This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft File: RZzMG7ARYGhoBts1qTNRshs-YNw.mft (raw, json) Hash identifier: KbFnzHCTwddaabHBPDZ3WkxnO1vhpXzSeqJYZysQf5Q= Subject key identifier: 76:2C:6A:7A:0D:98:6C:99:8D:B0:DF:74:E3:B1:49:A4:B3:C9:09:75 Authority key identifier: 45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC Certificate issuer: /CN=459ccc1bb01160686806db35a93351b21b3e60dc Certificate serial: 019C446BDCD2B78BB31B2BB17A4D9D9B7FC4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft Manifest number: 1586 Signing time: Mon 09 Feb 2026 22:00:45 +0000 Manifest this update: Mon 09 Feb 2026 22:00:45 +0000 Manifest next update: Tue 10 Feb 2026 22:00:45 +0000 Files and hashes: 1: RZzMG7ARYGhoBts1qTNRshs-YNw.crl (hash: ipRPQXcUID4rOuVjwMuhKLN7zY1GNDM7pWT2CwYanRk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:dc:d2:b7:8b:b3:1b:2b:b1:7a:4d:9d:9b:7f:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=459ccc1bb01160686806db35a93351b21b3e60dc Validity Not Before: Feb 9 22:00:45 2026 GMT Not After : Feb 10 22:00:45 2026 GMT Subject: CN=762c6a7a0d986c998db0df74e3b149a4b3c90975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:9b:dc:7e:29:65:a4:fc:34:08:79:29:d4:fc: b8:5a:2d:c5:47:62:21:9a:1d:c3:a5:35:bb:49:bc: d9:3d:60:06:a0:9b:49:37:ae:2d:1a:ba:a5:aa:bf: fe:ac:67:3c:d9:1a:5a:47:de:89:a2:5e:a2:e3:94: ff:b9:dd:0e:91:4c:f6:60:4e:fe:c2:a4:3d:94:3d: ee:b7:a3:14:f3:43:58:1d:48:64:b9:4b:e9:13:14: 4c:c2:da:db:5b:da:f9:26:44:3d:4e:04:96:76:2f: fa:0a:0f:b1:2c:9d:cc:15:b5:f1:ea:8d:67:9f:e6: 24:0f:d1:92:cf:59:9c:63:b5:48:65:35:a0:66:f7: b8:c9:f0:e1:21:97:eb:f4:ac:3c:3f:56:d9:64:c8: c1:41:97:bf:01:cd:fe:d6:77:54:91:1f:93:92:a5: 71:f3:4f:29:44:07:76:2c:17:19:b3:d2:20:8f:06: fa:91:95:35:3a:e4:84:d8:de:2f:7f:0e:0c:ca:29: 81:d2:84:8f:3f:81:3f:0b:4b:ab:e7:c0:34:60:fe: 5c:0c:bf:70:7a:ef:bc:78:8e:f3:cf:ea:7b:c8:bf: 95:04:6e:8d:cc:42:2a:00:3f:49:d4:fa:a8:8e:29: c5:bb:a8:ca:a2:ef:32:55:32:ce:26:76:bb:79:e2: 09:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:2C:6A:7A:0D:98:6C:99:8D:B0:DF:74:E3:B1:49:A4:B3:C9:09:75 X509v3 Authority Key Identifier: keyid:45:9C:CC:1B:B0:11:60:68:68:06:DB:35:A9:33:51:B2:1B:3E:60:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZzMG7ARYGhoBts1qTNRshs-YNw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/60d338-4b36-4054-b4bc-6473b092aadd/1/RZzMG7ARYGhoBts1qTNRshs-YNw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:99:17:d2:9b:4a:a5:98:89:c9:07:50:f2:d5:87:67:b9:a5: 2b:66:7d:54:4c:ad:2c:7a:5d:75:fc:74:8c:47:fd:e3:8d:8c: 8d:27:45:2a:34:0e:96:44:30:1f:b0:80:55:c3:82:3c:49:5f: c6:25:aa:78:38:fe:c7:3b:c3:e8:1c:00:a1:0a:90:5a:36:25: f4:cd:fd:24:de:e5:a8:70:9f:aa:2f:b0:db:e0:8d:1b:c2:ef: 09:ba:da:ba:68:4b:c7:05:a0:9c:45:06:2e:db:bf:a5:80:97: c9:17:df:df:08:67:90:0b:fe:b3:0e:ae:be:d0:b2:a3:6e:aa: fd:bc:4b:b0:9d:25:a2:fa:96:92:a4:1c:ec:30:0a:ca:d4:33: f0:cb:c3:f8:18:db:9d:77:76:b4:32:97:a5:9d:1c:e9:cc:66: 73:28:41:fb:ce:2c:b8:4c:04:b8:74:56:e6:33:50:ca:af:cd: e4:00:79:d7:68:85:65:cf:ae:5d:15:3e:3f:25:16:b2:6c:c3: dc:6b:b1:9d:40:02:13:aa:af:93:01:1f:18:e0:13:fe:0c:32: 93:d1:e8:44:61:83:66:a3:44:96:f0:ed:12:7b:cb:1e:e8:ea: f2:ff:70:37:c3:79:5a:f7:86:06:a2:2a:ad:24:57:1b:0c:59: f0:af:54:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa9zSt4uzGyuxek2dm3/EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ1OWNjYzFiYjAxMTYwNjg2ODA2ZGIzNWE5MzM1MWIyMWIz ZTYwZGMwHhcNMjYwMjA5MjIwMDQ1WhcNMjYwMjEwMjIwMDQ1WjAzMTEwLwYDVQQD Eyg3NjJjNmE3YTBkOTg2Yzk5OGRiMGRmNzRlM2IxNDlhNGIzYzkwOTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZvcfillpPw0CHkp1Py4Wi3FR2Ih mh3DpTW7SbzZPWAGoJtJN64tGrqlqr/+rGc82RpaR96Jol6i45T/ud0OkUz2YE7+ wqQ9lD3ut6MU80NYHUhkuUvpExRMwtrbW9r5JkQ9TgSWdi/6Cg+xLJ3MFbXx6o1n n+YkD9GSz1mcY7VIZTWgZve4yfDhIZfr9Kw8P1bZZMjBQZe/Ac3+1ndUkR+TkqVx 808pRAd2LBcZs9Igjwb6kZU1OuSE2N4vfw4MyimB0oSPP4E/C0ur58A0YP5cDL9w eu+8eI7zz+p7yL+VBG6NzEIqAD9J1PqojinFu6jKou8yVTLOJna7eeIJ8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHYsanoNmGyZjbDfdOOxSaSzyQl1MB8GA1UdIwQY MBaAFEWczBuwEWBoaAbbNakzUbIbPmDcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMt NjQ3M2IwOTJhYWRkLzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC82MGQzMzgtNGIzNi00MDU0LWI0YmMtNjQ3M2IwOTJhYWRk LzEvUlp6TUc3QVJZR2hvQnRzMXFUTlJzaHMtWU53LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOZkX0ptK pZiJyQdQ8tWHZ7mlK2Z9VEytLHpddfx0jEf9442MjSdFKjQOlkQwH7CAVcOCPElf xiWqeDj+xzvD6BwAoQqQWjYl9M39JN7lqHCfqi+w2+CNG8LvCbraumhLxwWgnEUG Ltu/pYCXyRff3whnkAv+sw6uvtCyo26q/bxLsJ0lovqWkqQc7DAKytQz8MvD+Bjb nXd2tDKXpZ0c6cxmcyhB+84suEwEuHRW5jNQyq/N5AB512iFZc+uXRU+PyUWsmzD 3GuxnUACE6qvkwEfGOAT/gwyk9HoRGGDZqNElvDtEnvLHujq8v9wN8N5WveGBqIq rSRXGwxZ8K9UXg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:34 2026 by rpki-client