This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft File: zZIJohaMSNNQk7ucBSCxn7D-FDs.mft (raw, json) Hash identifier: +PxBsdDAhju1ksRAxPakbbf48zmFvyyGspVRypHyTzU= Subject key identifier: 8C:0A:20:9E:6C:7F:9C:A0:B6:47:1B:91:DE:BF:EE:D7:C2:15:B6:77 Authority key identifier: CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B Certificate issuer: /CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b Certificate serial: 019C427D992205A057E76D2E04D5AF0E5958 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft Manifest number: 0C5D Signing time: Mon 09 Feb 2026 13:00:53 +0000 Manifest this update: Mon 09 Feb 2026 13:00:53 +0000 Manifest next update: Tue 10 Feb 2026 13:00:53 +0000 Files and hashes: 1: zZIJohaMSNNQk7ucBSCxn7D-FDs.crl (hash: n6JYw3dge03xTnQkpN+KkFVkEci21yHGGgZAq5wXtjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:99:22:05:a0:57:e7:6d:2e:04:d5:af:0e:59:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9209a2168c48d35093bb9c0520b19fb0fe143b Validity Not Before: Feb 9 13:00:53 2026 GMT Not After : Feb 10 13:00:53 2026 GMT Subject: CN=8c0a209e6c7f9ca0b6471b91debfeed7c215b677 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f7:0f:de:2d:0b:00:50:2a:44:0d:1a:c3:4e: 53:71:7a:6e:9b:48:6e:02:95:7e:43:32:c0:cb:38: e5:74:5a:31:10:6a:11:9d:9f:b4:6f:0f:b5:2b:81: e0:45:4b:41:07:3b:5b:62:0f:27:e0:dc:be:ba:4e: 68:fb:0e:01:84:17:a5:b2:77:c2:e0:53:72:ca:89: 50:f4:50:56:9d:4d:85:d0:79:03:50:95:20:82:19: 6e:3b:8b:d7:e7:26:7a:01:8e:48:1d:31:a8:2f:09: d2:8f:07:8b:20:67:96:9e:49:9f:72:75:74:85:95: ed:7d:a1:26:ae:ed:06:87:aa:f4:72:af:78:2a:07: 66:86:06:12:40:6f:cf:30:d1:14:39:cb:6c:80:2f: ed:78:be:c0:db:77:dc:98:15:a6:a4:4b:bb:2e:01: 73:2c:28:5a:fb:50:f6:db:fd:a2:b6:7d:a1:75:32: 37:5e:32:a7:b1:e5:8b:6d:39:23:29:dc:5a:30:86: 84:01:0c:a2:01:d2:2e:96:cf:5e:f0:1e:c6:d9:81: 72:8f:81:63:77:99:9f:e2:4b:02:42:c8:42:29:3c: 2f:a7:2e:f8:29:a8:ca:90:e9:5d:34:5f:07:05:ee: 28:6a:57:df:98:0f:6e:f3:c1:fb:a5:f4:81:cf:5b: 91:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:0A:20:9E:6C:7F:9C:A0:B6:47:1B:91:DE:BF:EE:D7:C2:15:B6:77 X509v3 Authority Key Identifier: keyid:CD:92:09:A2:16:8C:48:D3:50:93:BB:9C:05:20:B1:9F:B0:FE:14:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZIJohaMSNNQk7ucBSCxn7D-FDs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/378b80-b5e1-4c64-9ec6-cf48c03744fa/1/zZIJohaMSNNQk7ucBSCxn7D-FDs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:16:e1:53:1d:20:95:1d:e5:7a:f0:2c:49:ff:c2:22:1f:b4: 69:0b:48:a4:98:e9:34:a8:39:a7:94:84:b2:cb:8a:eb:eb:38: 77:92:11:a2:2d:4a:6e:c6:82:85:23:52:c5:bf:84:4c:88:9b: 29:f2:43:0d:e0:ee:45:54:e5:b0:ac:5a:08:7b:78:b4:07:72: 83:3e:3b:8b:ce:0e:66:99:82:fe:41:c0:89:84:b9:17:61:45: bb:03:14:c1:b1:e8:72:fd:a2:89:73:81:b4:2b:50:82:e5:6d: 5d:5c:ff:39:d4:5a:12:ee:02:03:47:74:c8:43:34:e2:d9:fc: 8f:ab:5c:b1:46:b0:df:94:64:6e:21:eb:8a:1a:8a:b0:ad:e2: b2:32:24:e7:ee:45:42:1b:11:b6:62:3c:08:f0:0f:32:18:33: dd:0e:22:03:fe:54:63:1c:53:5a:ba:40:37:0d:18:bf:9f:76: ca:b8:eb:85:03:c6:35:a8:8f:c2:88:f4:f1:f8:ba:1c:2b:ef: 81:6e:44:cc:f4:92:1f:05:6a:b6:48:48:d9:57:c9:9d:a2:3c: 8a:63:d7:fe:49:3e:4f:2c:8b:8c:7a:32:5b:59:d7:a6:61:de: fd:98:c6:ad:6f:e0:fa:dc:27:91:d7:dc:fa:7b:b2:74:f1:f0: 31:cd:0c:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfZkiBaBX520uBNWvDllYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOTIwOWEyMTY4YzQ4ZDM1MDkzYmI5YzA1MjBiMTlmYjBm ZTE0M2IwHhcNMjYwMjA5MTMwMDUzWhcNMjYwMjEwMTMwMDUzWjAzMTEwLwYDVQQD Eyg4YzBhMjA5ZTZjN2Y5Y2EwYjY0NzFiOTFkZWJmZWVkN2MyMTViNjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPcP3i0LAFAqRA0aw05TcXpum0hu ApV+QzLAyzjldFoxEGoRnZ+0bw+1K4HgRUtBBztbYg8n4Ny+uk5o+w4BhBelsnfC 4FNyyolQ9FBWnU2F0HkDUJUgghluO4vX5yZ6AY5IHTGoLwnSjweLIGeWnkmfcnV0 hZXtfaEmru0Gh6r0cq94KgdmhgYSQG/PMNEUOctsgC/teL7A23fcmBWmpEu7LgFz LCha+1D22/2itn2hdTI3XjKnseWLbTkjKdxaMIaEAQyiAdIuls9e8B7G2YFyj4Fj d5mf4ksCQshCKTwvpy74KajKkOldNF8HBe4oalffmA9u88H7pfSBz1uRbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIwKIJ5sf5ygtkcbkd6/7tfCFbZ3MB8GA1UdIwQY MBaAFM2SCaIWjEjTUJO7nAUgsZ+w/hQ7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zNzhiODAtYjVlMS00YzY0LTllYzYt Y2Y0OGMwMzc0NGZhLzEvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8zNzhiODAtYjVlMS00YzY0LTllYzYtY2Y0OGMwMzc0NGZh LzEvelpJSm9oYU1TTk5Razd1Y0JTQ3huN0QtRkRzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBbhUx0g lR3levAsSf/CIh+0aQtIpJjpNKg5p5SEssuK6+s4d5IRoi1KbsaChSNSxb+ETIib KfJDDeDuRVTlsKxaCHt4tAdygz47i84OZpmC/kHAiYS5F2FFuwMUwbHocv2iiXOB tCtQguVtXVz/OdRaEu4CA0d0yEM04tn8j6tcsUaw35RkbiHrihqKsK3isjIk5+5F QhsRtmI8CPAPMhgz3Q4iA/5UYxxTWrpANw0Yv592yrjrhQPGNaiPwoj08fi6HCvv gW5EzPSSHwVqtkhI2VfJnaI8imPX/kk+TyyLjHoyW1nXpmHe/ZjGrW/g+twnkdfc +nuydPHwMc0MkA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:51 2026 by rpki-client