This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft File: Zur1u0vnZQbp7F5pTYtYUKmOciM.mft (raw, json) Hash identifier: ++BzjJAyF2cbhCmobgJ8NwA6gAAjFoC9Zh3BoqpCS1o= Subject key identifier: E8:6A:E0:7D:C2:6F:A9:14:72:AF:08:61:A3:44:12:96:00:6D:B0:78 Authority key identifier: 66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 Certificate issuer: /CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Certificate serial: 019C427D597EACBE682F4ABFEDA776A2F1FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft Manifest number: 0E7C Signing time: Mon 09 Feb 2026 13:00:36 +0000 Manifest this update: Mon 09 Feb 2026 13:00:36 +0000 Manifest next update: Tue 10 Feb 2026 13:00:36 +0000 Files and hashes: 1: Zur1u0vnZQbp7F5pTYtYUKmOciM.crl (hash: CNMMdV9+OwaRNT75FwA++Oz2g9r0stdqaG8QAmWBe+0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:59:7e:ac:be:68:2f:4a:bf:ed:a7:76:a2:f1:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66eaf5bb4be76506e9ec5e694d8b5850a98e7223 Validity Not Before: Feb 9 13:00:36 2026 GMT Not After : Feb 10 13:00:36 2026 GMT Subject: CN=e86ae07dc26fa91472af0861a3441296006db078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8d:f4:7e:95:c8:95:1e:cd:48:d5:1e:97:ef: 5f:5c:84:42:eb:65:8a:e7:63:7b:56:f1:ca:ca:c3: 84:93:d0:52:8e:1b:54:f8:9c:b7:60:8d:73:aa:92: 5c:96:f9:2d:d7:2f:47:3f:85:e1:5e:3c:91:01:50: 24:f8:14:cb:7c:11:4c:95:e3:3b:74:8e:1d:81:5f: 7b:c8:bc:51:9f:70:93:62:af:90:84:71:b2:47:a8: 4b:7b:c6:b2:d8:3b:ed:7e:d2:cb:80:70:59:0d:60: f8:fc:bb:ce:97:11:7e:26:ec:f6:d9:ba:11:ee:b4: 68:e5:c9:29:5c:64:c0:5b:c9:44:20:10:35:6f:fb: ac:85:fe:2e:ba:0d:35:2c:61:fa:8d:61:d5:9d:b2: 36:81:a8:81:8e:4c:0d:c4:ee:0b:7c:31:4c:8f:d0: 8c:8a:20:ec:41:a6:b6:1d:2b:9e:f7:09:b2:f5:8a: 26:16:e9:8f:ef:23:d9:c2:32:62:af:71:cd:8c:99: b6:54:d0:f6:61:f7:cc:72:31:d3:5a:67:99:95:73: 56:67:17:40:83:cf:0a:df:0d:45:39:22:ac:3d:a2: b6:2f:e3:46:79:df:18:ad:85:7f:ad:13:7b:4b:47: 76:32:27:57:e9:cc:2d:0f:41:e4:c3:9a:ca:f7:26: 6f:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:6A:E0:7D:C2:6F:A9:14:72:AF:08:61:A3:44:12:96:00:6D:B0:78 X509v3 Authority Key Identifier: keyid:66:EA:F5:BB:4B:E7:65:06:E9:EC:5E:69:4D:8B:58:50:A9:8E:72:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zur1u0vnZQbp7F5pTYtYUKmOciM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/bb610d-6d4f-46ae-b0d8-9a1f82e0dbf5/1/Zur1u0vnZQbp7F5pTYtYUKmOciM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:b2:d4:b3:45:c3:66:ec:5d:aa:43:dd:69:f2:52:87:ec:13: b9:9a:8c:86:4c:d9:3f:55:ff:89:74:81:b0:d2:a2:ab:11:19: dd:28:e7:7b:f4:bb:5f:82:be:24:1c:87:fd:b8:3f:1a:62:68: f4:d2:9b:1d:06:12:06:ab:cc:c7:e9:2e:43:d0:87:ca:20:2f: 94:f9:7b:2a:28:52:5a:d5:4b:4f:d1:47:1e:33:9a:d4:c2:82: 97:f7:4d:3a:44:41:14:e2:f0:54:ee:fd:14:8f:8d:bd:c6:a6: 3b:6b:9d:ca:09:2a:0d:e6:98:38:34:79:9c:a2:5f:41:b3:39: 9a:4c:18:57:fc:5b:ab:a9:28:44:f4:e0:a3:f3:75:f9:f7:3f: d5:59:21:5f:30:cb:ac:5b:30:7b:3e:a1:93:3c:bb:f5:e4:94: d4:d1:fb:fb:70:5c:f4:ea:37:cf:21:cd:83:52:2c:cd:d6:a0: 53:49:23:c2:aa:ae:9d:59:dc:f1:f9:4a:0d:60:1c:dd:8e:c6: 9c:5b:43:23:83:1c:41:8c:f0:01:63:7c:33:43:e6:bf:fa:a2: bc:52:4b:1b:fd:39:2b:57:24:e4:69:c3:66:50:20:71:6c:59: 51:77:36:8b:55:cf:0e:f1:29:45:4f:ad:aa:fa:9e:8e:5a:d3: 2b:53:fb:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfVl+rL5oL0q/7ad2ovH6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY2ZWFmNWJiNGJlNzY1MDZlOWVjNWU2OTRkOGI1ODUwYTk4 ZTcyMjMwHhcNMjYwMjA5MTMwMDM2WhcNMjYwMjEwMTMwMDM2WjAzMTEwLwYDVQQD EyhlODZhZTA3ZGMyNmZhOTE0NzJhZjA4NjFhMzQ0MTI5NjAwNmRiMDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs430fpXIlR7NSNUel+9fXIRC62WK 52N7VvHKysOEk9BSjhtU+Jy3YI1zqpJclvkt1y9HP4XhXjyRAVAk+BTLfBFMleM7 dI4dgV97yLxRn3CTYq+QhHGyR6hLe8ay2DvtftLLgHBZDWD4/LvOlxF+Juz22boR 7rRo5ckpXGTAW8lEIBA1b/ushf4uug01LGH6jWHVnbI2gaiBjkwNxO4LfDFMj9CM iiDsQaa2HSue9wmy9YomFumP7yPZwjJir3HNjJm2VND2YffMcjHTWmeZlXNWZxdA g88K3w1FOSKsPaK2L+NGed8YrYV/rRN7S0d2MidX6cwtD0Hkw5rK9yZv+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhq4H3Cb6kUcq8IYaNEEpYAbbB4MB8GA1UdIwQY MBaAFGbq9btL52UG6exeaU2LWFCpjnIjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgt OWExZjgyZTBkYmY1LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9iYjYxMGQtNmQ0Zi00NmFlLWIwZDgtOWExZjgyZTBkYmY1 LzEvWnVyMXUwdm5aUWJwN0Y1cFRZdFlVS21PY2lNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWbLUs0XD ZuxdqkPdafJSh+wTuZqMhkzZP1X/iXSBsNKiqxEZ3Sjne/S7X4K+JByH/bg/GmJo 9NKbHQYSBqvMx+kuQ9CHyiAvlPl7KihSWtVLT9FHHjOa1MKCl/dNOkRBFOLwVO79 FI+NvcamO2udygkqDeaYODR5nKJfQbM5mkwYV/xbq6koRPTgo/N1+fc/1VkhXzDL rFswez6hkzy79eSU1NH7+3Bc9Oo3zyHNg1IszdagU0kjwqqunVnc8flKDWAc3Y7G nFtDI4McQYzwAWN8M0Pmv/qivFJLG/05K1ck5GnDZlAgcWxZUXc2i1XPDvEpRU+t qvqejlrTK1P7Ag== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:24 2026 by rpki-client