This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft File: AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft (raw, json) Hash identifier: EBYntVc2pTgOxWyTVU9R+2SdJKL7VZNNA4FuB1Xwt14= Subject key identifier: 34:7B:5B:52:27:34:5D:9B:18:D2:F1:FF:A6:EF:27:B3:70:CD:5E:8A Authority key identifier: 01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F Certificate issuer: /CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f Certificate serial: 019C427D0D9C9C4B288274D9A5E67E3FA17E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft Manifest number: 0909 Signing time: Mon 09 Feb 2026 13:00:17 +0000 Manifest this update: Mon 09 Feb 2026 13:00:17 +0000 Manifest next update: Tue 10 Feb 2026 13:00:17 +0000 Files and hashes: 1: 4Vqqb5k4j9r4FD-Q4TgHLzGBoT4.roa (hash: DbSLlNcKnNNqECQ34MGqDl+9nVOY0HjH0tWr/mR4x4I=) 2: AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl (hash: eVl5E8OpY/unxhtnefSzlb5apvHMyV1Hx8+LtNcLSQs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:0d:9c:9c:4b:28:82:74:d9:a5:e6:7e:3f:a1:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0194ab9a8f4a20e829dd4575a88c8125c1c8a67f Validity Not Before: Feb 9 13:00:17 2026 GMT Not After : Feb 10 13:00:17 2026 GMT Subject: CN=347b5b5227345d9b18d2f1ffa6ef27b370cd5e8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:60:63:7f:95:4d:06:c0:9e:78:3b:97:76:e2: e7:47:bc:bf:c3:b5:a0:c1:ae:a8:28:59:09:4c:67: 26:84:da:82:bd:3d:d8:ad:fa:1e:60:f4:62:21:71: 60:f0:42:6f:5f:b4:12:ea:74:d3:0d:89:0c:00:a3: b5:ba:ea:1b:82:69:77:6e:db:d3:04:cf:86:3e:50: 05:be:ed:c7:1e:3d:06:8d:ff:1c:6d:2d:99:61:e9: 5e:4b:3b:b4:9e:b0:c4:b3:39:5b:f0:5e:28:36:0f: 11:05:f8:b8:55:a6:65:27:c8:58:6f:0d:65:8e:b0: e5:d5:3a:8f:29:9d:13:5d:50:d7:a9:b0:c2:3a:47: d0:0a:34:eb:58:99:4d:a3:e5:c1:a5:2a:b6:2b:8f: 0a:a2:9b:5a:c9:73:7e:4b:b9:2e:74:fd:4d:88:37: cd:a3:70:d1:77:34:a2:03:c3:39:ec:4b:d2:6a:ec: ab:e4:90:67:ee:5d:5d:17:4e:01:43:35:90:57:0e: 15:d0:c7:c6:a1:00:54:30:22:af:4c:bf:c8:b0:33: 43:cc:32:47:0f:09:a0:d5:e2:9e:76:9a:a8:5e:d8: f0:2e:50:63:66:9a:cd:dd:7f:4b:19:50:53:ab:52: 7d:e1:07:d1:6c:40:de:79:b9:d4:35:ae:84:ad:ac: 12:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:7B:5B:52:27:34:5D:9B:18:D2:F1:FF:A6:EF:27:B3:70:CD:5E:8A X509v3 Authority Key Identifier: keyid:01:94:AB:9A:8F:4A:20:E8:29:DD:45:75:A8:8C:81:25:C1:C8:A6:7F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AZSrmo9KIOgp3UV1qIyBJcHIpn8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/41/1cfe5c-0546-4482-935a-cb386358d151/1/AZSrmo9KIOgp3UV1qIyBJcHIpn8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4c:23:c3:52:2f:eb:b0:2c:1d:9a:2c:da:6a:f0:86:09:34: e2:b5:a1:0e:86:37:94:45:c8:6a:dc:a0:86:30:0d:b9:4e:d8: c0:4f:3d:07:48:bc:ae:bb:55:74:20:15:6e:57:8e:dc:1c:06: eb:fa:40:e1:bb:39:98:c5:c3:df:8e:77:80:a8:d6:06:2f:78: 7c:40:82:94:de:97:81:bf:73:77:5c:55:15:9d:a0:9a:6f:d4: 87:40:67:4c:81:8e:6d:53:28:d5:5c:e1:01:d7:7a:f3:cb:ec: 0b:af:8e:8a:d4:f3:5d:58:2c:08:3f:b3:4d:2e:b4:a7:22:ca: 83:bb:de:a2:0b:8b:59:bc:1a:36:61:74:b3:30:8c:ab:b2:fd: 66:25:bf:45:8d:0e:cc:46:16:83:a3:51:7d:b0:91:68:24:9f: fc:bd:4a:86:99:f4:f4:3c:41:71:59:b7:f4:3d:3e:6a:8d:40: ca:63:b5:d6:af:6d:87:c1:37:9a:ee:0a:ba:97:b6:25:bd:27: ab:61:45:6e:e4:fb:14:ba:7d:4f:fc:05:5c:65:b1:60:41:c6: 5d:67:60:71:eb:ca:76:2f:a8:04:52:d6:a1:de:a4:7d:11:65: 24:07:05:ef:0d:3c:2d:3b:b8:19:63:fd:c2:35:56:89:69:4b: 6d:db:7e:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfQ2cnEsognTZpeZ+P6F+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxOTRhYjlhOGY0YTIwZTgyOWRkNDU3NWE4OGM4MTI1YzFj OGE2N2YwHhcNMjYwMjA5MTMwMDE3WhcNMjYwMjEwMTMwMDE3WjAzMTEwLwYDVQQD EygzNDdiNWI1MjI3MzQ1ZDliMThkMmYxZmZhNmVmMjdiMzcwY2Q1ZThhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmBjf5VNBsCeeDuXduLnR7y/w7Wg wa6oKFkJTGcmhNqCvT3YrfoeYPRiIXFg8EJvX7QS6nTTDYkMAKO1uuobgml3btvT BM+GPlAFvu3HHj0Gjf8cbS2ZYeleSzu0nrDEszlb8F4oNg8RBfi4VaZlJ8hYbw1l jrDl1TqPKZ0TXVDXqbDCOkfQCjTrWJlNo+XBpSq2K48KoptayXN+S7kudP1NiDfN o3DRdzSiA8M57EvSauyr5JBn7l1dF04BQzWQVw4V0MfGoQBUMCKvTL/IsDNDzDJH Dwmg1eKedpqoXtjwLlBjZprN3X9LGVBTq1J94QfRbEDeebnUNa6ErawSAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDR7W1InNF2bGNLx/6bvJ7NwzV6KMB8GA1UdIwQY MBaAFAGUq5qPSiDoKd1FdaiMgSXByKZ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEt Y2IzODYzNThkMTUxLzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MS8xY2ZlNWMtMDU0Ni00NDgyLTkzNWEtY2IzODYzNThkMTUx LzEvQVpTcm1vOUtJT2dwM1VWMXFJeUJKY0hJcG44LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALEwjw1Iv 67AsHZos2mrwhgk04rWhDoY3lEXIatyghjANuU7YwE89B0i8rrtVdCAVbleO3BwG 6/pA4bs5mMXD3453gKjWBi94fECClN6Xgb9zd1xVFZ2gmm/Uh0BnTIGObVMo1Vzh Add688vsC6+OitTzXVgsCD+zTS60pyLKg7veoguLWbwaNmF0szCMq7L9ZiW/RY0O zEYWg6NRfbCRaCSf/L1Khpn09DxBcVm39D0+ao1AymO11q9th8E3mu4Kupe2Jb0n q2FFbuT7FLp9T/wFXGWxYEHGXWdgcevKdi+oBFLWod6kfRFlJAcF7w08LTu4GWP9 wjVWiWlLbdt+fg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:37 2026 by rpki-client