This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft File: z_XdxJt16oTfRa4RTEMh1G1azUo.mft (raw, json) Hash identifier: enmcAsv0vp03mIPdsv5ya0KkOmOUl/o7Q6Q9w9dF40Y= Subject key identifier: B2:8B:72:56:5C:E6:3E:BB:56:1B:66:7F:D8:31:C4:B4:37:82:A3:72 Authority key identifier: CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A Certificate issuer: /CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a Certificate serial: 019C4210376BBA9A86411489B021B4D9D77D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft Manifest number: 0F52 Signing time: Mon 09 Feb 2026 11:01:24 +0000 Manifest this update: Mon 09 Feb 2026 11:01:24 +0000 Manifest next update: Tue 10 Feb 2026 11:01:24 +0000 Files and hashes: 1: z_XdxJt16oTfRa4RTEMh1G1azUo.crl (hash: ZnKjWJSSdi1FY91iC4FfKy+m8hqdx4Pm4njYj3ImRcc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:10:37:6b:ba:9a:86:41:14:89:b0:21:b4:d9:d7:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cff5ddc49b75ea84df45ae114c4321d46d5acd4a Validity Not Before: Feb 9 11:01:24 2026 GMT Not After : Feb 10 11:01:24 2026 GMT Subject: CN=b28b72565ce63ebb561b667fd831c4b43782a372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ad:ca:b8:1b:09:50:77:05:9c:52:44:6b:f0: 42:d8:dd:42:5e:53:20:53:cc:41:7c:f3:17:aa:25: a1:40:8d:c0:b7:fa:9e:bd:1f:ee:c2:62:64:9b:b7: 9c:19:64:2c:7d:92:f7:f8:2e:13:a7:2f:da:b0:7f: 0e:04:72:1f:ee:ee:f8:df:9a:58:87:89:cf:f1:80: 1b:00:7e:be:09:5c:8b:81:ce:45:2e:95:d3:b7:ea: 67:79:f3:c4:28:28:4f:55:bb:60:c4:39:74:e0:60: f7:a5:56:5e:c3:93:0b:c5:b9:14:7a:80:60:6a:9f: f1:63:69:9b:f4:51:ea:6f:1e:b5:52:cb:99:18:2a: 07:5d:10:2f:8b:a7:df:31:aa:54:52:65:ec:c3:70: 9f:48:91:d4:f0:ba:67:73:f7:5a:f6:2b:15:ca:4f: 88:8b:5a:66:aa:2e:6a:f9:69:58:34:44:48:9a:f0: 0c:ae:d4:37:aa:4f:6c:ab:1f:04:91:af:5f:7d:41: 31:e7:c1:5a:d6:3a:e4:43:c2:d7:69:9e:4f:fd:d0: b2:5f:da:da:af:b2:b5:b1:85:31:79:ea:c1:89:38: 32:f6:51:af:c3:54:f9:97:1c:75:b3:20:68:9c:80: 5b:f9:8e:a6:ae:a9:7c:1f:2a:a3:f0:bb:6e:9a:7c: 1f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8B:72:56:5C:E6:3E:BB:56:1B:66:7F:D8:31:C4:B4:37:82:A3:72 X509v3 Authority Key Identifier: keyid:CF:F5:DD:C4:9B:75:EA:84:DF:45:AE:11:4C:43:21:D4:6D:5A:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z_XdxJt16oTfRa4RTEMh1G1azUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8b4ad8-3d6a-4357-b1d6-17798b2daac4/1/z_XdxJt16oTfRa4RTEMh1G1azUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:77:d4:e2:01:e5:28:d5:8a:60:43:3c:db:42:99:1c:21:3a: 9d:85:d6:cc:08:d1:25:b3:21:3c:23:d5:d8:37:6e:1d:b4:87: 02:3c:43:03:6b:9f:c3:1a:ad:ea:2e:a1:39:3c:67:ff:1c:ca: 71:c7:8d:d4:7d:0f:e0:8e:03:9d:3a:71:c1:68:d1:17:6c:2f: f5:c2:7e:08:90:e9:73:76:91:ef:9a:dc:ec:dc:55:d6:39:52: 71:86:e9:4d:ea:d0:86:8a:fc:d3:da:5d:14:6e:e8:2d:51:d4: c3:7f:aa:4a:12:42:f4:82:0e:82:a3:44:a7:d3:95:49:ab:4e: 39:f2:8d:39:17:fa:2e:6a:f3:70:89:de:eb:25:13:84:ad:8d: 3c:be:32:ce:5f:3a:4d:6d:7b:db:f6:02:8c:3f:ce:02:d9:9a: bd:10:9b:30:b3:83:59:d5:67:d3:82:3f:ff:f4:eb:9d:1d:bf: 2a:2c:b0:f3:8d:8b:2d:1e:21:1c:3a:7a:38:5b:d7:1a:c2:ea: 90:9c:bc:cd:a6:3f:36:00:b6:45:ce:c2:42:d7:15:30:ee:c5: 3d:53:7e:da:36:39:11:dc:5d:a1:69:b8:da:86:7f:79:0d:08: 04:c5:3a:cf:c7:28:d2:50:b9:f1:72:db:21:77:42:46:b5:69: f5:a2:3c:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCEDdrupqGQRSJsCG02dd9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZjVkZGM0OWI3NWVhODRkZjQ1YWUxMTRjNDMyMWQ0NmQ1 YWNkNGEwHhcNMjYwMjA5MTEwMTI0WhcNMjYwMjEwMTEwMTI0WjAzMTEwLwYDVQQD EyhiMjhiNzI1NjVjZTYzZWJiNTYxYjY2N2ZkODMxYzRiNDM3ODJhMzcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua3KuBsJUHcFnFJEa/BC2N1CXlMg U8xBfPMXqiWhQI3At/qevR/uwmJkm7ecGWQsfZL3+C4Tpy/asH8OBHIf7u7435pY h4nP8YAbAH6+CVyLgc5FLpXTt+pnefPEKChPVbtgxDl04GD3pVZew5MLxbkUeoBg ap/xY2mb9FHqbx61UsuZGCoHXRAvi6ffMapUUmXsw3CfSJHU8Lpnc/da9isVyk+I i1pmqi5q+WlYNERImvAMrtQ3qk9sqx8Eka9ffUEx58Fa1jrkQ8LXaZ5P/dCyX9ra r7K1sYUxeerBiTgy9lGvw1T5lxx1syBonIBb+Y6mrql8Hyqj8LtumnwfgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLKLclZc5j67Vhtmf9gxxLQ3gqNyMB8GA1UdIwQY MBaAFM/13cSbdeqE30WuEUxDIdRtWs1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYt MTc3OThiMmRhYWM0LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi84YjRhZDgtM2Q2YS00MzU3LWIxZDYtMTc3OThiMmRhYWM0 LzEvel9YZHhKdDE2b1RmUmE0UlRFTWgxRzFhelVvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3fU4gHl KNWKYEM820KZHCE6nYXWzAjRJbMhPCPV2DduHbSHAjxDA2ufwxqt6i6hOTxn/xzK cceN1H0P4I4DnTpxwWjRF2wv9cJ+CJDpc3aR75rc7NxV1jlScYbpTerQhor809pd FG7oLVHUw3+qShJC9IIOgqNEp9OVSatOOfKNORf6LmrzcIne6yUThK2NPL4yzl86 TW172/YCjD/OAtmavRCbMLODWdVn04I///TrnR2/Kiyw842LLR4hHDp6OFvXGsLq kJy8zaY/NgC2Rc7CQtcVMO7FPVN+2jY5EdxdoWm42oZ/eQ0IBMU6z8co0lC58XLb IXdCRrVp9aI8Sg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:55 2026 by rpki-client