This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json) Hash identifier: sQ4s1hjP24eoPOcNJGyFFYboP7fQcWvgw1oeD8bliHQ= Subject key identifier: D0:28:4A:73:EA:FF:A9:8E:15:CA:65:72:BD:3A:F3:3B:66:0A:CC:F2 Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Certificate serial: 019C41342DF9461847ED16786F9388E409CD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft Manifest number: 0BA0 Signing time: Mon 09 Feb 2026 07:01:04 +0000 Manifest this update: Mon 09 Feb 2026 07:01:04 +0000 Manifest next update: Tue 10 Feb 2026 07:01:04 +0000 Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: nYtZp2lr6G/nPWScXShUPiLVAnwIDh20qw410T34q7g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:34:2d:f9:46:18:47:ed:16:78:6f:93:88:e4:09:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0 Validity Not Before: Feb 9 07:01:04 2026 GMT Not After : Feb 10 07:01:04 2026 GMT Subject: CN=d0284a73eaffa98e15ca6572bd3af33b660accf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:48:32:f5:fb:02:4f:8c:77:ab:70:39:0b:b2: c5:53:64:f3:15:60:fd:cd:91:d2:6d:f8:22:a4:61: c7:ba:c8:ca:b5:c0:9a:c9:da:85:eb:2e:8a:e8:2d: 3a:eb:9c:74:73:0b:d7:0e:96:4d:15:3b:d7:9f:08: 27:ef:a6:61:e9:f1:f9:2b:4f:46:5c:81:fb:73:ef: cd:0e:3f:5d:20:66:2d:48:8e:c3:e3:4c:90:40:a5: 02:cb:27:0d:84:a1:b6:f6:a2:c5:67:85:3d:44:be: a6:32:56:b3:fb:c6:05:88:9d:b9:37:8e:c0:a7:6d: 9d:b6:6d:a7:3a:7b:c8:9b:6d:54:66:1c:1a:a0:5b: 4b:5e:16:95:03:47:69:18:27:5a:48:12:30:9d:9f: fe:6c:6d:ca:61:a8:f0:bb:45:3d:fa:82:e3:d5:1d: 76:d1:76:ea:68:41:31:6a:1f:5b:91:64:34:8c:a3: a5:7a:02:b5:b8:ea:f1:72:20:e0:92:e0:d5:b4:d2: 8f:22:e9:fb:d6:30:ec:24:22:c9:cd:d4:6c:f4:26: df:ce:b3:c9:87:f2:75:b0:b8:ae:63:82:30:7c:93: 84:4b:f1:a4:da:b6:ed:33:4d:5f:ba:98:c0:5c:1f: 85:e5:06:05:bd:08:a1:08:a7:65:ae:71:b0:0f:a9: c6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:28:4A:73:EA:FF:A9:8E:15:CA:65:72:BD:3A:F3:3B:66:0A:CC:F2 X509v3 Authority Key Identifier: keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:bf:94:f7:78:27:8b:a3:36:ba:e8:f6:64:a5:92:d9:fa:14: 97:45:4b:7b:05:20:18:a8:76:0f:97:18:77:1f:6b:84:e6:e5: ce:cf:fe:47:33:64:a3:81:3c:36:02:0e:de:94:d4:f5:2b:24: 57:bb:0e:09:96:d5:9d:01:6f:8f:25:67:9a:0b:ab:d0:43:d9: 56:02:22:36:09:8b:3f:45:20:a8:4b:34:8f:2b:51:99:9d:29: 66:fd:20:5d:fe:98:6c:25:c4:22:31:67:ce:ee:67:36:82:a8: 00:dd:59:b7:7d:36:1d:47:b3:8b:3e:a7:c3:8e:8b:5e:68:c8: 25:76:e3:82:25:0e:df:bb:f0:c7:a4:e1:1c:80:c0:38:6a:6c: 49:a9:47:5f:f3:b2:33:7e:cb:f0:6e:d4:7a:37:7b:f0:71:d2: 3e:1a:ec:5f:b0:a3:df:28:71:0a:6d:71:37:52:6b:c8:84:39: 59:9c:61:1d:4a:68:bf:44:4c:c5:a8:d4:24:c4:0c:6f:04:b5: 03:ce:16:aa:fd:77:44:34:90:98:93:15:2c:f2:28:57:f2:d7: ec:7f:d4:8c:b1:fb:e6:91:0b:e0:43:36:cc:7a:46:c9:b1:08: cf:53:19:ef:10:e7:72:34:68:85:d6:0e:83:56:28:86:e7:f0: 6d:81:2a:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBNC35RhhH7RZ4b5OI5AnNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmNkMzg1YWI5MDI5NjI3MThhMzliYjdiM2VjOTlhYTQw NGU1YzAwHhcNMjYwMjA5MDcwMTA0WhcNMjYwMjEwMDcwMTA0WjAzMTEwLwYDVQQD EyhkMDI4NGE3M2VhZmZhOThlMTVjYTY1NzJiZDNhZjMzYjY2MGFjY2YyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kgy9fsCT4x3q3A5C7LFU2TzFWD9 zZHSbfgipGHHusjKtcCaydqF6y6K6C0665x0cwvXDpZNFTvXnwgn76Zh6fH5K09G XIH7c+/NDj9dIGYtSI7D40yQQKUCyycNhKG29qLFZ4U9RL6mMlaz+8YFiJ25N47A p22dtm2nOnvIm21UZhwaoFtLXhaVA0dpGCdaSBIwnZ/+bG3KYajwu0U9+oLj1R12 0XbqaEExah9bkWQ0jKOlegK1uOrxciDgkuDVtNKPIun71jDsJCLJzdRs9CbfzrPJ h/J1sLiuY4IwfJOES/Gk2rbtM01fupjAXB+F5QYFvQihCKdlrnGwD6nGYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNAoSnPq/6mOFcplcr068ztmCszyMB8GA1UdIwQY MBaAFAAs04WrkClicYo5u3s+yZqkBOXAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODct ZTIzNWQ5MGY2NDcxLzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS9jZjVmMzAtZTdkMC00YWQzLTg5ODctZTIzNWQ5MGY2NDcx LzEvQUN6VGhhdVFLV0p4aWptN2V6N0ptcVFFNWNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAz7+U93gn i6M2uuj2ZKWS2foUl0VLewUgGKh2D5cYdx9rhOblzs/+RzNko4E8NgIO3pTU9Ssk V7sOCZbVnQFvjyVnmgur0EPZVgIiNgmLP0UgqEs0jytRmZ0pZv0gXf6YbCXEIjFn zu5nNoKoAN1Zt302HUeziz6nw46LXmjIJXbjgiUO37vwx6ThHIDAOGpsSalHX/Oy M37L8G7Uejd78HHSPhrsX7Cj3yhxCm1xN1JryIQ5WZxhHUpov0RMxajUJMQMbwS1 A84Wqv13RDSQmJMVLPIoV/LX7H/UjLH75pEL4EM2zHpGybEIz1MZ7xDncjRohdYO g1YohufwbYEq0A== -----END CERTIFICATE-----Generated at Mon Feb 9 16:59:42 2026 by rpki-client