This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft File: A0BZzz9bz7oJObTF2cPThs7NTOw.mft (raw, json) Hash identifier: u8wMqpa987bx4tPNtjBgRJJx5IimBaFF2VMPhFWMLQE= Subject key identifier: 48:7F:2A:F1:CC:F1:23:F8:B2:83:1A:A7:92:C2:67:A1:53:C9:6F:86 Authority key identifier: 03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC Certificate issuer: /CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec Certificate serial: 019C43595459D2AD5D64211CFD0586F3F737 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft Manifest number: 01DC Signing time: Mon 09 Feb 2026 17:00:53 +0000 Manifest this update: Mon 09 Feb 2026 17:00:53 +0000 Manifest next update: Tue 10 Feb 2026 17:00:53 +0000 Files and hashes: 1: A0BZzz9bz7oJObTF2cPThs7NTOw.crl (hash: e58FWFFl63/Vby4J94qvj6fScUnUEX4h6kdQY7Kiv54=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:54:59:d2:ad:5d:64:21:1c:fd:05:86:f3:f7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=034059cf3f5bcfba0939b4c5d9c3d386cecd4cec Validity Not Before: Feb 9 17:00:53 2026 GMT Not After : Feb 10 17:00:53 2026 GMT Subject: CN=487f2af1ccf123f8b2831aa792c267a153c96f86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:f4:9a:7f:d8:ab:91:b6:fb:78:32:24:d3:a8: 4c:82:c7:22:71:ec:ef:1f:32:c3:88:e5:6a:db:7e: 7b:db:9a:dd:c1:57:9f:3f:4c:4d:3a:fd:65:3f:8c: 24:71:96:32:42:46:25:6b:ae:01:fe:8b:19:5d:ad: 2f:77:0f:ca:2a:60:46:80:c9:31:4d:da:5d:45:1c: 1f:85:f2:22:e8:75:f5:e4:2b:5d:4f:10:ad:da:7c: 70:b4:f3:66:a8:03:29:80:5b:61:7a:7f:42:17:f8: 9c:b1:c1:a4:80:b7:34:7e:ce:0a:f4:5e:04:54:80: 0a:44:48:dd:c3:7a:bd:b9:ed:d8:d5:1f:12:d0:f9: 4c:14:77:a6:a5:63:a9:55:b4:06:4a:58:06:32:d1: 0a:d9:39:69:d0:ec:b2:a8:d4:18:cd:2e:65:a7:3c: fb:45:b6:f3:9c:73:91:41:86:72:8e:f7:28:53:07: 75:24:33:0e:4d:5e:eb:c7:a6:c7:65:18:8a:c2:7c: a2:b4:58:98:19:e1:a1:76:df:3f:fc:3e:19:14:d8: 29:51:05:39:7b:e6:bd:ea:68:a3:8a:06:8a:d2:23: 30:72:c4:1e:76:cb:3c:92:c8:01:88:6a:8e:f4:49: a5:ad:52:db:f1:05:48:4e:fc:a1:05:3c:36:b8:38: b8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7F:2A:F1:CC:F1:23:F8:B2:83:1A:A7:92:C2:67:A1:53:C9:6F:86 X509v3 Authority Key Identifier: keyid:03:40:59:CF:3F:5B:CF:BA:09:39:B4:C5:D9:C3:D3:86:CE:CD:4C:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A0BZzz9bz7oJObTF2cPThs7NTOw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c451f6-866a-4091-aa88-f0abb9558d45/1/A0BZzz9bz7oJObTF2cPThs7NTOw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:ce:e6:45:25:cf:d2:6b:3c:a4:a3:74:08:6d:df:ab:e9:50: b3:8c:93:9d:ad:b4:b1:63:b5:0f:c9:63:57:30:6c:1d:79:8d: ad:bd:92:a8:24:a2:bb:78:07:a3:77:0c:b2:71:6e:e9:39:35: 08:e7:bf:09:a0:4a:d6:e1:77:f0:7b:79:05:d3:d8:4b:12:c2: 04:da:cb:90:28:fa:08:c7:c7:52:c1:b5:fb:0f:ba:3f:a8:58: b6:6b:e9:e5:00:8e:d4:36:64:87:ff:71:38:36:b8:a9:c3:5f: c2:e6:06:c5:a3:14:c6:f5:c1:2b:35:f3:cf:f1:66:79:20:03: 0f:4f:a2:69:30:4d:46:05:7f:8b:b8:09:55:c7:7a:99:4d:ad: 10:e5:d2:fa:c9:b7:a6:4c:11:b5:4b:cd:74:ce:b6:56:80:9c: 83:49:de:0e:f0:8b:b8:84:40:01:f2:f3:5b:08:68:a9:7a:f3: 01:94:4a:40:c5:6d:4c:c5:64:e4:cc:c6:8a:05:bb:e0:f6:f4: 93:ad:5d:2f:27:cc:5b:23:5c:1b:ee:1b:70:2f:71:5e:21:db: 72:5e:2d:a1:ed:0a:e3:79:c6:6d:69:a5:3c:0f:d1:eb:75:78: a1:f7:6b:66:67:d4:dc:ce:22:1e:10:5a:25:dc:f6:27:a1:1e: 51:37:c9:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWVRZ0q1dZCEc/QWG8/c3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNDA1OWNmM2Y1YmNmYmEwOTM5YjRjNWQ5YzNkMzg2Y2Vj ZDRjZWMwHhcNMjYwMjA5MTcwMDUzWhcNMjYwMjEwMTcwMDUzWjAzMTEwLwYDVQQD Eyg0ODdmMmFmMWNjZjEyM2Y4YjI4MzFhYTc5MmMyNjdhMTUzYzk2Zjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofSaf9irkbb7eDIk06hMgscicezv HzLDiOVq235725rdwVefP0xNOv1lP4wkcZYyQkYla64B/osZXa0vdw/KKmBGgMkx TdpdRRwfhfIi6HX15CtdTxCt2nxwtPNmqAMpgFthen9CF/icscGkgLc0fs4K9F4E VIAKREjdw3q9ue3Y1R8S0PlMFHempWOpVbQGSlgGMtEK2Tlp0OyyqNQYzS5lpzz7 RbbznHORQYZyjvcoUwd1JDMOTV7rx6bHZRiKwnyitFiYGeGhdt8//D4ZFNgpUQU5 e+a96mijigaK0iMwcsQedss8ksgBiGqO9EmlrVLb8QVITvyhBTw2uDi4ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh/KvHM8SP4soMap5LCZ6FTyW+GMB8GA1UdIwQY MBaAFANAWc8/W8+6CTm0xdnD04bOzUzsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTBCWnp6OWJ6N29KT2JURjJjUFRoczdOVE93LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jNDUxZjYtODY2YS00MDkxLWFhODgt ZjBhYmI5NTU4ZDQ1LzEvQTBCWnp6OWJ6N29KT2JURjJjUFRoczdOVE93Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9jNDUxZjYtODY2YS00MDkxLWFhODgtZjBhYmI5NTU4ZDQ1 LzEvQTBCWnp6OWJ6N29KT2JURjJjUFRoczdOVE93LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkc7mRSXP 0ms8pKN0CG3fq+lQs4yTna20sWO1D8ljVzBsHXmNrb2SqCSiu3gHo3cMsnFu6Tk1 COe/CaBK1uF38Ht5BdPYSxLCBNrLkCj6CMfHUsG1+w+6P6hYtmvp5QCO1DZkh/9x ODa4qcNfwuYGxaMUxvXBKzXzz/FmeSADD0+iaTBNRgV/i7gJVcd6mU2tEOXS+sm3 pkwRtUvNdM62VoCcg0neDvCLuIRAAfLzWwhoqXrzAZRKQMVtTMVk5MzGigW74Pb0 k61dLyfMWyNcG+4bcC9xXiHbcl4toe0K43nGbWmlPA/R63V4ofdrZmfU3M4iHhBa Jdz2J6EeUTfJpg== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:06 2026 by rpki-client