This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft File: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft (raw, json) Hash identifier: x5HEQ6AWr7nSyLMRJHs+7Jy0eTDTlK+ioh3SpapNRLo= Subject key identifier: 3F:CF:0C:37:B9:4F:65:AD:4B:B6:7D:2F:0F:52:36:14:A2:0E:A7:B3 Authority key identifier: 65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B Certificate issuer: /CN=654364d0c6c93df28027488afcbfcf329726392b Certificate serial: 019C43226E3C75FBB634AB49DB76D75D7533 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft Manifest number: 0BA3 Signing time: Mon 09 Feb 2026 16:00:55 +0000 Manifest this update: Mon 09 Feb 2026 16:00:55 +0000 Manifest next update: Tue 10 Feb 2026 16:00:55 +0000 Files and hashes: 1: ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl (hash: CTON4AW5lkbRW4zeU6pEn8pQZsLX0o8MZu8dAdubH3A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:6e:3c:75:fb:b6:34:ab:49:db:76:d7:5d:75:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=654364d0c6c93df28027488afcbfcf329726392b Validity Not Before: Feb 9 16:00:55 2026 GMT Not After : Feb 10 16:00:55 2026 GMT Subject: CN=3fcf0c37b94f65ad4bb67d2f0f523614a20ea7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:06:55:52:6e:ea:52:82:c5:4f:bd:ae:e9:d5: e2:44:80:0e:5b:ed:7b:48:ea:cf:76:30:41:fb:4a: cc:9b:42:eb:21:9e:bd:72:cb:91:56:a3:0f:66:12: 45:cf:75:bc:f2:9e:d5:fb:b0:b9:cb:15:21:80:e5: 4b:d1:15:c3:b4:f3:d6:4f:d4:63:eb:b7:e7:5c:91: 0c:2e:18:9f:d4:fc:d3:04:8f:aa:9c:8a:fc:b8:a1: 0c:bb:47:5b:d8:80:a7:2d:17:30:3b:86:9c:8b:39: d0:f9:db:cc:cf:fe:e6:2b:20:72:67:f9:46:8b:d8: c7:13:62:86:62:31:e1:e3:88:a5:2e:45:1e:e9:0f: 10:0e:6a:d4:09:a8:f0:ee:32:d9:ff:d6:a2:f7:52: d1:1a:aa:ef:1b:63:39:63:95:64:e3:50:86:f7:3d: 40:01:be:1d:2f:0b:5d:25:8b:d2:78:3d:85:af:95: e0:88:ae:ed:4e:d2:a2:c7:7e:f1:48:c9:bc:af:04: 1a:7e:19:f1:88:42:f9:9a:26:50:ec:e8:65:81:63: 14:b9:fd:d3:0a:1e:d8:1e:62:21:43:c3:ad:b2:bd: 84:ab:5c:14:c6:0e:9c:7e:d2:67:82:42:1d:f5:0a: bd:9e:0b:a3:e4:73:54:57:8d:b3:59:dd:cc:47:89: 63:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:CF:0C:37:B9:4F:65:AD:4B:B6:7D:2F:0F:52:36:14:A2:0E:A7:B3 X509v3 Authority Key Identifier: keyid:65:43:64:D0:C6:C9:3D:F2:80:27:48:8A:FC:BF:CF:32:97:26:39:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/3f9ab1-eab1-46cc-88e7-b6e8ea912480/1/ZUNk0MbJPfKAJ0iK_L_PMpcmOSs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:5d:35:c5:2a:46:69:9a:17:4c:64:88:8b:5c:35:04:96:a3: cc:75:a0:ed:77:83:74:75:ab:5f:fd:3c:9e:0c:e2:16:43:39: 91:c1:71:40:e2:af:7d:6f:89:37:f6:c6:b5:1b:39:95:75:95: 60:07:76:d5:8b:3c:a5:cb:37:9a:47:8f:0d:7c:93:bf:06:4f: 0a:e6:d9:8e:1c:01:55:a2:03:fe:81:f7:62:4e:0d:2d:ee:9f: ed:60:c2:17:e7:82:fb:b4:d4:0a:20:ef:be:8d:06:e5:05:06: 5e:3c:65:c5:5d:24:0f:a4:5a:d4:a1:61:51:ea:20:fb:10:74: b7:d2:38:ae:5a:6d:5b:63:35:94:96:cc:e2:e0:dc:c0:0b:08: 09:08:6b:d1:93:b3:06:43:df:ff:86:87:4e:30:69:ae:2c:1a: da:ca:a7:6e:bb:2e:03:79:cb:74:86:a2:3c:a4:a1:4c:d8:bb: 12:4d:7b:9a:19:01:69:c5:84:43:50:06:7a:c3:ff:70:47:47: 89:e1:aa:00:27:90:a6:ee:8a:17:be:67:9c:70:e8:4a:8f:ac: 6c:51:97:ce:78:72:72:44:e3:d3:c8:61:4b:17:44:e5:dd:a6: 5f:43:c4:04:d7:60:6a:cc:74:f4:0b:1f:a8:82:f7:a2:c2:a6: c4:9f:dc:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIm48dfu2NKtJ23bXXXUzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY1NDM2NGQwYzZjOTNkZjI4MDI3NDg4YWZjYmZjZjMyOTcy NjM5MmIwHhcNMjYwMjA5MTYwMDU1WhcNMjYwMjEwMTYwMDU1WjAzMTEwLwYDVQQD EygzZmNmMGMzN2I5NGY2NWFkNGJiNjdkMmYwZjUyMzYxNGEyMGVhN2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgZVUm7qUoLFT72u6dXiRIAOW+17 SOrPdjBB+0rMm0LrIZ69csuRVqMPZhJFz3W88p7V+7C5yxUhgOVL0RXDtPPWT9Rj 67fnXJEMLhif1PzTBI+qnIr8uKEMu0db2ICnLRcwO4aciznQ+dvMz/7mKyByZ/lG i9jHE2KGYjHh44ilLkUe6Q8QDmrUCajw7jLZ/9ai91LRGqrvG2M5Y5Vk41CG9z1A Ab4dLwtdJYvSeD2Fr5XgiK7tTtKix37xSMm8rwQafhnxiEL5miZQ7OhlgWMUuf3T Ch7YHmIhQ8Otsr2Eq1wUxg6cftJngkId9Qq9nguj5HNUV42zWd3MR4ljRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD/PDDe5T2WtS7Z9Lw9SNhSiDqezMB8GA1UdIwQY MBaAFGVDZNDGyT3ygCdIivy/zzKXJjkrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTct YjZlOGVhOTEyNDgwLzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8zZjlhYjEtZWFiMS00NmNjLTg4ZTctYjZlOGVhOTEyNDgw LzEvWlVOazBNYkpQZktBSjBpS19MX1BNcGNtT1NzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZl01xSpG aZoXTGSIi1w1BJajzHWg7XeDdHWrX/08ngziFkM5kcFxQOKvfW+JN/bGtRs5lXWV YAd21Ys8pcs3mkePDXyTvwZPCubZjhwBVaID/oH3Yk4NLe6f7WDCF+eC+7TUCiDv vo0G5QUGXjxlxV0kD6Ra1KFhUeog+xB0t9I4rlptW2M1lJbM4uDcwAsICQhr0ZOz BkPf/4aHTjBpriwa2sqnbrsuA3nLdIaiPKShTNi7Ek17mhkBacWEQ1AGesP/cEdH ieGqACeQpu6KF75nnHDoSo+sbFGXznhyckTj08hhSxdE5d2mX0PEBNdgasx09Asf qIL3osKmxJ/cwQ== -----END CERTIFICATE-----Generated at Mon Feb 9 22:40:53 2026 by rpki-client