This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft File: ZIPWjECz28KafUdyeRpTjD7uIDI.mft (raw, json) Hash identifier: vzCBx8KkBB94iYNZ7ZnXjbhXVliTUV0FHgollfWDh+U= Subject key identifier: 1C:04:18:3A:9F:F9:88:60:3A:DE:89:12:CD:05:98:FB:35:C8:68:FA Authority key identifier: 64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32 Certificate issuer: /CN=6483d68c40b3dbc29a7d4772791a538c3eee2032 Certificate serial: 019C4133B3300D1C5D53CC314C0428B9761B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft Manifest number: 135E Signing time: Mon 09 Feb 2026 07:00:32 +0000 Manifest this update: Mon 09 Feb 2026 07:00:32 +0000 Manifest next update: Tue 10 Feb 2026 07:00:32 +0000 Files and hashes: 1: ZIPWjECz28KafUdyeRpTjD7uIDI.crl (hash: 0aIgpOoGmrP5i1p0/ZkdJ4KNhb2eQ91MYQXAhWB9SP0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:b3:30:0d:1c:5d:53:cc:31:4c:04:28:b9:76:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6483d68c40b3dbc29a7d4772791a538c3eee2032 Validity Not Before: Feb 9 07:00:32 2026 GMT Not After : Feb 10 07:00:32 2026 GMT Subject: CN=1c04183a9ff988603ade8912cd0598fb35c868fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6c:29:92:04:06:27:cc:79:f6:d1:d7:e6:bb: 15:a8:4c:86:ec:c1:a1:7c:39:97:6e:89:53:9a:c6: 15:00:fb:d9:f9:dc:b7:65:58:6e:19:ad:d1:fc:a1: 87:d8:9d:39:af:92:1f:9f:6c:1e:a8:49:10:c2:59: 43:fb:fe:a0:e0:4d:a3:f0:c3:50:41:af:89:f4:8c: 91:a9:89:76:14:1b:d6:ed:52:77:f7:a9:f0:18:6a: 4b:ab:0f:0b:c6:e5:52:d4:75:11:e2:d4:ca:d0:bd: 9d:54:88:0a:b0:bc:e6:bc:79:b3:13:25:85:02:6b: 8f:9f:9a:78:8a:cf:09:5b:16:59:fc:d5:c8:b0:4d: 8d:0b:a4:65:9c:48:a5:2c:02:24:c4:73:b5:20:6b: 12:6a:ba:43:e3:c1:ad:6d:52:c1:e0:97:db:10:c0: 24:b0:f6:5c:d6:36:18:84:24:71:89:1c:3b:c8:8f: f4:39:06:27:d2:0c:e2:ef:ab:83:e5:75:09:43:7d: 10:f0:d1:f4:c9:f6:44:10:21:96:83:3a:9f:3e:d3: ef:a7:a5:a0:86:54:93:01:ca:c1:7f:56:5f:09:0e: a0:fa:fd:6a:a0:01:35:e3:cb:36:8d:5a:ba:86:3f: 60:6f:37:f6:5e:25:52:4a:7b:f0:9d:0e:b8:71:95: 03:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:04:18:3A:9F:F9:88:60:3A:DE:89:12:CD:05:98:FB:35:C8:68:FA X509v3 Authority Key Identifier: keyid:64:83:D6:8C:40:B3:DB:C2:9A:7D:47:72:79:1A:53:8C:3E:EE:20:32 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZIPWjECz28KafUdyeRpTjD7uIDI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/04535a-4c08-4dc9-97b1-dd4aff360a11/1/ZIPWjECz28KafUdyeRpTjD7uIDI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9e:f9:d9:6a:57:31:4f:9a:85:9b:9d:a3:dc:56:f3:36:f4: c3:f6:d4:32:88:94:72:13:45:84:e5:fe:1e:49:74:2d:c8:57: 90:6f:58:59:3c:25:44:3f:cc:4d:11:3a:83:8f:69:60:c5:32: e5:54:ce:39:0b:d1:9d:a8:d2:fa:2d:60:54:85:93:d7:04:b9: 7d:39:31:64:5e:6a:a5:de:42:11:0f:c2:32:9b:a6:bc:95:8a: 14:52:d6:e4:94:54:c3:9e:01:af:00:34:a2:f1:c9:a4:0c:64: d6:ee:44:24:98:d5:c2:33:41:3b:b1:55:dc:a7:76:16:43:3f: 02:f4:0b:0f:2e:7a:69:d9:63:39:93:17:56:19:4a:03:98:83: cf:79:20:a6:83:ef:79:9c:5b:41:b2:6b:24:9a:15:6f:9b:c3: 9e:41:38:60:a6:1a:e2:1b:30:28:49:84:1c:25:18:63:2c:52: 59:26:8d:19:11:bf:6b:76:dd:e9:fd:41:cb:6d:db:00:15:f2: 87:06:e0:7f:1c:55:cf:11:3e:f1:cc:85:23:86:33:d5:9b:ec: d9:a0:11:62:88:f5:b5:77:0b:92:f4:41:a9:a7:a5:dc:b3:7e: be:e6:7a:ca:21:f4:e7:33:d4:90:1b:1f:94:54:9e:c0:de:ed: ea:34:f9:cd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM7MwDRxdU8wxTAQouXYbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY0ODNkNjhjNDBiM2RiYzI5YTdkNDc3Mjc5MWE1MzhjM2Vl ZTIwMzIwHhcNMjYwMjA5MDcwMDMyWhcNMjYwMjEwMDcwMDMyWjAzMTEwLwYDVQQD EygxYzA0MTgzYTlmZjk4ODYwM2FkZTg5MTJjZDA1OThmYjM1Yzg2OGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmwpkgQGJ8x59tHX5rsVqEyG7MGh fDmXbolTmsYVAPvZ+dy3ZVhuGa3R/KGH2J05r5Ifn2weqEkQwllD+/6g4E2j8MNQ Qa+J9IyRqYl2FBvW7VJ396nwGGpLqw8LxuVS1HUR4tTK0L2dVIgKsLzmvHmzEyWF AmuPn5p4is8JWxZZ/NXIsE2NC6RlnEilLAIkxHO1IGsSarpD48GtbVLB4JfbEMAk sPZc1jYYhCRxiRw7yI/0OQYn0gzi76uD5XUJQ30Q8NH0yfZEECGWgzqfPtPvp6Wg hlSTAcrBf1ZfCQ6g+v1qoAE148s2jVq6hj9gbzf2XiVSSnvwnQ64cZUD4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwEGDqf+YhgOt6JEs0FmPs1yGj6MB8GA1UdIwQY MBaAFGSD1oxAs9vCmn1HcnkaU4w+7iAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEt ZGQ0YWZmMzYwYTExLzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYy8wNDUzNWEtNGMwOC00ZGM5LTk3YjEtZGQ0YWZmMzYwYTEx LzEvWklQV2pFQ3oyOEthZlVkeWVScFRqRDd1SURJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWp752WpX MU+ahZudo9xW8zb0w/bUMoiUchNFhOX+Hkl0LchXkG9YWTwlRD/MTRE6g49pYMUy 5VTOOQvRnajS+i1gVIWT1wS5fTkxZF5qpd5CEQ/CMpumvJWKFFLW5JRUw54BrwA0 ovHJpAxk1u5EJJjVwjNBO7FV3Kd2FkM/AvQLDy56adljOZMXVhlKA5iDz3kgpoPv eZxbQbJrJJoVb5vDnkE4YKYa4hswKEmEHCUYYyxSWSaNGRG/a3bd6f1By23bABXy hwbgfxxVzxE+8cyFI4Yz1Zvs2aARYoj1tXcLkvRBqael3LN+vuZ6yiH05zPUkBsf lFSewN7t6jT5zQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:52 2026 by rpki-client