This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft File: aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft (raw, json) Hash identifier: z4kyb+lk2163nkA+SakrTJZKRY7cFUIzrSzxnOgCzaM= Subject key identifier: 68:8E:2A:2B:54:58:B9:23:D7:20:4B:D9:6E:34:06:A8:98:74:21:AA Authority key identifier: 68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 Certificate issuer: /CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Certificate serial: 019C43C6F796AA4DAFA910A93324FC455811 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft Manifest number: 06FA Signing time: Mon 09 Feb 2026 19:00:38 +0000 Manifest this update: Mon 09 Feb 2026 19:00:38 +0000 Manifest next update: Tue 10 Feb 2026 19:00:38 +0000 Files and hashes: 1: aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl (hash: 9iYiZaf3Itrq/K6Q3BB0SqjSXiHDJ5lcw2oIlpZHrSk=) 2: ntgegMbbIA6GUWw4rJnlciehyyI.roa (hash: fx6yFVGdC5vzJw5TVi8hUxp9utpG9evi2LCd+bEJjJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:f7:96:aa:4d:af:a9:10:a9:33:24:fc:45:58:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b0ba75fce55721c30637589be3d34fa259c2b5 Validity Not Before: Feb 9 19:00:38 2026 GMT Not After : Feb 10 19:00:38 2026 GMT Subject: CN=688e2a2b5458b923d7204bd96e3406a8987421aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:78:60:d2:a9:24:61:56:9a:05:7b:d0:04:06: 60:f4:0a:5b:77:42:6d:f4:dd:3d:ea:f6:fb:3a:7b: 34:12:3d:f8:fa:fd:27:80:2c:14:14:96:9d:26:5a: 67:89:3c:6c:50:4c:c0:12:96:ce:a3:32:7f:10:24: 36:e0:67:c7:d0:7a:1b:01:05:10:2d:26:81:7d:8d: b0:a6:67:5f:2a:d4:0b:a7:a6:f3:8b:db:89:9e:a2: 9f:c8:ab:c3:c4:e5:e1:c5:eb:55:12:ef:72:92:e1: 64:51:9c:67:fc:62:23:c4:ee:ec:e5:cc:c6:b5:ba: 9f:4c:f2:f6:b3:e5:76:48:32:8e:46:cd:37:75:74: 92:bb:57:78:00:8e:6f:9f:65:ae:74:65:5c:55:9a: 1d:2c:60:ad:18:52:ca:7e:51:f4:39:c3:87:66:fc: 69:cb:65:55:34:c9:6a:f2:64:f8:b7:a0:50:70:f9: 0f:54:2f:d2:79:52:16:8a:f7:b9:95:6d:a4:f1:83: 65:c3:8d:27:39:7d:33:9f:af:7d:44:9b:e9:38:25: 70:e1:0b:7e:66:92:59:b2:c2:42:97:e0:e2:f2:48: 5d:42:4c:8f:69:e3:b1:df:c1:a3:ba:17:56:85:59: 73:37:ed:08:89:99:75:f2:6e:a9:9f:ea:5f:df:15: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:8E:2A:2B:54:58:B9:23:D7:20:4B:D9:6E:34:06:A8:98:74:21:AA X509v3 Authority Key Identifier: keyid:68:B0:BA:75:FC:E5:57:21:C3:06:37:58:9B:E3:D3:4F:A2:59:C2:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLC6dfzlVyHDBjdYm-PTT6JZwrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/908a94-daa8-4c6b-ab24-499ef16e2082/1/aLC6dfzlVyHDBjdYm-PTT6JZwrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:c7:ca:89:a6:40:a4:3a:53:79:98:9f:84:20:4c:79:28:16: e0:6d:80:62:d2:4c:d4:a8:c0:11:ec:ab:16:bb:74:c1:38:07: de:60:7d:e2:db:13:e0:55:47:ed:9c:d2:7d:03:b4:3d:dc:a6: 8c:f5:03:9c:7c:63:72:4a:44:c2:4e:c9:26:51:37:2f:4b:1a: f1:80:f8:80:bd:23:9a:74:c3:f3:de:6e:93:8f:73:63:77:2e: 10:25:0d:e9:02:e1:ca:9c:02:fb:f1:a3:db:54:40:b7:cd:2e: 4a:5e:b2:a3:95:9a:56:af:bf:e0:78:9e:8e:1c:c4:bb:a1:d5: 67:4f:f2:d7:5f:74:df:a8:4b:22:5f:8b:1e:e3:c0:96:6e:3f: 52:49:ed:dc:2f:e0:2c:48:53:be:81:73:da:04:63:98:b3:b4: 80:1a:ba:43:e8:e6:92:04:65:46:5a:8d:52:ac:da:d7:45:8c: 29:b5:9f:ec:f3:2a:8a:76:3e:29:4b:d6:a6:a2:d5:de:04:83: a9:1e:78:e7:de:aa:3a:6e:79:e2:25:3f:7f:59:90:5a:5c:39: b8:ee:a3:a7:bc:f3:c9:e0:04:3f:ae:ff:eb:84:b9:fc:77:df: 0b:2c:6f:bc:11:89:5a:4e:33:ad:ea:b4:8d:76:09:f4:dd:2b: 8b:d8:9f:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxveWqk2vqRCpMyT8RVgRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjBiYTc1ZmNlNTU3MjFjMzA2Mzc1ODliZTNkMzRmYTI1 OWMyYjUwHhcNMjYwMjA5MTkwMDM4WhcNMjYwMjEwMTkwMDM4WjAzMTEwLwYDVQQD Eyg2ODhlMmEyYjU0NThiOTIzZDcyMDRiZDk2ZTM0MDZhODk4NzQyMWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonhg0qkkYVaaBXvQBAZg9Apbd0Jt 9N096vb7Ons0Ej34+v0ngCwUFJadJlpniTxsUEzAEpbOozJ/ECQ24GfH0HobAQUQ LSaBfY2wpmdfKtQLp6bzi9uJnqKfyKvDxOXhxetVEu9ykuFkUZxn/GIjxO7s5czG tbqfTPL2s+V2SDKORs03dXSSu1d4AI5vn2WudGVcVZodLGCtGFLKflH0OcOHZvxp y2VVNMlq8mT4t6BQcPkPVC/SeVIWive5lW2k8YNlw40nOX0zn699RJvpOCVw4Qt+ ZpJZssJCl+Di8khdQkyPaeOx38GjuhdWhVlzN+0IiZl18m6pn+pf3xWT/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiOKitUWLkj1yBL2W40BqiYdCGqMB8GA1UdIwQY MBaAFGiwunX85VchwwY3WJvj00+iWcK1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQt NDk5ZWYxNmUyMDgyLzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy85MDhhOTQtZGFhOC00YzZiLWFiMjQtNDk5ZWYxNmUyMDgy LzEvYUxDNmRmemxWeUhEQmpkWW0tUFRUNkpad3JVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE8fKiaZA pDpTeZifhCBMeSgW4G2AYtJM1KjAEeyrFrt0wTgH3mB94tsT4FVH7ZzSfQO0Pdym jPUDnHxjckpEwk7JJlE3L0sa8YD4gL0jmnTD895uk49zY3cuECUN6QLhypwC+/Gj 21RAt80uSl6yo5WaVq+/4HiejhzEu6HVZ0/y119036hLIl+LHuPAlm4/Uknt3C/g LEhTvoFz2gRjmLO0gBq6Q+jmkgRlRlqNUqza10WMKbWf7PMqinY+KUvWpqLV3gSD qR54596qOm554iU/f1mQWlw5uO6jp7zzyeAEP67/64S5/HffCyxvvBGJWk4zreq0 jXYJ9N0ri9ifjA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:08:05 2026 by rpki-client