This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft File: aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft (raw, json) Hash identifier: /jA9SPy/5Mb5R4ruOh6THUc/7HFtnEJ2N4289fDZDVM= Subject key identifier: 4E:2F:36:BF:7F:E4:67:A3:34:C6:6E:0A:7E:9F:75:93:36:49:6B:16 Authority key identifier: 68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 Certificate issuer: /CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Certificate serial: 019C4358E4F2847BE4BEE911D917ED319A0B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft Manifest number: 06CE Signing time: Mon 09 Feb 2026 17:00:25 +0000 Manifest this update: Mon 09 Feb 2026 17:00:25 +0000 Manifest next update: Tue 10 Feb 2026 17:00:25 +0000 Files and hashes: 1: 5JP3EEY5bnKcvSQg_d_0jzLOuso.roa (hash: nHWCClQokNNDpIYjG0ERFvivPbSmCZ+n7ir/zAxywpM=) 2: aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl (hash: A796ZYo5RvoDzMurPb7aepMSz+QXlx1Pm8W0wW3iZHs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:e4:f2:84:7b:e4:be:e9:11:d9:17:ed:31:9a:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68f83e2a34145ad47e0cc2b3c79fc6312bae2c71 Validity Not Before: Feb 9 17:00:25 2026 GMT Not After : Feb 10 17:00:25 2026 GMT Subject: CN=4e2f36bf7fe467a334c66e0a7e9f759336496b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:eb:ab:20:cd:ba:03:15:81:57:e4:06:a4:71: fa:b7:5c:d7:b4:3b:c3:af:d5:38:91:77:4d:a2:f6: d3:7c:20:45:87:10:6e:27:d1:2c:20:14:fb:aa:e8: 53:e4:d1:92:a4:82:07:b5:60:c0:30:26:fd:27:19: d1:b7:b3:4b:f1:6f:f1:eb:a7:fa:d7:95:9e:79:ca: a0:87:71:3a:b8:f1:fc:69:fc:10:33:5c:a6:b7:d0: ab:e9:10:8c:4d:22:bf:ec:fc:52:26:2b:11:a5:2a: bf:36:15:be:fc:5a:05:4c:9c:c1:d6:6c:e6:a3:3f: 18:cd:50:c3:51:4f:32:19:7f:fe:3a:7b:e5:dc:0f: 91:36:6f:8d:24:8e:56:18:00:92:12:3e:17:31:24: 7f:98:96:9b:00:90:96:8c:b0:f6:a6:ba:da:20:0b: fc:5d:ef:4d:a5:28:72:05:c9:80:7a:31:0f:81:74: 20:ef:fe:0a:bd:bd:f1:ec:85:6b:61:48:1f:cb:ec: 08:5a:d7:c7:43:6a:40:1f:4c:d8:97:de:98:0d:39: be:74:80:17:20:1a:dc:d1:3e:8e:69:4c:72:a0:f0: 0e:ac:e1:e3:54:81:14:d0:58:10:29:75:55:e3:21: a9:7c:37:4e:b8:6d:ef:7a:e7:4e:e5:89:bc:69:26: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:2F:36:BF:7F:E4:67:A3:34:C6:6E:0A:7E:9F:75:93:36:49:6B:16 X509v3 Authority Key Identifier: keyid:68:F8:3E:2A:34:14:5A:D4:7E:0C:C2:B3:C7:9F:C6:31:2B:AE:2C:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPg-KjQUWtR-DMKzx5_GMSuuLHE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/03/5e9f90-a6b0-4fd8-b8dd-792802c43925/1/aPg-KjQUWtR-DMKzx5_GMSuuLHE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:dc:3d:13:9b:3a:b9:96:e0:4b:18:5b:7d:9c:e9:a6:9f:27: d1:af:07:5c:a1:36:ab:f8:5f:d9:77:a6:a4:b4:76:f4:5c:c6: fb:df:5e:d5:f2:0d:54:0c:6f:84:a8:b5:6f:61:86:8c:4b:f7: a9:2d:f9:b6:d9:be:68:66:d2:d9:44:52:33:f2:1c:3a:5e:fe: cb:21:ab:2a:89:33:10:d0:5b:e6:27:5d:6a:87:0a:13:c2:98: 70:93:ea:11:b2:41:38:57:bf:2d:e3:99:9e:f6:4e:f9:e1:e3: 75:31:3f:47:25:f6:7c:37:be:7e:07:34:37:3c:76:7c:9f:9a: bf:3d:b2:56:0c:29:34:ad:1e:c8:50:1e:80:17:97:91:89:4e: a9:78:b9:e2:f0:a3:3f:5f:de:99:f1:8e:8c:d5:57:87:7a:0d: a2:a8:9e:6e:70:b8:96:97:75:15:8b:12:cc:22:39:38:5d:82: d8:71:c4:20:4e:4a:ce:c2:ca:8f:2a:9b:30:58:62:d2:12:f4: 8c:dc:d8:fe:2f:1d:ab:b4:cb:fc:df:f2:f1:9e:04:9f:bc:ed: 55:df:64:b7:7b:32:a6:19:62:fe:ec:10:7c:74:43:a6:dd:53: 09:14:6c:05:a0:80:2a:a1:7d:9a:6b:28:e9:99:78:fb:d9:e3: 88:b7:a7:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWOTyhHvkvukR2RftMZoLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZjgzZTJhMzQxNDVhZDQ3ZTBjYzJiM2M3OWZjNjMxMmJh ZTJjNzEwHhcNMjYwMjA5MTcwMDI1WhcNMjYwMjEwMTcwMDI1WjAzMTEwLwYDVQQD Eyg0ZTJmMzZiZjdmZTQ2N2EzMzRjNjZlMGE3ZTlmNzU5MzM2NDk2YjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuurIM26AxWBV+QGpHH6t1zXtDvD r9U4kXdNovbTfCBFhxBuJ9EsIBT7quhT5NGSpIIHtWDAMCb9JxnRt7NL8W/x66f6 15Weecqgh3E6uPH8afwQM1ymt9Cr6RCMTSK/7PxSJisRpSq/NhW+/FoFTJzB1mzm oz8YzVDDUU8yGX/+Onvl3A+RNm+NJI5WGACSEj4XMSR/mJabAJCWjLD2prraIAv8 Xe9NpShyBcmAejEPgXQg7/4Kvb3x7IVrYUgfy+wIWtfHQ2pAH0zYl96YDTm+dIAX IBrc0T6OaUxyoPAOrOHjVIEU0FgQKXVV4yGpfDdOuG3veudO5Ym8aSaHnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE4vNr9/5GejNMZuCn6fdZM2SWsWMB8GA1UdIwQY MBaAFGj4Pio0FFrUfgzCs8efxjErrixxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQt NzkyODAyYzQzOTI1LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMy81ZTlmOTAtYTZiMC00ZmQ4LWI4ZGQtNzkyODAyYzQzOTI1 LzEvYVBnLUtqUVVXdFItRE1Leng1X0dNU3V1TEhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAetw9E5s6 uZbgSxhbfZzppp8n0a8HXKE2q/hf2XempLR29FzG+99e1fINVAxvhKi1b2GGjEv3 qS35ttm+aGbS2URSM/IcOl7+yyGrKokzENBb5iddaocKE8KYcJPqEbJBOFe/LeOZ nvZO+eHjdTE/RyX2fDe+fgc0Nzx2fJ+avz2yVgwpNK0eyFAegBeXkYlOqXi54vCj P1/emfGOjNVXh3oNoqiebnC4lpd1FYsSzCI5OF2C2HHEIE5KzsLKjyqbMFhi0hL0 jNzY/i8dq7TL/N/y8Z4En7ztVd9kt3syphli/uwQfHRDpt1TCRRsBaCAKqF9mmso 6Zl4+9njiLendQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:24 2026 by rpki-client