This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft File: azpzXQmqp5cN7xLErGDoJ_2z-CU.mft (raw, json) Hash identifier: 470fjmvGFkseV9WrZslpZ9K7nOGK/0ZaDmaJrql/Y9w= Subject key identifier: 71:10:D6:4A:EE:38:11:CC:79:1E:BC:38:89:C4:E3:82:C1:41:FF:37 Authority key identifier: 6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 Certificate issuer: /CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Certificate serial: 019C27AB5DDCF1AB96D66D6DDDE2DBD17FDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft Manifest number: 149A Signing time: Wed 04 Feb 2026 08:01:07 +0000 Manifest this update: Wed 04 Feb 2026 08:01:07 +0000 Manifest next update: Thu 05 Feb 2026 08:01:07 +0000 Files and hashes: 1: 7Jk5wu_kJc-zPPGcp7O62JhhrJQ.roa (hash: SK08RqLCGeZwklsNV3oFj4q7+ObIhzDMa6BPNd7d8VI=) 2: azpzXQmqp5cN7xLErGDoJ_2z-CU.crl (hash: uj5LH4JZS/HF0PpZgXCJCkPi9aDyCI+O8d2aff4ZOLA=) 3: nFf_xFZifK1O6AxBYllnzUi_i3U.roa (hash: wCPglifyZSCCde6+ZRBNVX/1pM0oJBcsybUWgeFRMfQ=) 4: yQQiLrOw_IC4fSBdg8XdSt3Qv8c.roa (hash: /G23HmdFMWbuOSonlYM0rBeEVBVw1dDwE7uR//SpzMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 08:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:ab:5d:dc:f1:ab:96:d6:6d:6d:dd:e2:db:d1:7f:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b3a735d09aaa7970def12c4ac60e827fdb3f825 Validity Not Before: Feb 4 08:01:07 2026 GMT Not After : Feb 5 08:01:07 2026 GMT Subject: CN=7110d64aee3811cc791ebc3889c4e382c141ff37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:d9:d2:ae:44:01:53:ab:33:aa:41:dd:cc: ba:c5:3d:53:38:d0:7b:6b:f5:d0:13:01:4b:32:70: 8f:e7:2e:0b:6e:fb:74:cf:c3:f6:0c:5e:7f:63:4b: 39:52:16:c1:e0:aa:c3:fe:ac:36:90:0b:11:b6:8d: 3a:07:fa:68:79:8a:19:c7:80:06:e8:53:ed:5f:f7: b6:e8:96:fc:96:3e:b0:c6:ae:f6:f3:38:fb:47:d7: 72:e1:e4:c2:83:78:78:db:a6:f5:8d:31:83:7e:7a: b4:b8:a0:63:42:10:3a:51:93:86:ce:10:51:e8:7d: e9:89:1f:7e:92:44:58:e6:32:a3:e1:58:50:26:d2: a0:7e:e1:5b:c0:a8:c8:73:ec:7d:ea:ce:f0:0c:f9: 03:c9:57:2e:f5:61:b5:f6:ff:a7:68:2c:5b:71:ad: c6:ed:0e:35:d1:6a:e3:1e:2b:24:b5:4f:ae:b7:99: 86:83:7a:72:fc:22:b4:b8:cd:af:9a:c4:9d:6c:c7: 94:88:2e:cc:ac:6b:fe:ed:13:56:d1:3b:00:e2:a4: d7:30:7e:14:0f:2a:7a:51:47:55:76:09:ea:0e:ae: ef:2e:3c:b7:54:92:57:c9:d4:53:68:d1:e8:24:44: cc:71:22:9f:3a:e1:df:50:95:b8:6b:6f:50:8a:0f: 9c:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:10:D6:4A:EE:38:11:CC:79:1E:BC:38:89:C4:E3:82:C1:41:FF:37 X509v3 Authority Key Identifier: keyid:6B:3A:73:5D:09:AA:A7:97:0D:EF:12:C4:AC:60:E8:27:FD:B3:F8:25 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/azpzXQmqp5cN7xLErGDoJ_2z-CU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/cc7247-6f0c-4b74-8690-051076744a65/1/azpzXQmqp5cN7xLErGDoJ_2z-CU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:7e:2a:3d:7d:d6:62:f1:00:bb:44:c1:17:3b:84:db:a4:2d: f8:b2:ba:4c:da:52:f8:ed:8b:82:33:2b:42:69:95:7c:75:76: 49:62:1d:d6:d1:3a:df:6b:fe:46:5a:54:0d:03:72:90:0c:ce: 73:f4:b5:5a:c0:b9:21:08:53:cb:df:11:7e:81:ef:1d:d5:64: b0:d8:ba:e3:c0:71:8c:ae:1f:b7:af:78:39:4d:cf:9c:7d:10: 55:5c:6b:11:10:ae:2b:13:62:4d:59:32:7a:24:e6:19:55:2a: 36:5e:03:da:bd:03:50:db:84:fd:e8:e5:9d:6a:3e:15:ad:fd: 1e:d5:53:ea:ae:df:2f:63:ce:d8:c7:ad:aa:d2:d0:59:c0:3d: 3f:e1:c6:9d:32:e7:59:e0:2e:f1:99:d4:2d:82:2d:32:40:41: a9:73:e3:ed:c9:f1:bf:45:f7:4b:61:da:8b:9a:5d:85:d6:a0: ed:c0:e7:07:87:34:13:27:5c:05:b2:7f:31:37:26:e0:a7:97: 5c:42:e1:aa:e2:89:c1:d6:b1:a5:27:10:ee:64:14:ad:c2:eb: 1b:63:bc:ef:d6:f4:8b:ab:14:62:db:58:f8:61:6b:fb:cb:bf: 0c:69:e9:eb:31:72:c0:3d:43:a5:3b:60:7c:a2:82:36:75:b8: b6:c4:31:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwnq13c8auW1m1t3eLb0X/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiM2E3MzVkMDlhYWE3OTcwZGVmMTJjNGFjNjBlODI3ZmRi M2Y4MjUwHhcNMjYwMjA0MDgwMTA3WhcNMjYwMjA1MDgwMTA3WjAzMTEwLwYDVQQD Eyg3MTEwZDY0YWVlMzgxMWNjNzkxZWJjMzg4OWM0ZTM4MmMxNDFmZjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn77Z0q5EAVOrM6pB3cy6xT1TONB7 a/XQEwFLMnCP5y4Lbvt0z8P2DF5/Y0s5UhbB4KrD/qw2kAsRto06B/poeYoZx4AG 6FPtX/e26Jb8lj6wxq728zj7R9dy4eTCg3h426b1jTGDfnq0uKBjQhA6UZOGzhBR 6H3piR9+kkRY5jKj4VhQJtKgfuFbwKjIc+x96s7wDPkDyVcu9WG19v+naCxbca3G 7Q410WrjHisktU+ut5mGg3py/CK0uM2vmsSdbMeUiC7MrGv+7RNW0TsA4qTXMH4U Dyp6UUdVdgnqDq7vLjy3VJJXydRTaNHoJETMcSKfOuHfUJW4a29Qig+ckwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEQ1kruOBHMeR68OInE44LBQf83MB8GA1UdIwQY MBaAFGs6c10JqqeXDe8SxKxg6Cf9s/glMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAt MDUxMDc2NzQ0YTY1LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jYzcyNDctNmYwYy00Yjc0LTg2OTAtMDUxMDc2NzQ0YTY1 LzEvYXpwelhRbXFwNWNON3hMRXJHRG9KXzJ6LUNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH34qPX3W YvEAu0TBFzuE26Qt+LK6TNpS+O2LgjMrQmmVfHV2SWId1tE632v+RlpUDQNykAzO c/S1WsC5IQhTy98RfoHvHdVksNi648BxjK4ft694OU3PnH0QVVxrERCuKxNiTVky eiTmGVUqNl4D2r0DUNuE/ejlnWo+Fa39HtVT6q7fL2PO2MetqtLQWcA9P+HGnTLn WeAu8ZnULYItMkBBqXPj7cnxv0X3S2Hai5pdhdag7cDnB4c0EydcBbJ/MTcm4KeX XELhquKJwdaxpScQ7mQUrcLrG2O879b0i6sUYttY+GFr+8u/DGnp6zFywD1DpTtg fKKCNnW4tsQx1w== -----END CERTIFICATE-----Generated at Wed Feb 4 14:14:26 2026 by rpki-client