This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft File: CRzF2QybaBpstOdyzK6-w0L7mwU.mft (raw, json) Hash identifier: /oorh0bCglGo9ypwAFrOrSiNxEcX3uXAjh5ZoIeh5X8= Subject key identifier: 6B:C0:C1:64:BD:87:01:A5:59:E0:53:A9:2F:6B:54:02:DE:CC:77:32 Authority key identifier: 09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 Certificate issuer: /CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Certificate serial: 019C41A146368028A8304D40AD3B00BD80AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft Manifest number: 0BBF Signing time: Mon 09 Feb 2026 09:00:14 +0000 Manifest this update: Mon 09 Feb 2026 09:00:14 +0000 Manifest next update: Tue 10 Feb 2026 09:00:14 +0000 Files and hashes: 1: CRzF2QybaBpstOdyzK6-w0L7mwU.crl (hash: ONqX+Afg440qWQJ7y1fGtMOwdxzwwu1urj6/D+rBcvw=) 2: zrtaoEiavdgjJ45IAZF5NnPo3Rs.roa (hash: z2iZziOE5JN+RJazqLZp00E5SjB0TdkmZt0o09ieR34=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:46:36:80:28:a8:30:4d:40:ad:3b:00:bd:80:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091cc5d90c9b681a6cb4e772ccaebec342fb9b05 Validity Not Before: Feb 9 09:00:14 2026 GMT Not After : Feb 10 09:00:14 2026 GMT Subject: CN=6bc0c164bd8701a559e053a92f6b5402decc7732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9f:a4:64:88:ec:2e:68:78:bb:02:d3:33:79: a1:ef:d3:d5:6a:f9:46:61:41:9a:2a:c6:93:bb:1b: 46:da:41:2a:0a:d7:00:0e:55:91:d8:73:02:93:e1: a2:7e:f0:1e:94:c5:2f:d8:48:a8:25:d6:9f:21:90: f9:e7:07:ae:9c:a9:39:40:74:36:9a:28:8b:e5:f9: 05:33:20:42:62:6a:d4:ee:66:cf:73:8d:9f:27:5b: 4b:ab:ab:42:de:4f:32:46:42:7b:68:96:14:97:b5: 9e:eb:b3:00:ea:74:30:9d:12:ae:c8:9e:cf:68:e3: 1b:fa:a6:10:8a:ea:a5:cc:f1:c3:c5:ca:cc:20:c5: 80:59:f6:d8:80:56:9f:a2:ce:84:30:3c:0f:00:f8: 9c:bd:90:87:d0:20:7c:83:c9:32:a6:bd:12:10:b8: 0b:7a:a0:a2:70:44:7a:e8:9a:67:77:06:de:cf:f1: d2:03:0c:7d:91:dd:35:e5:c1:79:13:81:48:97:89: 45:cc:fd:00:2e:da:fa:eb:7c:38:97:24:07:23:9e: 0b:75:a9:b2:49:14:4f:c7:b4:fa:a9:f9:41:b3:2f: 0b:7f:f0:d4:a8:7b:5c:03:9a:90:bd:93:c2:25:fc: 8a:9f:99:c1:85:51:ae:cd:11:92:df:59:ff:1e:b6: 6f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C0:C1:64:BD:87:01:A5:59:E0:53:A9:2F:6B:54:02:DE:CC:77:32 X509v3 Authority Key Identifier: keyid:09:1C:C5:D9:0C:9B:68:1A:6C:B4:E7:72:CC:AE:BE:C3:42:FB:9B:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CRzF2QybaBpstOdyzK6-w0L7mwU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/738f78-438c-4bfd-806b-73bfad832d2d/1/CRzF2QybaBpstOdyzK6-w0L7mwU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:50:3f:58:5d:41:81:00:9a:d1:b0:d9:aa:4e:ed:f9:da:2a: 60:8f:85:34:ac:1a:b8:6d:fa:db:d3:36:47:b6:89:27:1a:86: 43:f5:bc:49:53:8e:8a:67:02:f1:f3:d5:c7:ce:ac:c1:ed:05: 0b:c0:ab:2f:5b:d2:55:4c:91:80:32:04:04:bd:23:5e:73:a8: 3c:2f:9a:94:0d:b7:e8:68:9b:d5:f3:7f:c4:77:99:36:ed:cd: a9:2e:38:9c:b6:18:9a:b0:0a:1e:0d:ef:88:3e:5a:5f:57:a7: 24:c5:15:55:5e:1a:ae:6b:a0:0e:c4:f6:be:58:22:b5:0d:08: 63:73:8f:99:86:c8:9d:f5:c8:d0:5f:b9:bc:05:24:01:4e:69: 5a:e8:fb:65:ae:06:a7:0e:0f:ed:f7:15:18:62:47:db:8c:9a: 62:6b:31:59:e4:32:04:d5:f2:aa:69:d9:78:c5:3c:5a:7a:af: 0b:b1:63:d5:ba:1c:22:9e:ef:ff:4d:7a:e3:df:76:f6:32:b8: d8:95:d7:97:d8:c0:5e:44:63:9e:db:ce:65:1b:93:20:8e:98: ac:f5:ee:05:2a:46:bc:0d:7b:e9:2d:86:67:82:f1:c4:23:f4: 29:9c:7a:cc:79:91:e1:ce:2c:4f:fc:4c:84:c9:e6:1a:d6:ae: 8d:8d:ad:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoUY2gCioME1ArTsAvYCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWNjNWQ5MGM5YjY4MWE2Y2I0ZTc3MmNjYWViZWMzNDJm YjliMDUwHhcNMjYwMjA5MDkwMDE0WhcNMjYwMjEwMDkwMDE0WjAzMTEwLwYDVQQD Eyg2YmMwYzE2NGJkODcwMWE1NTllMDUzYTkyZjZiNTQwMmRlY2M3NzMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5+kZIjsLmh4uwLTM3mh79PVavlG YUGaKsaTuxtG2kEqCtcADlWR2HMCk+GifvAelMUv2EioJdafIZD55weunKk5QHQ2 miiL5fkFMyBCYmrU7mbPc42fJ1tLq6tC3k8yRkJ7aJYUl7We67MA6nQwnRKuyJ7P aOMb+qYQiuqlzPHDxcrMIMWAWfbYgFafos6EMDwPAPicvZCH0CB8g8kypr0SELgL eqCicER66Jpndwbez/HSAwx9kd015cF5E4FIl4lFzP0ALtr663w4lyQHI54Ldamy SRRPx7T6qflBsy8Lf/DUqHtcA5qQvZPCJfyKn5nBhVGuzRGS31n/HrZvswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGvAwWS9hwGlWeBTqS9rVALezHcyMB8GA1UdIwQY MBaAFAkcxdkMm2gabLTncsyuvsNC+5sFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmIt NzNiZmFkODMyZDJkLzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny83MzhmNzgtNDM4Yy00YmZkLTgwNmItNzNiZmFkODMyZDJk LzEvQ1J6RjJReWJhQnBzdE9keXpLNi13MEw3bXdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnVA/WF1B gQCa0bDZqk7t+doqYI+FNKwauG3629M2R7aJJxqGQ/W8SVOOimcC8fPVx86swe0F C8CrL1vSVUyRgDIEBL0jXnOoPC+alA236Gib1fN/xHeZNu3NqS44nLYYmrAKHg3v iD5aX1enJMUVVV4armugDsT2vlgitQ0IY3OPmYbInfXI0F+5vAUkAU5pWuj7Za4G pw4P7fcVGGJH24yaYmsxWeQyBNXyqmnZeMU8WnqvC7Fj1bocIp7v/01649929jK4 2JXXl9jAXkRjntvOZRuTII6YrPXuBSpGvA176S2GZ4LxxCP0KZx6zHmR4c4sT/xM hMnmGtaujY2t3A== -----END CERTIFICATE-----Generated at Mon Feb 9 17:00:32 2026 by rpki-client