This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft File: aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft (raw, json) Hash identifier: XMuNZf8VmOsbc3hOX0zr0xXX1quGjYlhSgZCd6yI2YE= Subject key identifier: DB:59:B8:44:11:5A:E3:68:E8:DB:AE:D2:D9:FA:0C:3C:D0:C1:F5:A4 Authority key identifier: 69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00 Certificate issuer: /CN=699710a1693710ac835f0b6745f90d2d680a1200 Certificate serial: 019C420F94303C2B0725799179C37CD2EC4F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft Manifest number: 17A2 Signing time: Mon 09 Feb 2026 11:00:43 +0000 Manifest this update: Mon 09 Feb 2026 11:00:43 +0000 Manifest next update: Tue 10 Feb 2026 11:00:43 +0000 Files and hashes: 1: VmSEi88h8EdX70CoZBoX1PGWIw4.roa (hash: cwT1GcadLbcYd+EhAmWFsga6gtnL8WtN6n2eRtcoP6o=) 2: aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl (hash: dJ78i6F46XoL3nX538xn29jy3xTlsk2CYwvkA6D7/K8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:94:30:3c:2b:07:25:79:91:79:c3:7c:d2:ec:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=699710a1693710ac835f0b6745f90d2d680a1200 Validity Not Before: Feb 9 11:00:43 2026 GMT Not After : Feb 10 11:00:43 2026 GMT Subject: CN=db59b844115ae368e8dbaed2d9fa0c3cd0c1f5a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:46:b3:89:65:0d:1f:a5:be:d3:41:ff:51:e5: 8e:27:a5:dc:92:b7:7d:ec:90:fc:2a:80:33:b7:8f: 2d:d9:a4:f3:86:ff:56:68:fa:b3:5c:85:45:12:b9: 48:8f:a8:7d:7c:5e:1a:6d:5f:1d:85:e4:c9:c5:45: ce:56:5b:1b:93:50:9e:8d:93:23:7d:26:8f:1b:72: a1:07:26:0e:bd:68:dc:69:cc:6e:67:a4:47:02:4a: 51:09:fd:63:d2:02:cb:f5:7f:19:b2:57:df:cb:23: 32:e2:fa:61:9d:32:1f:64:6f:7c:4b:a6:3a:91:f4: a3:29:5b:7d:93:e9:db:9e:d0:87:06:fb:bf:7d:59: 67:81:4f:20:a3:96:2f:24:79:c6:a9:10:63:a1:c6: 22:2b:9d:cc:72:2a:1c:1e:9f:e1:70:61:4b:94:c0: 04:39:46:92:60:73:f0:70:e8:d8:8d:52:ba:24:2e: 66:7a:2d:68:fc:31:27:1c:a5:e5:21:77:45:00:bc: a5:77:9f:b2:b7:0f:13:ab:73:b4:a3:8c:59:47:4a: 48:79:05:da:e9:4f:87:ef:0e:61:5e:fb:29:72:07: fc:de:1e:d4:92:46:16:b4:9f:28:e6:4d:d1:30:cd: 38:5c:a3:67:d1:75:30:ee:0c:1e:07:c2:31:5f:83: a3:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:59:B8:44:11:5A:E3:68:E8:DB:AE:D2:D9:FA:0C:3C:D0:C1:F5:A4 X509v3 Authority Key Identifier: keyid:69:97:10:A1:69:37:10:AC:83:5F:0B:67:45:F9:0D:2D:68:0A:12:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZcQoWk3EKyDXwtnRfkNLWgKEgA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/07745c-47c1-4002-950f-29b98ecdff12/1/aZcQoWk3EKyDXwtnRfkNLWgKEgA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:a7:bb:5a:2f:65:a8:03:6f:08:f6:87:bc:e7:2e:4e:4c:87: d0:a2:a2:17:b0:f9:64:20:cc:40:df:fd:9d:32:bc:db:d1:16: a0:79:ab:a8:91:19:8c:24:b8:cb:35:38:96:4d:bf:44:01:a3: 32:c9:1d:66:7c:80:f8:2a:1f:e4:66:e1:98:bf:57:f9:84:8a: d2:0e:5f:5a:d0:55:ad:e4:fe:da:86:36:b4:09:6e:09:99:45: ff:38:82:7e:c2:73:3c:a7:7c:98:93:45:4c:9b:e4:ed:5d:07: e2:33:51:d6:65:b1:ff:17:6c:14:d8:3f:c0:22:c3:50:7f:08: 99:3c:c9:6a:14:23:ab:33:4c:45:c7:a0:df:35:ba:f4:78:e0: a7:94:3d:43:1a:4b:c0:c4:33:47:9e:06:54:f3:ce:65:15:c8: 68:26:32:32:93:b9:c1:dc:b5:14:ea:2f:8e:0c:19:40:d8:28: 25:34:44:a4:aa:ec:81:db:8e:59:c6:5d:f1:64:bd:d5:e5:11: 2f:aa:9f:b7:eb:fd:70:e4:0e:44:40:bd:8e:2e:19:90:78:a9: cc:82:f5:99:d2:43:48:31:10:3f:e4:6c:2b:7e:01:b1:11:ca: 7b:9a:c9:9a:91:00:71:17:eb:68:1d:b0:a6:cf:a8:dd:b4:c8: 1d:cf:bd:3d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5QwPCsHJXmRecN80uxPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5OTcxMGExNjkzNzEwYWM4MzVmMGI2NzQ1ZjkwZDJkNjgw YTEyMDAwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD EyhkYjU5Yjg0NDExNWFlMzY4ZThkYmFlZDJkOWZhMGMzY2QwYzFmNWE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0aziWUNH6W+00H/UeWOJ6Xckrd9 7JD8KoAzt48t2aTzhv9WaPqzXIVFErlIj6h9fF4abV8dheTJxUXOVlsbk1CejZMj fSaPG3KhByYOvWjcacxuZ6RHAkpRCf1j0gLL9X8ZslffyyMy4vphnTIfZG98S6Y6 kfSjKVt9k+nbntCHBvu/fVlngU8go5YvJHnGqRBjocYiK53MciocHp/hcGFLlMAE OUaSYHPwcOjYjVK6JC5mei1o/DEnHKXlIXdFALyld5+ytw8Tq3O0o4xZR0pIeQXa 6U+H7w5hXvspcgf83h7UkkYWtJ8o5k3RMM04XKNn0XUw7gweB8IxX4OjVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtZuEQRWuNo6Nuu0tn6DDzQwfWkMB8GA1UdIwQY MBaAFGmXEKFpNxCsg18LZ0X5DS1oChIAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYt MjliOThlY2RmZjEyLzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8wNzc0NWMtNDdjMS00MDAyLTk1MGYtMjliOThlY2RmZjEy LzEvYVpjUW9XazNFS3lEWHd0blJma05MV2dLRWdBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI6e7Wi9l qANvCPaHvOcuTkyH0KKiF7D5ZCDMQN/9nTK829EWoHmrqJEZjCS4yzU4lk2/RAGj MskdZnyA+Cof5GbhmL9X+YSK0g5fWtBVreT+2oY2tAluCZlF/ziCfsJzPKd8mJNF TJvk7V0H4jNR1mWx/xdsFNg/wCLDUH8ImTzJahQjqzNMRceg3zW69Hjgp5Q9QxpL wMQzR54GVPPOZRXIaCYyMpO5wdy1FOovjgwZQNgoJTREpKrsgduOWcZd8WS91eUR L6qft+v9cOQOREC9ji4ZkHipzIL1mdJDSDEQP+RsK34BsRHKe5rJmpEAcRfraB2w ps+o3bTIHc+9PQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:41 2026 by rpki-client