This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft File: AfZJudBUYiex1GJsIIHk09qFDv4.mft (raw, json) Hash identifier: Lqb9STg1Tak0V3F8aEbijeaX2Pf9NHPr5uk53HEA/as= Subject key identifier: 28:03:70:FC:E8:AB:7A:2E:C8:E8:98:4A:75:50:A6:D2:EE:E0:6E:CE Authority key identifier: 01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE Certificate issuer: /CN=01f649b9d0546227b1d4626c2081e4d3da850efe Certificate serial: 019C4390C6AF38B6D3CB6130B51E31A94CB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft Manifest number: 14FA Signing time: Mon 09 Feb 2026 18:01:27 +0000 Manifest this update: Mon 09 Feb 2026 18:01:27 +0000 Manifest next update: Tue 10 Feb 2026 18:01:27 +0000 Files and hashes: 1: 2FF_JdmMPpNnVhjdAwhZJqXRuRA.roa (hash: w0hjY14/3MT2uCVE6s9mvHq0OBPlplAq8WkEPk3Bsz8=) 2: AfZJudBUYiex1GJsIIHk09qFDv4.crl (hash: LkHCwe50wbF0OG5PsA4occWAHoB57eDOivSscQ9HyNY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:c6:af:38:b6:d3:cb:61:30:b5:1e:31:a9:4c:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01f649b9d0546227b1d4626c2081e4d3da850efe Validity Not Before: Feb 9 18:01:27 2026 GMT Not After : Feb 10 18:01:27 2026 GMT Subject: CN=280370fce8ab7a2ec8e8984a7550a6d2eee06ece Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:2b:b6:e6:33:f8:0b:51:85:b9:47:14:27:31: 74:be:f9:7d:4d:b2:2a:4b:33:9f:ad:00:31:9e:6a: 25:b8:14:d2:e8:e5:ec:e1:35:28:89:94:8c:08:c5: da:99:f2:5e:88:6b:93:da:53:db:00:57:c7:9c:1c: c6:a2:80:c2:0c:4a:97:af:8d:40:d5:43:48:bc:a7: 49:9f:2a:6f:95:0b:39:d9:f1:09:4b:51:3a:e6:99: f0:47:b6:41:90:83:4c:02:7a:75:6a:ea:58:3b:98: d6:ba:62:f3:3e:12:8b:b0:da:4c:97:7b:e7:18:59: 25:d3:a3:26:68:5b:df:b7:4e:bc:5a:1e:41:ad:d0: b8:6a:4a:7b:69:f6:9b:03:a0:ed:d1:61:4a:39:f2: 17:4e:cc:6e:6e:7d:b8:be:2a:ad:14:5f:24:48:d6: fa:1e:5d:d1:04:d0:bc:63:06:a4:30:19:b3:17:a1: 14:be:da:68:ad:b4:53:8b:92:81:04:7c:c2:f6:12: b7:2f:d8:b9:c3:01:b5:7b:b0:e1:48:32:cd:3d:2e: a7:97:31:41:b7:a6:a2:32:31:14:e3:67:16:ff:ba: f0:59:40:a6:76:e7:3a:2d:e9:34:52:9e:8d:c9:6b: 36:a9:10:03:72:ad:42:6f:3e:d4:57:85:19:bd:3f: 99:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:03:70:FC:E8:AB:7A:2E:C8:E8:98:4A:75:50:A6:D2:EE:E0:6E:CE X509v3 Authority Key Identifier: keyid:01:F6:49:B9:D0:54:62:27:B1:D4:62:6C:20:81:E4:D3:DA:85:0E:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfZJudBUYiex1GJsIIHk09qFDv4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a1923f-26d7-44be-a2be-03cbdb8ff960/1/AfZJudBUYiex1GJsIIHk09qFDv4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e3:63:48:65:25:21:06:87:fa:f4:91:b6:5c:91:e1:b6:13: cc:03:07:76:d4:13:2e:21:d9:2a:20:eb:15:49:d4:49:93:92: 40:f1:aa:c6:81:d8:b1:f6:5a:38:39:2c:60:0a:8a:11:db:a0: f8:11:da:b7:b6:b1:f6:8a:fd:77:f6:4c:f3:96:e8:3e:97:be: 2e:fd:3f:3b:6f:4f:a7:34:1c:27:68:be:42:d3:ca:c0:37:98: 7b:1e:4a:6b:74:88:f9:c2:f5:6a:0d:43:38:c2:70:ba:93:83: 48:65:da:37:c8:56:94:ef:cb:7b:ad:df:7e:07:d0:82:d3:dc: bc:1a:1f:1c:b2:04:5d:17:26:b2:c2:c0:b8:85:f6:c8:8c:b0: 79:01:cd:a6:a5:05:1d:7d:a5:cd:41:ca:87:16:f9:ce:e2:86: 0e:9f:6c:0e:75:33:c0:81:e6:ec:2d:0c:87:41:1b:d3:a2:a9: 1c:e8:c4:05:fd:cb:4c:ba:eb:8b:97:cb:25:b7:4f:b4:ec:cf: 24:48:ab:42:57:7e:0c:7b:21:c0:58:d5:fe:84:08:af:db:10: 41:4d:ef:1d:c3:15:17:0e:b1:12:cd:2c:33:6b:f0:3d:a3:02: 4c:cb:85:f6:80:81:16:00:1f:23:e2:1b:6b:6a:7f:f7:e4:ad: ea:bc:f1:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkMavOLbTy2EwtR4xqUy5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxZjY0OWI5ZDA1NDYyMjdiMWQ0NjI2YzIwODFlNGQzZGE4 NTBlZmUwHhcNMjYwMjA5MTgwMTI3WhcNMjYwMjEwMTgwMTI3WjAzMTEwLwYDVQQD EygyODAzNzBmY2U4YWI3YTJlYzhlODk4NGE3NTUwYTZkMmVlZTA2ZWNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCu25jP4C1GFuUcUJzF0vvl9TbIq SzOfrQAxnmoluBTS6OXs4TUoiZSMCMXamfJeiGuT2lPbAFfHnBzGooDCDEqXr41A 1UNIvKdJnypvlQs52fEJS1E65pnwR7ZBkINMAnp1aupYO5jWumLzPhKLsNpMl3vn GFkl06MmaFvft068Wh5BrdC4akp7afabA6Dt0WFKOfIXTsxubn24viqtFF8kSNb6 Hl3RBNC8YwakMBmzF6EUvtporbRTi5KBBHzC9hK3L9i5wwG1e7DhSDLNPS6nlzFB t6aiMjEU42cW/7rwWUCmduc6Lek0Up6NyWs2qRADcq1Cbz7UV4UZvT+ZQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCgDcPzoq3ouyOiYSnVQptLu4G7OMB8GA1UdIwQY MBaAFAH2SbnQVGInsdRibCCB5NPahQ7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hMTkyM2YtMjZkNy00NGJlLWEyYmUt MDNjYmRiOGZmOTYwLzEvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9hMTkyM2YtMjZkNy00NGJlLWEyYmUtMDNjYmRiOGZmOTYw LzEvQWZaSnVkQlVZaWV4MUdKc0lJSGswOXFGRHY0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuNjSGUl IQaH+vSRtlyR4bYTzAMHdtQTLiHZKiDrFUnUSZOSQPGqxoHYsfZaODksYAqKEdug +BHat7ax9or9d/ZM85boPpe+Lv0/O29PpzQcJ2i+QtPKwDeYex5Ka3SI+cL1ag1D OMJwupODSGXaN8hWlO/Le63ffgfQgtPcvBofHLIEXRcmssLAuIX2yIyweQHNpqUF HX2lzUHKhxb5zuKGDp9sDnUzwIHm7C0Mh0Eb06KpHOjEBf3LTLrri5fLJbdPtOzP JEirQld+DHshwFjV/oQIr9sQQU3vHcMVFw6xEs0sM2vwPaMCTMuF9oCBFgAfI+Ib a2p/9+St6rzxyg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:01 2026 by rpki-client