This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft File: zZocvpsLS6e0fUKq1nJXFITlWV8.mft (raw, json) Hash identifier: IG45Agd/B3xdtAa34Dx4/1ZXYvL9D81i1KMRO4NpKeQ= Subject key identifier: 5F:FC:FC:39:2F:21:83:C3:40:90:F3:AF:12:7F:BF:34:B7:B3:D5:FD Authority key identifier: CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F Certificate issuer: /CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f Certificate serial: 019C41D892938996FEA8EAF8574BB8FB0BA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft Manifest number: 15AD Signing time: Mon 09 Feb 2026 10:00:38 +0000 Manifest this update: Mon 09 Feb 2026 10:00:38 +0000 Manifest next update: Tue 10 Feb 2026 10:00:38 +0000 Files and hashes: 1: zZocvpsLS6e0fUKq1nJXFITlWV8.crl (hash: 4JlnwDaf9U6rLlxFdUn10sAYaOagGrbubHlaBlpx5d0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:92:93:89:96:fe:a8:ea:f8:57:4b:b8:fb:0b:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd9a1cbe9b0b4ba7b47d42aad672571484e5595f Validity Not Before: Feb 9 10:00:38 2026 GMT Not After : Feb 10 10:00:38 2026 GMT Subject: CN=5ffcfc392f2183c34090f3af127fbf34b7b3d5fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3a:47:a9:75:0c:7c:a4:ea:77:9b:ce:e6:35: c1:b6:fc:1c:d3:d0:60:99:b2:04:f5:d9:7a:0a:b8: 6e:ee:8f:9c:ad:94:f5:ef:0a:ea:ca:b2:7b:d8:24: 37:f9:5d:b8:8a:15:e3:95:00:63:3a:8a:39:fd:f1: 91:7b:51:bc:f2:9b:98:5d:61:2e:6b:87:b2:a7:15: 2c:35:36:82:c4:87:78:38:45:56:43:28:65:3c:b4: 6d:f6:77:b5:08:7b:84:27:49:41:a0:f4:71:e7:05: 00:26:b2:32:37:c3:7f:52:21:a0:ad:17:7f:52:16: 42:95:2b:70:fa:4f:ce:61:fe:55:ce:61:26:ae:10: 0e:3b:76:50:e5:f0:73:e5:95:75:b3:33:08:70:38: 5c:b2:6e:71:2e:36:39:1d:1b:fc:a8:14:7a:bc:62: 7c:76:02:ce:ff:51:1d:5f:10:54:45:b5:21:60:3a: f8:af:c6:7d:a5:53:27:4f:ad:fa:20:f6:17:83:fe: 6b:80:e4:75:6d:e2:0e:b8:b6:d2:fd:9d:c9:fc:da: d2:a3:f2:5d:8f:94:aa:48:c0:49:ce:d3:72:f0:6f: 33:27:1b:17:05:ff:56:f2:61:c0:75:0c:f6:e1:21: fb:93:c8:21:4d:fa:ad:41:67:23:8c:c8:9a:9b:c4: f3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:FC:FC:39:2F:21:83:C3:40:90:F3:AF:12:7F:BF:34:B7:B3:D5:FD X509v3 Authority Key Identifier: keyid:CD:9A:1C:BE:9B:0B:4B:A7:B4:7D:42:AA:D6:72:57:14:84:E5:59:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZocvpsLS6e0fUKq1nJXFITlWV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/8fcb24-656d-4a0d-b9d8-7e1ef2156648/1/zZocvpsLS6e0fUKq1nJXFITlWV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:20:44:01:c3:73:75:3c:2d:3a:a5:6c:ed:df:38:fa:e9:5e: ab:d8:fb:1d:33:33:54:ab:4b:f4:dc:7f:b8:6a:d7:79:2b:a3: b8:86:14:e9:1f:10:69:66:6b:ae:e4:1b:88:8f:ae:ac:29:e0: eb:a4:6f:d9:94:cd:94:37:07:bb:6e:ca:54:1a:0a:7b:cb:a4: 89:81:be:f6:ab:dd:60:80:cb:31:30:83:37:cb:6d:56:ea:21: d4:84:83:c3:a4:e7:b1:47:c7:38:26:c4:cf:ea:21:7a:07:8d: a5:15:15:13:a3:16:63:9a:58:33:9a:f1:aa:a9:18:3d:55:03: 54:83:fc:ff:30:3f:69:dc:ad:58:87:ef:02:a4:06:34:0c:b6: 14:f5:13:4e:5c:d0:36:c1:6b:65:32:94:32:9e:eb:e3:7a:ea: 46:be:14:1b:a6:a3:a7:25:09:69:37:6b:38:e8:68:15:7a:be: 4d:94:4f:c0:da:64:b6:1c:4a:e0:8b:00:ed:6a:ed:e1:e1:b6: ec:8c:89:e1:99:1f:9b:28:30:52:4c:32:55:77:f1:8c:6c:2f: d9:74:2d:ba:eb:45:24:77:de:da:05:78:82:e0:06:b2:52:4c: a2:79:bf:b0:7f:a1:08:30:e0:f4:97:81:96:34:44:4c:ff:0d: 72:c0:54:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2JKTiZb+qOr4V0u4+wunMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGNkOWExY2JlOWIwYjRiYTdiNDdkNDJhYWQ2NzI1NzE0ODRl NTU5NWYwHhcNMjYwMjA5MTAwMDM4WhcNMjYwMjEwMTAwMDM4WjAzMTEwLwYDVQQD Eyg1ZmZjZmMzOTJmMjE4M2MzNDA5MGYzYWYxMjdmYmYzNGI3YjNkNWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDpHqXUMfKTqd5vO5jXBtvwc09Bg mbIE9dl6Crhu7o+crZT17wrqyrJ72CQ3+V24ihXjlQBjOoo5/fGRe1G88puYXWEu a4eypxUsNTaCxId4OEVWQyhlPLRt9ne1CHuEJ0lBoPRx5wUAJrIyN8N/UiGgrRd/ UhZClStw+k/OYf5VzmEmrhAOO3ZQ5fBz5ZV1szMIcDhcsm5xLjY5HRv8qBR6vGJ8 dgLO/1EdXxBURbUhYDr4r8Z9pVMnT636IPYXg/5rgOR1beIOuLbS/Z3J/NrSo/Jd j5SqSMBJztNy8G8zJxsXBf9W8mHAdQz24SH7k8ghTfqtQWcjjMiam8Tz6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF/8/DkvIYPDQJDzrxJ/vzS3s9X9MB8GA1UdIwQY MBaAFM2aHL6bC0untH1CqtZyVxSE5VlfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgt N2UxZWYyMTU2NjQ4LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi84ZmNiMjQtNjU2ZC00YTBkLWI5ZDgtN2UxZWYyMTU2NjQ4 LzEvelpvY3Zwc0xTNmUwZlVLcTFuSlhGSVRsV1Y4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArCBEAcNz dTwtOqVs7d84+uleq9j7HTMzVKtL9Nx/uGrXeSujuIYU6R8QaWZrruQbiI+urCng 66Rv2ZTNlDcHu27KVBoKe8ukiYG+9qvdYIDLMTCDN8ttVuoh1ISDw6TnsUfHOCbE z+ohegeNpRUVE6MWY5pYM5rxqqkYPVUDVIP8/zA/adytWIfvAqQGNAy2FPUTTlzQ NsFrZTKUMp7r43rqRr4UG6ajpyUJaTdrOOhoFXq+TZRPwNpkthxK4IsA7Wrt4eG2 7IyJ4ZkfmygwUkwyVXfxjGwv2XQtuutFJHfe2gV4guAGslJMonm/sH+hCDDg9JeB ljRETP8NcsBUrA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:38 2026 by rpki-client