This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft File: ztSbv4TJn76HrP4bvg2_esY7Q98.mft (raw, json) Hash identifier: mWMVrp1ytSy0bkYZvdVNINrB3ldWC3OHF6qFxpSBLy0= Subject key identifier: 9A:3D:1D:28:09:0E:A5:41:EC:B6:69:9C:17:18:95:FF:B6:B7:3D:80 Authority key identifier: CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF Certificate issuer: /CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Certificate serial: 019C41D8942BA4379CB4A7B0C93BC11E9870 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 10:00:38 +0000 Manifest this update: Mon 09 Feb 2026 10:00:38 +0000 Manifest next update: Tue 10 Feb 2026 10:00:38 +0000 Files and hashes: 1: ztSbv4TJn76HrP4bvg2_esY7Q98.crl (hash: 3fqFrm7RQIci2H6zt3A9Rx6dsFiSZdyZ93GdtZdJW/M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:94:2b:a4:37:9c:b4:a7:b0:c9:3b:c1:1e:98:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ced49bbf84c99fbe87acfe1bbe0dbf7ac63b43df Validity Not Before: Feb 9 10:00:38 2026 GMT Not After : Feb 10 10:00:38 2026 GMT Subject: CN=9a3d1d28090ea541ecb6699c171895ffb6b73d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:22:1f:d8:31:ea:39:b2:11:54:f8:80:38:29: b2:e9:6a:3b:f9:7e:9c:32:72:08:49:f3:b4:59:5a: 69:67:c1:79:4d:ee:19:89:d3:d0:29:a6:fa:2e:bb: ec:50:41:6f:2f:ec:d1:87:a2:cd:fa:3a:96:17:f1: 66:2f:7c:c1:59:a5:fd:5b:28:2e:c2:88:df:ed:a0: 8d:25:ae:39:f4:99:8d:bb:e8:32:c9:03:e4:9d:0d: c4:76:9a:36:e7:c5:ce:d9:f8:af:b4:69:2b:0e:64: e1:b7:15:68:4e:a8:db:57:fe:00:d6:b0:71:66:29: d1:05:f6:7d:9c:4b:34:46:cf:d4:c2:be:d7:2b:95: 5b:4b:16:52:fe:46:df:fa:d9:2e:96:65:1d:84:f9: 08:67:ff:27:e7:48:64:79:2f:64:ad:3c:bc:13:25: bd:a3:cc:e8:5d:a7:fa:70:ac:7f:47:f4:44:27:6b: 13:e2:ea:63:bd:2c:9f:71:8a:bd:34:d4:d6:29:7b: 8c:b7:85:46:30:2f:36:2c:3d:f6:c5:9b:af:76:50: 43:a8:00:d0:95:a0:c2:fc:d6:60:1a:03:43:fc:1c: 55:86:d0:53:55:e7:d8:63:94:40:bf:9c:d0:b8:cf: e4:02:96:bb:9b:97:3e:b6:d9:85:a0:05:d0:8c:46: 46:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:3D:1D:28:09:0E:A5:41:EC:B6:69:9C:17:18:95:FF:B6:B7:3D:80 X509v3 Authority Key Identifier: keyid:CE:D4:9B:BF:84:C9:9F:BE:87:AC:FE:1B:BE:0D:BF:7A:C6:3B:43:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztSbv4TJn76HrP4bvg2_esY7Q98.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38667-2ac4-4576-94f6-9ec9b67ddaf9/1/ztSbv4TJn76HrP4bvg2_esY7Q98.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:59:65:87:f4:78:3f:69:ea:01:d3:ab:38:01:6c:a7:70:fb: 8b:7b:aa:dd:d6:33:e8:35:35:a7:c8:0b:81:c4:b8:5e:bf:c2: 6f:b1:7c:cf:8a:74:74:d0:71:24:cc:13:e1:5d:22:21:5e:73: 7b:9e:a3:19:84:13:1c:eb:bf:61:08:70:ec:83:c9:7a:4b:9c: 29:ea:a1:f7:53:d6:fd:81:3b:d7:13:74:b6:26:56:64:d5:34: 6e:40:e4:7a:48:3b:84:e7:e9:8e:59:e7:d8:76:7a:42:e8:41: fb:27:94:c4:db:eb:d2:34:0a:79:d3:2e:7c:84:88:68:0b:40: 48:cd:3a:27:c8:0a:a0:f3:81:7d:72:f3:51:6f:b5:ff:db:fa: 8c:eb:58:2d:b3:ac:2a:20:67:11:e7:4b:ee:3f:e1:14:11:4c: 62:06:48:36:9a:52:ae:d0:0f:b8:3e:43:36:8d:12:ae:76:dc: 25:ff:9d:bd:4d:e1:80:00:24:56:eb:a0:83:55:29:c2:8b:11: 6c:b0:ad:bf:0c:e4:13:43:52:a5:6d:c4:e3:94:d5:d0:05:77: 89:5c:7c:67:b1:69:a7:3e:48:40:ab:b2:1a:97:54:f8:ee:50: 7e:f0:a2:91:3a:26:6f:a4:6e:71:09:cd:ff:85:d1:f8:ff:92: b1:78:d4:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JQrpDectKewyTvBHphwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNlZDQ5YmJmODRjOTlmYmU4N2FjZmUxYmJlMGRiZjdhYzYz YjQzZGYwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD Eyg5YTNkMWQyODA5MGVhNTQxZWNiNjY5OWMxNzE4OTVmZmI2YjczZDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsiIf2DHqObIRVPiAOCmy6Wo7+X6c MnIISfO0WVppZ8F5Te4ZidPQKab6LrvsUEFvL+zRh6LN+jqWF/FmL3zBWaX9Wygu wojf7aCNJa459JmNu+gyyQPknQ3Edpo258XO2fivtGkrDmThtxVoTqjbV/4A1rBx ZinRBfZ9nEs0Rs/Uwr7XK5VbSxZS/kbf+tkulmUdhPkIZ/8n50hkeS9krTy8EyW9 o8zoXaf6cKx/R/REJ2sT4upjvSyfcYq9NNTWKXuMt4VGMC82LD32xZuvdlBDqADQ laDC/NZgGgND/BxVhtBTVefYY5RAv5zQuM/kApa7m5c+ttmFoAXQjEZGAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo9HSgJDqVB7LZpnBcYlf+2tz2AMB8GA1UdIwQY MBaAFM7Um7+EyZ++h6z+G74Nv3rGO0PfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYt OWVjOWI2N2RkYWY5LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYi9lMzg2NjctMmFjNC00NTc2LTk0ZjYtOWVjOWI2N2RkYWY5 LzEvenRTYnY0VEpuNzZIclA0YnZnMl9lc1k3UTk4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1llh/R4 P2nqAdOrOAFsp3D7i3uq3dYz6DU1p8gLgcS4Xr/Cb7F8z4p0dNBxJMwT4V0iIV5z e56jGYQTHOu/YQhw7IPJekucKeqh91PW/YE71xN0tiZWZNU0bkDkekg7hOfpjlnn 2HZ6QuhB+yeUxNvr0jQKedMufISIaAtASM06J8gKoPOBfXLzUW+1/9v6jOtYLbOs KiBnEedL7j/hFBFMYgZINppSrtAPuD5DNo0SrnbcJf+dvU3hgAAkVuugg1UpwosR bLCtvwzkE0NSpW3E45TV0AV3iVx8Z7Fppz5IQKuyGpdU+O5QfvCikTomb6RucQnN /4XR+P+SsXjUVQ== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:04 2026 by rpki-client