This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft File: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft (raw, json) Hash identifier: w1Ddg5OI9adUmtDCc5FZ+mQsyTxvJQKaoMoyAveDVWg= Subject key identifier: 1A:F8:13:2B:3C:78:F6:08:80:63:35:B3:56:45:FC:6F:51:38:37:82 Authority key identifier: A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A Certificate issuer: /CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Certificate serial: 019C43593991C634385D1BF34B74686D60DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft Manifest number: 0AF3 Signing time: Mon 09 Feb 2026 17:00:46 +0000 Manifest this update: Mon 09 Feb 2026 17:00:46 +0000 Manifest next update: Tue 10 Feb 2026 17:00:46 +0000 Files and hashes: 1: pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl (hash: e+QH0ocVt/+k++R5HtO+J6fHQ3nn36le1Kk8X3GZw0k=) 2: wqM2HbHUAexqGRCIytvhP-Jzu4U.roa (hash: HC7KYLDVfK5o/bx0neagw4IbqR4rFwFVqDH+H7VDweY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:39:91:c6:34:38:5d:1b:f3:4b:74:68:6d:60:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a59da4a8638dbdd6fa43c27d3ac6ec8d9acc878a Validity Not Before: Feb 9 17:00:46 2026 GMT Not After : Feb 10 17:00:46 2026 GMT Subject: CN=1af8132b3c78f608806335b35645fc6f51383782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c1:30:01:58:eb:e1:11:8b:62:a4:fa:33:bd: bd:79:3b:7a:27:ad:ad:50:03:04:a2:36:de:09:ff: 4c:b9:a3:d9:ac:9e:ad:1b:73:71:89:f1:c8:2c:b5: 57:79:a5:e6:09:57:8a:22:91:1c:7c:57:ad:b3:c1: b6:19:11:21:4a:c2:2f:ed:f5:6a:68:fa:d3:50:d4: 13:e3:55:ee:10:3c:18:7a:e8:95:60:e8:db:8c:8d: 44:fd:24:c2:72:a7:2a:8b:60:71:c3:92:d8:41:34: db:e8:99:eb:74:95:7c:28:d4:cf:35:00:0e:57:4d: 07:14:f2:6b:db:b7:17:36:4a:fd:d2:8d:3d:22:e7: ba:b3:d8:3d:44:55:8f:09:6e:0d:72:d5:e6:50:7d: 45:1e:39:3b:77:90:25:58:a4:a9:34:23:17:91:33: f6:40:39:d6:fe:9a:62:5b:fb:6b:00:3e:36:a6:3f: de:b8:f5:57:93:9a:8c:40:9d:52:74:d9:88:78:31: 79:a5:d2:1b:64:73:f1:be:88:7d:a5:07:1f:68:4d: fd:43:fd:d5:17:d1:98:d2:7d:06:2f:a3:59:4d:c8: bb:e7:8c:8e:d0:8a:bd:41:54:e9:bd:65:97:cd:d0: b3:86:e6:7e:ad:dd:a3:af:ee:88:de:f9:1f:68:4f: 33:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F8:13:2B:3C:78:F6:08:80:63:35:B3:56:45:FC:6F:51:38:37:82 X509v3 Authority Key Identifier: keyid:A5:9D:A4:A8:63:8D:BD:D6:FA:43:C2:7D:3A:C6:EC:8D:9A:CC:87:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ae6751-178d-41e1-aec2-0f68e5bffc7d/1/pZ2kqGONvdb6Q8J9OsbsjZrMh4o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:9e:9a:d7:84:ee:88:bd:52:28:13:ba:33:fb:d0:45:a1:b0: 0a:2e:6f:fd:71:26:3b:52:6b:8b:fe:6d:2c:dc:f9:72:b9:d5: 57:57:9c:ca:28:64:76:21:bb:a2:30:df:1f:26:72:fe:b4:a8: 3c:d5:e9:0c:1e:04:bc:c0:98:eb:e8:7a:16:8c:c0:fc:ca:ae: da:94:5f:f3:66:0e:40:85:83:39:7a:15:a9:5e:e3:6a:29:46: a9:c5:73:0d:e0:b6:41:59:e6:b3:a4:5b:fb:9f:90:24:61:d0: 7d:6b:36:d5:6c:e7:4c:6f:94:8c:d4:dc:d7:a9:d3:49:db:22: 77:44:10:b6:8f:0c:45:d1:79:fb:61:d1:65:1c:63:e9:27:fa: 90:fe:f2:52:68:47:11:1c:e9:3c:d3:73:f3:47:ea:f6:bd:3d: 79:43:7f:f9:22:6b:dd:d5:2a:44:d4:d5:b8:1c:a5:af:b6:93: d2:f6:75:35:8f:ba:26:b1:cd:4f:60:ea:04:a3:84:54:f2:58: 14:6b:5b:83:df:1a:94:f9:75:f3:3b:3b:74:57:be:b2:de:5d: 17:e4:70:84:2b:78:88:57:07:09:ab:4a:8f:52:0c:62:29:78: 2f:eb:0e:44:45:fa:3e:8b:f6:51:88:ac:8c:e0:e7:30:ef:79: d9:3a:b9:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWTmRxjQ4XRvzS3RobWDeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1OWRhNGE4NjM4ZGJkZDZmYTQzYzI3ZDNhYzZlYzhkOWFj Yzg3OGEwHhcNMjYwMjA5MTcwMDQ2WhcNMjYwMjEwMTcwMDQ2WjAzMTEwLwYDVQQD EygxYWY4MTMyYjNjNzhmNjA4ODA2MzM1YjM1NjQ1ZmM2ZjUxMzgzNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMEwAVjr4RGLYqT6M729eTt6J62t UAMEojbeCf9MuaPZrJ6tG3NxifHILLVXeaXmCVeKIpEcfFets8G2GREhSsIv7fVq aPrTUNQT41XuEDwYeuiVYOjbjI1E/STCcqcqi2Bxw5LYQTTb6JnrdJV8KNTPNQAO V00HFPJr27cXNkr90o09Iue6s9g9RFWPCW4NctXmUH1FHjk7d5AlWKSpNCMXkTP2 QDnW/ppiW/trAD42pj/euPVXk5qMQJ1SdNmIeDF5pdIbZHPxvoh9pQcfaE39Q/3V F9GY0n0GL6NZTci754yO0Iq9QVTpvWWXzdCzhuZ+rd2jr+6I3vkfaE8zkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBr4Eys8ePYIgGM1s1ZF/G9RODeCMB8GA1UdIwQY MBaAFKWdpKhjjb3W+kPCfTrG7I2azIeKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzIt MGY2OGU1YmZmYzdkLzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMy9hZTY3NTEtMTc4ZC00MWUxLWFlYzItMGY2OGU1YmZmYzdk LzEvcFoya3FHT052ZGI2UThKOU9zYnNqWnJNaDRvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaJ6a14Tu iL1SKBO6M/vQRaGwCi5v/XEmO1Jri/5tLNz5crnVV1ecyihkdiG7ojDfHyZy/rSo PNXpDB4EvMCY6+h6FozA/Mqu2pRf82YOQIWDOXoVqV7jailGqcVzDeC2QVnms6Rb +5+QJGHQfWs21WznTG+UjNTc16nTSdsid0QQto8MRdF5+2HRZRxj6Sf6kP7yUmhH ERzpPNNz80fq9r09eUN/+SJr3dUqRNTVuBylr7aT0vZ1NY+6JrHNT2DqBKOEVPJY FGtbg98alPl18zs7dFe+st5dF+RwhCt4iFcHCatKj1IMYil4L+sOREX6Pov2UYis jODnMO952Tq5PQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:26 2026 by rpki-client