This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft File: MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft (raw, json) Hash identifier: U2NOfNYaeehNiHBQkT3r2Vdocbz4yGXMFIYI36+REyg= Subject key identifier: 40:EB:56:79:86:1F:05:39:18:41:B2:0C:21:FE:6F:93:63:91:44:51 Authority key identifier: 31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39 Certificate issuer: /CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239 Certificate serial: 019C446BCB26968BA351A514D8FD6C98899E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft Manifest number: 02C7 Signing time: Mon 09 Feb 2026 22:00:40 +0000 Manifest this update: Mon 09 Feb 2026 22:00:40 +0000 Manifest next update: Tue 10 Feb 2026 22:00:40 +0000 Files and hashes: 1: MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl (hash: npFBrQCu79cpX5bkRFOrtYS+Gpba7n/gbO7gt38LiTc=) 2: twKLPQrhWv6dAA-CsNDyEXY14bM.roa (hash: ZQV+i7bb9vNtUXl4UdSWsiKGB39wqVqwFRwF7b6SNf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6b:cb:26:96:8b:a3:51:a5:14:d8:fd:6c:98:89:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31944df0a38f3f51493ff2ba86cfd83c29bf8239 Validity Not Before: Feb 9 22:00:40 2026 GMT Not After : Feb 10 22:00:40 2026 GMT Subject: CN=40eb5679861f05391841b20c21fe6f9363914451 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:7b:05:2e:d7:f0:a7:01:57:c9:f9:88:17:83: 79:eb:9f:18:ce:c4:04:cc:d4:a5:b1:c6:e1:a4:33: 1f:4d:19:8e:91:b2:d4:9a:26:f3:52:4d:7b:48:ae: 0f:f3:4b:95:4c:5b:d5:fd:93:67:c5:20:73:61:88: d7:bd:1d:4a:43:bc:a2:d5:18:11:0a:06:38:85:f8: 4f:88:3e:88:75:55:ee:17:87:8a:78:0a:40:79:6b: 10:ca:44:a1:2c:d3:37:5c:a3:af:0b:97:26:3c:6f: 49:2e:89:c2:9e:50:3d:03:d9:c2:15:36:83:df:6e: 0c:e4:b6:c4:a6:a8:1f:60:37:f3:30:c1:73:a8:61: 36:1a:f6:95:2b:bd:78:6c:5a:68:0b:c9:3b:7f:a5: b0:da:c6:22:c3:6a:f1:f7:9a:87:36:cb:92:e3:5e: 0c:e5:ec:e4:b5:df:0f:24:21:78:60:1e:1e:0e:e1: f9:c5:7d:be:6d:7a:68:92:d0:75:3c:d1:b2:88:e0: 8e:13:36:d3:d2:8a:3d:a6:8b:d0:fa:05:b7:6e:c2: 26:52:72:c9:9d:da:33:60:f1:fa:59:59:bc:1f:19: bd:a7:63:a1:16:d4:5e:44:d1:7f:58:5e:81:1d:42: d6:24:5d:33:1f:32:87:aa:94:da:0d:76:00:0e:2f: 71:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:EB:56:79:86:1F:05:39:18:41:B2:0C:21:FE:6F:93:63:91:44:51 X509v3 Authority Key Identifier: keyid:31:94:4D:F0:A3:8F:3F:51:49:3F:F2:BA:86:CF:D8:3C:29:BF:82:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MZRN8KOPP1FJP_K6hs_YPCm_gjk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c4de09-4fed-495b-8a72-b3ae05e77608/1/MZRN8KOPP1FJP_K6hs_YPCm_gjk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4a:d8:63:b5:ae:77:ef:6b:ed:7d:50:32:83:8f:2b:19:08: fc:42:47:8e:08:b4:cb:1c:1c:25:f7:22:92:94:bb:72:74:8f: a2:26:ba:0f:b4:07:51:96:7e:73:d5:54:f5:8d:2c:82:d5:39: 38:fd:97:a2:b4:fe:2f:d2:62:40:36:d1:c1:a0:85:b6:de:e0: d5:b1:b9:e9:55:f6:29:7a:1c:09:d0:3a:ce:b3:28:89:91:43: 70:8f:cd:49:72:f8:59:1f:5b:6f:8d:d8:0d:b9:83:d9:a1:9a: 93:97:f0:72:5f:55:d3:f1:84:1c:ab:38:d8:dd:75:83:20:77: a0:26:bf:bd:6b:17:13:38:58:b7:ad:9e:c6:f7:39:c6:23:ac: 98:2a:05:22:c0:a8:74:74:90:78:69:ef:98:19:26:bc:d8:36: 87:9e:19:06:eb:4e:20:92:97:96:0c:13:cf:9a:06:5e:aa:0a: 6a:cd:99:66:e9:41:29:75:b4:b6:25:f8:37:87:6d:8b:3e:16: bc:b5:52:17:54:62:9e:be:a5:44:f8:65:51:48:84:62:72:ed: 00:54:3d:09:ee:86:ec:f7:e4:92:bb:0f:df:49:68:b8:86:51: 48:f6:24:78:8a:91:74:ce:9a:f0:a7:01:00:7d:9a:8b:88:97: f6:dc:fb:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEa8smloujUaUU2P1smImeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxOTQ0ZGYwYTM4ZjNmNTE0OTNmZjJiYTg2Y2ZkODNjMjli ZjgyMzkwHhcNMjYwMjA5MjIwMDQwWhcNMjYwMjEwMjIwMDQwWjAzMTEwLwYDVQQD Eyg0MGViNTY3OTg2MWYwNTM5MTg0MWIyMGMyMWZlNmY5MzYzOTE0NDUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3sFLtfwpwFXyfmIF4N5658YzsQE zNSlscbhpDMfTRmOkbLUmibzUk17SK4P80uVTFvV/ZNnxSBzYYjXvR1KQ7yi1RgR CgY4hfhPiD6IdVXuF4eKeApAeWsQykShLNM3XKOvC5cmPG9JLonCnlA9A9nCFTaD 324M5LbEpqgfYDfzMMFzqGE2GvaVK714bFpoC8k7f6Ww2sYiw2rx95qHNsuS414M 5ezktd8PJCF4YB4eDuH5xX2+bXpoktB1PNGyiOCOEzbT0oo9povQ+gW3bsImUnLJ ndozYPH6WVm8Hxm9p2OhFtReRNF/WF6BHULWJF0zHzKHqpTaDXYADi9xDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEDrVnmGHwU5GEGyDCH+b5NjkURRMB8GA1UdIwQY MBaAFDGUTfCjjz9RST/yuobP2Dwpv4I5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzIt YjNhZTA1ZTc3NjA4LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9jNGRlMDktNGZlZC00OTViLThhNzItYjNhZTA1ZTc3NjA4 LzEvTVpSTjhLT1BQMUZKUF9LNmhzX1lQQ21fZ2prLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ0rYY7Wu d+9r7X1QMoOPKxkI/EJHjgi0yxwcJfcikpS7cnSPoia6D7QHUZZ+c9VU9Y0sgtU5 OP2XorT+L9JiQDbRwaCFtt7g1bG56VX2KXocCdA6zrMoiZFDcI/NSXL4WR9bb43Y DbmD2aGak5fwcl9V0/GEHKs42N11gyB3oCa/vWsXEzhYt62exvc5xiOsmCoFIsCo dHSQeGnvmBkmvNg2h54ZButOIJKXlgwTz5oGXqoKas2ZZulBKXW0tiX4N4dtiz4W vLVSF1Rinr6lRPhlUUiEYnLtAFQ9Ce6G7PfkkrsP30louIZRSPYkeIqRdM6a8KcB AH2ai4iX9tz7hQ== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:34 2026 by rpki-client