This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft File: ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft (raw, json) Hash identifier: licvS/k31hpDCTAlT8DGRMYaaYfuJZ9r+1foUoDjgE4= Subject key identifier: 48:6B:DE:FC:30:74:FE:4C:BE:56:54:28:5D:71:CD:1A:55:A7:6C:E4 Authority key identifier: 64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9 Certificate issuer: /CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9 Certificate serial: 019C4322547A04715407756D4DA0F8FA80F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft Manifest number: 179E Signing time: Mon 09 Feb 2026 16:00:49 +0000 Manifest this update: Mon 09 Feb 2026 16:00:49 +0000 Manifest next update: Tue 10 Feb 2026 16:00:49 +0000 Files and hashes: 1: ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl (hash: rj2tux7I1Na/KribFd1XEiX2gW7M2j8c94p20cwOFAU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:54:7a:04:71:54:07:75:6d:4d:a0:f8:fa:80:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64daeae28a41fc74010d0bfb83fd80ca345c57f9 Validity Not Before: Feb 9 16:00:49 2026 GMT Not After : Feb 10 16:00:49 2026 GMT Subject: CN=486bdefc3074fe4cbe5654285d71cd1a55a76ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:20:0b:93:d4:be:2c:9a:88:bb:1b:5b:66:90: 0e:ab:af:c8:f2:51:aa:2b:ca:b4:c6:78:60:b2:bc: af:0e:b3:6d:c6:94:5b:b6:3f:af:c6:13:98:44:0c: e7:d7:34:24:5e:cc:94:0b:b7:35:5b:f5:e4:af:39: 16:4d:8f:be:6a:a5:b6:18:d2:ae:ca:0f:a8:77:89: da:16:23:9c:03:5f:4d:a0:34:4e:15:8b:f0:24:7e: 04:48:02:4c:41:cd:36:11:29:63:e8:ef:66:38:01: e0:19:ac:50:a8:0b:ce:ad:c5:a3:3f:26:63:1a:f2: 20:0e:a3:68:cf:da:bd:89:4a:7c:b3:ff:bc:d8:ff: 93:ac:39:d8:5d:fb:3e:52:7a:56:9a:88:ab:3f:ed: 69:f2:f7:8a:12:51:fa:65:e0:5c:33:54:b2:cd:fc: 98:3d:7c:04:67:7c:57:cd:dc:c8:7a:55:cf:2f:b1: 40:75:15:5f:e0:7b:3c:0c:4b:b3:69:91:a0:3f:ea: a7:6d:3e:84:e7:97:ae:14:ee:1a:8a:db:d3:96:96: e4:0c:ce:f8:ba:9e:13:32:25:7e:86:42:ba:ed:68: 50:8d:59:f5:79:57:78:d8:99:c9:1d:36:95:ed:b5: df:42:15:b4:3f:50:68:21:32:90:23:27:ef:89:76: 6d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:6B:DE:FC:30:74:FE:4C:BE:56:54:28:5D:71:CD:1A:55:A7:6C:E4 X509v3 Authority Key Identifier: keyid:64:DA:EA:E2:8A:41:FC:74:01:0D:0B:FB:83:FD:80:CA:34:5C:57:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNrq4opB_HQBDQv7g_2AyjRcV_k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/aee2fa-6131-47fa-b1e6-65a242002270/1/ZNrq4opB_HQBDQv7g_2AyjRcV_k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:20:a5:ec:c3:7e:bf:3a:7a:f2:64:be:f3:bd:8a:f8:74:7f: 9b:52:b1:91:7c:3f:75:af:75:91:5d:99:ea:f7:c0:30:d4:ce: 71:2e:55:37:11:aa:46:8c:cf:92:d2:94:c2:c5:7f:d9:ce:35: ca:1f:a9:5d:46:b0:72:f1:28:0c:77:14:d5:bc:93:5b:7d:f3: 3f:9d:39:3f:e7:b7:f3:a3:c8:05:f7:ba:4c:f4:66:36:40:d5: 19:a3:7e:c3:33:53:92:99:5a:28:49:e9:54:7d:37:c5:db:7b: 06:4f:6d:97:47:8a:59:f6:64:af:37:36:07:25:d6:27:d8:02: d8:ed:19:56:1f:08:8a:a4:1b:81:c0:07:b9:1b:ed:ed:6c:77: a8:d1:9f:41:d6:9a:5f:f4:7b:8a:1d:f6:0e:02:11:ce:24:9b: 54:fe:11:bf:8f:65:91:94:8a:74:88:51:f8:27:e4:30:45:aa: b1:ed:44:36:87:49:12:26:7e:2f:f2:ca:cf:74:6b:36:cc:d5: 4e:3a:28:c8:dc:e5:d4:a5:7a:cd:0c:9a:e7:c2:33:59:52:63: 5a:ec:42:02:30:57:1d:21:72:c5:ee:d4:e3:ac:3a:cc:ae:d5: 26:94:09:8a:57:79:c1:1e:de:6a:01:02:46:26:e9:90:5e:ca: 01:33:86:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIlR6BHFUB3VtTaD4+oDwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ZGFlYWUyOGE0MWZjNzQwMTBkMGJmYjgzZmQ4MGNhMzQ1 YzU3ZjkwHhcNMjYwMjA5MTYwMDQ5WhcNMjYwMjEwMTYwMDQ5WjAzMTEwLwYDVQQD Eyg0ODZiZGVmYzMwNzRmZTRjYmU1NjU0Mjg1ZDcxY2QxYTU1YTc2Y2U0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCALk9S+LJqIuxtbZpAOq6/I8lGq K8q0xnhgsryvDrNtxpRbtj+vxhOYRAzn1zQkXsyUC7c1W/XkrzkWTY++aqW2GNKu yg+od4naFiOcA19NoDROFYvwJH4ESAJMQc02ESlj6O9mOAHgGaxQqAvOrcWjPyZj GvIgDqNoz9q9iUp8s/+82P+TrDnYXfs+UnpWmoirP+1p8veKElH6ZeBcM1SyzfyY PXwEZ3xXzdzIelXPL7FAdRVf4Hs8DEuzaZGgP+qnbT6E55euFO4aitvTlpbkDM74 up4TMiV+hkK67WhQjVn1eVd42JnJHTaV7bXfQhW0P1BoITKQIyfviXZtVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEhr3vwwdP5MvlZUKF1xzRpVp2zkMB8GA1UdIwQY MBaAFGTa6uKKQfx0AQ0L+4P9gMo0XFf5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hZWUyZmEtNjEzMS00N2ZhLWIxZTYt NjVhMjQyMDAyMjcwLzEvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hZWUyZmEtNjEzMS00N2ZhLWIxZTYtNjVhMjQyMDAyMjcw LzEvWk5ycTRvcEJfSFFCRFF2N2dfMkF5alJjVl9rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMSCl7MN+ vzp68mS+872K+HR/m1KxkXw/da91kV2Z6vfAMNTOcS5VNxGqRozPktKUwsV/2c41 yh+pXUawcvEoDHcU1byTW33zP505P+e386PIBfe6TPRmNkDVGaN+wzNTkplaKEnp VH03xdt7Bk9tl0eKWfZkrzc2ByXWJ9gC2O0ZVh8IiqQbgcAHuRvt7Wx3qNGfQdaa X/R7ih32DgIRziSbVP4Rv49lkZSKdIhR+CfkMEWqse1ENodJEiZ+L/LKz3RrNszV TjooyNzl1KV6zQya58IzWVJjWuxCAjBXHSFyxe7U46w6zK7VJpQJild5wR7eagEC RibpkF7KATOGbw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:47:27 2026 by rpki-client