This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft File: jzASR05qobNrQgZN0XWzDtgi5zU.mft (raw, json) Hash identifier: 7KH02TeZi+dNIG2+8zE2YFSWc3Se4Dy72BQj0Vp7GcE= Subject key identifier: 68:50:3B:1B:11:D6:3D:BC:27:6F:4B:EE:E4:1E:7A:31:B0:AA:C7:65 Authority key identifier: 8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35 Certificate issuer: /CN=8f3012474e6aa1b36b42064dd175b30ed822e735 Certificate serial: 019C427DD24F714AE1449B6012FB4D69F2DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft Manifest number: 1620 Signing time: Mon 09 Feb 2026 13:01:07 +0000 Manifest this update: Mon 09 Feb 2026 13:01:07 +0000 Manifest next update: Tue 10 Feb 2026 13:01:07 +0000 Files and hashes: 1: jzASR05qobNrQgZN0XWzDtgi5zU.crl (hash: BeK4ZabAgS1nZRAy6Wbh1zHAQHlqOnrhBgoz6s8EtD8=) 2: won-rMlVc5f0fR1j1wVR-WJ4XwM.roa (hash: sFqj/s20YQjjosi4ia2yNwu6UamPVX+VuDC5TE8JqcM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:d2:4f:71:4a:e1:44:9b:60:12:fb:4d:69:f2:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f3012474e6aa1b36b42064dd175b30ed822e735 Validity Not Before: Feb 9 13:01:07 2026 GMT Not After : Feb 10 13:01:07 2026 GMT Subject: CN=68503b1b11d63dbc276f4beee41e7a31b0aac765 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5b:d0:67:1c:2a:47:be:f2:52:f0:1f:96:57: 18:e7:f9:f4:b0:df:64:2c:f1:3e:f3:0e:1e:e4:33: a7:1c:18:9a:cd:61:96:dd:44:09:43:61:3c:f9:36: 1e:63:3f:ee:a5:7b:c6:6c:46:67:16:2e:8b:98:72: c6:08:aa:ef:84:a5:71:95:a5:60:6f:f0:d1:55:56: 83:b2:d6:48:90:70:36:14:7a:fd:67:c2:15:ab:8b: 37:45:81:ff:67:59:f1:7b:7e:df:9c:01:5a:33:14: de:97:2d:89:a8:9e:e6:bc:de:99:df:7a:3f:3a:80: a2:03:ac:b4:53:13:f3:3b:43:8c:95:e8:ae:f3:26: bb:a4:45:7f:b3:ba:cb:6a:80:2c:30:c5:30:d2:0e: 89:0d:25:70:fb:04:11:30:23:3b:58:44:4b:07:4a: 9f:50:2e:21:c1:7e:b3:25:f3:18:53:d5:f1:bd:b4: ac:1d:05:0c:59:0b:00:c4:b3:f0:66:07:55:77:24: 23:4a:3d:f1:e4:4c:cd:7c:c0:83:5c:3a:d5:d8:1e: e5:83:47:fd:a0:79:4c:76:80:69:01:ef:6f:62:87: 1d:4a:09:b1:72:02:29:cc:53:c5:d2:cb:ef:92:03: 6a:fb:37:30:be:9f:eb:f9:20:93:db:0c:e4:e1:06: 8d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:50:3B:1B:11:D6:3D:BC:27:6F:4B:EE:E4:1E:7A:31:B0:AA:C7:65 X509v3 Authority Key Identifier: keyid:8F:30:12:47:4E:6A:A1:B3:6B:42:06:4D:D1:75:B3:0E:D8:22:E7:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzASR05qobNrQgZN0XWzDtgi5zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/41ebbf-80ca-41e1-b1cc-ca378e52930c/1/jzASR05qobNrQgZN0XWzDtgi5zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:55:d8:1a:39:12:6a:0a:84:ed:87:fe:3c:df:a5:41:9f:73: f9:23:10:3b:99:9a:28:ed:e0:e2:a4:0d:76:06:2e:eb:3b:a6: 3a:b8:60:d8:ca:9d:44:b1:94:ce:cf:f4:79:63:45:50:38:e0: 80:4e:b4:58:a5:f3:fd:f1:9d:1a:f1:ea:d8:a5:e8:75:24:18: 3d:55:9a:fc:47:3c:8c:c8:52:f2:fb:8a:66:c0:ea:57:24:12: 53:20:b3:d2:ae:ca:f5:7d:b0:d2:af:6f:8c:cf:dd:ae:7e:4b: 45:19:a3:4f:6e:5f:06:ef:d8:17:88:88:ce:93:8b:eb:49:e1: 08:5c:45:43:d4:cb:09:94:39:a8:79:78:c1:9e:1c:d0:8a:a4: 23:51:a5:79:a8:ce:e8:38:bb:73:e4:d6:58:ef:0c:3e:40:95: ef:56:9d:0c:02:d3:64:1b:f8:a3:66:2e:e9:76:6f:42:47:e3: fd:82:29:a3:cd:43:4f:2b:31:f3:a5:95:53:10:d7:52:01:cf: 49:90:98:2f:79:98:52:08:3c:7b:2a:e5:d9:d7:92:03:93:94: bd:be:43:a1:7f:e7:ef:b9:b1:53:26:46:6d:fa:59:c4:e6:a5: 1a:04:4a:84:91:53:25:d0:ee:ce:98:dc:5e:8b:a5:59:f9:27: 7a:8a:e0:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfdJPcUrhRJtgEvtNafLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhmMzAxMjQ3NGU2YWExYjM2YjQyMDY0ZGQxNzViMzBlZDgy MmU3MzUwHhcNMjYwMjA5MTMwMTA3WhcNMjYwMjEwMTMwMTA3WjAzMTEwLwYDVQQD Eyg2ODUwM2IxYjExZDYzZGJjMjc2ZjRiZWVlNDFlN2EzMWIwYWFjNzY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlvQZxwqR77yUvAfllcY5/n0sN9k LPE+8w4e5DOnHBiazWGW3UQJQ2E8+TYeYz/upXvGbEZnFi6LmHLGCKrvhKVxlaVg b/DRVVaDstZIkHA2FHr9Z8IVq4s3RYH/Z1nxe37fnAFaMxTely2JqJ7mvN6Z33o/ OoCiA6y0UxPzO0OMleiu8ya7pEV/s7rLaoAsMMUw0g6JDSVw+wQRMCM7WERLB0qf UC4hwX6zJfMYU9XxvbSsHQUMWQsAxLPwZgdVdyQjSj3x5EzNfMCDXDrV2B7lg0f9 oHlMdoBpAe9vYocdSgmxcgIpzFPF0svvkgNq+zcwvp/r+SCT2wzk4QaNzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGhQOxsR1j28J29L7uQeejGwqsdlMB8GA1UdIwQY MBaAFI8wEkdOaqGza0IGTdF1sw7YIuc1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvanpBU1IwNXFvYk5yUWdaTjBYV3pEdGdpNXpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS80MWViYmYtODBjYS00MWUxLWIxY2Mt Y2EzNzhlNTI5MzBjLzEvanpBU1IwNXFvYk5yUWdaTjBYV3pEdGdpNXpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS80MWViYmYtODBjYS00MWUxLWIxY2MtY2EzNzhlNTI5MzBj LzEvanpBU1IwNXFvYk5yUWdaTjBYV3pEdGdpNXpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANlXYGjkS agqE7Yf+PN+lQZ9z+SMQO5maKO3g4qQNdgYu6zumOrhg2MqdRLGUzs/0eWNFUDjg gE60WKXz/fGdGvHq2KXodSQYPVWa/Ec8jMhS8vuKZsDqVyQSUyCz0q7K9X2w0q9v jM/drn5LRRmjT25fBu/YF4iIzpOL60nhCFxFQ9TLCZQ5qHl4wZ4c0IqkI1GleajO 6Di7c+TWWO8MPkCV71adDALTZBv4o2Yu6XZvQkfj/YIpo81DTysx86WVUxDXUgHP SZCYL3mYUgg8eyrl2deSA5OUvb5DoX/n77mxUyZGbfpZxOalGgRKhJFTJdDuzpjc XoulWfkneorgQg== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:50 2026 by rpki-client