This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft File: gzVETFgRYcWIroS-AZZbyOg3gLg.mft (raw, json) Hash identifier: 1xxf8h88/vXdg7OrSBxo2//y14b0Sf4+xUDQQReYq2c= Subject key identifier: 71:41:24:92:DB:2A:64:BE:FA:3D:05:CA:DE:6B:49:C3:36:01:55:FA Authority key identifier: 83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8 Certificate issuer: /CN=8335444c581161c588ae84be01965bc8e83780b8 Certificate serial: 019C44350952EBA04B4A85A5C818A9CBC7D7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft Manifest number: 153B Signing time: Mon 09 Feb 2026 21:00:52 +0000 Manifest this update: Mon 09 Feb 2026 21:00:52 +0000 Manifest next update: Tue 10 Feb 2026 21:00:52 +0000 Files and hashes: 1: 7e4cKF3TuVRmJGKrCMROf7YbeTM.roa (hash: EI5hNOLcVf+LZoym/zm/8vnZenolnXToI8NdHBuqEzE=) 2: gzVETFgRYcWIroS-AZZbyOg3gLg.crl (hash: jOrJltxReK+a2846jdIGnwcJ++qY2a2Pmdn2WsmATVU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:35:09:52:eb:a0:4b:4a:85:a5:c8:18:a9:cb:c7:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8335444c581161c588ae84be01965bc8e83780b8 Validity Not Before: Feb 9 21:00:52 2026 GMT Not After : Feb 10 21:00:52 2026 GMT Subject: CN=71412492db2a64befa3d05cade6b49c3360155fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:cb:68:7c:fc:e5:b0:b0:7d:f4:80:99:c5:62: 7d:08:ed:99:96:33:8e:42:65:15:01:12:72:03:0d: ed:63:29:c5:50:08:52:14:0d:0a:fc:de:59:66:4f: 5a:ea:11:05:1b:83:95:e9:8c:00:df:97:48:88:9c: 9e:f7:fd:b1:f4:e2:fe:ec:a7:34:ac:1f:f4:79:67: 39:f3:32:08:9d:72:d4:64:c3:44:6c:9f:96:93:44: 1b:b8:75:c8:67:3a:a1:61:b9:09:66:1e:9e:d9:82: 82:37:ed:65:12:0b:ea:e1:1f:35:c7:1e:0d:02:06: 56:83:f4:51:49:ef:cb:61:d1:31:1d:c8:7b:af:79: 90:1b:d9:8a:8a:e0:1e:be:40:dd:45:e6:29:84:fb: 4e:1d:3f:9e:1b:09:37:cf:07:ea:1a:37:13:78:d6: 29:ff:ef:60:50:84:57:ea:27:f3:3b:a2:03:17:9d: ea:63:84:0b:fb:fe:21:13:45:f4:cb:f2:af:35:57: e5:58:ab:bf:3d:9e:71:d8:37:67:f5:d5:d7:50:6a: c3:f7:f1:7e:6b:fc:2b:93:f0:98:31:4d:8d:7b:7f: da:1b:15:fe:96:70:75:40:a8:1f:35:95:da:89:5e: b1:66:61:66:b5:4d:29:d0:9e:6f:a7:41:30:b3:70: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:41:24:92:DB:2A:64:BE:FA:3D:05:CA:DE:6B:49:C3:36:01:55:FA X509v3 Authority Key Identifier: keyid:83:35:44:4C:58:11:61:C5:88:AE:84:BE:01:96:5B:C8:E8:37:80:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzVETFgRYcWIroS-AZZbyOg3gLg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/04b91a-e349-40cd-b901-1f13f55d0059/1/gzVETFgRYcWIroS-AZZbyOg3gLg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:16:c0:57:b8:e6:36:19:17:ec:34:d9:d7:e5:bf:d6:32:5e: aa:54:84:5e:d3:dc:5f:52:1b:3b:74:02:12:68:4e:d4:10:73: bb:53:fc:de:df:fc:cc:ca:ff:44:c4:86:c3:86:dd:cd:9b:2d: b1:2d:bc:c3:bf:df:24:45:94:12:7d:bc:7f:0c:23:4d:ac:b5: 48:79:83:67:3c:c8:35:47:5a:d5:b0:89:a6:14:8c:83:ac:03: a5:e4:70:0d:c9:f5:3f:a8:70:5b:5c:70:13:47:cd:56:c9:e8: 16:4d:97:b9:3d:45:42:72:6b:3c:3c:ca:c1:e5:74:44:f8:83: 2f:95:93:33:db:f8:6d:33:48:06:56:32:82:ea:46:f8:e4:4b: 12:77:af:67:c6:db:76:f8:48:fb:9e:36:6d:1d:3b:e5:ac:37: 27:11:9b:70:57:62:48:41:21:7e:9a:08:c7:48:d0:9d:2b:43: b7:31:1e:19:de:e8:50:35:8b:f3:5b:ad:75:c4:c1:eb:b2:32: 7c:28:13:02:a7:05:ea:83:a2:61:ac:84:58:2d:7f:27:89:93: 1d:dc:6d:74:ac:4c:dc:00:ed:2c:c0:3b:c5:bf:d8:85:bb:46: d1:bf:6a:b9:63:f6:31:87:26:55:bf:1c:ec:2e:76:60:49:46: ba:74:d9:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENQlS66BLSoWlyBipy8fXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgzMzU0NDRjNTgxMTYxYzU4OGFlODRiZTAxOTY1YmM4ZTgz NzgwYjgwHhcNMjYwMjA5MjEwMDUyWhcNMjYwMjEwMjEwMDUyWjAzMTEwLwYDVQQD Eyg3MTQxMjQ5MmRiMmE2NGJlZmEzZDA1Y2FkZTZiNDljMzM2MDE1NWZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ctofPzlsLB99ICZxWJ9CO2ZljOO QmUVARJyAw3tYynFUAhSFA0K/N5ZZk9a6hEFG4OV6YwA35dIiJye9/2x9OL+7Kc0 rB/0eWc58zIInXLUZMNEbJ+Wk0QbuHXIZzqhYbkJZh6e2YKCN+1lEgvq4R81xx4N AgZWg/RRSe/LYdExHch7r3mQG9mKiuAevkDdReYphPtOHT+eGwk3zwfqGjcTeNYp /+9gUIRX6ifzO6IDF53qY4QL+/4hE0X0y/KvNVflWKu/PZ5x2Ddn9dXXUGrD9/F+ a/wrk/CYMU2Ne3/aGxX+lnB1QKgfNZXaiV6xZmFmtU0p0J5vp0Ews3DkxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHFBJJLbKmS++j0Fyt5rScM2AVX6MB8GA1UdIwQY MBaAFIM1RExYEWHFiK6EvgGWW8joN4C4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEt MWYxM2Y1NWQwMDU5LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC8wNGI5MWEtZTM0OS00MGNkLWI5MDEtMWYxM2Y1NWQwMDU5 LzEvZ3pWRVRGZ1JZY1dJcm9TLUFaWmJ5T2czZ0xnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFxbAV7jm NhkX7DTZ1+W/1jJeqlSEXtPcX1IbO3QCEmhO1BBzu1P83t/8zMr/RMSGw4bdzZst sS28w7/fJEWUEn28fwwjTay1SHmDZzzINUda1bCJphSMg6wDpeRwDcn1P6hwW1xw E0fNVsnoFk2XuT1FQnJrPDzKweV0RPiDL5WTM9v4bTNIBlYygupG+ORLEnevZ8bb dvhI+542bR075aw3JxGbcFdiSEEhfpoIx0jQnStDtzEeGd7oUDWL81utdcTB67Iy fCgTAqcF6oOiYayEWC1/J4mTHdxtdKxM3ADtLMA7xb/YhbtG0b9quWP2MYcmVb8c 7C52YElGunTZqA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:45 2026 by rpki-client