This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft File: az921hCBSGU2b6pnz8Za0GnHz8Q.mft (raw, json) Hash identifier: 1crVgMKc4Pu0V6GIGmTZ7OlR7veh4lMIEVffbM+ZOUM= Subject key identifier: 65:C8:36:9D:BD:9E:F5:5D:63:3F:23:B4:32:77:F0:9D:81:01:0D:9C Authority key identifier: 6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 Certificate issuer: /CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Certificate serial: 019C427DE59C198C7B8FD1771CAB72F5CC7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft Manifest number: 0EED Signing time: Mon 09 Feb 2026 13:01:12 +0000 Manifest this update: Mon 09 Feb 2026 13:01:12 +0000 Manifest next update: Tue 10 Feb 2026 13:01:12 +0000 Files and hashes: 1: az921hCBSGU2b6pnz8Za0GnHz8Q.crl (hash: bATfvCb/iY2bwBZEV9602dvJbK7Iq24XRvzW1mqn6Ds=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e5:9c:19:8c:7b:8f:d1:77:1c:ab:72:f5:cc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3f76d610814865366faa67cfc65ad069c7cfc4 Validity Not Before: Feb 9 13:01:12 2026 GMT Not After : Feb 10 13:01:12 2026 GMT Subject: CN=65c8369dbd9ef55d633f23b43277f09d81010d9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:f2:56:c9:88:fa:07:70:97:80:44:45:39: f1:a0:bd:15:6b:44:7f:5f:03:4e:44:2a:d3:cb:a6: ae:c0:80:6e:2b:93:2a:ab:70:0e:96:54:76:65:bf: 2c:c2:1d:f0:92:5a:65:09:8a:09:19:92:12:e6:86: a4:59:74:f4:b7:ba:8e:1a:5c:ff:ab:ab:7a:bd:57: 78:ca:2e:5b:b3:b7:cc:6d:b2:1a:70:df:c1:2c:f2: 4e:29:51:ed:28:92:74:05:e2:27:78:89:30:75:8d: 63:dd:c4:02:bf:f2:c5:f2:44:6a:52:4d:64:bd:ed: a1:d1:8d:54:78:47:7f:fe:8d:f2:9d:c3:d7:bb:a1: aa:79:8e:5d:30:ce:f6:c5:45:4e:7a:af:8f:a8:30: 2c:51:73:ae:8f:a9:ab:13:56:d8:9e:12:7c:a7:d4: b5:dd:95:da:1a:1e:7c:1f:0d:54:c4:0f:eb:31:f0: e9:62:54:e1:95:3f:17:d9:f7:3c:9b:80:3f:52:af: a3:5f:b6:14:fd:6f:73:c7:83:1c:45:5c:5f:3c:e9: de:87:98:01:78:c9:7f:b8:55:49:e9:67:76:b2:55: 25:b5:b5:f5:88:04:2a:1f:e8:ed:51:9b:0a:fa:80: b9:8e:78:5f:08:36:99:53:89:04:4d:22:90:96:b9: 5a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C8:36:9D:BD:9E:F5:5D:63:3F:23:B4:32:77:F0:9D:81:01:0D:9C X509v3 Authority Key Identifier: keyid:6B:3F:76:D6:10:81:48:65:36:6F:AA:67:CF:C6:5A:D0:69:C7:CF:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/az921hCBSGU2b6pnz8Za0GnHz8Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0d44a2-a042-48b1-8b04-f5d02854f51f/1/az921hCBSGU2b6pnz8Za0GnHz8Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:9f:8c:ab:55:74:62:79:1a:e6:8f:47:ee:42:9f:b9:93:e4: 15:a5:eb:a9:f3:2a:5f:15:c6:7c:e5:eb:c1:3b:b4:a6:00:01: aa:71:a9:74:77:46:9b:09:50:66:81:aa:03:b6:61:d7:cc:8c: 5f:6b:2d:fa:13:44:4a:ea:a7:46:44:a8:49:fd:16:9b:3d:f0: 88:c6:f3:51:5a:09:be:30:59:40:50:18:1a:cd:95:fe:fc:2e: d8:d5:a7:9e:ec:de:2d:f5:3a:4e:b1:2c:61:59:bd:df:98:e2: 3f:b5:6f:9b:c1:a1:21:10:f4:37:fc:36:bf:d7:95:66:27:fd: 8b:7f:aa:8e:47:df:18:dd:76:71:50:75:49:86:48:5b:8d:20: a8:17:37:75:81:31:eb:4a:94:4e:47:52:f0:08:23:f7:97:de: c9:00:06:8a:2e:24:57:32:70:f1:fa:3b:a7:11:9f:a9:cc:30: a4:ba:a4:b2:93:0b:d6:f7:bd:26:48:95:52:31:09:3e:4f:30: f0:6a:80:49:e6:63:13:53:c3:5f:6a:70:a9:69:99:17:df:97: 1f:05:59:c0:92:6d:67:5f:98:72:0f:0b:20:49:b6:89:d4:39: fc:21:a6:0c:36:7d:8a:4c:ee:33:88:24:6f:62:93:90:25:26: 16:54:46:0f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfeWcGYx7j9F3HKty9cx/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2Y3NmQ2MTA4MTQ4NjUzNjZmYWE2N2NmYzY1YWQwNjlj N2NmYzQwHhcNMjYwMjA5MTMwMTEyWhcNMjYwMjEwMTMwMTEyWjAzMTEwLwYDVQQD Eyg2NWM4MzY5ZGJkOWVmNTVkNjMzZjIzYjQzMjc3ZjA5ZDgxMDEwZDljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J7yVsmI+gdwl4BERTnxoL0Va0R/ XwNORCrTy6auwIBuK5Mqq3AOllR2Zb8swh3wklplCYoJGZIS5oakWXT0t7qOGlz/ q6t6vVd4yi5bs7fMbbIacN/BLPJOKVHtKJJ0BeIneIkwdY1j3cQCv/LF8kRqUk1k ve2h0Y1UeEd//o3yncPXu6GqeY5dMM72xUVOeq+PqDAsUXOuj6mrE1bYnhJ8p9S1 3ZXaGh58Hw1UxA/rMfDpYlThlT8X2fc8m4A/Uq+jX7YU/W9zx4McRVxfPOneh5gB eMl/uFVJ6Wd2slUltbX1iAQqH+jtUZsK+oC5jnhfCDaZU4kETSKQlrlaWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXINp29nvVdYz8jtDJ38J2BAQ2cMB8GA1UdIwQY MBaAFGs/dtYQgUhlNm+qZ8/GWtBpx8/EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQt ZjVkMDI4NTRmNTFmLzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8wZDQ0YTItYTA0Mi00OGIxLThiMDQtZjVkMDI4NTRmNTFm LzEvYXo5MjFoQ0JTR1UyYjZwbno4WmEwR25IejhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjp+Mq1V0 Ynka5o9H7kKfuZPkFaXrqfMqXxXGfOXrwTu0pgABqnGpdHdGmwlQZoGqA7Zh18yM X2st+hNESuqnRkSoSf0Wmz3wiMbzUVoJvjBZQFAYGs2V/vwu2NWnnuzeLfU6TrEs YVm935jiP7Vvm8GhIRD0N/w2v9eVZif9i3+qjkffGN12cVB1SYZIW40gqBc3dYEx 60qUTkdS8Agj95feyQAGii4kVzJw8fo7pxGfqcwwpLqkspML1ve9JkiVUjEJPk8w 8GqASeZjE1PDX2pwqWmZF9+XHwVZwJJtZ1+Ycg8LIEm2idQ5/CGmDDZ9ikzuM4gk b2KTkCUmFlRGDw== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:19 2026 by rpki-client