This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft File: z00MprtJ1sl6k6M0lXdt4nUDPUw.mft (raw, json) Hash identifier: f/7aQxOPDx7d5WCazi7suYAE6NkIjGGZ6b0PqNimkfU= Subject key identifier: 2E:A9:24:64:2D:81:1E:DA:7A:46:6D:FB:2D:32:D8:4D:18:CA:7B:7B Authority key identifier: CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C Certificate issuer: /CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c Certificate serial: 019C4322C6226C88B1F5EB3044A9A9777C5B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft Manifest number: 0B76 Signing time: Mon 09 Feb 2026 16:01:18 +0000 Manifest this update: Mon 09 Feb 2026 16:01:18 +0000 Manifest next update: Tue 10 Feb 2026 16:01:18 +0000 Files and hashes: 1: z00MprtJ1sl6k6M0lXdt4nUDPUw.crl (hash: l10pMQP+Ibv19fPSAc/ZoKn1ZKx8zhzobJ4NY/WT1MQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:c6:22:6c:88:b1:f5:eb:30:44:a9:a9:77:7c:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf4d0ca6bb49d6c97a93a33495776de275033d4c Validity Not Before: Feb 9 16:01:18 2026 GMT Not After : Feb 10 16:01:18 2026 GMT Subject: CN=2ea924642d811eda7a466dfb2d32d84d18ca7b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:73:33:57:eb:cd:c7:ab:0e:94:9a:e5:46:c6: b3:27:13:85:fd:ba:f8:d7:71:d0:9f:87:12:db:ba: 04:a2:75:19:d8:fc:b1:e1:13:46:51:73:2f:a6:a2: 4e:32:52:e6:fb:df:2c:58:d9:33:41:fa:72:c4:8d: 60:27:14:e7:0c:42:10:a6:65:1f:a7:78:05:94:08: 7b:0f:2f:9d:8f:38:08:55:5f:26:cd:12:89:fb:38: 5b:30:0f:35:a7:bb:cb:3d:64:34:d7:91:00:03:d8: fd:74:fc:cc:5a:e9:00:92:f4:d0:fc:f0:4d:8d:e9: 75:40:bd:d4:8c:ad:06:3c:79:ea:6a:02:a0:e7:d9: 36:05:ec:2d:47:fd:e1:a3:ab:da:9a:54:dc:8c:fe: 87:7a:9c:35:e1:8d:20:81:82:81:65:5e:ce:fc:d4: 5c:65:7e:39:8d:fb:d7:82:76:b3:da:0d:e4:75:d7: 0f:72:28:7b:3d:14:8e:94:4b:48:e8:d8:19:fc:81: 60:86:a8:44:97:ff:e8:26:e2:b3:93:0e:a3:44:7c: eb:f3:2a:b3:c3:52:ab:aa:81:3a:7c:89:cd:06:87: 09:65:bf:7b:63:60:34:1e:b0:dc:36:ba:4c:7f:96: 6d:52:9a:d3:e1:ae:39:8b:33:a5:0d:ce:24:42:bb: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A9:24:64:2D:81:1E:DA:7A:46:6D:FB:2D:32:D8:4D:18:CA:7B:7B X509v3 Authority Key Identifier: keyid:CF:4D:0C:A6:BB:49:D6:C9:7A:93:A3:34:95:77:6D:E2:75:03:3D:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z00MprtJ1sl6k6M0lXdt4nUDPUw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9395a0-23b8-4e46-9e49-ac0bd37c9dc1/1/z00MprtJ1sl6k6M0lXdt4nUDPUw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ad:ab:ff:7e:b8:93:62:5e:11:9e:95:bd:06:c4:37:a4:8c: dd:69:ec:01:7e:06:8d:bb:7a:d8:2b:8b:e1:6f:8f:c4:02:5f: 6a:84:0a:b3:cc:9c:39:e7:c8:13:94:77:d7:d8:d1:a2:da:63: 5e:ff:f5:72:00:f6:2d:48:e2:f1:5a:3c:6f:e5:4e:42:15:e1: 0c:26:e7:ef:32:de:0a:a3:a6:48:00:54:1b:47:29:c7:5c:07: 27:78:29:c7:dc:68:52:da:ce:38:a6:c6:20:8a:a0:cc:c2:97: 81:5d:9a:0a:3d:3c:60:3d:ca:b6:10:f2:6e:51:5b:85:c4:a3: 3f:0a:f9:1d:75:88:7d:36:1a:e6:49:e0:b3:50:38:ae:4e:94: b8:f4:72:38:cd:0a:3e:a3:05:2d:0b:64:22:d0:f9:41:e2:18: 57:1c:34:c3:35:20:fc:ad:91:c0:94:24:34:59:33:d1:18:40: cb:a2:05:df:0d:3c:8e:2d:79:e4:24:8e:bb:dc:e1:26:76:27: 3f:c5:69:49:26:58:4f:e5:51:dc:35:73:b9:bc:13:bb:17:08: f2:06:20:d0:1c:7c:1f:f6:7d:45:1b:52:6f:88:91:fa:15:93: 80:e5:1f:5e:d2:fe:37:3e:c2:b2:a8:b6:cb:fc:91:f9:3d:58: f6:bb:61:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIsYibIix9eswRKmpd3xbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmNGQwY2E2YmI0OWQ2Yzk3YTkzYTMzNDk1Nzc2ZGUyNzUw MzNkNGMwHhcNMjYwMjA5MTYwMTE4WhcNMjYwMjEwMTYwMTE4WjAzMTEwLwYDVQQD EygyZWE5MjQ2NDJkODExZWRhN2E0NjZkZmIyZDMyZDg0ZDE4Y2E3YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3MzV+vNx6sOlJrlRsazJxOF/br4 13HQn4cS27oEonUZ2Pyx4RNGUXMvpqJOMlLm+98sWNkzQfpyxI1gJxTnDEIQpmUf p3gFlAh7Dy+djzgIVV8mzRKJ+zhbMA81p7vLPWQ015EAA9j9dPzMWukAkvTQ/PBN jel1QL3UjK0GPHnqagKg59k2BewtR/3ho6vamlTcjP6Hepw14Y0ggYKBZV7O/NRc ZX45jfvXgnaz2g3kddcPcih7PRSOlEtI6NgZ/IFghqhEl//oJuKzkw6jRHzr8yqz w1KrqoE6fInNBocJZb97Y2A0HrDcNrpMf5ZtUprT4a45izOlDc4kQruytwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6pJGQtgR7aekZt+y0y2E0Yynt7MB8GA1UdIwQY MBaAFM9NDKa7SdbJepOjNJV3beJ1Az1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDkt YWMwYmQzN2M5ZGMxLzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC85Mzk1YTAtMjNiOC00ZTQ2LTllNDktYWMwYmQzN2M5ZGMx LzEvejAwTXBydEoxc2w2azZNMGxYZHQ0blVEUFV3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWq2r/364 k2JeEZ6VvQbEN6SM3WnsAX4Gjbt62CuL4W+PxAJfaoQKs8ycOefIE5R319jRotpj Xv/1cgD2LUji8Vo8b+VOQhXhDCbn7zLeCqOmSABUG0cpx1wHJ3gpx9xoUtrOOKbG IIqgzMKXgV2aCj08YD3KthDyblFbhcSjPwr5HXWIfTYa5kngs1A4rk6UuPRyOM0K PqMFLQtkItD5QeIYVxw0wzUg/K2RwJQkNFkz0RhAy6IF3w08ji155CSOu9zhJnYn P8VpSSZYT+VR3DVzubwTuxcI8gYg0Bx8H/Z9RRtSb4iR+hWTgOUfXtL+Nz7Csqi2 y/yR+T1Y9rthWw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:40 2026 by rpki-client