This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft File: z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft (raw, json) Hash identifier: SxE/fIxlbTro/5VPHmdNaEgIWHWGs0vJN1OAIVmsJSM= Subject key identifier: 69:1F:64:C3:0F:96:7D:F7:E7:57:AC:87:CA:AF:A4:8C:56:54:28:4B Authority key identifier: CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49 Certificate issuer: /CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649 Certificate serial: 019C4133803A186EC9D2BC23091F2B7EDAFF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft Manifest number: 180C Signing time: Mon 09 Feb 2026 07:00:20 +0000 Manifest this update: Mon 09 Feb 2026 07:00:20 +0000 Manifest next update: Tue 10 Feb 2026 07:00:20 +0000 Files and hashes: 1: z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl (hash: 1YZmAqGSSA6yWbmA8ojpc+m6KoZ+lZPPCYYLuuhYaTM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:80:3a:18:6e:c9:d2:bc:23:09:1f:2b:7e:da:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfa5cec143a2af1ed1c2d99696f1f1687f458649 Validity Not Before: Feb 9 07:00:20 2026 GMT Not After : Feb 10 07:00:20 2026 GMT Subject: CN=691f64c30f967df7e757ac87caafa48c5654284b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:94:4f:b3:70:10:7f:26:4e:90:5a:3c:e5: ea:f3:ef:f5:fb:37:77:c4:4c:3a:34:33:d1:47:7e: d2:68:27:65:c0:18:d7:32:bc:f7:76:f9:13:a4:ed: 13:da:b3:39:e4:45:5c:21:e3:17:1d:ac:b9:32:5b: 8b:88:0f:f2:da:fb:a5:f5:1b:70:cf:45:0e:f1:8d: e1:79:c9:e8:ad:aa:b7:22:b7:13:f6:41:df:b5:3f: 26:39:51:a3:e4:6e:58:b8:60:21:58:82:8c:fc:14: 83:0f:3c:47:5f:4a:be:00:9e:9a:c5:c0:8e:d5:4f: 6c:06:6b:71:15:8a:5c:d2:c0:ee:e7:20:61:7d:49: e2:9c:44:f9:ed:0a:88:6f:9e:1c:80:8a:55:81:29: f6:42:78:66:05:d3:da:b1:3b:db:ee:e8:ff:2a:73: e7:65:be:08:29:bd:58:6a:03:35:45:a8:ad:b0:96: 87:55:10:ac:62:97:52:97:1d:a6:cb:32:08:46:53: 22:08:4e:f5:c8:e9:84:f5:04:42:33:27:af:71:66: c6:b9:5f:36:6e:9b:36:c3:c9:d8:86:fb:aa:cb:7e: 27:df:e7:03:92:fb:92:a8:1e:85:58:39:7a:a8:61: a4:07:f6:3a:cc:00:a3:6e:86:42:c1:f6:20:0c:83: 81:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:1F:64:C3:0F:96:7D:F7:E7:57:AC:87:CA:AF:A4:8C:56:54:28:4B X509v3 Authority Key Identifier: keyid:CF:A5:CE:C1:43:A2:AF:1E:D1:C2:D9:96:96:F1:F1:68:7F:45:86:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z6XOwUOirx7RwtmWlvHxaH9Fhkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/39e0d9-52a2-437c-895f-4c582c28fba3/1/z6XOwUOirx7RwtmWlvHxaH9Fhkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:33:22:59:79:20:eb:65:16:c2:01:75:82:7d:28:56:f6:fc: ac:a2:6f:9d:76:c4:1f:71:1d:f9:94:5b:51:e6:b8:d7:02:19: 55:3a:74:37:6f:71:d6:9f:f9:3c:2d:06:fd:12:c5:17:25:36: 5f:71:5a:83:38:0f:a1:c5:2f:9b:54:19:32:f9:05:63:6f:86: 67:fc:a9:94:18:ee:dd:23:7a:ad:88:ed:0f:86:9d:c6:ca:e1: c6:fb:d3:ae:fb:c0:f7:f1:d2:b7:7c:5d:d8:96:72:03:5c:56: 24:cf:72:63:fe:ba:00:c2:33:60:c7:c3:0c:b7:d8:b6:a8:e2: 1c:ba:4d:f2:24:91:01:53:cc:8e:51:b8:e5:eb:3f:30:9a:1c: d3:37:60:5c:95:62:d5:f5:d0:79:6c:b8:76:bb:eb:79:29:e9: dc:92:44:b5:a0:d1:6f:2b:78:3e:38:bd:ef:9d:7d:9a:67:77: 9b:6f:ca:d3:0d:7d:df:6c:dd:05:2e:fd:2e:30:ff:e1:a4:bd: 70:38:16:bb:4b:64:d2:35:0a:c2:c2:4c:6b:52:ce:65:87:be: 20:22:13:6c:a7:4b:d2:32:77:41:ef:f6:be:8f:32:8e:eb:f6: e8:e1:05:6c:61:4a:05:56:0a:c1:50:54:b8:8b:a8:fb:97:29: 57:ce:3e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM4A6GG7J0rwjCR8rftr/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmYTVjZWMxNDNhMmFmMWVkMWMyZDk5Njk2ZjFmMTY4N2Y0 NTg2NDkwHhcNMjYwMjA5MDcwMDIwWhcNMjYwMjEwMDcwMDIwWjAzMTEwLwYDVQQD Eyg2OTFmNjRjMzBmOTY3ZGY3ZTc1N2FjODdjYWFmYTQ4YzU2NTQyODRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+qUT7NwEH8mTpBaPOXq8+/1+zd3 xEw6NDPRR37SaCdlwBjXMrz3dvkTpO0T2rM55EVcIeMXHay5MluLiA/y2vul9Rtw z0UO8Y3hecnoraq3IrcT9kHftT8mOVGj5G5YuGAhWIKM/BSDDzxHX0q+AJ6axcCO 1U9sBmtxFYpc0sDu5yBhfUninET57QqIb54cgIpVgSn2QnhmBdPasTvb7uj/KnPn Zb4IKb1YagM1RaitsJaHVRCsYpdSlx2myzIIRlMiCE71yOmE9QRCMyevcWbGuV82 bps2w8nYhvuqy34n3+cDkvuSqB6FWDl6qGGkB/Y6zACjboZCwfYgDIOBdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkfZMMPln3351esh8qvpIxWVChLMB8GA1UdIwQY MBaAFM+lzsFDoq8e0cLZlpbx8Wh/RYZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOWUwZDktNTJhMi00MzdjLTg5NWYt NGM1ODJjMjhmYmEzLzEvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOWUwZDktNTJhMi00MzdjLTg5NWYtNGM1ODJjMjhmYmEz LzEvejZYT3dVT2lyeDdSd3RtV2x2SHhhSDlGaGtrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADjMiWXkg 62UWwgF1gn0oVvb8rKJvnXbEH3Ed+ZRbUea41wIZVTp0N29x1p/5PC0G/RLFFyU2 X3FagzgPocUvm1QZMvkFY2+GZ/yplBju3SN6rYjtD4adxsrhxvvTrvvA9/HSt3xd 2JZyA1xWJM9yY/66AMIzYMfDDLfYtqjiHLpN8iSRAVPMjlG45es/MJoc0zdgXJVi 1fXQeWy4drvreSnp3JJEtaDRbyt4Pji97519mmd3m2/K0w1932zdBS79LjD/4aS9 cDgWu0tk0jUKwsJMa1LOZYe+ICITbKdL0jJ3Qe/2vo8yjuv26OEFbGFKBVYKwVBU uIuo+5cpV84+9g== -----END CERTIFICATE-----Generated at Mon Feb 9 17:02:11 2026 by rpki-client