This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft File: ROzsULCd1G04TQgbUH0juv71HJw.mft (raw, json) Hash identifier: FR0nbP8DPVvQwSWEk3ffCcqaimwc+k0B3xLK5Y1iTPM= Subject key identifier: D5:BB:28:F6:45:2F:E8:3A:CA:05:7E:E0:72:92:92:5A:DF:CB:FB:99 Authority key identifier: 44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C Certificate issuer: /CN=44ecec50b09dd46d384d081b507d23bafef51c9c Certificate serial: 019C41D8367F2A153B8BF96B81DD1C71B35D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft Manifest number: 180D Signing time: Mon 09 Feb 2026 10:00:14 +0000 Manifest this update: Mon 09 Feb 2026 10:00:14 +0000 Manifest next update: Tue 10 Feb 2026 10:00:14 +0000 Files and hashes: 1: ROzsULCd1G04TQgbUH0juv71HJw.crl (hash: jjkH6QI5BZRLYir7pR6jAd0t+W8nNyVgyHRqP1VzdRM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:36:7f:2a:15:3b:8b:f9:6b:81:dd:1c:71:b3:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44ecec50b09dd46d384d081b507d23bafef51c9c Validity Not Before: Feb 9 10:00:14 2026 GMT Not After : Feb 10 10:00:14 2026 GMT Subject: CN=d5bb28f6452fe83aca057ee07292925adfcbfb99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8f:4d:4f:74:7d:62:a3:0f:94:7e:24:4d:ac: b5:a5:5c:4a:c5:42:4f:77:46:7f:04:3c:52:2a:5b: 71:3e:57:ed:81:c4:8c:29:1d:e3:9d:c7:7f:f9:02: 46:f5:a3:16:f3:3a:79:08:26:90:ec:94:7e:cb:25: 8b:2a:98:f9:33:c5:45:3a:f2:5a:dd:90:00:0a:87: fa:24:62:9a:29:a3:9f:57:7b:49:f3:73:cd:80:21: 55:d1:ca:e8:41:24:c7:f9:b7:0b:cf:c6:74:ca:1c: a1:e7:8d:b3:01:1f:59:20:0c:9a:d1:31:86:29:23: 76:62:a1:8c:27:5f:bb:d8:6e:33:74:44:15:a8:b4: 1f:25:f0:94:b6:5c:3c:84:5a:70:dc:e4:9e:69:37: d9:14:9e:6c:49:22:21:ba:af:60:64:f2:38:dc:73: 4c:fa:77:ce:47:8e:83:f4:92:ec:7a:57:4f:d8:fb: 88:13:26:4f:fb:23:f5:b8:6a:d8:a8:cd:f7:dd:f9: f9:cf:e8:a5:5c:4c:ab:9c:28:e2:73:01:2e:07:5c: 52:b3:27:21:5a:00:39:73:b7:46:07:0b:9f:91:50: 40:17:a8:d4:ae:53:c1:60:39:25:75:bc:4f:ab:ec: 55:7f:66:34:ce:f0:81:ef:74:22:e1:f5:24:ab:52: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:BB:28:F6:45:2F:E8:3A:CA:05:7E:E0:72:92:92:5A:DF:CB:FB:99 X509v3 Authority Key Identifier: keyid:44:EC:EC:50:B0:9D:D4:6D:38:4D:08:1B:50:7D:23:BA:FE:F5:1C:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROzsULCd1G04TQgbUH0juv71HJw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/12/3091e8-3c60-41cc-85e0-e32d6f6f3ccc/1/ROzsULCd1G04TQgbUH0juv71HJw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:22:1f:ca:30:2e:77:72:5e:f7:f4:52:c4:bf:60:db:fd:14: 04:f5:33:d4:9b:ee:49:17:4e:0b:00:53:36:f6:cc:2f:a2:62: 51:d4:a3:04:79:55:98:3a:5f:c7:0f:a5:f9:d3:79:b4:f3:b7: 65:84:8d:ea:97:f7:61:48:07:72:27:24:91:c1:f4:6a:17:20: a1:f4:25:db:2c:d0:7f:66:27:38:b6:0c:8e:86:af:77:5c:fc: 0b:eb:02:2e:b3:8a:1a:5d:69:6e:16:7c:a7:7b:21:dd:3f:35: 15:27:90:72:37:33:7c:ab:d7:7d:3e:37:af:d7:b3:66:2a:40: 0e:b6:24:9e:06:db:48:4b:07:2d:25:b3:d6:c4:71:76:e9:4d: 55:12:6d:d3:66:3f:26:0a:2b:a4:e6:b5:64:b1:eb:87:4e:2c: c0:62:4e:6c:7b:52:6c:bc:91:14:d5:d6:ba:6d:d3:89:06:63: 3e:07:4b:45:57:24:03:d2:40:cb:c2:14:10:af:8c:56:99:4f: aa:be:0d:13:30:55:91:f8:a0:42:9a:44:98:9e:82:de:26:5f: dd:5d:7d:93:ac:61:1e:37:0e:99:c4:dc:32:6a:67:fe:c8:7b: 7f:1a:97:26:55:53:42:50:49:2c:eb:11:92:60:ce:8f:da:65: 8d:e6:a0:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2DZ/KhU7i/lrgd0ccbNdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZWNlYzUwYjA5ZGQ0NmQzODRkMDgxYjUwN2QyM2JhZmVm NTFjOWMwHhcNMjYwMjA5MTAwMDE0WhcNMjYwMjEwMTAwMDE0WjAzMTEwLwYDVQQD EyhkNWJiMjhmNjQ1MmZlODNhY2EwNTdlZTA3MjkyOTI1YWRmY2JmYjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuY9NT3R9YqMPlH4kTay1pVxKxUJP d0Z/BDxSKltxPlftgcSMKR3jncd/+QJG9aMW8zp5CCaQ7JR+yyWLKpj5M8VFOvJa 3ZAACof6JGKaKaOfV3tJ83PNgCFV0croQSTH+bcLz8Z0yhyh542zAR9ZIAya0TGG KSN2YqGMJ1+72G4zdEQVqLQfJfCUtlw8hFpw3OSeaTfZFJ5sSSIhuq9gZPI43HNM +nfOR46D9JLseldP2PuIEyZP+yP1uGrYqM333fn5z+ilXEyrnCjicwEuB1xSsych WgA5c7dGBwufkVBAF6jUrlPBYDkldbxPq+xVf2Y0zvCB73Qi4fUkq1Lr4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNW7KPZFL+g6ygV+4HKSklrfy/uZMB8GA1UdIwQY MBaAFETs7FCwndRtOE0IG1B9I7r+9RycMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk96c1VMQ2QxRzA0VFFnYlVIMGp1djcxSEp3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8zMDkxZTgtM2M2MC00MWNjLTg1ZTAt ZTMyZDZmNmYzY2NjLzEvUk96c1VMQ2QxRzA0VFFnYlVIMGp1djcxSEp3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMi8zMDkxZTgtM2M2MC00MWNjLTg1ZTAtZTMyZDZmNmYzY2Nj LzEvUk96c1VMQ2QxRzA0VFFnYlVIMGp1djcxSEp3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgCIfyjAu d3Je9/RSxL9g2/0UBPUz1JvuSRdOCwBTNvbML6JiUdSjBHlVmDpfxw+l+dN5tPO3 ZYSN6pf3YUgHcickkcH0ahcgofQl2yzQf2YnOLYMjoavd1z8C+sCLrOKGl1pbhZ8 p3sh3T81FSeQcjczfKvXfT43r9ezZipADrYkngbbSEsHLSWz1sRxdulNVRJt02Y/ JgorpOa1ZLHrh04swGJObHtSbLyRFNXWum3TiQZjPgdLRVckA9JAy8IUEK+MVplP qr4NEzBVkfigQppEmJ6C3iZf3V19k6xhHjcOmcTcMmpn/sh7fxqXJlVTQlBJLOsR kmDOj9pljeagoQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:30:52 2026 by rpki-client