This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft File: RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft (raw, json) Hash identifier: js9Zsk/1ZpwGyXeu5LWRVbjtS+t49d/Vclbq6Id2RCc= Subject key identifier: 74:59:A7:30:30:28:8A:CC:3B:7A:33:95:F3:8A:14:5D:45:CF:87:A3 Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40 Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540 Certificate serial: 019C43C71713DB446D7BF038697711075372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft Manifest number: 0E8C Signing time: Mon 09 Feb 2026 19:00:46 +0000 Manifest this update: Mon 09 Feb 2026 19:00:46 +0000 Manifest next update: Tue 10 Feb 2026 19:00:46 +0000 Files and hashes: 1: 6FlvO6wUgf9ecpKA1EuuoZxooB0.roa (hash: aEzLbUYuZvHpFrzr2sZaateqbjh/th5NR4O+uOuzOMQ=) 2: RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl (hash: ON3Pzq5p0njq0hHF7HyEHM4sVZfXUHa3fE6/kAGXxHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:17:13:db:44:6d:7b:f0:38:69:77:11:07:53:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540 Validity Not Before: Feb 9 19:00:46 2026 GMT Not After : Feb 10 19:00:46 2026 GMT Subject: CN=7459a73030288acc3b7a3395f38a145d45cf87a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:12:d2:82:65:4f:ec:e2:c5:34:69:6f:df:a0: 86:a7:17:c9:1c:43:cb:58:fe:c3:66:6b:f2:78:1f: 3b:c4:cd:1d:be:cb:57:16:22:74:47:16:2e:d5:3e: 3d:35:b6:45:2a:d5:8a:29:9f:50:fc:c7:0d:7c:73: d3:1c:53:4e:c4:58:f0:bb:7d:b1:97:50:ac:f8:fb: 32:e0:68:3c:d2:ac:c2:95:e3:fb:e1:6c:33:ca:fe: 31:bc:87:35:fc:54:6a:d8:1f:d6:f9:13:3c:a9:2e: 6e:94:20:06:33:56:bf:c6:63:ef:36:51:e5:3b:a6: 27:06:54:4c:16:ab:e0:99:1f:45:45:eb:0f:cc:c2: 70:2c:7f:99:dc:10:bd:0a:34:d8:eb:b6:fc:1f:c2: a7:1f:28:c9:0a:2b:df:a9:29:be:80:d9:86:2a:f5: f0:ed:fe:1e:a9:5f:63:a5:97:a2:7b:f7:23:1d:55: 4c:4f:11:43:c5:93:4a:85:37:e5:c8:a1:90:6e:55: 37:7d:a1:95:60:16:6d:25:d1:12:75:87:5e:47:b4: 70:e7:76:fd:4c:a3:f8:f5:f3:c8:9d:3c:76:41:83: 8e:49:69:6e:8c:9c:93:0f:19:ff:f4:4b:b0:c5:57: 3d:1d:17:22:54:04:36:3a:f0:ab:4d:b8:83:b1:a2: 78:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:59:A7:30:30:28:8A:CC:3B:7A:33:95:F3:8A:14:5D:45:CF:87:A3 X509v3 Authority Key Identifier: keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f3:e8:87:38:62:a6:9d:9b:46:e3:bd:13:80:d2:22:76:e9: e0:4e:62:65:5e:c8:20:ae:4a:88:32:a4:8b:cd:d2:fe:a5:e4: b6:9d:82:38:4d:4c:da:78:69:2c:fd:6f:e5:16:3f:92:cb:3b: ff:78:d2:da:86:83:49:d3:21:c1:57:73:29:37:b5:af:3f:12: 61:cc:56:c9:02:1c:a9:a8:cb:27:e3:2f:4c:fe:a7:e8:ea:0c: 5b:13:c4:d5:4d:22:fc:6d:35:b0:a2:35:07:ae:c9:09:bc:e1: d1:7e:c2:fd:fb:12:12:b4:93:d0:8f:c1:78:cf:85:47:d9:ed: 95:54:9b:25:fa:83:3e:af:a6:7f:65:08:92:a6:bf:64:3e:8b: cf:b7:ac:ce:4f:99:8f:9f:50:a8:27:82:58:ea:a7:c6:bb:36: 53:6f:ba:59:74:d1:17:6d:41:02:88:8d:ba:97:2b:b6:86:d5: 97:ed:e6:fb:2c:25:42:fe:59:ae:33:f8:61:8c:e4:90:3e:76: 82:db:8b:fc:87:fc:8d:fb:e0:64:a6:f6:ec:97:f3:de:7d:9a: 20:0b:4c:a1:2f:c3:28:4f:88:6f:68:cb:aa:1c:8d:ce:d9:aa: a2:39:a5:c4:a2:c4:fb:a9:cf:f4:c9:da:9a:bc:5c:3a:d2:14: a4:c1:ab:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxcT20Rte/A4aXcRB1NyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZDY0ZGFjMDNmMWE1N2MxOTMxNjY3MTE4MDQ4ZDgyYzQz YzU1NDAwHhcNMjYwMjA5MTkwMDQ2WhcNMjYwMjEwMTkwMDQ2WjAzMTEwLwYDVQQD Eyg3NDU5YTczMDMwMjg4YWNjM2I3YTMzOTVmMzhhMTQ1ZDQ1Y2Y4N2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBLSgmVP7OLFNGlv36CGpxfJHEPL WP7DZmvyeB87xM0dvstXFiJ0RxYu1T49NbZFKtWKKZ9Q/McNfHPTHFNOxFjwu32x l1Cs+Psy4Gg80qzCleP74Wwzyv4xvIc1/FRq2B/W+RM8qS5ulCAGM1a/xmPvNlHl O6YnBlRMFqvgmR9FResPzMJwLH+Z3BC9CjTY67b8H8KnHyjJCivfqSm+gNmGKvXw 7f4eqV9jpZeie/cjHVVMTxFDxZNKhTflyKGQblU3faGVYBZtJdESdYdeR7Rw53b9 TKP49fPInTx2QYOOSWlujJyTDxn/9EuwxVc9HRciVAQ2OvCrTbiDsaJ4aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHRZpzAwKIrMO3ozlfOKFF1Fz4ejMB8GA1UdIwQY MBaAFETWTawD8aV8GTFmcRgEjYLEPFVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUt ZTlkMmIzYTc4NzJjLzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS8xMDJiZWYtNjQ1OS00NGJjLTg0MGUtZTlkMmIzYTc4NzJj LzEvUk5aTnJBUHhwWHdaTVdaeEdBU05nc1E4VlVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPPohzhi pp2bRuO9E4DSInbp4E5iZV7IIK5KiDKki83S/qXktp2COE1M2nhpLP1v5RY/kss7 /3jS2oaDSdMhwVdzKTe1rz8SYcxWyQIcqajLJ+MvTP6n6OoMWxPE1U0i/G01sKI1 B67JCbzh0X7C/fsSErST0I/BeM+FR9ntlVSbJfqDPq+mf2UIkqa/ZD6Lz7eszk+Z j59QqCeCWOqnxrs2U2+6WXTRF21BAoiNupcrtobVl+3m+ywlQv5ZrjP4YYzkkD52 gtuL/If8jfvgZKb27Jfz3n2aIAtMoS/DKE+Ib2jLqhyNztmqojmlxKLE+6nP9Mna mrxcOtIUpMGrtA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:45:43 2026 by rpki-client