This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft File: ZAu20bLSfK4nWGXG1czH-KdXt_U.mft (raw, json) Hash identifier: liNzCR7PWdofVW5jOZIheywJ2n7UffmVorBhTrnmzTA= Subject key identifier: 6B:9F:F5:ED:17:FA:97:3E:1A:69:1E:83:3B:E4:A1:79:11:B0:DF:DC Authority key identifier: 64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 Certificate issuer: /CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Certificate serial: 019C41D8E27758D756900412C6C6C31A30E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft Manifest number: 0E5C Signing time: Mon 09 Feb 2026 10:00:58 +0000 Manifest this update: Mon 09 Feb 2026 10:00:58 +0000 Manifest next update: Tue 10 Feb 2026 10:00:58 +0000 Files and hashes: 1: ZAu20bLSfK4nWGXG1czH-KdXt_U.crl (hash: kPBmUvjL3STwh/jURTebAHAccDhxIjx5JmuS7knSs5E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:e2:77:58:d7:56:90:04:12:c6:c6:c3:1a:30:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=640bb6d1b2d27cae275865c6d5ccc7f8a757b7f5 Validity Not Before: Feb 9 10:00:58 2026 GMT Not After : Feb 10 10:00:58 2026 GMT Subject: CN=6b9ff5ed17fa973e1a691e833be4a17911b0dfdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:99:1e:b5:4b:a4:1c:34:68:f8:b2:f7:8e:d5: d1:0c:cc:ed:0b:94:30:1e:8a:89:72:16:b2:8e:92: c8:ad:b6:0d:6b:3d:b2:40:31:c1:65:29:26:61:b4: 66:6a:1b:1e:15:38:e9:2c:05:d7:97:52:d5:e1:07: 13:fc:6f:60:f1:1c:0c:4e:29:4e:fc:46:d1:32:39: 3c:2e:ae:07:10:3d:f5:32:b8:9f:19:3d:1d:8a:c3: 08:29:15:7e:fe:02:bd:bc:26:22:95:59:02:d5:65: 5f:1f:ec:dd:be:21:d0:f3:ad:a3:2f:91:66:e9:8c: ee:ec:37:30:dc:c9:a2:46:d2:8b:e8:84:76:d2:6d: 61:0e:0a:5b:49:c3:57:e5:06:f8:58:53:7d:cf:01: 54:63:30:64:51:60:f0:bd:96:34:65:c6:bc:7b:11: 7a:4d:89:d0:ea:ac:45:4b:da:8f:e3:24:d1:6c:87: a5:00:45:77:08:e5:4a:22:36:a4:07:17:c9:a1:54: a4:2e:1b:7f:c0:d4:e7:cb:4c:42:81:d8:1c:06:ec: a4:cb:8a:e4:33:5a:d0:95:a9:1d:44:5c:90:a5:49: 34:16:ad:a5:93:9b:5c:29:a7:5e:8d:42:e4:b8:95: 97:f9:06:85:21:46:f4:e7:25:d3:3e:81:4c:a3:12: c2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:9F:F5:ED:17:FA:97:3E:1A:69:1E:83:3B:E4:A1:79:11:B0:DF:DC X509v3 Authority Key Identifier: keyid:64:0B:B6:D1:B2:D2:7C:AE:27:58:65:C6:D5:CC:C7:F8:A7:57:B7:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZAu20bLSfK4nWGXG1czH-KdXt_U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5e3c0f-f8f6-4d3e-b531-9f6eabc0e843/1/ZAu20bLSfK4nWGXG1czH-KdXt_U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:f1:c7:92:2c:85:0b:1d:b6:d8:e5:aa:70:9d:b6:a1:28:0c: f3:2b:6e:57:61:5e:bd:f6:73:c7:2a:2a:84:62:91:53:ed:ef: 95:6e:fa:6f:b9:19:df:3f:18:fd:ad:7b:2d:e8:d5:7d:b5:58: 68:4a:f2:52:9e:40:17:48:44:cc:08:ef:a8:91:99:8f:bc:11: 9c:92:a2:f3:a1:47:40:7d:b7:b0:ec:0e:90:1c:b8:6a:23:c6: 02:c5:99:91:ce:d2:b1:08:b2:b5:06:b1:3b:3b:1e:bd:cf:92: 07:52:8e:26:12:0c:b6:01:a5:1c:44:4e:de:8e:81:06:a7:8d: d9:b0:e2:f5:10:8b:db:59:2a:c7:a5:d7:e7:ae:22:64:36:d6: 2e:3a:ea:cb:bd:89:3b:32:cb:7c:dd:f2:e5:a2:a1:03:9d:9c: 3f:47:98:9f:df:37:7f:ab:ac:88:4e:a5:4a:c4:49:c9:0c:18: e6:71:e8:d6:c3:38:a7:aa:b1:ed:11:a1:ab:ef:5e:ba:2a:fc: 15:ff:cf:88:2e:91:03:9a:3c:e2:aa:57:2b:8d:5b:a4:ad:5c: 21:82:e1:cf:ea:37:53:e9:05:05:50:d8:77:d3:a3:20:cf:e3: a4:5f:be:a4:40:10:f8:17:4d:b4:28:4f:a2:1b:fe:dc:eb:f1: b9:41:6e:40 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2OJ3WNdWkAQSxsbDGjDnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MGJiNmQxYjJkMjdjYWUyNzU4NjVjNmQ1Y2NjN2Y4YTc1 N2I3ZjUwHhcNMjYwMjA5MTAwMDU4WhcNMjYwMjEwMTAwMDU4WjAzMTEwLwYDVQQD Eyg2YjlmZjVlZDE3ZmE5NzNlMWE2OTFlODMzYmU0YTE3OTExYjBkZmRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05ketUukHDRo+LL3jtXRDMztC5Qw HoqJchayjpLIrbYNaz2yQDHBZSkmYbRmahseFTjpLAXXl1LV4QcT/G9g8RwMTilO /EbRMjk8Lq4HED31MrifGT0disMIKRV+/gK9vCYilVkC1WVfH+zdviHQ862jL5Fm 6Yzu7Dcw3MmiRtKL6IR20m1hDgpbScNX5Qb4WFN9zwFUYzBkUWDwvZY0Zca8exF6 TYnQ6qxFS9qP4yTRbIelAEV3COVKIjakBxfJoVSkLht/wNTny0xCgdgcBuyky4rk M1rQlakdRFyQpUk0Fq2lk5tcKadejULkuJWX+QaFIUb05yXTPoFMoxLCdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGuf9e0X+pc+GmkegzvkoXkRsN/cMB8GA1UdIwQY MBaAFGQLttGy0nyuJ1hlxtXMx/inV7f1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEt OWY2ZWFiYzBlODQzLzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS81ZTNjMGYtZjhmNi00ZDNlLWI1MzEtOWY2ZWFiYzBlODQz LzEvWkF1MjBiTFNmSzRuV0dYRzFjekgtS2RYdF9VLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa/HHkiyF Cx222OWqcJ22oSgM8ytuV2FevfZzxyoqhGKRU+3vlW76b7kZ3z8Y/a17LejVfbVY aEryUp5AF0hEzAjvqJGZj7wRnJKi86FHQH23sOwOkBy4aiPGAsWZkc7SsQiytQax Ozsevc+SB1KOJhIMtgGlHERO3o6BBqeN2bDi9RCL21kqx6XX564iZDbWLjrqy72J OzLLfN3y5aKhA52cP0eYn983f6usiE6lSsRJyQwY5nHo1sM4p6qx7RGhq+9euir8 Ff/PiC6RA5o84qpXK41bpK1cIYLhz+o3U+kFBVDYd9OjIM/jpF++pEAQ+BdNtChP ohv+3OvxuUFuQA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:59:41 2026 by rpki-client