This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft File: mzYg1nmOfrGGY5xFSKBpavbjBYk.mft (raw, json) Hash identifier: aY8fjhWx+dNpTdk1SOlaUMHKE6+NGP4D9JQnOp9tyvo= Subject key identifier: 36:F7:72:B1:04:E9:55:7D:CB:3B:76:52:C7:C7:32:FE:56:0B:E7:AC Authority key identifier: 9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 Certificate issuer: /CN=9b3620d6798e7eb186639c4548a0696af6e30589 Certificate serial: 019C41D84D98D20D97D96C887AA36CD9A362 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft Manifest number: 07B5 Signing time: Mon 09 Feb 2026 10:00:20 +0000 Manifest this update: Mon 09 Feb 2026 10:00:20 +0000 Manifest next update: Tue 10 Feb 2026 10:00:20 +0000 Files and hashes: 1: H2UHdxs--mUhysff_fZAcgdRx8M.roa (hash: +4m/DoxWlWwqGWh1EfHl8rJsWNMtyllJ1qewG1BywTo=) 2: mzYg1nmOfrGGY5xFSKBpavbjBYk.crl (hash: hROIknN44Pn2KtF7U8BlyUXzzrK94waSsZ0d4tidOns=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:4d:98:d2:0d:97:d9:6c:88:7a:a3:6c:d9:a3:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9b3620d6798e7eb186639c4548a0696af6e30589 Validity Not Before: Feb 9 10:00:20 2026 GMT Not After : Feb 10 10:00:20 2026 GMT Subject: CN=36f772b104e9557dcb3b7652c7c732fe560be7ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:49:c7:9a:1d:48:df:10:e1:b2:d8:b4:1d:30: 57:d0:ff:5a:fb:d8:9b:3b:0b:81:ee:c9:d3:92:09: 1c:94:32:14:8d:67:bc:0a:2d:a0:4c:58:8b:af:9e: 14:21:87:36:84:59:b0:a8:df:30:c7:21:f1:e2:fc: 93:bd:ca:ae:eb:1c:90:8f:3b:32:50:68:f4:33:1e: 28:7c:05:bd:c4:64:72:b4:eb:a1:a2:ab:77:99:e7: 7c:8b:17:a0:b3:6f:e0:f8:66:dc:a7:9a:47:ea:99: 0d:08:d7:77:9b:6f:cd:38:bf:cf:77:61:15:f7:98: 16:56:ef:fa:8b:98:be:ea:18:bb:cb:08:b6:1b:f8: 32:27:a2:3f:86:4d:b0:f9:8d:07:5a:03:8e:22:45: b4:55:49:e5:fe:28:13:ec:ad:cc:89:b4:6b:eb:4f: 88:2e:e3:ed:e8:fc:44:a0:45:3e:5f:9b:8c:6f:f8: 53:67:61:72:70:ea:da:c7:12:72:fa:93:fc:01:2c: 9e:1f:a5:f6:24:da:fd:35:3a:80:04:de:6f:d4:21: 1b:80:d0:93:95:97:ee:2c:9d:b4:7b:de:9f:d8:1f: c3:78:38:91:e8:cb:50:3c:26:4d:4f:b0:a6:1a:9b: 95:b4:7b:ca:c6:d3:e4:19:00:da:ac:ef:d4:72:85: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:F7:72:B1:04:E9:55:7D:CB:3B:76:52:C7:C7:32:FE:56:0B:E7:AC X509v3 Authority Key Identifier: keyid:9B:36:20:D6:79:8E:7E:B1:86:63:9C:45:48:A0:69:6A:F6:E3:05:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mzYg1nmOfrGGY5xFSKBpavbjBYk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/6b604b-4eed-4393-8e8c-cba0631f293f/1/mzYg1nmOfrGGY5xFSKBpavbjBYk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:ed:a9:23:74:fe:53:76:9e:74:43:b9:5a:4f:cb:05:4d:a6: b4:9c:2d:0a:e1:bf:e7:09:1c:10:df:f7:7e:d7:e4:17:63:96: d8:92:0a:60:89:db:8a:d3:c6:ef:da:42:cb:a3:aa:81:3a:eb: d0:d2:ba:d1:86:5b:2b:da:50:73:14:f1:9d:b0:d4:7c:46:ea: ea:db:a9:cc:4e:de:af:bd:9c:e3:74:24:e1:90:0c:0b:f3:53: 07:51:2d:10:44:d8:62:62:50:8a:d9:c0:b8:ea:dd:c7:cc:35: e9:a6:73:9b:f9:d3:54:45:8a:92:86:1b:e8:a9:b4:85:96:bc: 19:b3:db:64:e3:19:ea:94:0c:09:a6:7d:db:6f:d5:eb:52:3c: 4d:40:d4:b4:d1:7d:7f:f2:5f:7b:e2:31:6e:73:b9:ce:d1:03: f1:8c:c7:66:14:ca:d4:73:52:e5:19:e2:7c:ad:a7:74:52:f6: 98:13:da:79:96:dd:00:8a:d0:e0:b2:02:56:49:7c:e5:a6:85: 65:a4:ee:ac:5a:d9:2f:c3:49:47:43:3a:7d:0c:53:bf:06:a5: b0:e4:28:68:2c:e3:5b:d2:29:94:47:ba:f5:47:f7:92:d2:dd: 00:e3:54:28:d3:1d:44:ed:2a:4f:11:85:9d:15:dd:f5:34:54: 76:11:6e:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2E2Y0g2X2WyIeqNs2aNiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDliMzYyMGQ2Nzk4ZTdlYjE4NjYzOWM0NTQ4YTA2OTZhZjZl MzA1ODkwHhcNMjYwMjA5MTAwMDIwWhcNMjYwMjEwMTAwMDIwWjAzMTEwLwYDVQQD EygzNmY3NzJiMTA0ZTk1NTdkY2IzYjc2NTJjN2M3MzJmZTU2MGJlN2FjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoknHmh1I3xDhsti0HTBX0P9a+9ib OwuB7snTkgkclDIUjWe8Ci2gTFiLr54UIYc2hFmwqN8wxyHx4vyTvcqu6xyQjzsy UGj0Mx4ofAW9xGRytOuhoqt3med8ixegs2/g+Gbcp5pH6pkNCNd3m2/NOL/Pd2EV 95gWVu/6i5i+6hi7ywi2G/gyJ6I/hk2w+Y0HWgOOIkW0VUnl/igT7K3MibRr60+I LuPt6PxEoEU+X5uMb/hTZ2FycOraxxJy+pP8ASyeH6X2JNr9NTqABN5v1CEbgNCT lZfuLJ20e96f2B/DeDiR6MtQPCZNT7CmGpuVtHvKxtPkGQDarO/UcoU+bQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDb3crEE6VV9yzt2UsfHMv5WC+esMB8GA1UdIwQY MBaAFJs2INZ5jn6xhmOcRUigaWr24wWJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMt Y2JhMDYzMWYyOTNmLzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS82YjYwNGItNGVlZC00MzkzLThlOGMtY2JhMDYzMWYyOTNm LzEvbXpZZzFubU9mckdHWTV4RlNLQnBhdmJqQllrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARO2pI3T+ U3aedEO5Wk/LBU2mtJwtCuG/5wkcEN/3ftfkF2OW2JIKYInbitPG79pCy6OqgTrr 0NK60YZbK9pQcxTxnbDUfEbq6tupzE7er72c43Qk4ZAMC/NTB1EtEETYYmJQitnA uOrdx8w16aZzm/nTVEWKkoYb6Km0hZa8GbPbZOMZ6pQMCaZ922/V61I8TUDUtNF9 f/Jfe+IxbnO5ztED8YzHZhTK1HNS5RnifK2ndFL2mBPaeZbdAIrQ4LICVkl85aaF ZaTurFrZL8NJR0M6fQxTvwalsOQoaCzjW9IplEe69Uf3ktLdAONUKNMdRO0qTxGF nRXd9TRUdhFuTg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:18 2026 by rpki-client