This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft File: ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft (raw, json) Hash identifier: BwDSsApBf7V4CXHOHYqVDYSNMCWFoKXF/B3fnSsUTmA= Subject key identifier: C7:00:2E:3F:23:D9:79:BE:C4:25:FF:0B:31:86:D4:55:A4:A6:11:D2 Authority key identifier: 64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07 Certificate issuer: /CN=6421470d5922298ed04685e1df0efdfdd2a66607 Certificate serial: 019C427D7DBE36814A6C1FD5CE46D35C631F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft Manifest number: 0E7F Signing time: Mon 09 Feb 2026 13:00:46 +0000 Manifest this update: Mon 09 Feb 2026 13:00:46 +0000 Manifest next update: Tue 10 Feb 2026 13:00:46 +0000 Files and hashes: 1: ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl (hash: 1vHUekvcuHfZuiy4vSRkV8QLg2DbeWvMDHNbv7z5SLg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:7d:be:36:81:4a:6c:1f:d5:ce:46:d3:5c:63:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6421470d5922298ed04685e1df0efdfdd2a66607 Validity Not Before: Feb 9 13:00:46 2026 GMT Not After : Feb 10 13:00:46 2026 GMT Subject: CN=c7002e3f23d979bec425ff0b3186d455a4a611d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cc:59:7d:9e:5b:d8:ba:45:78:e7:cf:20:8d: 10:aa:a7:91:05:10:04:b9:3f:9f:3b:42:f7:e0:48: 9f:47:fe:37:f1:39:bd:4f:53:bc:32:e6:ec:19:b6: 1f:78:90:59:ad:3a:4f:66:d5:7b:ac:ad:5c:c1:29: fd:63:46:c8:93:2d:e0:5e:f9:6f:8a:aa:a3:22:3f: 8b:ca:5d:06:1c:4d:bb:97:57:b1:81:a8:01:c3:56: 6d:6d:ba:ab:d5:58:f5:8d:7b:6d:be:39:9a:ea:1c: 4e:9c:50:ff:46:4b:a8:e1:f6:13:bd:1d:04:5a:d0: 74:1b:c8:6c:07:d1:0e:46:c1:6c:73:12:34:85:7f: 23:25:5f:98:3a:e5:04:98:33:8b:15:8b:3c:ef:59: fc:e5:25:92:b7:b3:4f:d2:4e:f2:41:13:9d:ce:a0: 18:d7:c1:49:5e:d1:c5:c0:87:5c:c9:0d:f9:81:af: d2:b9:20:81:9f:e0:fa:79:4a:1a:94:67:a1:b7:e6: 56:7e:3b:1f:3a:ff:e8:77:f2:99:ea:20:e2:50:a8: 00:23:50:af:61:cc:4e:59:bd:8f:34:e4:a2:92:b3: 9a:62:d2:b6:0a:54:dd:f8:9b:09:82:2f:14:ba:4c: eb:bd:dc:df:1a:5f:13:31:45:d2:5c:af:41:95:20: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:00:2E:3F:23:D9:79:BE:C4:25:FF:0B:31:86:D4:55:A4:A6:11:D2 X509v3 Authority Key Identifier: keyid:64:21:47:0D:59:22:29:8E:D0:46:85:E1:DF:0E:FD:FD:D2:A6:66:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZCFHDVkiKY7QRoXh3w79_dKmZgc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3a50cd-3e6a-4fd4-9397-58d57cd360a9/1/ZCFHDVkiKY7QRoXh3w79_dKmZgc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:af:74:16:1d:46:f4:7b:93:f3:e0:21:6d:07:cc:bc:2a:75: 27:00:85:da:a4:f5:1c:e2:ba:cd:22:3b:e7:34:b3:a6:6f:d8: 67:ed:c3:e6:d5:f7:df:bf:f0:8f:07:ce:6c:a7:99:a0:54:d4: 6b:14:ee:4c:d3:aa:86:0e:50:82:d2:6d:1e:d9:27:08:63:bd: e5:8e:ec:b9:16:b6:c1:e0:f0:21:c4:c8:6f:e2:54:5b:5e:63: 57:ae:23:bb:cf:57:83:93:c5:fe:43:5f:92:4e:73:80:14:38: 7d:d5:dd:9a:b9:dd:76:85:df:dd:83:0a:3f:97:9e:d1:9d:e9: 3c:fd:16:f8:47:b5:79:15:29:69:16:8b:d8:2b:c6:e0:10:bc: e4:af:91:2b:8e:73:08:94:2e:06:85:5d:ce:3b:19:05:cd:89: 67:d1:14:05:57:b6:e8:a5:e0:bd:9e:4a:f5:58:78:f8:73:04: a2:ea:44:a0:12:78:b8:3b:21:07:0d:ed:03:89:65:5b:57:2f: 3f:ce:4a:1e:4d:76:59:45:57:eb:66:6a:cf:62:46:27:26:52: 07:54:95:5a:cd:62:1b:c7:d2:5b:9b:a5:2a:f1:e3:05:2f:91: af:a0:d4:92:bc:68:57:a4:39:05:d1:19:22:a4:73:c1:0f:43: 9d:26:ef:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfX2+NoFKbB/VzkbTXGMfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0MjE0NzBkNTkyMjI5OGVkMDQ2ODVlMWRmMGVmZGZkZDJh NjY2MDcwHhcNMjYwMjA5MTMwMDQ2WhcNMjYwMjEwMTMwMDQ2WjAzMTEwLwYDVQQD EyhjNzAwMmUzZjIzZDk3OWJlYzQyNWZmMGIzMTg2ZDQ1NWE0YTYxMWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMxZfZ5b2LpFeOfPII0QqqeRBRAE uT+fO0L34EifR/438Tm9T1O8MubsGbYfeJBZrTpPZtV7rK1cwSn9Y0bIky3gXvlv iqqjIj+Lyl0GHE27l1exgagBw1Ztbbqr1Vj1jXttvjma6hxOnFD/Rkuo4fYTvR0E WtB0G8hsB9EORsFscxI0hX8jJV+YOuUEmDOLFYs871n85SWSt7NP0k7yQROdzqAY 18FJXtHFwIdcyQ35ga/SuSCBn+D6eUoalGeht+ZWfjsfOv/od/KZ6iDiUKgAI1Cv YcxOWb2PNOSikrOaYtK2ClTd+JsJgi8UukzrvdzfGl8TMUXSXK9BlSD0EQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMcALj8j2Xm+xCX/CzGG1FWkphHSMB8GA1UdIwQY MBaAFGQhRw1ZIimO0EaF4d8O/f3SpmYHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTct NThkNTdjZDM2MGE5LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zYTUwY2QtM2U2YS00ZmQ0LTkzOTctNThkNTdjZDM2MGE5 LzEvWkNGSERWa2lLWTdRUm9YaDN3NzlfZEttWmdjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB690Fh1G 9HuT8+AhbQfMvCp1JwCF2qT1HOK6zSI75zSzpm/YZ+3D5tX337/wjwfObKeZoFTU axTuTNOqhg5QgtJtHtknCGO95Y7suRa2weDwIcTIb+JUW15jV64ju89Xg5PF/kNf kk5zgBQ4fdXdmrnddoXf3YMKP5ee0Z3pPP0W+Ee1eRUpaRaL2CvG4BC85K+RK45z CJQuBoVdzjsZBc2JZ9EUBVe26KXgvZ5K9Vh4+HMEoupEoBJ4uDshBw3tA4llW1cv P85KHk12WUVX62Zqz2JGJyZSB1SVWs1iG8fSW5ulKvHjBS+Rr6DUkrxoV6Q5BdEZ IqRzwQ9DnSbvnA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:44 2026 by rpki-client