This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft File: ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft (raw, json) Hash identifier: oCjRZ+jJFUo/pCyqvUFYLM2C2nf2B0S9CbswG/VRA98= Subject key identifier: 71:EE:E3:43:77:0C:48:D5:35:3D:CB:F6:F3:5D:D6:19:3F:EC:A0:5D Authority key identifier: 65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 Certificate issuer: /CN=65d2b2f54ca1718cfd38293111415666cc34e262 Certificate serial: 019C41D845DEA27FC6F99980C59CDB9F6E34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft Manifest number: 13B8 Signing time: Mon 09 Feb 2026 10:00:18 +0000 Manifest this update: Mon 09 Feb 2026 10:00:18 +0000 Manifest next update: Tue 10 Feb 2026 10:00:18 +0000 Files and hashes: 1: ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl (hash: JuH0SyVhGpEHmC+oqk1AsCwt6tBIqICWHkhcQ57W7CM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:45:de:a2:7f:c6:f9:99:80:c5:9c:db:9f:6e:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65d2b2f54ca1718cfd38293111415666cc34e262 Validity Not Before: Feb 9 10:00:18 2026 GMT Not After : Feb 10 10:00:18 2026 GMT Subject: CN=71eee343770c48d5353dcbf6f35dd6193feca05d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:88:f3:18:a9:8e:34:19:42:4d:d6:b6:0a:ad: 32:3e:f4:ea:cd:8c:c9:0c:e5:cf:4c:1a:b0:61:71: 56:78:b3:68:5a:1b:a0:7e:21:87:dc:39:26:a8:82: 6d:ed:02:92:31:11:3a:7c:31:75:5c:ff:c8:80:b8: 0e:c4:d1:85:0e:cd:37:ea:de:85:89:b3:5b:f0:1a: 80:96:76:4f:5d:a2:dd:ce:c7:13:fd:b1:f9:76:5f: fe:04:75:35:30:e5:00:34:de:4c:15:a9:cc:98:64: 8c:67:99:03:3a:50:c7:dc:3d:47:7e:70:2d:a8:16: 2c:22:2a:e0:9d:69:79:ba:cb:bb:45:56:dd:4b:27: bc:2a:6d:da:1f:e4:ab:6b:8a:0e:2d:ab:10:08:2f: 52:5a:05:09:bb:3e:2f:85:d1:8d:32:d6:cc:29:8e: 37:64:44:da:86:5a:bb:f8:0e:60:57:10:ee:28:01: 89:35:57:a1:ca:54:e9:a0:74:9e:f8:9f:2d:1d:7d: dc:ab:0b:64:6e:9a:c4:5f:87:2e:ae:05:4e:a1:43: 94:bd:7a:f1:f8:f0:b1:78:b1:f7:89:db:75:00:99: 56:57:d1:46:16:b7:32:c0:7e:d9:a0:06:39:6d:78: e6:dc:a2:a7:b0:fa:f1:5d:e2:58:6f:24:dc:81:70: bc:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:EE:E3:43:77:0C:48:D5:35:3D:CB:F6:F3:5D:D6:19:3F:EC:A0:5D X509v3 Authority Key Identifier: keyid:65:D2:B2:F5:4C:A1:71:8C:FD:38:29:31:11:41:56:66:CC:34:E2:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZdKy9UyhcYz9OCkxEUFWZsw04mI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e31766-4d27-4c48-9e6b-ef65dcbc7c09/1/ZdKy9UyhcYz9OCkxEUFWZsw04mI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:c5:8d:4e:e9:72:9d:a0:06:12:55:c2:95:f8:0a:ef:26:80: 59:f0:cb:dc:e1:3e:73:6f:be:de:b3:8c:6b:b3:fb:d6:41:b9: cc:c9:62:c9:1a:8b:5f:f1:9d:a4:42:2f:76:64:a2:07:20:05: 73:22:23:c9:23:11:5d:c2:8b:0b:d2:6a:65:af:ff:e1:67:99: 3e:b9:36:d6:4c:52:a7:45:49:01:b4:cd:ec:d7:04:c9:b6:a9: de:24:e5:aa:81:bb:04:1f:6e:17:a2:89:35:90:2f:57:03:46: b3:a7:1e:3a:0a:1b:e0:2d:f6:63:c0:dd:b5:63:6d:5d:5b:78: a6:f6:43:f0:91:06:25:0a:9a:93:2a:dd:6a:2c:0a:63:c3:b5: 8b:0d:3b:56:0d:be:5d:68:d2:73:b6:33:2d:b7:db:05:80:1d: 5a:4f:a4:34:8e:a5:a5:c9:9f:ee:e9:36:c5:4d:e0:9f:48:85: 2e:56:39:d8:1b:01:67:97:58:5f:1c:87:b1:36:37:eb:a7:ea: bc:ac:e6:69:f9:f5:0c:f9:ab:80:b7:da:41:b4:d7:5b:23:d8: e4:0a:af:d2:cc:0a:3c:1a:ad:e4:93:6b:54:8c:c8:0b:23:9a: 03:86:ea:45:14:6c:f5:c9:e9:ab:47:98:84:19:57:9f:33:da: 54:99:f3:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2EXeon/G+ZmAxZzbn240MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1ZDJiMmY1NGNhMTcxOGNmZDM4MjkzMTExNDE1NjY2Y2Mz NGUyNjIwHhcNMjYwMjA5MTAwMDE4WhcNMjYwMjEwMTAwMDE4WjAzMTEwLwYDVQQD Eyg3MWVlZTM0Mzc3MGM0OGQ1MzUzZGNiZjZmMzVkZDYxOTNmZWNhMDVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+4jzGKmONBlCTda2Cq0yPvTqzYzJ DOXPTBqwYXFWeLNoWhugfiGH3DkmqIJt7QKSMRE6fDF1XP/IgLgOxNGFDs036t6F ibNb8BqAlnZPXaLdzscT/bH5dl/+BHU1MOUANN5MFanMmGSMZ5kDOlDH3D1HfnAt qBYsIirgnWl5usu7RVbdSye8Km3aH+Sra4oOLasQCC9SWgUJuz4vhdGNMtbMKY43 ZETahlq7+A5gVxDuKAGJNVehylTpoHSe+J8tHX3cqwtkbprEX4curgVOoUOUvXrx +PCxeLH3idt1AJlWV9FGFrcywH7ZoAY5bXjm3KKnsPrxXeJYbyTcgXC8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHu40N3DEjVNT3L9vNd1hk/7KBdMB8GA1UdIwQY MBaAFGXSsvVMoXGM/TgpMRFBVmbMNOJiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmIt ZWY2NWRjYmM3YzA5LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy9lMzE3NjYtNGQyNy00YzQ4LTllNmItZWY2NWRjYmM3YzA5 LzEvWmRLeTlVeWhjWXo5T0NreEVVRldac3cwNG1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecWNTuly naAGElXClfgK7yaAWfDL3OE+c2++3rOMa7P71kG5zMliyRqLX/GdpEIvdmSiByAF cyIjySMRXcKLC9JqZa//4WeZPrk21kxSp0VJAbTN7NcEybap3iTlqoG7BB9uF6KJ NZAvVwNGs6ceOgob4C32Y8DdtWNtXVt4pvZD8JEGJQqakyrdaiwKY8O1iw07Vg2+ XWjSc7YzLbfbBYAdWk+kNI6lpcmf7uk2xU3gn0iFLlY52BsBZ5dYXxyHsTY366fq vKzmafn1DPmrgLfaQbTXWyPY5Aqv0swKPBqt5JNrVIzICyOaA4bqRRRs9cnpq0eY hBlXnzPaVJnz0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:02 2026 by rpki-client