This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft File: 335xZknay_bqmGAjUU3-QN8afPA.mft (raw, json) Hash identifier: /4dFcV79pnN0jClPWswsoxLBsmhRlSnpuQK23I+OPCI= Subject key identifier: A0:CA:1B:D2:7D:02:47:E2:56:FF:93:6E:3A:A2:DA:F8:2A:1B:AD:A3 Authority key identifier: DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 Certificate issuer: /CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Certificate serial: 019C427D8DBE40AB9819FE67DC651860291C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft Manifest number: 0D18 Signing time: Mon 09 Feb 2026 13:00:50 +0000 Manifest this update: Mon 09 Feb 2026 13:00:50 +0000 Manifest next update: Tue 10 Feb 2026 13:00:50 +0000 Files and hashes: 1: 335xZknay_bqmGAjUU3-QN8afPA.crl (hash: 6jXKb9R/bCaRYxWb8ZafQoCbW8yjpMypL8Km3AG1y+A=) 2: uY6MRqkwHbBDja1sv8bo7p1ZOgo.roa (hash: +sjqwL7lFrjvNzeWY4Qrj2zoedPQzP+53ztMFw/05No=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:8d:be:40:ab:98:19:fe:67:dc:65:18:60:29:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df7e716649dacbf6ea986023514dfe40df1a7cf0 Validity Not Before: Feb 9 13:00:50 2026 GMT Not After : Feb 10 13:00:50 2026 GMT Subject: CN=a0ca1bd27d0247e256ff936e3aa2daf82a1bada3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:4c:ea:f4:bc:56:e3:0a:39:e3:ea:1e:a8:a7: 53:41:23:66:e5:f0:b4:36:c9:3b:c8:a2:92:27:59: 28:56:48:73:10:b0:5c:72:dd:7f:df:d8:a1:f1:eb: 40:5c:f5:a7:a7:11:9b:e9:03:0b:3b:84:66:3d:0d: 0a:5a:b5:2b:fc:df:6f:40:69:a8:93:e7:00:25:77: 98:d6:92:1a:b6:19:69:48:fd:7e:db:7a:cf:42:ac: b5:37:bb:4a:40:74:47:56:2c:f5:f6:7b:23:86:4f: 28:be:5c:90:25:14:d8:74:e8:4d:4b:19:29:fd:fe: d6:cb:ae:02:43:a2:b8:ec:4c:23:7a:d6:5b:66:f3: 21:a8:0b:ef:62:a9:ff:7f:59:38:94:95:e0:b2:b5: 3c:6e:5b:a9:84:36:89:97:60:40:4d:71:21:29:4c: 23:4e:84:8d:b0:f3:94:71:78:89:3d:e6:ad:44:2f: db:98:27:0a:b1:0e:06:ba:4f:a1:36:3d:54:62:ba: 63:a6:a0:7a:e9:a2:9b:26:7d:05:b5:13:d9:08:b2: a8:0f:01:1c:c1:37:7f:80:fd:9c:51:c3:e5:df:ff: ad:0d:16:6d:ce:af:84:6c:f1:c1:65:81:c1:25:67: 09:fe:ae:a3:28:9c:21:37:33:fb:71:a7:a3:ec:ee: 21:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:CA:1B:D2:7D:02:47:E2:56:FF:93:6E:3A:A2:DA:F8:2A:1B:AD:A3 X509v3 Authority Key Identifier: keyid:DF:7E:71:66:49:DA:CB:F6:EA:98:60:23:51:4D:FE:40:DF:1A:7C:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/335xZknay_bqmGAjUU3-QN8afPA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eeb757-5040-4bfb-a35d-a66289851cd9/1/335xZknay_bqmGAjUU3-QN8afPA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:e6:ed:19:a9:ca:32:03:30:42:39:76:29:40:41:ea:f2:ac: 65:5d:d0:a2:df:ae:73:35:6c:4e:92:20:ee:e5:28:a5:13:b9: dd:1f:e1:4f:20:46:bf:3c:6a:2e:15:7a:e0:66:b4:19:38:43: e0:93:d4:cd:71:36:43:a9:3b:76:d8:68:5b:bb:bd:5f:4c:b6: 0a:3a:c2:9b:9a:40:1c:dd:24:83:4b:04:86:56:30:c7:c3:ad: 27:15:ad:55:5a:4d:3f:5c:68:71:27:13:35:fb:63:9b:4b:94: 04:25:4d:ec:c8:0d:96:17:31:8b:95:78:6b:cd:4c:ee:d1:d9: 7f:7f:4d:84:56:94:b5:38:8d:eb:8b:c6:f2:b4:e5:25:42:c5: bf:74:90:99:8e:59:5a:af:bf:c1:cb:fd:db:f2:24:8a:5a:9d: 98:64:97:d5:14:eb:cd:b2:90:1e:d5:41:03:de:7c:62:a8:25: fe:66:d5:31:83:ff:32:2a:ee:54:b8:a4:95:c2:ed:24:6d:b3: 42:8e:71:c7:55:6d:9c:15:52:6a:d6:16:6e:97:ad:16:ac:09: 5b:3e:03:ad:3a:b0:0a:d7:82:7b:0d:b9:28:5c:6e:9f:49:0e: c5:23:46:8b:d8:14:f8:27:83:79:a0:eb:eb:9f:fa:c4:21:90: b3:7b:c8:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfY2+QKuYGf5n3GUYYCkcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmN2U3MTY2NDlkYWNiZjZlYTk4NjAyMzUxNGRmZTQwZGYx YTdjZjAwHhcNMjYwMjA5MTMwMDUwWhcNMjYwMjEwMTMwMDUwWjAzMTEwLwYDVQQD EyhhMGNhMWJkMjdkMDI0N2UyNTZmZjkzNmUzYWEyZGFmODJhMWJhZGEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEzq9LxW4wo54+oeqKdTQSNm5fC0 Nsk7yKKSJ1koVkhzELBcct1/39ih8etAXPWnpxGb6QMLO4RmPQ0KWrUr/N9vQGmo k+cAJXeY1pIathlpSP1+23rPQqy1N7tKQHRHViz19nsjhk8ovlyQJRTYdOhNSxkp /f7Wy64CQ6K47EwjetZbZvMhqAvvYqn/f1k4lJXgsrU8bluphDaJl2BATXEhKUwj ToSNsPOUcXiJPeatRC/bmCcKsQ4Guk+hNj1UYrpjpqB66aKbJn0FtRPZCLKoDwEc wTd/gP2cUcPl3/+tDRZtzq+EbPHBZYHBJWcJ/q6jKJwhNzP7caej7O4h+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKDKG9J9AkfiVv+Tbjqi2vgqG62jMB8GA1UdIwQY MBaAFN9+cWZJ2sv26phgI1FN/kDfGnzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQt YTY2Mjg5ODUxY2Q5LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMi9lZWI3NTctNTA0MC00YmZiLWEzNWQtYTY2Mjg5ODUxY2Q5 LzEvMzM1eFprbmF5X2JxbUdBalVVMy1RTjhhZlBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOebtGanK MgMwQjl2KUBB6vKsZV3Qot+uczVsTpIg7uUopRO53R/hTyBGvzxqLhV64Ga0GThD 4JPUzXE2Q6k7dthoW7u9X0y2CjrCm5pAHN0kg0sEhlYwx8OtJxWtVVpNP1xocScT Nftjm0uUBCVN7MgNlhcxi5V4a81M7tHZf39NhFaUtTiN64vG8rTlJULFv3SQmY5Z Wq+/wcv92/IkilqdmGSX1RTrzbKQHtVBA958Yqgl/mbVMYP/MiruVLiklcLtJG2z Qo5xx1VtnBVSatYWbpetFqwJWz4DrTqwCteCew25KFxun0kOxSNGi9gU+CeDeaDr 65/6xCGQs3vIbw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:43:43 2026 by rpki-client