This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft File: z2sdziLtzI0bE3M48rfikFxKixI.mft (raw, json) Hash identifier: 3Q5IDiSQMuZnnPuEOMLo3x8lITjd9axjsuz5pYtRKs0= Subject key identifier: E5:30:71:47:A2:AC:23:0F:F2:1E:1F:F5:06:2A:B3:71:CC:D9:31:8D Authority key identifier: CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12 Certificate issuer: /CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12 Certificate serial: 019C41A1D9837FFDB827F50EF6D1F64FCE56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 09:00:51 +0000 Manifest this update: Mon 09 Feb 2026 09:00:51 +0000 Manifest next update: Tue 10 Feb 2026 09:00:51 +0000 Files and hashes: 1: z2sdziLtzI0bE3M48rfikFxKixI.crl (hash: EpV3YzbL3mpbYARX89zhDgODhaAL4rKIMg541BfAr5U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:d9:83:7f:fd:b8:27:f5:0e:f6:d1:f6:4f:ce:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf6b1dce22edcc8d1b137338f2b7e2905c4a8b12 Validity Not Before: Feb 9 09:00:51 2026 GMT Not After : Feb 10 09:00:51 2026 GMT Subject: CN=e5307147a2ac230ff21e1ff5062ab371ccd9318d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:95:61:c3:0a:55:a6:fb:72:8c:a0:c6:1f:cd: 2b:b1:8b:4d:ed:73:a7:1f:ff:9b:12:e5:1d:96:a6: 04:a8:64:af:81:42:91:d0:72:6e:e9:b8:5d:1f:0b: 01:a6:ca:8f:c6:62:73:a1:7f:b1:be:6c:a1:a5:6d: ed:45:06:45:78:2b:61:2e:00:ce:f1:6d:f3:f4:f2: c3:fe:42:0b:05:64:02:30:b9:97:92:ab:0d:20:08: 79:fa:d1:22:8d:4c:af:28:6f:fe:d2:9a:37:ef:9e: 6a:09:5e:ec:40:3c:9f:7a:d0:7f:e1:58:f4:05:c3: 74:4a:22:b2:46:13:1c:a7:63:8e:9d:28:c6:53:94: 55:00:3a:5c:ce:d9:54:b2:1d:30:94:b0:eb:d1:8a: 2d:01:7e:0e:ef:39:b3:e3:2b:06:9b:45:0c:21:4d: 68:ea:14:fc:c0:2c:2e:2b:37:7e:b6:46:ce:fb:cb: 03:0a:4f:18:86:46:02:0f:dd:12:eb:1c:66:16:bb: 70:bc:bf:3b:ba:92:28:d6:b8:1c:30:4b:73:9e:27: 0f:2f:79:35:3a:81:61:83:1b:03:24:b6:33:24:14: c1:d9:8a:a6:87:e9:03:3e:33:d9:17:43:11:d7:94: 1a:c0:e2:18:9c:05:e6:13:19:22:d3:90:a9:f6:82: 3d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:30:71:47:A2:AC:23:0F:F2:1E:1F:F5:06:2A:B3:71:CC:D9:31:8D X509v3 Authority Key Identifier: keyid:CF:6B:1D:CE:22:ED:CC:8D:1B:13:73:38:F2:B7:E2:90:5C:4A:8B:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z2sdziLtzI0bE3M48rfikFxKixI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3d96f0-4981-4894-882c-6a99c46879ce/1/z2sdziLtzI0bE3M48rfikFxKixI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:e4:54:ad:02:68:9f:2f:2f:e3:12:81:98:7f:1f:24:0b:5e: 3b:f1:67:89:49:5e:61:5f:70:42:6a:19:24:9f:c7:e4:89:9c: de:fd:88:2d:1b:20:5d:47:06:86:3d:81:90:d8:56:7a:57:e1: 79:24:00:27:2c:7a:16:a2:f7:11:01:0c:57:ca:58:3c:8c:55: 6f:76:37:4f:f2:00:ae:3f:0f:bf:18:2d:29:5d:74:31:d1:6f: 44:f5:c2:5e:4a:2f:4c:3e:1c:3b:ab:fb:56:6c:10:8f:12:5f: f5:bb:d0:c1:d6:8a:33:2c:3a:fa:a5:64:7c:11:38:cb:5b:ec: 8a:bb:fd:91:72:ff:a0:01:9b:53:e7:45:3d:eb:6c:86:2f:7a: 44:6c:ab:93:5f:ef:20:32:c9:63:f2:32:01:25:ec:71:0a:39: 62:2b:09:1e:21:ac:c8:d1:7d:92:20:fd:ee:82:6e:e9:3d:f5: b5:46:81:b8:da:11:13:4a:ba:e7:b9:ac:29:17:85:d1:76:16: 25:fd:35:d2:75:d4:51:a0:4a:41:85:ad:b5:63:c4:7a:68:27: 55:ed:9f:12:69:6a:9c:32:16:f4:2e:fc:bd:be:2d:e5:e3:52: ff:2d:ca:51:62:16:83:57:af:6c:7d:36:b1:03:83:cf:ae:28: 09:44:59:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBodmDf/24J/UO9tH2T85WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNmIxZGNlMjJlZGNjOGQxYjEzNzMzOGYyYjdlMjkwNWM0 YThiMTIwHhcNMjYwMjA5MDkwMDUxWhcNMjYwMjEwMDkwMDUxWjAzMTEwLwYDVQQD EyhlNTMwNzE0N2EyYWMyMzBmZjIxZTFmZjUwNjJhYjM3MWNjZDkzMThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZVhwwpVpvtyjKDGH80rsYtN7XOn H/+bEuUdlqYEqGSvgUKR0HJu6bhdHwsBpsqPxmJzoX+xvmyhpW3tRQZFeCthLgDO 8W3z9PLD/kILBWQCMLmXkqsNIAh5+tEijUyvKG/+0po3755qCV7sQDyfetB/4Vj0 BcN0SiKyRhMcp2OOnSjGU5RVADpcztlUsh0wlLDr0YotAX4O7zmz4ysGm0UMIU1o 6hT8wCwuKzd+tkbO+8sDCk8YhkYCD90S6xxmFrtwvL87upIo1rgcMEtznicPL3k1 OoFhgxsDJLYzJBTB2Yqmh+kDPjPZF0MR15QawOIYnAXmExki05Cp9oI9hQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOUwcUeirCMP8h4f9QYqs3HM2TGNMB8GA1UdIwQY MBaAFM9rHc4i7cyNGxNzOPK34pBcSosSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMt NmE5OWM0Njg3OWNlLzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC8zZDk2ZjAtNDk4MS00ODk0LTg4MmMtNmE5OWM0Njg3OWNl LzEvejJzZHppTHR6STBiRTNNNDhyZmlrRnhLaXhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzORUrQJo ny8v4xKBmH8fJAteO/FniUleYV9wQmoZJJ/H5Imc3v2ILRsgXUcGhj2BkNhWelfh eSQAJyx6FqL3EQEMV8pYPIxVb3Y3T/IArj8PvxgtKV10MdFvRPXCXkovTD4cO6v7 VmwQjxJf9bvQwdaKMyw6+qVkfBE4y1vsirv9kXL/oAGbU+dFPetshi96RGyrk1/v IDLJY/IyASXscQo5YisJHiGsyNF9kiD97oJu6T31tUaBuNoRE0q657msKReF0XYW Jf010nXUUaBKQYWttWPEemgnVe2fEmlqnDIW9C78vb4t5eNS/y3KUWIWg1evbH02 sQODz64oCURZRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:29 2026 by rpki-client