This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft File: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft (raw, json) Hash identifier: PzqAt0Tz/Rn5cnZ8vZnGgxSK5M2bcAj8aiPmnc6Mb2o= Subject key identifier: 45:07:7D:D3:9C:A0:C9:E7:E9:53:97:84:5B:2E:07:73:D1:7C:59:30 Authority key identifier: D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A Certificate issuer: /CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a Certificate serial: 019C43FDD8DCB03C8D0E05D2B1E7A897F52F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft Manifest number: 0DFE Signing time: Mon 09 Feb 2026 20:00:35 +0000 Manifest this update: Mon 09 Feb 2026 20:00:35 +0000 Manifest next update: Tue 10 Feb 2026 20:00:35 +0000 Files and hashes: 1: 0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl (hash: QWAAZyxFjLDZpVnlOATCxLGIk2DubLSRKFuCFW687gw=) 2: 30fBF43nNMXHw1Tgh2dLtFk3R6M.roa (hash: PgUDjgwNU/uw7qs9K31DsvhoYHzlo8cAS/N8Ut5gSaw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 20:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:d8:dc:b0:3c:8d:0e:05:d2:b1:e7:a8:97:f5:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d33a620b2acc8fc30b8c4d518f9297e3f7c9a60a Validity Not Before: Feb 9 20:00:35 2026 GMT Not After : Feb 10 20:00:35 2026 GMT Subject: CN=45077dd39ca0c9e7e95397845b2e0773d17c5930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:0f:34:25:63:f8:bd:60:10:3a:d4:89:13: 98:5f:a0:72:f6:a6:fc:8d:fd:16:04:69:83:c0:4b: c2:0f:60:62:00:c6:0a:8a:af:66:44:70:90:f4:12: d8:ee:0f:70:b5:68:e9:5c:c2:d5:53:c9:66:ea:80: ce:d8:c6:1f:52:26:b1:7f:be:bc:03:3d:97:16:50: 6d:00:6b:b4:ac:23:9c:19:f8:ac:6d:1b:f3:4c:03: 78:2f:d6:86:72:11:d9:d4:74:cc:9f:a9:bc:7f:eb: a5:3a:ac:72:46:a4:d9:41:20:2c:a5:a3:24:09:da: 83:ce:39:1e:84:33:e7:74:35:e7:f4:5e:18:11:1f: eb:f8:87:dd:fe:c7:63:86:cf:51:92:09:c4:f6:d8: df:49:93:fb:cb:12:92:da:7d:78:5f:e9:8c:58:7d: 36:a3:a5:64:f8:02:e6:70:21:65:80:ff:f8:01:3a: 65:92:b0:0f:1a:49:8b:86:de:18:b3:a5:95:d6:d8: 68:dc:7f:8d:12:f3:7d:db:b6:73:31:22:e2:24:09: 9e:57:13:db:18:9c:2e:8f:cb:51:f6:8e:de:32:8c: 3e:0a:0d:90:b8:42:fa:d9:a5:d0:61:38:f4:66:2b: 1c:d0:8c:3c:82:70:f0:c7:07:e3:38:a5:a7:57:64: 2c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:07:7D:D3:9C:A0:C9:E7:E9:53:97:84:5B:2E:07:73:D1:7C:59:30 X509v3 Authority Key Identifier: keyid:D3:3A:62:0B:2A:CC:8F:C3:0B:8C:4D:51:8F:92:97:E3:F7:C9:A6:0A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2a4ee3-d76d-48be-add6-78f992475e1f/1/0zpiCyrMj8MLjE1Rj5KX4_fJpgo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:40:cb:5c:f8:36:e2:5c:01:27:31:48:b2:06:c4:b5:f8:2e: 7b:a2:6c:88:02:a9:9d:3e:83:20:08:93:86:fe:f9:0a:19:b8: ff:50:59:e9:c8:86:f0:3c:ab:bf:5a:67:dd:c9:fd:06:2c:c9: ea:84:69:35:96:90:c4:a8:9a:29:76:f8:64:0c:3f:39:9c:62: 10:00:2f:fb:e3:3a:75:1f:22:88:7c:1c:3e:4d:bd:eb:b6:f2: ac:fb:33:84:a1:b4:92:6c:f2:06:5d:dc:84:57:ec:f5:e0:2f: 71:56:93:f6:94:ac:41:37:ba:d6:5f:aa:d7:be:cf:a9:cf:83: 91:6b:41:0f:d4:48:48:be:4c:f2:90:9e:8c:11:91:46:92:58: 31:e1:8d:2e:42:be:ed:ca:ea:f2:5d:66:de:ef:c7:ad:77:19: ec:66:f8:fb:20:0e:6d:2c:a2:40:e6:67:2d:50:45:73:27:be: ba:b3:c1:64:69:25:82:d7:f7:33:1b:77:4e:21:af:fc:7b:ac: 2f:17:7e:bb:68:3e:82:03:23:13:40:34:0e:19:67:03:ea:6e: 5c:9e:da:c1:c0:a7:b6:2c:ee:a8:66:34:e1:9f:41:df:79:4d: 3d:b0:c1:5a:a6:ae:2c:c5:ed:37:f3:07:89:8a:de:2a:0f:3f: 39:5c:65:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/djcsDyNDgXSseeol/UvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzM2E2MjBiMmFjYzhmYzMwYjhjNGQ1MThmOTI5N2UzZjdj OWE2MGEwHhcNMjYwMjA5MjAwMDM1WhcNMjYwMjEwMjAwMDM1WjAzMTEwLwYDVQQD Eyg0NTA3N2RkMzljYTBjOWU3ZTk1Mzk3ODQ1YjJlMDc3M2QxN2M1OTMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG4PNCVj+L1gEDrUiROYX6By9qb8 jf0WBGmDwEvCD2BiAMYKiq9mRHCQ9BLY7g9wtWjpXMLVU8lm6oDO2MYfUiaxf768 Az2XFlBtAGu0rCOcGfisbRvzTAN4L9aGchHZ1HTMn6m8f+ulOqxyRqTZQSAspaMk CdqDzjkehDPndDXn9F4YER/r+Ifd/sdjhs9RkgnE9tjfSZP7yxKS2n14X+mMWH02 o6Vk+ALmcCFlgP/4ATplkrAPGkmLht4Ys6WV1tho3H+NEvN927ZzMSLiJAmeVxPb GJwuj8tR9o7eMow+Cg2QuEL62aXQYTj0Zisc0Iw8gnDwxwfjOKWnV2QslwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUHfdOcoMnn6VOXhFsuB3PRfFkwMB8GA1UdIwQY MBaAFNM6YgsqzI/DC4xNUY+Sl+P3yaYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMHpwaUN5ck1qOE1MakUxUmo1S1g0X2ZKcGdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yYTRlZTMtZDc2ZC00OGJlLWFkZDYt NzhmOTkyNDc1ZTFmLzEvMHpwaUN5ck1qOE1MakUxUmo1S1g0X2ZKcGdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS8yYTRlZTMtZDc2ZC00OGJlLWFkZDYtNzhmOTkyNDc1ZTFm LzEvMHpwaUN5ck1qOE1MakUxUmo1S1g0X2ZKcGdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAkDLXPg2 4lwBJzFIsgbEtfgue6JsiAKpnT6DIAiThv75Chm4/1BZ6ciG8Dyrv1pn3cn9BizJ 6oRpNZaQxKiaKXb4ZAw/OZxiEAAv++M6dR8iiHwcPk2967byrPszhKG0kmzyBl3c hFfs9eAvcVaT9pSsQTe61l+q177Pqc+DkWtBD9RISL5M8pCejBGRRpJYMeGNLkK+ 7crq8l1m3u/HrXcZ7Gb4+yAObSyiQOZnLVBFcye+urPBZGklgtf3Mxt3TiGv/Hus Lxd+u2g+ggMjE0A0DhlnA+puXJ7awcCntizuqGY04Z9B33lNPbDBWqauLMXtN/MH iYreKg8/OVxlwg== -----END CERTIFICATE-----Generated at Tue Feb 10 03:15:52 2026 by rpki-client