This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft File: z-A2c7iPCK9i_mUqGPb6nINLWO0.mft (raw, json) Hash identifier: kVcqayZDJqNBRknZACWTzacg83HguwLZFBVy4kceOMM= Subject key identifier: 30:50:0A:96:A4:BE:9C:2C:AD:D0:36:30:4E:FC:80:09:BC:23:77:D5 Authority key identifier: CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED Certificate issuer: /CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed Certificate serial: 019C432221E9D773FD886D2F3E2A9E158338 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft Manifest number: 13C1 Signing time: Mon 09 Feb 2026 16:00:36 +0000 Manifest this update: Mon 09 Feb 2026 16:00:36 +0000 Manifest next update: Tue 10 Feb 2026 16:00:36 +0000 Files and hashes: 1: z-A2c7iPCK9i_mUqGPb6nINLWO0.crl (hash: xEzAzBVL+wc8Ho8JQTxn6+Td7pa97ZSSgCwwgzGjomA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:21:e9:d7:73:fd:88:6d:2f:3e:2a:9e:15:83:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfe03673b88f08af62fe652a18f6fa9c834b58ed Validity Not Before: Feb 9 16:00:36 2026 GMT Not After : Feb 10 16:00:36 2026 GMT Subject: CN=30500a96a4be9c2cadd036304efc8009bc2377d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:27:f2:4c:b4:1a:1e:39:75:f5:b1:d7:a7:51: 2d:c9:81:bb:b2:ed:2e:82:2d:9a:cd:52:5f:48:e1: 75:b6:34:1f:03:a4:03:17:94:6c:cd:d4:4e:ab:27: 99:88:65:fd:c7:52:80:07:6b:df:9c:51:b1:07:bf: 3e:d6:a8:18:95:b3:cf:ac:54:f1:de:f3:d4:a9:6e: 77:08:4e:43:89:d9:c3:f4:cd:29:91:76:48:bf:04: 2f:e5:ba:43:1a:9a:ae:9f:46:c3:dc:6c:4c:2b:a7: 98:f0:bc:85:87:ff:47:d9:dd:63:8a:43:ae:03:cc: 56:2b:bf:a9:be:ce:e5:b5:20:c2:84:69:97:90:b6: 90:5d:5d:e9:b4:e9:14:16:38:b2:d5:87:b5:9d:8d: ab:27:cd:b5:d1:cd:c1:ef:30:70:ee:28:d9:d5:1d: d2:23:aa:a4:40:dd:70:b5:9b:1b:70:be:3c:4a:a2: fe:2f:23:19:40:67:92:c8:1d:90:95:77:30:cc:47: 14:a9:ce:ec:40:4f:03:13:f1:6e:3f:04:69:10:b8: 2f:aa:91:37:96:79:42:28:15:d9:6c:f1:4b:0d:85: de:c6:fc:03:04:22:7a:62:c5:b9:d2:97:4f:00:ee: 29:a8:5e:54:28:94:57:5b:a9:13:fa:ec:57:71:9b: 82:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:50:0A:96:A4:BE:9C:2C:AD:D0:36:30:4E:FC:80:09:BC:23:77:D5 X509v3 Authority Key Identifier: keyid:CF:E0:36:73:B8:8F:08:AF:62:FE:65:2A:18:F6:FA:9C:83:4B:58:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z-A2c7iPCK9i_mUqGPb6nINLWO0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/fbee65-8a88-4d13-9eb7-7a12eedf8e5c/1/z-A2c7iPCK9i_mUqGPb6nINLWO0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:1a:7f:fe:4f:36:db:d0:69:f6:02:25:66:b3:5c:af:24:4f: 1d:bb:a1:80:ae:3f:c3:9c:24:ed:3a:0a:32:80:5d:c8:14:43: 26:5b:ed:47:c2:56:4d:c3:c0:eb:df:b4:0b:ad:42:09:20:2e: 6b:a8:a1:36:cc:81:cf:0a:c2:5c:fd:12:eb:16:aa:52:a1:85: 52:d7:35:e9:29:24:3e:e4:24:72:d0:25:60:17:1b:54:f6:c7: d3:86:03:a0:40:46:54:e7:18:f4:97:02:1b:40:33:13:8a:ba: d4:c1:d1:08:eb:91:1c:dd:af:71:37:02:41:88:af:e7:b8:d3: 77:d0:b7:17:5a:ee:0b:23:80:47:78:8e:a5:e2:f8:7d:1a:74: 9f:6a:dd:fd:76:f8:09:b9:28:5f:65:26:81:3d:28:44:6b:8b: a1:9e:3c:1d:07:1f:10:b7:3d:32:a4:f8:d8:45:93:6a:a4:da: de:aa:7b:23:b0:35:65:32:8c:21:8d:bd:19:3e:8f:f4:a2:8c: 9d:3a:18:c9:cc:de:8a:74:03:7b:a8:2a:b2:49:e1:b3:7d:11: 75:61:d2:68:bc:5d:2c:a7:7f:45:b6:e6:f0:95:76:56:a4:ff: 08:94:30:7c:71:96:54:b7:e6:38:b5:8f:a6:f8:dc:17:38:33: e2:ea:d1:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIiHp13P9iG0vPiqeFYM4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmZTAzNjczYjg4ZjA4YWY2MmZlNjUyYTE4ZjZmYTljODM0 YjU4ZWQwHhcNMjYwMjA5MTYwMDM2WhcNMjYwMjEwMTYwMDM2WjAzMTEwLwYDVQQD EygzMDUwMGE5NmE0YmU5YzJjYWRkMDM2MzA0ZWZjODAwOWJjMjM3N2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSfyTLQaHjl19bHXp1EtyYG7su0u gi2azVJfSOF1tjQfA6QDF5RszdROqyeZiGX9x1KAB2vfnFGxB78+1qgYlbPPrFTx 3vPUqW53CE5DidnD9M0pkXZIvwQv5bpDGpqun0bD3GxMK6eY8LyFh/9H2d1jikOu A8xWK7+pvs7ltSDChGmXkLaQXV3ptOkUFjiy1Ye1nY2rJ8210c3B7zBw7ijZ1R3S I6qkQN1wtZsbcL48SqL+LyMZQGeSyB2QlXcwzEcUqc7sQE8DE/FuPwRpELgvqpE3 lnlCKBXZbPFLDYXexvwDBCJ6YsW50pdPAO4pqF5UKJRXW6kT+uxXcZuCUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDBQCpakvpwsrdA2ME78gAm8I3fVMB8GA1UdIwQY MBaAFM/gNnO4jwivYv5lKhj2+pyDS1jtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjct N2ExMmVlZGY4ZTVjLzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9mYmVlNjUtOGE4OC00ZDEzLTllYjctN2ExMmVlZGY4ZTVj LzEvei1BMmM3aVBDSzlpX21VcUdQYjZuSU5MV08wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkxp//k82 29Bp9gIlZrNcryRPHbuhgK4/w5wk7ToKMoBdyBRDJlvtR8JWTcPA69+0C61CCSAu a6ihNsyBzwrCXP0S6xaqUqGFUtc16SkkPuQkctAlYBcbVPbH04YDoEBGVOcY9JcC G0AzE4q61MHRCOuRHN2vcTcCQYiv57jTd9C3F1ruCyOAR3iOpeL4fRp0n2rd/Xb4 CbkoX2UmgT0oRGuLoZ48HQcfELc9MqT42EWTaqTa3qp7I7A1ZTKMIY29GT6P9KKM nToYyczeinQDe6gqsknhs30RdWHSaLxdLKd/Rbbm8JV2VqT/CJQwfHGWVLfmOLWP pvjcFzgz4urR7Q== -----END CERTIFICATE-----Generated at Mon Feb 9 20:55:57 2026 by rpki-client