This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft File: ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft (raw, json) Hash identifier: d5IoYm/a4afFRAbM+KbxArusu0x55cGdjus5PMGFie8= Subject key identifier: 63:66:86:4B:5D:17:5B:EE:DF:C5:1A:D0:F4:8F:FC:E9:27:97:08:8F Authority key identifier: 65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73 Certificate issuer: /CN=65186e4ef8caedf66ed34d93aba80b2cfc068673 Certificate serial: 019C438FA66713779CA3F18ACAA1D9DEF6FD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft Manifest number: 1185 Signing time: Mon 09 Feb 2026 18:00:13 +0000 Manifest this update: Mon 09 Feb 2026 18:00:13 +0000 Manifest next update: Tue 10 Feb 2026 18:00:13 +0000 Files and hashes: 1: ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl (hash: GAJVYazjgkchRFaWv3KP3VredGgudT5oaqSSzaNdt9Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:a6:67:13:77:9c:a3:f1:8a:ca:a1:d9:de:f6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65186e4ef8caedf66ed34d93aba80b2cfc068673 Validity Not Before: Feb 9 18:00:13 2026 GMT Not After : Feb 10 18:00:13 2026 GMT Subject: CN=6366864b5d175beedfc51ad0f48ffce92797088f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:29:02:58:50:6c:84:d9:80:4a:60:53:86:11: 0e:4b:f0:25:1f:53:1a:3b:6f:a5:80:ac:fc:04:71: 9c:f1:a4:63:11:e3:f8:70:7a:c4:e4:b1:8f:85:b5: 36:70:fd:01:67:42:ff:ce:85:09:f4:c0:3f:35:f9: fd:fd:85:18:64:21:51:3c:8e:cf:69:b6:7d:1a:fe: dc:80:df:f9:ad:06:18:08:fb:b0:01:51:0e:87:ac: 96:5e:7c:68:72:51:1d:e6:21:db:1a:c1:6d:46:93: bb:00:16:df:33:5d:e6:3a:05:59:58:71:5f:52:16: 35:29:66:c9:39:fe:fc:5f:60:d9:db:b3:2b:53:7c: 89:c0:db:02:29:38:fc:70:37:5f:e2:f6:a7:10:16: 28:4b:99:5e:ec:ee:e9:e4:e8:18:19:27:95:d5:37: 22:17:a2:d1:aa:01:4f:72:95:89:45:23:81:39:ee: ee:34:8b:34:35:a3:37:db:57:5e:ee:4b:36:28:ca: 9a:47:43:50:00:b9:bb:f2:b5:95:fd:39:a4:15:ae: 05:38:72:0a:61:20:9a:03:02:b0:6b:93:34:84:4b: 72:fd:5b:b0:da:d0:57:dd:b8:ea:1c:9c:ee:3b:bc: a0:66:30:d9:b9:15:b2:b3:b7:37:1e:44:aa:b0:7b: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:66:86:4B:5D:17:5B:EE:DF:C5:1A:D0:F4:8F:FC:E9:27:97:08:8F X509v3 Authority Key Identifier: keyid:65:18:6E:4E:F8:CA:ED:F6:6E:D3:4D:93:AB:A8:0B:2C:FC:06:86:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZRhuTvjK7fZu002Tq6gLLPwGhnM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/924cf1-ffdc-45e6-a6f3-ecdc36d7ad1e/1/ZRhuTvjK7fZu002Tq6gLLPwGhnM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c4:9c:97:30:9a:b2:6c:7e:4e:f6:97:48:32:f2:b7:1c:d6: 42:44:7a:af:e6:fe:c7:a1:ae:d3:0a:7c:e8:4f:c2:8e:91:3c: 60:02:1b:08:7d:a3:d8:27:3f:85:34:f9:eb:26:61:05:db:4c: 84:33:1e:b7:9a:7d:c9:1a:02:4c:74:9e:d9:83:52:25:31:2f: 24:40:1a:e5:21:cb:42:74:3d:94:3c:80:62:ac:74:94:1f:b2: 08:7e:8b:27:88:8a:81:1d:83:d4:91:1b:26:a2:9c:dc:a2:ed: 9b:4b:3c:97:25:1e:d5:a5:dc:1c:d7:92:ce:d5:27:37:2c:87: c1:61:0f:1a:0c:2e:82:4e:16:44:98:ad:61:9a:a2:3d:89:09: a5:10:b4:cc:83:d7:46:5d:89:63:84:63:fb:f1:d5:d6:dc:58: da:e5:c4:85:56:f9:1f:a1:71:1e:83:c6:4e:a0:05:b8:17:09: 77:6e:4c:c0:42:1d:64:8d:e5:04:1e:46:2d:c8:13:52:e3:d7: 86:59:0e:08:77:b8:9f:c0:78:5a:bf:db:76:7f:3f:ad:b0:c7: 8b:d8:76:50:9f:64:2e:f1:54:56:23:5d:9a:75:bd:ce:83:a7: 07:ba:12:e8:d0:69:fd:c7:1f:ef:85:a4:41:81:4f:be:4b:df: 1f:95:b8:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj6ZnE3eco/GKyqHZ3vb9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1MTg2ZTRlZjhjYWVkZjY2ZWQzNGQ5M2FiYTgwYjJjZmMw Njg2NzMwHhcNMjYwMjA5MTgwMDEzWhcNMjYwMjEwMTgwMDEzWjAzMTEwLwYDVQQD Eyg2MzY2ODY0YjVkMTc1YmVlZGZjNTFhZDBmNDhmZmNlOTI3OTcwODhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlikCWFBshNmASmBThhEOS/AlH1Ma O2+lgKz8BHGc8aRjEeP4cHrE5LGPhbU2cP0BZ0L/zoUJ9MA/Nfn9/YUYZCFRPI7P abZ9Gv7cgN/5rQYYCPuwAVEOh6yWXnxoclEd5iHbGsFtRpO7ABbfM13mOgVZWHFf UhY1KWbJOf78X2DZ27MrU3yJwNsCKTj8cDdf4vanEBYoS5le7O7p5OgYGSeV1Tci F6LRqgFPcpWJRSOBOe7uNIs0NaM321de7ks2KMqaR0NQALm78rWV/TmkFa4FOHIK YSCaAwKwa5M0hEty/Vuw2tBX3bjqHJzuO7ygZjDZuRWys7c3HkSqsHttjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNmhktdF1vu38Ua0PSP/OknlwiPMB8GA1UdIwQY MBaAFGUYbk74yu32btNNk6uoCyz8BoZzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS85MjRjZjEtZmZkYy00NWU2LWE2ZjMt ZWNkYzM2ZDdhZDFlLzEvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZS85MjRjZjEtZmZkYy00NWU2LWE2ZjMtZWNkYzM2ZDdhZDFl LzEvWlJodVR2aks3Zlp1MDAyVHE2Z0xMUHdHaG5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncSclzCa smx+TvaXSDLytxzWQkR6r+b+x6Gu0wp86E/CjpE8YAIbCH2j2Cc/hTT56yZhBdtM hDMet5p9yRoCTHSe2YNSJTEvJEAa5SHLQnQ9lDyAYqx0lB+yCH6LJ4iKgR2D1JEb JqKc3KLtm0s8lyUe1aXcHNeSztUnNyyHwWEPGgwugk4WRJitYZqiPYkJpRC0zIPX Rl2JY4Rj+/HV1txY2uXEhVb5H6FxHoPGTqAFuBcJd25MwEIdZI3lBB5GLcgTUuPX hlkOCHe4n8B4Wr/bdn8/rbDHi9h2UJ9kLvFUViNdmnW9zoOnB7oS6NBp/ccf74Wk QYFPvkvfH5W4cA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:40 2026 by rpki-client