This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft File: zxTbNzCF4owNm3S-e46JdAuV-fo.mft (raw, json) Hash identifier: f/IcfpWGm4c1T21gN8szfkcD3Vf4Kot81PfFzect5rg= Subject key identifier: D5:31:E2:7D:7A:8D:27:37:ED:AA:08:7C:2D:6A:1B:9B:D0:29:5A:A4 Authority key identifier: CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA Certificate issuer: /CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa Certificate serial: 019C4510E6F193888BB1A038EFF47F62FDA2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft Manifest number: 0E0C Signing time: Tue 10 Feb 2026 01:01:01 +0000 Manifest this update: Tue 10 Feb 2026 01:01:01 +0000 Manifest next update: Wed 11 Feb 2026 01:01:01 +0000 Files and hashes: 1: zxTbNzCF4owNm3S-e46JdAuV-fo.crl (hash: UoscbilBJnyzlT4hCAGv3T2bfYJk21ihX9N2xx58tdM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:10:e6:f1:93:88:8b:b1:a0:38:ef:f4:7f:62:fd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf14db373085e28c0d9b74be7b8e89740b95f9fa Validity Not Before: Feb 10 01:01:01 2026 GMT Not After : Feb 11 01:01:01 2026 GMT Subject: CN=d531e27d7a8d2737edaa087c2d6a1b9bd0295aa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:16:d6:c3:42:3b:b6:36:d8:7e:cb:3c:9b:d0: 4a:c0:65:0f:ae:dd:c7:80:be:e7:d6:c4:90:fa:db: af:75:2f:e1:be:1f:3f:0b:e4:de:19:08:ff:84:56: 83:71:b2:41:c3:c7:e0:61:00:14:9d:67:33:2a:2f: 54:49:46:e0:07:b7:42:6d:e8:04:da:cd:13:c6:8d: fb:db:45:3f:b3:90:56:04:08:03:97:4d:5b:e8:b4: fe:81:c5:28:9c:18:64:6f:6f:38:1d:2d:92:bb:44: e5:34:9f:ae:28:d3:3f:fb:1c:88:19:d9:f5:07:25: 9e:c8:36:72:cb:db:36:c0:b7:83:a4:d9:05:a3:57: 4e:43:67:14:47:69:80:c7:ba:71:b1:b2:ed:99:14: 56:e4:fe:31:40:f9:fc:84:6e:7b:de:37:9c:37:d6: 9c:fd:ee:60:f3:32:39:02:b7:1f:29:08:5c:7c:ae: e5:1b:ee:fb:8d:0a:25:41:f2:c1:e9:46:17:1a:df: e9:37:fd:9c:76:2a:ad:13:1e:99:bb:04:cd:4d:da: 78:14:93:c5:43:fc:34:75:50:9e:ac:f5:ef:dc:30: c3:73:2d:17:bf:a0:5d:17:bb:ec:82:33:7c:1a:83: 6f:87:11:b2:03:9d:7d:01:48:a7:24:69:4a:4c:1c: 8c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:31:E2:7D:7A:8D:27:37:ED:AA:08:7C:2D:6A:1B:9B:D0:29:5A:A4 X509v3 Authority Key Identifier: keyid:CF:14:DB:37:30:85:E2:8C:0D:9B:74:BE:7B:8E:89:74:0B:95:F9:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zxTbNzCF4owNm3S-e46JdAuV-fo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e1caef-ca6f-4881-bc58-0a131f65c968/1/zxTbNzCF4owNm3S-e46JdAuV-fo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:8e:97:35:20:fc:d9:d6:58:cc:d0:d5:8b:b0:5e:59:d6:0c: 64:47:4c:55:59:6d:ed:24:d9:96:e1:65:d7:1e:f1:d4:a3:7a: 56:aa:e9:e1:4d:6b:ec:3f:33:05:24:23:f8:47:89:34:d3:9f: 98:57:c4:10:fc:29:1e:ec:2a:7f:d5:67:b7:fb:e7:51:84:c8: c0:f8:19:46:f4:47:18:70:c8:a1:2c:48:5e:cb:dc:d4:08:67: 6d:02:3d:85:f0:fb:66:e9:f5:62:e0:18:93:9e:a7:3e:fc:1d: 72:6a:92:87:5a:37:43:8c:ae:74:1a:23:18:2a:bb:74:53:85: 15:4b:20:9b:4f:7a:d5:ae:02:18:c3:30:37:09:c7:ce:e5:cc: c9:6a:34:51:cf:f6:ca:87:58:f4:05:33:b6:81:d2:bd:60:74: 2f:e8:00:87:c3:17:6d:80:28:d6:19:47:e7:68:95:d4:e2:5d: 2f:f9:1b:7b:4b:a5:ac:5a:46:32:2d:b3:dd:40:44:6e:9e:d7: 60:fb:a2:f0:15:ed:26:04:f1:b2:e3:fe:45:4f:e1:7d:50:69: d8:ad:0b:fa:0c:8e:57:5d:dc:a1:23:a7:1b:24:fb:10:f7:e4: 9d:ab:ef:3d:e3:b2:23:56:aa:c0:ca:64:74:f7:c8:f0:20:5d: da:4a:90:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFEObxk4iLsaA47/R/Yv2iMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNmMTRkYjM3MzA4NWUyOGMwZDliNzRiZTdiOGU4OTc0MGI5 NWY5ZmEwHhcNMjYwMjEwMDEwMTAxWhcNMjYwMjExMDEwMTAxWjAzMTEwLwYDVQQD EyhkNTMxZTI3ZDdhOGQyNzM3ZWRhYTA4N2MyZDZhMWI5YmQwMjk1YWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxbWw0I7tjbYfss8m9BKwGUPrt3H gL7n1sSQ+tuvdS/hvh8/C+TeGQj/hFaDcbJBw8fgYQAUnWczKi9USUbgB7dCbegE 2s0Txo3720U/s5BWBAgDl01b6LT+gcUonBhkb284HS2Su0TlNJ+uKNM/+xyIGdn1 ByWeyDZyy9s2wLeDpNkFo1dOQ2cUR2mAx7pxsbLtmRRW5P4xQPn8hG573jecN9ac /e5g8zI5ArcfKQhcfK7lG+77jQolQfLB6UYXGt/pN/2cdiqtEx6ZuwTNTdp4FJPF Q/w0dVCerPXv3DDDcy0Xv6BdF7vsgjN8GoNvhxGyA519AUinJGlKTByMLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUx4n16jSc37aoIfC1qG5vQKVqkMB8GA1UdIwQY MBaAFM8U2zcwheKMDZt0vnuOiXQLlfn6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgt MGExMzFmNjVjOTY4LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9lMWNhZWYtY2E2Zi00ODgxLWJjNTgtMGExMzFmNjVjOTY4 LzEvenhUYk56Q0Y0b3dObTNTLWU0NkpkQXVWLWZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFI6XNSD8 2dZYzNDVi7BeWdYMZEdMVVlt7STZluFl1x7x1KN6Vqrp4U1r7D8zBSQj+EeJNNOf mFfEEPwpHuwqf9Vnt/vnUYTIwPgZRvRHGHDIoSxIXsvc1AhnbQI9hfD7Zun1YuAY k56nPvwdcmqSh1o3Q4yudBojGCq7dFOFFUsgm0961a4CGMMwNwnHzuXMyWo0Uc/2 yodY9AUztoHSvWB0L+gAh8MXbYAo1hlH52iV1OJdL/kbe0ulrFpGMi2z3UBEbp7X YPui8BXtJgTxsuP+RU/hfVBp2K0L+gyOV13coSOnGyT7EPfknavvPeOyI1aqwMpk dPfI8CBd2kqQmQ== -----END CERTIFICATE-----Generated at Tue Feb 10 02:55:02 2026 by rpki-client