This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft File: aJbZwUqKtdiwtAgYfs4VoNI87hw.mft (raw, json) Hash identifier: MrYRu6IVBDog+dc/dfVdxQIsxoUqcoVSbt4QhQ5dCPU= Subject key identifier: ED:04:52:21:F9:E7:7D:59:EB:DC:77:2F:4F:56:DA:71:9C:C4:F7:E2 Authority key identifier: 68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C Certificate issuer: /CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Certificate serial: 019C427DFE269E578AE11F16B27992201F49 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft Manifest number: 129A Signing time: Mon 09 Feb 2026 13:01:19 +0000 Manifest this update: Mon 09 Feb 2026 13:01:19 +0000 Manifest next update: Tue 10 Feb 2026 13:01:19 +0000 Files and hashes: 1: aJbZwUqKtdiwtAgYfs4VoNI87hw.crl (hash: /7N8tRBKz7l6TFLhttLi4532Ydml6h4a1MPdQD6IPwk=) 2: o8qWJ1qmv3YFlhdAYdwIJZaPBT4.roa (hash: xT316B0rPdGhWCFpIdcczgFppcvC9/tzakj3ZEzfe3g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:fe:26:9e:57:8a:e1:1f:16:b2:79:92:20:1f:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6896d9c14a8ab5d8b0b408187ece15a0d23cee1c Validity Not Before: Feb 9 13:01:19 2026 GMT Not After : Feb 10 13:01:19 2026 GMT Subject: CN=ed045221f9e77d59ebdc772f4f56da719cc4f7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:0a:36:b2:11:ef:e4:b8:25:51:2b:50:ed: 10:dc:7d:7f:56:61:91:81:8c:fd:b8:57:2e:36:33: e8:3b:18:fe:ba:be:12:d8:2d:9f:d9:12:a1:62:90: 09:3a:fc:05:1c:a6:e0:69:1c:fb:95:d6:08:86:8e: d6:9b:3e:e9:5b:71:00:25:75:6a:fe:98:d0:6a:56: b3:5c:c4:fa:84:9e:80:58:b8:af:ee:b1:18:22:5c: 64:b3:57:bc:a2:a0:20:32:ad:8a:51:b8:9d:14:43: fb:aa:60:34:e4:38:8c:27:f8:75:f3:03:84:01:e9: 19:c1:62:2d:b3:f8:19:57:49:cb:fc:a8:99:65:ad: 58:94:f5:25:af:3a:41:31:8e:29:e9:46:c9:39:59: b1:bb:16:00:a0:7e:c3:8d:38:56:e4:a6:1c:70:ec: 26:60:08:66:a6:5a:eb:bf:6b:c8:f0:52:47:c3:53: fa:33:a1:80:ee:49:84:3f:5f:67:9d:0d:24:29:81: 0e:e8:fc:a0:10:48:2b:2e:7d:ac:0b:0d:70:d9:19: a4:41:64:98:55:9c:c0:92:9b:73:77:5d:9f:22:cd: 95:b3:48:bd:a6:aa:fe:68:37:b1:e6:34:d4:2c:b8: e7:36:d7:df:12:40:70:f9:08:4c:8d:27:65:91:54: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:04:52:21:F9:E7:7D:59:EB:DC:77:2F:4F:56:DA:71:9C:C4:F7:E2 X509v3 Authority Key Identifier: keyid:68:96:D9:C1:4A:8A:B5:D8:B0:B4:08:18:7E:CE:15:A0:D2:3C:EE:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aJbZwUqKtdiwtAgYfs4VoNI87hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/aa7d87-4dce-44a3-aa54-f85e33dd8946/1/aJbZwUqKtdiwtAgYfs4VoNI87hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:67:03:70:d9:df:d2:18:c5:7d:3f:dc:43:a0:87:95:b2:35: 4b:ca:66:eb:65:f1:3e:4e:81:d5:ea:67:9c:ee:29:ff:7f:78: c1:06:59:08:12:96:d6:d8:4b:80:b2:14:ed:1f:1e:6f:92:78: d0:2e:7c:b9:31:ac:d2:76:af:5a:91:d3:e4:dd:b6:98:04:a4: 7f:20:4c:2d:4e:c1:63:8c:54:11:28:7c:73:c1:a1:66:30:0e: 0c:d1:26:5e:69:c9:96:d2:6c:e3:86:fc:7f:0f:52:0a:28:52: 5f:4b:b0:c1:0d:93:c2:25:ea:95:e9:ab:11:d8:77:2f:54:9c: 75:50:8f:3f:1d:42:10:9f:bb:dd:01:6d:32:cc:b0:29:e5:16: 82:6c:50:5f:34:67:a6:51:74:6e:14:e1:26:e9:d4:f5:1e:46: 7d:86:6e:91:f2:53:0f:9c:43:ce:45:14:b6:dc:db:85:89:94: 89:5f:b6:51:38:f7:ec:ad:fc:6d:74:61:a3:0a:09:59:20:9a: 3c:64:ca:d0:3b:25:c9:6d:87:92:d8:39:28:e4:a8:46:4e:76: 51:3e:30:da:7e:51:76:79:85:a4:2c:98:22:4a:77:ce:5b:e4: 50:31:3e:d2:90:26:18:92:d3:dc:49:f2:db:f2:02:ae:75:cd: be:a3:98:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCff4mnleK4R8WsnmSIB9JMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4OTZkOWMxNGE4YWI1ZDhiMGI0MDgxODdlY2UxNWEwZDIz Y2VlMWMwHhcNMjYwMjA5MTMwMTE5WhcNMjYwMjEwMTMwMTE5WjAzMTEwLwYDVQQD EyhlZDA0NTIyMWY5ZTc3ZDU5ZWJkYzc3MmY0ZjU2ZGE3MTljYzRmN2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+gKNrIR7+S4JVErUO0Q3H1/VmGR gYz9uFcuNjPoOxj+ur4S2C2f2RKhYpAJOvwFHKbgaRz7ldYIho7Wmz7pW3EAJXVq /pjQalazXMT6hJ6AWLiv7rEYIlxks1e8oqAgMq2KUbidFEP7qmA05DiMJ/h18wOE AekZwWIts/gZV0nL/KiZZa1YlPUlrzpBMY4p6UbJOVmxuxYAoH7DjThW5KYccOwm YAhmplrrv2vI8FJHw1P6M6GA7kmEP19nnQ0kKYEO6PygEEgrLn2sCw1w2RmkQWSY VZzAkptzd12fIs2Vs0i9pqr+aDex5jTULLjnNtffEkBw+QhMjSdlkVSdzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO0EUiH5531Z69x3L09W2nGcxPfiMB8GA1UdIwQY MBaAFGiW2cFKirXYsLQIGH7OFaDSPO4cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQt Zjg1ZTMzZGQ4OTQ2LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS9hYTdkODctNGRjZS00NGEzLWFhNTQtZjg1ZTMzZGQ4OTQ2 LzEvYUpiWndVcUt0ZGl3dEFnWWZzNFZvTkk4N2h3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2cDcNnf 0hjFfT/cQ6CHlbI1S8pm62XxPk6B1epnnO4p/394wQZZCBKW1thLgLIU7R8eb5J4 0C58uTGs0navWpHT5N22mASkfyBMLU7BY4xUESh8c8GhZjAODNEmXmnJltJs44b8 fw9SCihSX0uwwQ2TwiXqlemrEdh3L1ScdVCPPx1CEJ+73QFtMsywKeUWgmxQXzRn plF0bhThJunU9R5GfYZukfJTD5xDzkUUttzbhYmUiV+2UTj37K38bXRhowoJWSCa PGTK0DslyW2Hktg5KOSoRk52UT4w2n5RdnmFpCyYIkp3zlvkUDE+0pAmGJLT3Eny 2/ICrnXNvqOYIA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:18 2026 by rpki-client