This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft File: AVz-48K26knSnhA-I6Uixi44UxE.mft (raw, json) Hash identifier: gTOl2g414jf1XjadvEdd5rjdxk5GopExxYYfRO7Myhc= Subject key identifier: D8:9A:CB:CA:7B:BE:1A:D4:61:5E:58:F2:E8:C3:2F:AF:03:A5:50:B2 Authority key identifier: 01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11 Certificate issuer: /CN=015cfee3c2b6ea49d29e103e23a522c62e385311 Certificate serial: 019C44D9C609DCE34A1535E1A0D87653F6E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft Manifest number: 1527 Signing time: Tue 10 Feb 2026 00:00:48 +0000 Manifest this update: Tue 10 Feb 2026 00:00:48 +0000 Manifest next update: Wed 11 Feb 2026 00:00:48 +0000 Files and hashes: 1: AVz-48K26knSnhA-I6Uixi44UxE.crl (hash: f1WGRUFvP9hN2f/EvMNYPgRMxt6D187W9haJvmxGvqQ=) 2: yiGu7GYVFl06PTOS15FwNMfxNOY.roa (hash: SBhefg3WhMmDzBzYzcHtIXjJbiTJDraUtRQdnjWSXSM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:d9:c6:09:dc:e3:4a:15:35:e1:a0:d8:76:53:f6:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=015cfee3c2b6ea49d29e103e23a522c62e385311 Validity Not Before: Feb 10 00:00:48 2026 GMT Not After : Feb 11 00:00:48 2026 GMT Subject: CN=d89acbca7bbe1ad4615e58f2e8c32faf03a550b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:c8:f6:12:f8:73:95:00:c3:77:3f:ae:21:92: 7f:08:1a:18:0c:03:ac:0e:74:36:c4:ed:05:4e:fe: 6d:3f:44:fc:87:bd:1c:c4:0c:7c:aa:65:1c:b3:26: e2:f3:41:43:5c:53:d0:42:fc:6e:8c:e5:7c:7e:01: 75:65:b4:0d:bd:cf:dc:46:98:ed:5c:9d:39:77:a3: c1:36:f5:fc:ae:81:20:7e:c9:38:4a:ae:73:98:b7: d8:18:cc:b2:d2:ec:d1:00:1c:d9:6f:1a:c8:fc:29: f5:af:11:e9:87:24:e5:8d:34:ea:2b:42:d7:47:81: 25:02:86:19:72:3b:17:47:07:42:09:65:50:7d:87: 63:0d:b7:bc:27:10:f1:37:c8:1c:48:37:c9:17:93: 2e:6a:50:d4:17:d0:ba:d3:08:c3:fa:53:4d:c1:0a: b1:42:86:75:24:63:af:61:de:66:8a:a5:57:27:92: e9:93:a2:b7:30:ab:7e:58:75:05:74:3d:4b:09:8c: 88:78:bd:c5:d1:4c:8c:9e:b6:3a:79:4c:26:6e:2d: f7:45:30:aa:eb:7f:ee:b7:d0:77:3c:41:be:fd:ab: 46:e0:8b:4f:ab:01:1b:4d:d2:19:61:15:d6:b9:b2: 5a:e4:c0:ab:ab:d7:d0:b1:83:c5:15:26:5e:04:6b: 30:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:9A:CB:CA:7B:BE:1A:D4:61:5E:58:F2:E8:C3:2F:AF:03:A5:50:B2 X509v3 Authority Key Identifier: keyid:01:5C:FE:E3:C2:B6:EA:49:D2:9E:10:3E:23:A5:22:C6:2E:38:53:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AVz-48K26knSnhA-I6Uixi44UxE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3bdbcb-be9c-43bd-aecf-4bf76ce3561d/1/AVz-48K26knSnhA-I6Uixi44UxE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:9d:60:a9:ea:51:ec:cf:08:0e:50:e7:98:66:f7:96:01: a7:4e:c3:c7:a4:69:e1:d8:08:8b:67:b0:db:4c:e7:3d:61:be: c4:13:27:1c:33:44:46:49:2e:2c:bb:b8:47:1d:f1:5f:ba:e5: b2:1b:8c:70:3f:87:a1:08:88:9f:78:d0:f3:19:05:b2:4b:b1: 1f:dd:69:ed:e3:6c:b3:a9:c2:ec:29:2a:2a:c9:ec:0a:7c:5e: 28:ba:9e:4e:67:22:25:f0:4f:34:5f:23:64:28:e7:c3:6c:27: cc:8d:17:2d:6d:4d:42:24:c1:4f:89:14:e0:95:b5:04:e1:63: e6:9d:4c:22:09:0b:f1:28:f5:01:23:c8:b5:3d:4a:45:37:47: a9:01:6c:21:47:30:7c:5f:89:45:c0:40:57:e6:23:97:5d:76: e3:12:d1:bc:38:d8:93:fc:8a:f9:d7:9d:ec:13:13:dd:c2:50: 3f:17:3f:e7:86:48:a9:34:7a:ad:f9:4e:b6:18:c4:68:43:dd: b6:d6:eb:92:b7:d0:b0:86:6f:d8:20:65:a8:fd:ab:41:b2:17: 8e:c9:51:12:05:95:14:25:af:88:c8:8c:d7:a1:60:c5:a9:1f: 4d:26:b9:6d:ee:a8:cb:b9:21:80:f7:1b:90:9f:5c:13:c7:63: e4:a1:fd:f1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxE2cYJ3ONKFTXhoNh2U/bpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxNWNmZWUzYzJiNmVhNDlkMjllMTAzZTIzYTUyMmM2MmUz ODUzMTEwHhcNMjYwMjEwMDAwMDQ4WhcNMjYwMjExMDAwMDQ4WjAzMTEwLwYDVQQD EyhkODlhY2JjYTdiYmUxYWQ0NjE1ZTU4ZjJlOGMzMmZhZjAzYTU1MGIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8j2EvhzlQDDdz+uIZJ/CBoYDAOs DnQ2xO0FTv5tP0T8h70cxAx8qmUcsybi80FDXFPQQvxujOV8fgF1ZbQNvc/cRpjt XJ05d6PBNvX8roEgfsk4Sq5zmLfYGMyy0uzRABzZbxrI/Cn1rxHphyTljTTqK0LX R4ElAoYZcjsXRwdCCWVQfYdjDbe8JxDxN8gcSDfJF5MualDUF9C60wjD+lNNwQqx QoZ1JGOvYd5miqVXJ5Lpk6K3MKt+WHUFdD1LCYyIeL3F0UyMnrY6eUwmbi33RTCq 63/ut9B3PEG+/atG4ItPqwEbTdIZYRXWubJa5MCrq9fQsYPFFSZeBGswGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNiay8p7vhrUYV5Y8ujDL68DpVCyMB8GA1UdIwQY MBaAFAFc/uPCtupJ0p4QPiOlIsYuOFMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2Yt NGJmNzZjZTM1NjFkLzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYmRiY2ItYmU5Yy00M2JkLWFlY2YtNGJmNzZjZTM1NjFk LzEvQVZ6LTQ4SzI2a25TbmhBLUk2VWl4aTQ0VXhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARJOdYKnq UezPCA5Q55hm95YBp07Dx6Rp4dgIi2ew20znPWG+xBMnHDNERkkuLLu4Rx3xX7rl shuMcD+HoQiIn3jQ8xkFskuxH91p7eNss6nC7CkqKsnsCnxeKLqeTmciJfBPNF8j ZCjnw2wnzI0XLW1NQiTBT4kU4JW1BOFj5p1MIgkL8Sj1ASPItT1KRTdHqQFsIUcw fF+JRcBAV+Yjl1124xLRvDjYk/yK+ded7BMT3cJQPxc/54ZIqTR6rflOthjEaEPd ttbrkrfQsIZv2CBlqP2rQbIXjslREgWVFCWviMiM16FgxakfTSa5be6oy7khgPcb kJ9cE8dj5KH98Q== -----END CERTIFICATE-----Generated at Tue Feb 10 01:22:17 2026 by rpki-client