This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft File: MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft (raw, json) Hash identifier: yIrpiUEfnfQqUCaeCr6HWv+Jr5UVCc+SFTa1s+BBA+g= Subject key identifier: 24:BC:A8:7E:E6:8C:93:03:CF:7E:25:2F:26:62:CA:A6:A3:16:E9:84 Authority key identifier: 33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15 Certificate issuer: /CN=33343229de251cc8825a7c44c8fe93e4acdbc115 Certificate serial: 019C42B447A9FC2E97FEDA4DC97EA4DE98D8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft Manifest number: A3 Signing time: Mon 09 Feb 2026 14:00:36 +0000 Manifest this update: Mon 09 Feb 2026 14:00:36 +0000 Manifest next update: Tue 10 Feb 2026 14:00:36 +0000 Files and hashes: 1: KK2v8jbRzNSix0weCfB4skmPx1c.roa (hash: IiO9IAaVWkqsheg2TwTcJmbBFyNTvk8JujR9HRPRERw=) 2: MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl (hash: 3gIJHuiwMJKJbU0CjhtBUugUn9lqeriTf2eD/pvBRXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:47:a9:fc:2e:97:fe:da:4d:c9:7e:a4:de:98:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33343229de251cc8825a7c44c8fe93e4acdbc115 Validity Not Before: Feb 9 14:00:36 2026 GMT Not After : Feb 10 14:00:36 2026 GMT Subject: CN=24bca87ee68c9303cf7e252f2662caa6a316e984 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:f3:29:87:8e:ff:fc:d6:dc:68:67:af:fe: 33:89:76:57:03:7b:01:6e:43:4f:47:5e:8d:45:7d: 70:5d:5a:f8:5b:cd:36:06:b0:b1:a9:14:e1:94:ac: b0:a3:2d:d0:56:48:30:3f:5c:76:70:56:ab:1f:59: 01:1a:61:fc:2f:01:12:6a:c3:99:93:10:d3:cb:4a: f2:b0:2d:81:17:67:a2:76:26:70:33:79:eb:e0:62: ad:d9:35:d0:c2:7c:f7:58:fa:93:fd:83:58:30:fd: 95:76:2c:79:e2:07:5a:d4:c3:29:70:40:90:53:c5: 41:e9:c0:c8:f9:57:3f:4c:3d:7e:7f:38:0d:76:9a: 36:14:1f:d5:6b:76:93:13:44:03:10:05:e5:2c:e3: c1:23:5d:ff:13:5c:e1:42:f5:35:fa:e7:b9:a8:84: 25:1f:6e:fd:cc:5d:74:4c:c2:62:95:58:1a:80:7b: 97:ac:2b:92:a1:a8:22:9e:01:7e:4f:67:94:d4:56: db:67:42:8f:68:ad:9c:f4:2e:6a:c4:79:db:bb:76: fc:88:b2:1d:61:e9:fd:2b:53:40:85:9c:52:cf:d4: 9b:0b:39:74:21:91:ea:13:62:e1:bb:db:6e:f4:df: e4:e7:b0:4e:c1:55:df:31:be:87:05:ee:1f:ce:5f: 14:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:BC:A8:7E:E6:8C:93:03:CF:7E:25:2F:26:62:CA:A6:A3:16:E9:84 X509v3 Authority Key Identifier: keyid:33:34:32:29:DE:25:1C:C8:82:5A:7C:44:C8:FE:93:E4:AC:DB:C1:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MzQyKd4lHMiCWnxEyP6T5KzbwRU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/7a37ea-30d9-427b-a36e-64832b39057d/1/MzQyKd4lHMiCWnxEyP6T5KzbwRU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0f:d1:a7:76:27:c2:c4:b0:4f:51:f3:7d:a8:d6:49:13:92: d3:25:01:93:02:c9:28:bb:c1:d1:be:01:1c:a0:ff:69:16:b3: 10:6a:c8:27:b0:35:f7:27:da:84:e5:1e:c3:b8:dc:96:2e:7f: 17:63:f2:8f:97:72:09:46:4b:31:b1:cf:26:82:41:8e:ea:dc: ef:ce:bf:96:84:70:5b:ce:1b:9e:b9:4b:d7:91:e2:1f:c7:01: 12:09:4f:39:6a:18:54:14:7c:74:42:1d:5e:c9:7e:77:04:d1: 2b:e2:a3:18:86:14:86:ba:7a:14:e7:91:91:a7:06:83:7b:df: 21:4d:00:49:e6:4b:84:42:63:09:27:a8:6e:34:88:e2:3f:d7: dc:89:8e:78:fd:b6:8a:56:35:d6:21:c1:7b:52:72:95:1f:73: e1:58:42:3c:f0:2d:d5:ad:63:3e:41:95:21:3f:86:37:85:d9: 57:c0:be:ec:a5:44:d4:4b:e2:c1:ae:70:35:d6:10:16:b2:19: 2e:ec:e5:00:6d:f5:71:05:3f:09:1f:83:0b:24:a6:a7:7b:3e: 4c:03:c9:bf:20:23:fc:b3:10:9e:8f:52:09:ae:a3:d4:d3:47: 68:f4:d1:f1:32:08:2b:ae:19:29:b1:e4:5d:98:f8:2f:79:11: 39:0b:74:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtEep/C6X/tpNyX6k3pjYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzMzQzMjI5ZGUyNTFjYzg4MjVhN2M0NGM4ZmU5M2U0YWNk YmMxMTUwHhcNMjYwMjA5MTQwMDM2WhcNMjYwMjEwMTQwMDM2WjAzMTEwLwYDVQQD EygyNGJjYTg3ZWU2OGM5MzAzY2Y3ZTI1MmYyNjYyY2FhNmEzMTZlOTg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7BXzKYeO//zW3Ghnr/4ziXZXA3sB bkNPR16NRX1wXVr4W802BrCxqRThlKywoy3QVkgwP1x2cFarH1kBGmH8LwESasOZ kxDTy0rysC2BF2eidiZwM3nr4GKt2TXQwnz3WPqT/YNYMP2Vdix54gda1MMpcECQ U8VB6cDI+Vc/TD1+fzgNdpo2FB/Va3aTE0QDEAXlLOPBI13/E1zhQvU1+ue5qIQl H279zF10TMJilVgagHuXrCuSoagingF+T2eU1FbbZ0KPaK2c9C5qxHnbu3b8iLId Yen9K1NAhZxSz9SbCzl0IZHqE2Lhu9tu9N/k57BOwVXfMb6HBe4fzl8U5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCS8qH7mjJMDz34lLyZiyqajFumEMB8GA1UdIwQY MBaAFDM0MineJRzIglp8RMj+k+Ss28EVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUt NjQ4MzJiMzkwNTdkLzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy83YTM3ZWEtMzBkOS00MjdiLWEzNmUtNjQ4MzJiMzkwNTdk LzEvTXpReUtkNGxITWlDV254RXlQNlQ1S3pid1JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmw/Rp3Yn wsSwT1HzfajWSROS0yUBkwLJKLvB0b4BHKD/aRazEGrIJ7A19yfahOUew7jcli5/ F2Pyj5dyCUZLMbHPJoJBjurc786/loRwW84bnrlL15HiH8cBEglPOWoYVBR8dEId Xsl+dwTRK+KjGIYUhrp6FOeRkacGg3vfIU0ASeZLhEJjCSeobjSI4j/X3ImOeP22 ilY11iHBe1JylR9z4VhCPPAt1a1jPkGVIT+GN4XZV8C+7KVE1Eviwa5wNdYQFrIZ LuzlAG31cQU/CR+DCySmp3s+TAPJvyAj/LMQno9SCa6j1NNHaPTR8TIIK64ZKbHk XZj4L3kROQt0Ag== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:31 2026 by rpki-client