This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft File: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft (raw, json) Hash identifier: Flwvvqd6gHeRmv0taASpZRZFIOfEW11Vv66001X3rZQ= Subject key identifier: A4:8F:1B:60:B8:FF:1A:DE:0A:0C:C9:EB:60:A5:57:1F:AE:05:6E:E1 Authority key identifier: 09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 Certificate issuer: /CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Certificate serial: 019C446C861AEB7F29E7AC24B7CF7C5D8F07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 22:01:28 +0000 Manifest this update: Mon 09 Feb 2026 22:01:28 +0000 Manifest next update: Tue 10 Feb 2026 22:01:28 +0000 Files and hashes: 1: CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl (hash: vlMn+TZdReVkqzxWgYH0ERGW/bPNZXaNxPj2A0eQkjo=) 2: QqEtI7mSBnf3k13sxA2thJ-1o4Q.roa (hash: MvaPAINH/RoYeDbeWcuMwbOZ15Dwjgbo2f18w/6CCqc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 22:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:86:1a:eb:7f:29:e7:ac:24:b7:cf:7c:5d:8f:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=099f12f3fa7311cd993ab6bc5bb29a1bf2ad48a1 Validity Not Before: Feb 9 22:01:28 2026 GMT Not After : Feb 10 22:01:28 2026 GMT Subject: CN=a48f1b60b8ff1ade0a0cc9eb60a5571fae056ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6e:7a:2d:b5:9e:82:8c:51:02:14:8c:41:ce: 67:e4:70:cf:65:fc:12:36:d6:72:88:5a:ff:a6:9c: c8:06:be:b5:90:7d:ff:b6:7e:7e:7a:a8:16:11:2b: eb:f8:10:1b:8a:c0:b8:67:0f:bf:23:40:f5:13:f3: 3f:34:79:09:90:33:79:de:9f:70:61:e0:d9:98:dd: 53:1b:ad:c6:75:7c:e9:e2:d8:51:de:20:e5:53:5e: f5:97:0c:3c:e0:39:c5:6e:4a:19:1e:0d:91:89:52: 53:4f:fe:d0:b7:8f:72:e0:1d:f2:6f:a3:5c:ff:d9: 07:dd:da:c2:bf:8a:34:77:00:04:83:2e:9c:60:30: 84:e8:65:6b:5f:c7:a9:3f:5d:59:b7:fb:66:4d:d5: 49:79:d1:05:92:9a:1a:33:89:bd:70:3a:f6:18:8e: 74:32:54:ad:08:6d:f3:67:a0:20:de:e6:4a:85:63: 17:a5:c0:d0:0a:6f:54:77:e3:35:01:b2:30:32:5f: 8f:b4:1f:4d:d1:78:d8:7b:d4:63:dc:32:ca:88:d3: 44:15:7a:66:16:cd:b8:55:8d:1a:c8:82:fd:2a:be: c2:14:a6:bd:77:91:ce:d4:c9:f1:38:1b:18:43:5b: 37:84:06:65:fd:68:d7:41:3a:a1:28:f0:2a:60:0f: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8F:1B:60:B8:FF:1A:DE:0A:0C:C9:EB:60:A5:57:1F:AE:05:6E:E1 X509v3 Authority Key Identifier: keyid:09:9F:12:F3:FA:73:11:CD:99:3A:B6:BC:5B:B2:9A:1B:F2:AD:48:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f59ee1-6afe-4e38-b995-419b5723eef9/1/CZ8S8_pzEc2ZOra8W7KaG_KtSKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:2e:64:c6:f3:a9:02:d3:27:aa:36:94:af:e2:2e:88:96:10: 4d:c3:7a:ff:c0:f5:63:aa:46:ca:30:22:0d:f2:f4:a9:5a:1d: 24:0c:47:db:45:5a:5c:4b:90:40:7e:0b:7e:c1:f3:90:24:06: fa:aa:2a:10:24:78:05:1d:bc:7f:a2:d1:50:7d:d3:f0:3d:c0: ec:d9:65:4f:ac:0c:0d:2e:fa:ef:91:aa:53:9a:e9:17:13:fd: 04:47:0f:c2:ed:fb:21:8d:61:1e:e8:46:e2:3c:b2:6e:00:f6: 8b:fe:f6:99:78:b3:7c:95:f1:13:5f:60:8d:4c:53:c9:a8:ae: e3:08:70:b0:bf:11:87:eb:ab:a2:78:e7:99:8a:65:37:55:4e: 39:5b:62:d8:5d:c3:d8:d5:a2:68:25:dc:3a:40:e3:dc:50:5a: b9:ff:95:11:e7:cf:45:b8:d5:8e:66:a4:34:25:b2:08:52:6c: b4:1c:bd:1b:77:e5:4c:39:f0:8a:d4:47:4a:68:ca:52:6d:bc: 0f:4f:95:05:55:fd:fd:54:c8:ef:14:75:73:87:4b:5e:ea:77: 75:25:c7:3c:44:c0:d9:45:a3:92:ae:58:13:ff:d9:21:95:91: 2a:d4:31:8b:68:bb:8f:08:b5:89:f0:67:45:9e:ba:62:34:61: 9e:07:ab:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbIYa638p56wkt898XY8HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OWYxMmYzZmE3MzExY2Q5OTNhYjZiYzViYjI5YTFiZjJh ZDQ4YTEwHhcNMjYwMjA5MjIwMTI4WhcNMjYwMjEwMjIwMTI4WjAzMTEwLwYDVQQD EyhhNDhmMWI2MGI4ZmYxYWRlMGEwY2M5ZWI2MGE1NTcxZmFlMDU2ZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw256LbWegoxRAhSMQc5n5HDPZfwS NtZyiFr/ppzIBr61kH3/tn5+eqgWESvr+BAbisC4Zw+/I0D1E/M/NHkJkDN53p9w YeDZmN1TG63GdXzp4thR3iDlU171lww84DnFbkoZHg2RiVJTT/7Qt49y4B3yb6Nc /9kH3drCv4o0dwAEgy6cYDCE6GVrX8epP11Zt/tmTdVJedEFkpoaM4m9cDr2GI50 MlStCG3zZ6Ag3uZKhWMXpcDQCm9Ud+M1AbIwMl+PtB9N0XjYe9Rj3DLKiNNEFXpm Fs24VY0ayIL9Kr7CFKa9d5HO1MnxOBsYQ1s3hAZl/WjXQTqhKPAqYA/DnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSPG2C4/xreCgzJ62ClVx+uBW7hMB8GA1UdIwQY MBaAFAmfEvP6cxHNmTq2vFuymhvyrUihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUt NDE5YjU3MjNlZWY5LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC9mNTllZTEtNmFmZS00ZTM4LWI5OTUtNDE5YjU3MjNlZWY5 LzEvQ1o4UzhfcHpFYzJaT3JhOFc3S2FHX0t0U0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAS5kxvOp AtMnqjaUr+IuiJYQTcN6/8D1Y6pGyjAiDfL0qVodJAxH20VaXEuQQH4LfsHzkCQG +qoqECR4BR28f6LRUH3T8D3A7NllT6wMDS7675GqU5rpFxP9BEcPwu37IY1hHuhG 4jyybgD2i/72mXizfJXxE19gjUxTyaiu4whwsL8Rh+uronjnmYplN1VOOVti2F3D 2NWiaCXcOkDj3FBauf+VEefPRbjVjmakNCWyCFJstBy9G3flTDnwitRHSmjKUm28 D0+VBVX9/VTI7xR1c4dLXup3dSXHPETA2UWjkq5YE//ZIZWRKtQxi2i7jwi1ifBn RZ66YjRhnger+A== -----END CERTIFICATE-----Generated at Tue Feb 10 08:22:46 2026 by rpki-client