This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft File: ZLPjZgb6UsOkchyMoPszCZU0GVo.mft (raw, json) Hash identifier: N9RN8dRgscA+lxxA4YGkzqU5qar3R3lvcfSLXJazCUk= Subject key identifier: 13:FD:0D:D7:DA:43:6F:3E:90:A3:50:94:59:37:15:0D:E5:00:65:5F Authority key identifier: 64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A Certificate issuer: /CN=64b3e36606fa52c3a4721c8ca0fb33099534195a Certificate serial: 019C4322B4349F8AACFA5D68365D1DB16824 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 16:01:13 +0000 Manifest this update: Mon 09 Feb 2026 16:01:13 +0000 Manifest next update: Tue 10 Feb 2026 16:01:13 +0000 Files and hashes: 1: ZLPjZgb6UsOkchyMoPszCZU0GVo.crl (hash: qNRhRZQgLJWryTt9TYt036CbZC4fvX2RqX7PqNwJ8ik=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:b4:34:9f:8a:ac:fa:5d:68:36:5d:1d:b1:68:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64b3e36606fa52c3a4721c8ca0fb33099534195a Validity Not Before: Feb 9 16:01:13 2026 GMT Not After : Feb 10 16:01:13 2026 GMT Subject: CN=13fd0dd7da436f3e90a350945937150de500655f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:55:8f:33:33:d7:29:66:42:40:b4:26:29:d9: ef:d1:ba:7a:bf:87:c8:39:35:5e:7f:df:00:1d:d1: 77:05:50:a6:c8:a1:2b:a9:bd:1b:5a:fb:cb:63:60: d5:68:db:f2:ab:88:b3:97:34:4a:09:2e:9c:3e:32: 8a:18:64:43:e8:1f:77:6a:44:a0:e3:89:ce:93:c7: 54:55:88:7b:99:c4:67:b5:ed:39:5c:24:24:48:82: 76:6d:02:ca:f6:44:cd:5f:d2:80:6d:d3:44:b8:04: 40:1a:53:18:4d:c1:12:9c:77:82:1a:ca:67:d4:db: 36:b5:4e:c2:1d:e3:d3:a0:69:7c:55:6a:9f:5d:66: 2c:13:aa:64:58:4d:46:37:cc:4d:a7:5a:c2:4d:fb: 4c:0c:2b:6f:23:24:b3:b1:c0:70:a3:1e:ba:87:99: 5c:da:e8:13:2f:44:ca:04:de:f8:fb:78:e3:20:90: 2d:d6:08:5c:67:fb:fb:29:91:f4:73:bd:15:c3:4d: ff:e7:49:c8:93:60:7d:ce:8d:06:bb:54:81:6b:ca: 8d:ed:ea:39:a4:47:82:11:37:0c:ee:ed:b1:54:ca: f6:be:c9:da:68:8d:88:46:29:37:24:16:dd:18:bc: 1b:6b:c3:a4:04:a9:ee:fb:9f:b5:77:1b:2d:8b:3f: 2f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:FD:0D:D7:DA:43:6F:3E:90:A3:50:94:59:37:15:0D:E5:00:65:5F X509v3 Authority Key Identifier: keyid:64:B3:E3:66:06:FA:52:C3:A4:72:1C:8C:A0:FB:33:09:95:34:19:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZLPjZgb6UsOkchyMoPszCZU0GVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/b70e07-11b2-4a2a-8955-0e381bd413d3/1/ZLPjZgb6UsOkchyMoPszCZU0GVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:da:9b:00:ab:c0:f6:5d:79:2d:aa:78:f4:31:84:8c:ed:fd: fe:83:2f:55:b7:f7:9c:f5:35:ea:68:df:2e:88:1c:2d:94:f2: 37:e3:99:b6:90:f0:3b:e7:65:e9:5c:3d:ab:d4:68:37:e8:c4: 81:87:72:5e:76:57:d2:ee:cd:b2:70:fb:26:b3:91:04:02:1c: 75:85:c9:d6:f4:e7:40:70:f7:50:50:35:cd:39:a2:9e:e8:62: 2a:7d:37:36:e5:6b:57:ac:ae:41:50:f0:f3:d0:30:2e:b3:a3: 7f:58:e5:48:99:02:96:b6:1c:7d:b7:36:2a:d1:09:e3:5e:1f: 80:ad:47:6a:cb:f2:f5:db:24:4b:64:1e:e2:88:08:a2:5f:70: 2f:9b:ac:a3:b4:9f:75:62:64:be:a7:c2:3d:45:1d:88:a3:fd: 0e:82:4a:10:1a:f2:13:22:bc:57:8f:96:77:6d:11:4b:53:5f: 18:85:28:22:5a:60:15:ef:13:27:91:f1:91:93:16:66:29:25: 98:0a:5a:b9:38:51:e6:6f:35:a6:cc:96:a3:1a:9a:9d:73:e6: b7:bc:8c:84:df:9a:60:a0:cb:f4:c7:21:56:83:10:4c:0a:7a: 9d:d1:af:95:96:88:82:e0:af:02:39:26:4f:a9:ce:08:fb:22: 7e:ae:2a:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIrQ0n4qs+l1oNl0dsWgkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0YjNlMzY2MDZmYTUyYzNhNDcyMWM4Y2EwZmIzMzA5OTUz NDE5NWEwHhcNMjYwMjA5MTYwMTEzWhcNMjYwMjEwMTYwMTEzWjAzMTEwLwYDVQQD EygxM2ZkMGRkN2RhNDM2ZjNlOTBhMzUwOTQ1OTM3MTUwZGU1MDA2NTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwFWPMzPXKWZCQLQmKdnv0bp6v4fI OTVef98AHdF3BVCmyKErqb0bWvvLY2DVaNvyq4izlzRKCS6cPjKKGGRD6B93akSg 44nOk8dUVYh7mcRnte05XCQkSIJ2bQLK9kTNX9KAbdNEuARAGlMYTcESnHeCGspn 1Ns2tU7CHePToGl8VWqfXWYsE6pkWE1GN8xNp1rCTftMDCtvIySzscBwox66h5lc 2ugTL0TKBN74+3jjIJAt1ghcZ/v7KZH0c70Vw03/50nIk2B9zo0Gu1SBa8qN7eo5 pEeCETcM7u2xVMr2vsnaaI2IRik3JBbdGLwba8OkBKnu+5+1dxstiz8vuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBP9DdfaQ28+kKNQlFk3FQ3lAGVfMB8GA1UdIwQY MBaAFGSz42YG+lLDpHIcjKD7MwmVNBlaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUt MGUzODFiZDQxM2QzLzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9iNzBlMDctMTFiMi00YTJhLTg5NTUtMGUzODFiZDQxM2Qz LzEvWkxQalpnYjZVc09rY2h5TW9Qc3pDWlUwR1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO9qbAKvA 9l15Lap49DGEjO39/oMvVbf3nPU16mjfLogcLZTyN+OZtpDwO+dl6Vw9q9RoN+jE gYdyXnZX0u7NsnD7JrORBAIcdYXJ1vTnQHD3UFA1zTminuhiKn03NuVrV6yuQVDw 89AwLrOjf1jlSJkClrYcfbc2KtEJ414fgK1Hasvy9dskS2Qe4ogIol9wL5uso7Sf dWJkvqfCPUUdiKP9DoJKEBryEyK8V4+Wd20RS1NfGIUoIlpgFe8TJ5HxkZMWZikl mApauThR5m81psyWoxqanXPmt7yMhN+aYKDL9MchVoMQTAp6ndGvlZaIguCvAjkm T6nOCPsifq4qXg== -----END CERTIFICATE-----Generated at Mon Feb 9 20:54:13 2026 by rpki-client