This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft File: ztRNVlW4bSOnKEEMBB0-WORyjAY.mft (raw, json) Hash identifier: fGLT9myINyyAjeeuNhK+Dnh4FdjvxWaQtgmdmEHV3ng= Subject key identifier: 84:8A:48:A5:FF:93:64:64:5E:FA:6F:B7:BF:90:DE:9C:AF:59:E0:3A Authority key identifier: CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06 Certificate issuer: /CN=ced44d5655b86d23a728410c041d3e58e4728c06 Certificate serial: 019C43FE438E2ACBAC5EDA6C76E1C8AC5BA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft Manifest number: 10E4 Signing time: Mon 09 Feb 2026 20:01:02 +0000 Manifest this update: Mon 09 Feb 2026 20:01:02 +0000 Manifest next update: Tue 10 Feb 2026 20:01:02 +0000 Files and hashes: 1: ztRNVlW4bSOnKEEMBB0-WORyjAY.crl (hash: K9sdIhz3Q35F/PjkRmdhM9SpArDhHjmDbIfJui+KQf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:43:8e:2a:cb:ac:5e:da:6c:76:e1:c8:ac:5b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced44d5655b86d23a728410c041d3e58e4728c06 Validity Not Before: Feb 9 20:01:02 2026 GMT Not After : Feb 10 20:01:02 2026 GMT Subject: CN=848a48a5ff9364645efa6fb7bf90de9caf59e03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:1e:c9:ca:ca:da:12:93:c3:43:cf:ab:55:28: e2:83:6d:10:85:3a:26:5c:f6:ed:2c:35:4b:67:81: 04:7b:4a:8b:31:c3:7a:75:bb:9c:f8:d3:7e:3c:b8: d5:5f:ef:86:e6:eb:ba:e1:4b:d1:e3:1f:07:51:22: 0e:72:20:17:9e:1f:42:d3:2b:e7:ed:05:04:86:21: f6:53:c8:7a:d9:38:14:f2:65:15:8f:2c:ea:20:ef: 29:9e:ed:34:42:4f:93:bc:25:f0:88:c6:fb:61:a7: a0:bf:ea:26:d1:4a:47:0c:24:96:43:ea:72:99:6c: b0:e9:32:9d:54:db:93:65:49:b6:f7:81:d2:98:31: d5:8d:51:47:d8:a8:87:5b:21:e6:70:cb:31:d2:41: 02:67:26:61:fe:b8:6f:1e:d2:51:c3:bd:1c:cf:17: 2d:19:83:14:a3:d2:70:ef:67:46:05:99:b8:62:aa: 69:7a:7e:e0:d0:e2:75:20:d9:19:7a:9b:73:e3:0c: 50:ca:7d:5c:7b:51:6d:e1:50:20:70:a8:2a:ae:e9: f6:5b:c5:be:44:d4:59:c0:ed:36:72:1c:e9:7c:ad: b9:ff:11:14:e2:4e:5c:98:59:c9:83:3c:f9:19:a0: 27:9c:db:f9:41:21:cd:54:88:3a:9d:6a:64:ff:97: a2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:8A:48:A5:FF:93:64:64:5E:FA:6F:B7:BF:90:DE:9C:AF:59:E0:3A X509v3 Authority Key Identifier: keyid:CE:D4:4D:56:55:B8:6D:23:A7:28:41:0C:04:1D:3E:58:E4:72:8C:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztRNVlW4bSOnKEEMBB0-WORyjAY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/69cc92-c4ce-4ce6-9004-64382c57ed40/1/ztRNVlW4bSOnKEEMBB0-WORyjAY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:20:5b:a8:0d:90:81:96:a4:2e:4e:2c:78:84:91:e1:49:92: f1:ce:18:fe:62:2c:06:dc:1d:7e:92:9a:ee:95:4c:6c:08:87: af:87:57:e0:20:68:53:2d:30:c9:70:fd:8c:10:0f:ed:f0:23: 32:02:a0:d1:dc:ec:6b:0e:0f:cb:f9:85:0b:08:9f:f6:9c:f4: be:5e:5c:1e:5e:be:d5:f2:cc:c9:79:26:d2:9c:06:69:64:15: 0d:54:d0:fd:71:fc:ff:37:af:05:b0:ef:71:36:1a:1e:fd:03: 54:f6:04:d4:a2:5f:e4:bf:2d:d5:bf:0d:cf:61:79:c4:b8:71: 26:71:69:cc:67:1b:d2:83:1c:3e:7c:de:88:d5:b1:af:d9:ab: 33:12:51:a2:1d:73:60:93:48:99:de:83:95:fc:dc:15:a5:3e: 66:89:80:3a:74:91:bb:d3:ff:93:2f:3d:e2:33:f3:40:69:48: 3f:62:ed:bc:66:0c:73:30:d3:6d:03:3b:9c:b2:09:75:26:77: 49:0c:50:6f:31:df:1c:5d:80:be:82:2c:88:a2:48:1a:35:84: 5e:95:96:89:8f:aa:81:d6:7e:4b:0b:c1:1d:c1:e0:40:21:ff: b3:74:e3:63:b2:65:66:9f:7d:14:4b:8e:b0:db:b7:69:bf:92: 1f:08:a0:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/kOOKsusXtpsduHIrFuiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ0ZDU2NTViODZkMjNhNzI4NDEwYzA0MWQzZTU4ZTQ3 MjhjMDYwHhcNMjYwMjA5MjAwMTAyWhcNMjYwMjEwMjAwMTAyWjAzMTEwLwYDVQQD Eyg4NDhhNDhhNWZmOTM2NDY0NWVmYTZmYjdiZjkwZGU5Y2FmNTllMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsx7JysraEpPDQ8+rVSjig20QhTom XPbtLDVLZ4EEe0qLMcN6dbuc+NN+PLjVX++G5uu64UvR4x8HUSIOciAXnh9C0yvn 7QUEhiH2U8h62TgU8mUVjyzqIO8pnu00Qk+TvCXwiMb7Yaegv+om0UpHDCSWQ+py mWyw6TKdVNuTZUm294HSmDHVjVFH2KiHWyHmcMsx0kECZyZh/rhvHtJRw70czxct GYMUo9Jw72dGBZm4Yqppen7g0OJ1INkZeptz4wxQyn1ce1Ft4VAgcKgqrun2W8W+ RNRZwO02chzpfK25/xEU4k5cmFnJgzz5GaAnnNv5QSHNVIg6nWpk/5eiTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFISKSKX/k2RkXvpvt7+Q3pyvWeA6MB8GA1UdIwQY MBaAFM7UTVZVuG0jpyhBDAQdPljkcowGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQt NjQzODJjNTdlZDQwLzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy82OWNjOTItYzRjZS00Y2U2LTkwMDQtNjQzODJjNTdlZDQw LzEvenRSTlZsVzRiU09uS0VFTUJCMC1XT1J5akFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgSBbqA2Q gZakLk4seISR4UmS8c4Y/mIsBtwdfpKa7pVMbAiHr4dX4CBoUy0wyXD9jBAP7fAj MgKg0dzsaw4Py/mFCwif9pz0vl5cHl6+1fLMyXkm0pwGaWQVDVTQ/XH8/zevBbDv cTYaHv0DVPYE1KJf5L8t1b8Nz2F5xLhxJnFpzGcb0oMcPnzeiNWxr9mrMxJRoh1z YJNImd6DlfzcFaU+ZomAOnSRu9P/ky894jPzQGlIP2LtvGYMczDTbQM7nLIJdSZ3 SQxQbzHfHF2AvoIsiKJIGjWEXpWWiY+qgdZ+SwvBHcHgQCH/s3TjY7JlZp99FEuO sNu3ab+SHwigWg== -----END CERTIFICATE-----Generated at Tue Feb 10 01:38:28 2026 by rpki-client