This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft File: z4Qias59GqsqQYMm94QorK38x4E.mft (raw, json) Hash identifier: d/3FnchNqbtr3f6BUBf7m3QfGQWRyof2+0m8LveWm/Q= Subject key identifier: 3F:08:86:82:42:E4:13:10:30:8C:0C:9A:1C:99:E8:77:48:01:44:86 Authority key identifier: CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81 Certificate issuer: /CN=cf84226ace7d1aab2a418326f78428acadfcc781 Certificate serial: 019C41A14342E4DD1A9E36870C760D2AD5BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft Manifest number: 07B9 Signing time: Mon 09 Feb 2026 09:00:13 +0000 Manifest this update: Mon 09 Feb 2026 09:00:13 +0000 Manifest next update: Tue 10 Feb 2026 09:00:13 +0000 Files and hashes: 1: z4Qias59GqsqQYMm94QorK38x4E.crl (hash: Mi1MtKgkWA+10NAnpnes5CIugX912EgyB2FdEQuga8g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:43:42:e4:dd:1a:9e:36:87:0c:76:0d:2a:d5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf84226ace7d1aab2a418326f78428acadfcc781 Validity Not Before: Feb 9 09:00:13 2026 GMT Not After : Feb 10 09:00:13 2026 GMT Subject: CN=3f08868242e41310308c0c9a1c99e87748014486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ec:cf:98:de:12:ac:08:0f:1e:db:b6:92:67: f8:b0:1f:34:c5:cf:bf:86:3f:82:67:cf:8c:c8:6b: f2:16:3d:66:aa:21:73:2a:1d:e9:23:9e:b0:1b:ea: a4:1e:5d:b4:30:59:8f:c8:d5:0e:de:d6:a2:77:4a: 3f:07:fe:20:ba:37:56:36:58:aa:4f:f4:1f:c2:a9: e9:fa:59:1b:6d:ca:4c:38:36:2c:ee:88:41:ce:fb: 98:ce:4d:bc:5e:ae:2e:f2:c5:f1:dc:76:b4:95:db: 99:79:c4:db:c5:36:19:9c:a7:63:ee:36:a6:ad:9c: 39:4e:47:9a:44:d9:9c:88:34:01:24:1a:bc:58:89: d5:44:bb:9c:71:31:2b:44:70:6f:27:dd:76:28:c7: 2a:5d:1d:fe:73:bc:d2:c0:25:68:20:22:2c:f7:fa: e4:4f:21:f2:cb:82:46:54:38:35:df:14:7f:1f:4d: 5d:54:25:56:92:d7:40:5b:2f:72:b3:5e:ce:ed:74: 40:32:c6:08:67:a7:98:07:06:cf:11:8c:b6:50:09: df:bb:15:1f:4b:33:7e:a3:57:a8:42:ec:dd:ae:0a: c0:fa:f8:a6:c6:08:a1:6a:48:18:e1:ee:a6:82:f2: fc:84:11:86:55:24:99:16:f7:d9:54:d9:b1:82:21: ea:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:08:86:82:42:E4:13:10:30:8C:0C:9A:1C:99:E8:77:48:01:44:86 X509v3 Authority Key Identifier: keyid:CF:84:22:6A:CE:7D:1A:AB:2A:41:83:26:F7:84:28:AC:AD:FC:C7:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4Qias59GqsqQYMm94QorK38x4E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/45fb03-0efb-4eba-83df-f30dc765f5ff/1/z4Qias59GqsqQYMm94QorK38x4E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:84:30:05:92:a3:d0:90:7f:4b:59:3d:14:00:01:f5:89:c4: 51:e5:e9:c0:be:4c:ba:3b:ee:8a:67:52:39:b6:00:cf:87:94: c4:d2:91:5c:a0:15:d8:f3:50:0e:b8:e2:3d:6b:96:ae:9b:82: 96:c7:c7:da:93:3e:4b:97:c8:c4:ee:c9:21:0c:32:cc:b8:0d: 2c:94:82:7f:3b:1f:03:7f:9d:02:39:65:73:29:69:0b:85:76: 86:ca:b0:ca:f8:00:6e:03:5d:26:ec:6f:db:25:07:0c:70:2e: 51:b3:6e:9a:37:fe:71:5f:3c:68:f9:24:c3:8a:0e:d9:f1:27: 7b:f1:63:a8:68:98:ad:cf:cb:b9:49:95:60:6d:be:e3:ef:e5: 37:2e:4c:56:e0:65:7a:f5:88:f2:b6:d1:30:c3:23:74:2e:2d: 72:ba:cc:03:d8:42:99:2a:0d:de:f3:f6:9b:27:3b:77:c8:0a: d9:a5:f0:92:3c:37:4c:da:08:c8:e2:91:9a:03:95:ac:e2:48: 17:f4:d6:38:55:42:6e:61:60:f3:01:eb:79:c4:32:53:d1:33: c1:53:a3:c2:16:06:92:f3:47:44:cd:d9:52:43:a4:01:3e:e4: e4:ac:ee:69:42:55:cb:82:5f:25:8d:d9:2c:a2:99:69:e2:1a: 1a:c1:9b:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUNC5N0anjaHDHYNKtW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmODQyMjZhY2U3ZDFhYWIyYTQxODMyNmY3ODQyOGFjYWRm Y2M3ODEwHhcNMjYwMjA5MDkwMDEzWhcNMjYwMjEwMDkwMDEzWjAzMTEwLwYDVQQD EygzZjA4ODY4MjQyZTQxMzEwMzA4YzBjOWExYzk5ZTg3NzQ4MDE0NDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+zPmN4SrAgPHtu2kmf4sB80xc+/ hj+CZ8+MyGvyFj1mqiFzKh3pI56wG+qkHl20MFmPyNUO3taid0o/B/4gujdWNliq T/Qfwqnp+lkbbcpMODYs7ohBzvuYzk28Xq4u8sXx3Ha0lduZecTbxTYZnKdj7jam rZw5TkeaRNmciDQBJBq8WInVRLuccTErRHBvJ912KMcqXR3+c7zSwCVoICIs9/rk TyHyy4JGVDg13xR/H01dVCVWktdAWy9ys17O7XRAMsYIZ6eYBwbPEYy2UAnfuxUf SzN+o1eoQuzdrgrA+vimxgihakgY4e6mgvL8hBGGVSSZFvfZVNmxgiHqtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8IhoJC5BMQMIwMmhyZ6HdIAUSGMB8GA1UdIwQY MBaAFM+EImrOfRqrKkGDJveEKKyt/MeBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYt ZjMwZGM3NjVmNWZmLzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZC80NWZiMDMtMGVmYi00ZWJhLTgzZGYtZjMwZGM3NjVmNWZm LzEvejRRaWFzNTlHcXNxUVlNbTk0UW9ySzM4eDRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYQwBZKj 0JB/S1k9FAAB9YnEUeXpwL5MujvuimdSObYAz4eUxNKRXKAV2PNQDrjiPWuWrpuC lsfH2pM+S5fIxO7JIQwyzLgNLJSCfzsfA3+dAjllcylpC4V2hsqwyvgAbgNdJuxv 2yUHDHAuUbNumjf+cV88aPkkw4oO2fEne/FjqGiYrc/LuUmVYG2+4+/lNy5MVuBl evWI8rbRMMMjdC4tcrrMA9hCmSoN3vP2myc7d8gK2aXwkjw3TNoIyOKRmgOVrOJI F/TWOFVCbmFg8wHrecQyU9EzwVOjwhYGkvNHRM3ZUkOkAT7k5KzuaUJVy4JfJY3Z LKKZaeIaGsGb5Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:58 2026 by rpki-client