This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft File: aLf4F6tRQbXhOCgM32GQFmu5y4c.mft (raw, json) Hash identifier: FSTid2sskpPtj4QBVqreCv53AIuno3ytWjeXTAlaRyM= Subject key identifier: 37:92:3D:6B:CF:B4:C5:52:0D:04:F5:A3:C9:1B:45:25:F2:30:4B:5F Authority key identifier: 68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87 Certificate issuer: /CN=68b7f817ab5141b5e138280cdf6190166bb9cb87 Certificate serial: 019C43C75950640FFAC94BBE85BA90AD3C2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 19:01:03 +0000 Manifest this update: Mon 09 Feb 2026 19:01:03 +0000 Manifest next update: Tue 10 Feb 2026 19:01:03 +0000 Files and hashes: 1: aLf4F6tRQbXhOCgM32GQFmu5y4c.crl (hash: QKgsGNk0up/UaJlAF9jwEskagFj5LNpdW1cvmj4PTb4=) 2: dwxKXYq5F0w7--7RCrBYQ23c5iY.roa (hash: K/Q42vj3khDPlWwooNw7J1cFttbzhnLd2GjnJonXf1I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 19:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:59:50:64:0f:fa:c9:4b:be:85:ba:90:ad:3c:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b7f817ab5141b5e138280cdf6190166bb9cb87 Validity Not Before: Feb 9 19:01:03 2026 GMT Not After : Feb 10 19:01:03 2026 GMT Subject: CN=37923d6bcfb4c5520d04f5a3c91b4525f2304b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:99:19:ec:69:5f:d0:5e:55:8c:49:bd:5d:9a: 99:4a:85:dc:dc:d5:ab:a5:3b:01:b8:62:a4:d9:ab: 59:ce:ec:6b:e7:4d:d8:cf:c2:5f:b4:75:63:a6:b0: 19:eb:d7:4a:e8:a9:e9:37:27:ab:b1:02:78:9b:42: 7e:e8:7a:79:e5:29:d3:1c:16:eb:ce:f7:ee:08:f6: 12:c4:a0:76:0b:8d:e2:c0:d7:22:a6:ae:b1:97:2f: 9f:6a:cb:15:80:6c:73:8a:e5:c2:00:1a:a2:25:b3: 68:73:8b:bc:0a:ee:46:7b:3e:fb:6b:13:08:04:b9: 79:70:17:90:94:55:bb:9b:d5:f7:1f:88:0f:23:61: dc:aa:60:eb:ac:ac:64:6b:f3:a6:32:1a:00:d0:1f: 40:66:b0:af:5f:78:5b:8c:53:35:ee:81:c1:4d:69: bb:e8:ea:5e:33:17:71:80:40:2a:f5:3a:73:7f:20: 2c:08:62:f8:a8:81:96:c0:86:ed:21:9d:73:72:2a: f5:82:0b:d9:c5:4a:93:4b:ac:e9:3d:fd:4d:17:89: d6:d1:f2:eb:50:d2:c8:fa:4f:09:8d:e5:5c:fb:1b: 9a:9c:84:6d:29:98:19:c4:8e:ec:df:a9:1c:be:26: 57:a9:43:14:a6:b1:67:5b:17:1d:15:68:73:b1:ba: 9a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:92:3D:6B:CF:B4:C5:52:0D:04:F5:A3:C9:1B:45:25:F2:30:4B:5F X509v3 Authority Key Identifier: keyid:68:B7:F8:17:AB:51:41:B5:E1:38:28:0C:DF:61:90:16:6B:B9:CB:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLf4F6tRQbXhOCgM32GQFmu5y4c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/742c14-7b4d-4279-b823-16517126c132/1/aLf4F6tRQbXhOCgM32GQFmu5y4c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:0e:df:4c:e1:68:71:da:fb:8d:cc:60:b4:99:67:d7:70:d5: 13:a8:33:09:c2:5e:fa:20:7e:ba:80:c3:16:e2:2a:c2:9b:be: 8d:fc:66:ad:17:85:46:a5:78:6e:d8:fc:bc:bd:e8:9b:c4:8d: 0d:54:92:13:00:19:e5:88:7d:70:2a:88:d9:d5:f9:88:2c:d8: 35:c5:c3:df:d5:30:18:62:a1:f0:f6:86:fe:3b:40:41:55:59: 1d:ec:c4:31:fd:40:31:05:7a:36:3d:eb:0f:c4:69:87:86:cc: 33:21:11:c5:cf:8e:f0:b4:55:7f:50:32:3c:fe:76:b1:65:44: 47:fb:07:81:7a:2d:5c:9d:fc:7c:40:b8:65:cc:1d:8a:7e:f3: 33:9c:ae:cd:bd:52:29:e8:7e:97:8d:ce:2d:13:78:f4:db:22: 06:f6:68:46:7e:44:53:21:1b:af:46:84:7f:5d:28:60:b3:08: 29:73:bd:a7:69:bc:3f:66:3b:80:42:10:ad:ee:1a:c9:57:21: 02:f3:0c:8f:03:85:ca:33:19:e2:a4:cc:10:63:bb:8f:4e:76: 24:25:1c:ba:7a:91:56:f8:06:75:53:00:c3:bd:bb:75:e3:02: 3d:87:1c:ad:d7:1d:00:c6:d1:5c:39:f8:ee:0f:94:96:0c:0e: 06:95:3b:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx1lQZA/6yUu+hbqQrTwqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjdmODE3YWI1MTQxYjVlMTM4MjgwY2RmNjE5MDE2NmJi OWNiODcwHhcNMjYwMjA5MTkwMTAzWhcNMjYwMjEwMTkwMTAzWjAzMTEwLwYDVQQD EygzNzkyM2Q2YmNmYjRjNTUyMGQwNGY1YTNjOTFiNDUyNWYyMzA0YjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpkZ7Glf0F5VjEm9XZqZSoXc3NWr pTsBuGKk2atZzuxr503Yz8JftHVjprAZ69dK6KnpNyersQJ4m0J+6Hp55SnTHBbr zvfuCPYSxKB2C43iwNcipq6xly+fassVgGxziuXCABqiJbNoc4u8Cu5Gez77axMI BLl5cBeQlFW7m9X3H4gPI2HcqmDrrKxka/OmMhoA0B9AZrCvX3hbjFM17oHBTWm7 6OpeMxdxgEAq9TpzfyAsCGL4qIGWwIbtIZ1zcir1ggvZxUqTS6zpPf1NF4nW0fLr UNLI+k8JjeVc+xuanIRtKZgZxI7s36kcviZXqUMUprFnWxcdFWhzsbqaVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDeSPWvPtMVSDQT1o8kbRSXyMEtfMB8GA1UdIwQY MBaAFGi3+BerUUG14TgoDN9hkBZrucuHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMt MTY1MTcxMjZjMTMyLzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi83NDJjMTQtN2I0ZC00Mjc5LWI4MjMtMTY1MTcxMjZjMTMy LzEvYUxmNEY2dFJRYlhoT0NnTTMyR1FGbXU1eTRjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJw7fTOFo cdr7jcxgtJln13DVE6gzCcJe+iB+uoDDFuIqwpu+jfxmrReFRqV4btj8vL3om8SN DVSSEwAZ5Yh9cCqI2dX5iCzYNcXD39UwGGKh8PaG/jtAQVVZHezEMf1AMQV6Nj3r D8Rph4bMMyERxc+O8LRVf1AyPP52sWVER/sHgXotXJ38fEC4Zcwdin7zM5yuzb1S Keh+l43OLRN49NsiBvZoRn5EUyEbr0aEf10oYLMIKXO9p2m8P2Y7gEIQre4ayVch AvMMjwOFyjMZ4qTMEGO7j052JCUcunqRVvgGdVMAw727deMCPYccrdcdAMbRXDn4 7g+UlgwOBpU7Aw== -----END CERTIFICATE-----Generated at Tue Feb 10 01:27:44 2026 by rpki-client