: ba:af:34:98:40:62:c3:f6:e9:d0:89:5b:e4:34:0d: 97:3a:43:84:cf:34:d4:7a:e9:6b:a1:82:05:c8:e4: 29:51:f6:14:36:54:db:ee:1d:9b:b7:c0:95:e9:23: d6:71:82:93:15:d6:cd:01:a1:1b:55:9b:90:fa:b1: c3:0d:16:36:87:17:80:93:9b:2e:b3:62:1c:1e:9e: c9:0a:93:7a:21:08:74:47:da:2c:f3:89:11:33:26: fd:76:ed:d8:3b:3f:c2:2d:de:e9:61:7d:44:9f:ba: af:1a:d1:d4:d0:da:52:25:be:c8:43:ba:b9:ce:1a: c2:82:5e:95:ee:6c:65:13:05:34:22:dc:73:22:af: 22:76:92:40:bb:08:3e:69:f4:8e:19:0e:dd:e0:48: b9:c5:ee:c4:31:94:ff:4a:34:b7:e1:53:a9:5c:9f: cc:99:9e:ea:bc:fb:47:9a:ff:a7:1e:0b:92:27:94: cf:4c:9c:09:54:55:19:0c:cb:50:66:b9:07:47:4d: ad:1b:03:67:ab:6c:cc:9d:f3:36:0f:b0:c3:8f:66: 6a:b2:15:1e:42:85:19:e4:24:6d:6f:af:c5:31:d6: 55:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:31:E6:00:06:8B:B8:68:9A:F2:C3:8A:A4:CF:B6:CE:31:16:D4 X509v3 Authority Key Identifier: keyid:CE:C5:07:A5:A1:E5:50:1A:7A:D6:35:53:35:AC:DF:E6:3D:AB:C9:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zsUHpaHlUBp61jVTNazf5j2ryQs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/0b22ba-4911-4fbe-847c-d24aa5794d8b/1/zsUHpaHlUBp61jVTNazf5j2ryQs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:52:af:fe:19:ea:43:8f:a8:af:b5:eb:04:0d:2e:d2:4b:c0: 2b:ba:65:5e:80:f4:66:2e:b7:82:fc:fb:b3:d0:73:47:4d:4b: 05:c4:a4:97:06:5e:69:08:b4:2d:3e:e9:ce:cb:d8:c0:7b:bf: 6f:38:eb:7e:c8:3e:43:43:d6:72:7c:49:b7:54:11:dd:b2:53: e6:50:2d:3f:93:1a:13:da:5a:c4:bb:e8:22:0d:1e:e1:c0:86: a3:0a:10:b6:e3:72:17:30:8a:2f:a9:27:be:f6:93:b7:8b:4d: f9:00:94:e7:b2:3b:8f:d5:ee:6b:84:f8:d0:46:53:88:33:23: 3b:43:ce:67:43:9e:d8:33:8d:89:d7:93:f1:4e:9e:49:de:ef: a8:7a:cd:d3:21:bf:75:d6:78:e4:b1:b0:17:6c:aa:12:79:ff: 86:a1:5d:4f:65:af:22:04:39:d9:bc:68:16:b2:2b:91:43:fd: 37:1b:2c:f9:58:6a:d3:71:9b:9d:fd:7f:04:30:63:2b:38:a9: 3e:16:f3:65:e8:a4:a7:44:dc:58:96:ae:a3:1f:bb:8f:bb:a4: 51:3b:77:7f:3f:82:c0:25:6c:70:55:96:b6:b8:bb:a6:9a:94: f9:f5:0e:05:48:de:51:50:9d:d1:81:9d:a0:84:08:e4:c0:91: c6:05:a7:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfSs5/ibPPLLoG9gW4SEpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlYzUwN2E1YTFlNTUwMWE3YWQ2MzU1MzM1YWNkZmU2M2Rh YmM5MGIwHhcNMjYwMjA5MTMwMDI1WhcNMjYwMjEwMTMwMDI1WjAzMTEwLwYDVQQD Eyg5NzAxMzFlNjAwMDY4YmI4Njg5YWYyYzM4YWE0Y2ZiNmNlMzExNmQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI9uAX80UPghcNVCJFNBw5cDFv6b +u+DITvm+fi6rzSYQGLD9unQiVvkNA2XOkOEzzTUeulroYIFyOQpUfYUNlTb7h2b t8CV6SPWcYKTFdbNAaEbVZuQ+rHDDRY2hxeAk5sus2IcHp7JCpN6IQh0R9os84kR Myb9du3YOz/CLd7pYX1En7qvGtHU0NpSJb7IQ7q5zhrCgl6V7mxlEwU0ItxzIq8i dpJAuwg+afSOGQ7d4Ei5xe7EMZT/SjS34VOpXJ/MmZ7qvPtHmv+nHguSJ5TPTJwJ VFUZDMtQZrkHR02tGwNnq2zMnfM2D7DDj2ZqshUeQoUZ5CRtb6/FMdZVoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJcBMeYABou4aJryw4qkz7bOMRbUMB8GA1UdIwQY MBaAFM7FB6Wh5VAaetY1UzWs3+Y9q8kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2Mt ZDI0YWE1Nzk0ZDhiLzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8wYjIyYmEtNDkxMS00ZmJlLTg0N2MtZDI0YWE1Nzk0ZDhi LzEvenNVSHBhSGxVQnA2MWpWVE5hemY1ajJyeVFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1Kv/hnq Q4+or7XrBA0u0kvAK7plXoD0Zi63gvz7s9BzR01LBcSklwZeaQi0LT7pzsvYwHu/ bzjrfsg+Q0PWcnxJt1QR3bJT5lAtP5MaE9paxLvoIg0e4cCGowoQtuNyFzCKL6kn vvaTt4tN+QCU57I7j9Xua4T40EZTiDMjO0POZ0Oe2DONideT8U6eSd7vqHrN0yG/ ddZ45LGwF2yqEnn/hqFdT2WvIgQ52bxoFrIrkUP9Nxss+Vhq03Gbnf1/BDBjKzip PhbzZeikp0TcWJauox+7j7ukUTt3fz+CwCVscFWWtri7ppqU+fUOBUjeUVCd0YGd oIQI5MCRxgWniQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:21 2026 by rpki-client