This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft File: aBHhJcs1cHby-jE4yT6aJoGxeJM.mft (raw, json) Hash identifier: KIqpeE6lpBJgd689ycLIHBsvbBc50k7LeVFil/u5kVU= Subject key identifier: 6E:00:39:D0:AA:DA:F2:14:B7:D8:29:55:66:16:43:90:CC:97:A9:91 Authority key identifier: 68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93 Certificate issuer: /CN=6811e125cb357076f2fa3138c93e9a2681b17893 Certificate serial: 019C4321D93F4BC4EE14034A81570333A7B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 16:00:17 +0000 Manifest this update: Mon 09 Feb 2026 16:00:17 +0000 Manifest next update: Tue 10 Feb 2026 16:00:17 +0000 Files and hashes: 1: aBHhJcs1cHby-jE4yT6aJoGxeJM.crl (hash: SGsmDcvPJhnTmMt+ZRyRSz6sa5NFPX2z59XhRkFrUW8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:21:d9:3f:4b:c4:ee:14:03:4a:81:57:03:33:a7:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6811e125cb357076f2fa3138c93e9a2681b17893 Validity Not Before: Feb 9 16:00:17 2026 GMT Not After : Feb 10 16:00:17 2026 GMT Subject: CN=6e0039d0aadaf214b7d8295566164390cc97a991 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a9:35:87:07:50:fe:fb:3a:4d:e5:a1:b0:fe: 35:b2:01:41:f1:ae:7f:4d:7e:43:b2:c6:4a:c2:fa: ef:be:50:e3:eb:c2:88:1b:45:74:95:af:24:fe:03: e2:38:13:3f:49:10:1f:cf:ae:f1:f8:b0:67:57:b9: f1:31:82:b0:fe:c2:5f:1a:87:a7:c8:0c:c6:b2:9d: fd:d8:90:9a:54:b8:07:3d:0a:58:e8:4c:33:fc:dd: 72:51:c0:82:cb:61:10:33:e7:5a:2d:45:85:69:ed: d5:32:3f:75:80:01:a9:63:47:cb:89:2b:77:9e:d3: b4:c0:c1:4e:c6:05:92:d8:13:a0:60:0e:ca:5a:ad: 2d:65:d2:4f:de:e4:75:10:f7:af:1b:ac:ab:0b:bc: a6:ab:d3:8d:8c:9e:d2:40:5d:97:3c:78:94:e9:26: 21:80:e6:49:1c:f6:5c:30:db:72:af:67:a7:9e:31: 7c:ca:61:68:2d:1f:60:e4:02:89:6c:d5:58:2d:93: 8f:6c:b8:5c:ca:da:43:81:48:fb:e1:3b:f4:eb:83: 09:fa:0b:3f:23:04:0c:ab:64:fc:61:b8:bf:44:a8: c3:d0:08:0e:96:bf:3a:48:66:1a:e5:e9:8f:3d:d7: 03:c7:68:24:bd:ae:c4:3d:58:6a:a5:ea:da:a7:e0: 20:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:00:39:D0:AA:DA:F2:14:B7:D8:29:55:66:16:43:90:CC:97:A9:91 X509v3 Authority Key Identifier: keyid:68:11:E1:25:CB:35:70:76:F2:FA:31:38:C9:3E:9A:26:81:B1:78:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBHhJcs1cHby-jE4yT6aJoGxeJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ebacbd-8190-4e5a-a03a-cd439492b7ae/1/aBHhJcs1cHby-jE4yT6aJoGxeJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:70:d9:8c:b8:68:7f:49:07:0d:9c:2d:3c:82:1d:f4:1f:c9: a1:e7:db:7f:96:4d:48:fc:88:88:65:54:c4:48:13:c9:7d:ad: 45:0c:c5:41:43:39:f9:63:f2:49:f7:8b:0b:57:3d:44:18:5a: 71:99:04:d4:cb:7c:44:f7:32:43:90:b9:39:a6:b8:a0:09:dd: 89:39:5f:d3:25:30:54:a7:e9:3c:78:d5:26:15:38:cb:ee:e4: 16:79:b8:03:3f:d8:b0:89:84:b8:0d:17:0b:5f:e7:a5:e4:32: 17:bd:43:e1:19:78:14:39:ad:57:2f:95:91:23:4d:3b:03:e3: 16:c6:cf:38:43:9f:aa:79:f7:77:49:aa:fa:1e:8f:3b:e6:aa: 56:23:e1:39:d4:ad:a3:43:09:0a:99:54:c4:01:ae:da:9f:61: cc:fd:e7:e7:4c:f2:a7:d3:28:95:3a:5e:d7:60:91:aa:a9:72: 7c:34:76:65:ea:83:3e:eb:f5:60:bb:c4:e2:51:7b:b0:a0:59: cc:4a:02:99:87:d1:bd:05:73:28:7b:5c:73:5a:80:a4:f5:36: a7:59:a9:2a:42:4b:7f:f0:19:64:29:05:18:f3:dd:b9:16:ce: e9:c9:5a:3f:3d:80:00:db:09:b8:3d:e7:94:b1:c9:38:67:b6: 9c:83:59:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIdk/S8TuFANKgVcDM6e4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MTFlMTI1Y2IzNTcwNzZmMmZhMzEzOGM5M2U5YTI2ODFi MTc4OTMwHhcNMjYwMjA5MTYwMDE3WhcNMjYwMjEwMTYwMDE3WjAzMTEwLwYDVQQD Eyg2ZTAwMzlkMGFhZGFmMjE0YjdkODI5NTU2NjE2NDM5MGNjOTdhOTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqk1hwdQ/vs6TeWhsP41sgFB8a5/ TX5DssZKwvrvvlDj68KIG0V0la8k/gPiOBM/SRAfz67x+LBnV7nxMYKw/sJfGoen yAzGsp392JCaVLgHPQpY6Ewz/N1yUcCCy2EQM+daLUWFae3VMj91gAGpY0fLiSt3 ntO0wMFOxgWS2BOgYA7KWq0tZdJP3uR1EPevG6yrC7ymq9ONjJ7SQF2XPHiU6SYh gOZJHPZcMNtyr2ennjF8ymFoLR9g5AKJbNVYLZOPbLhcytpDgUj74Tv064MJ+gs/ IwQMq2T8Ybi/RKjD0AgOlr86SGYa5emPPdcDx2gkva7EPVhqperap+AgywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG4AOdCq2vIUt9gpVWYWQ5DMl6mRMB8GA1UdIwQY MBaAFGgR4SXLNXB28voxOMk+miaBsXiTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9lYmFjYmQtODE5MC00ZTVhLWEwM2Et Y2Q0Mzk0OTJiN2FlLzEvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMS9lYmFjYmQtODE5MC00ZTVhLWEwM2EtY2Q0Mzk0OTJiN2Fl LzEvYUJIaEpjczFjSGJ5LWpFNHlUNmFKb0d4ZUpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkXDZjLho f0kHDZwtPIId9B/Joefbf5ZNSPyIiGVUxEgTyX2tRQzFQUM5+WPySfeLC1c9RBha cZkE1Mt8RPcyQ5C5Oaa4oAndiTlf0yUwVKfpPHjVJhU4y+7kFnm4Az/YsImEuA0X C1/npeQyF71D4Rl4FDmtVy+VkSNNOwPjFsbPOEOfqnn3d0mq+h6PO+aqViPhOdSt o0MJCplUxAGu2p9hzP3n50zyp9MolTpe12CRqqlyfDR2ZeqDPuv1YLvE4lF7sKBZ zEoCmYfRvQVzKHtcc1qApPU2p1mpKkJLf/AZZCkFGPPduRbO6claPz2AANsJuD3n lLHJOGe2nINZOg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:31:15 2026 by rpki-client