This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft File: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft (raw, json) Hash identifier: QzeuilMz99WJ9WJ70YiAKO201oDhREfgadlqglGG0To= Subject key identifier: 5E:32:93:17:AA:3A:72:64:2B:2D:C3:3E:68:94:AF:B5:A5:99:D1:24 Authority key identifier: 02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 Certificate issuer: /CN=02640bccb7171f199c43a0a974cab827ed18e750 Certificate serial: 019C43FE349BAC224210A3D6854D4870732F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft Manifest number: 1811 Signing time: Mon 09 Feb 2026 20:00:58 +0000 Manifest this update: Mon 09 Feb 2026 20:00:58 +0000 Manifest next update: Tue 10 Feb 2026 20:00:58 +0000 Files and hashes: 1: 3_0WZ7tcEt9l7JCeqM_XLJKrQAI.roa (hash: 7OfgraftH18MfCmboAvi66Dsa4X9nEMWe7jgzn7VuiE=) 2: AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl (hash: LQh09hM9CxErQRwq6u1/QDRGLgXpM4uJtXwQX5T5rYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fe:34:9b:ac:22:42:10:a3:d6:85:4d:48:70:73:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02640bccb7171f199c43a0a974cab827ed18e750 Validity Not Before: Feb 9 20:00:58 2026 GMT Not After : Feb 10 20:00:58 2026 GMT Subject: CN=5e329317aa3a72642b2dc33e6894afb5a599d124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9b:7c:6a:b6:17:c7:c4:e0:85:8b:fa:4d:19: 10:83:9d:da:f2:05:00:0f:4f:69:12:5b:a9:42:4b: 9a:0a:68:82:bc:a3:0d:68:c6:f5:43:e1:47:78:67: 52:00:74:fe:93:0b:51:b9:90:8e:50:6b:d9:1f:0a: e5:5f:4d:b2:f8:52:2b:6d:80:59:1e:df:5f:16:a6: 70:18:6a:bc:45:15:ab:78:25:3c:0a:9a:da:d3:16: e6:9a:28:fe:87:5e:09:10:ca:ed:21:eb:63:03:c3: 01:b5:8a:68:ad:f1:04:d1:77:4e:96:c7:63:78:ab: 2e:ba:98:de:85:f4:a0:9f:46:80:3d:8b:fb:3b:cb: f1:2c:01:be:d2:0c:07:1b:46:a4:1f:25:11:c7:5c: 7c:a2:31:15:81:79:8a:05:49:33:7e:50:c1:50:e2: 4f:30:34:9d:77:fc:3b:59:b6:bd:a8:91:6c:2b:3d: c1:d5:0e:33:46:51:3f:15:e2:bf:e8:b2:cb:1d:7d: 84:9e:cf:ac:0c:c4:7c:36:b4:d6:11:b3:b6:cd:0d: 17:29:d6:8f:b9:1e:0a:0c:a1:9c:ce:a0:0a:b0:f9: c5:16:8e:47:4a:28:8b:49:60:98:3f:45:75:77:3d: a1:e5:ad:c4:8c:a8:83:f0:59:68:41:0c:fa:63:75: 39:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:32:93:17:AA:3A:72:64:2B:2D:C3:3E:68:94:AF:B5:A5:99:D1:24 X509v3 Authority Key Identifier: keyid:02:64:0B:CC:B7:17:1F:19:9C:43:A0:A9:74:CA:B8:27:ED:18:E7:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/424bd1-953b-4262-8396-c7bf95e5ab7b/1/AmQLzLcXHxmcQ6CpdMq4J-0Y51A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:bf:dc:27:10:d3:f5:cb:66:a8:2b:22:89:30:55:c1:11:04: 7d:4d:9a:1d:23:45:83:24:15:44:46:85:3a:98:a3:5b:bb:cc: c3:f3:f0:a8:be:36:49:35:4d:06:1f:9d:3f:f4:ec:bb:0a:7c: af:28:f9:d0:a0:73:51:b0:56:ec:16:2d:b0:63:28:65:05:af: 3e:28:c6:ca:a0:24:30:f6:88:00:0e:c4:94:00:2c:ef:ef:aa: c6:6e:9d:38:b0:15:f6:b0:1c:fd:79:5f:d3:b5:cd:ea:38:5b: c2:14:68:8b:9c:c6:58:ea:a3:59:b6:37:fe:6b:8c:93:2c:29: 76:ba:e6:03:eb:09:94:60:8e:08:bf:82:5d:7c:b6:5a:e2:cd: ad:d5:37:4d:f5:52:24:ee:d0:3e:33:2d:dd:fa:69:9d:73:a2: f6:e2:d2:7b:15:2e:72:ef:2d:50:31:22:1f:72:cf:01:09:b1: c5:a7:02:8b:fa:2a:09:8f:ae:9a:aa:3d:18:09:79:dc:dc:1e: 57:44:99:1f:40:7f:f2:8c:9b:1d:3f:02:a8:60:27:ca:c4:e2: e1:f6:16:cc:37:e2:0a:75:cd:7f:98:7d:4e:7f:e8:f2:5f:9e: 6e:0f:0b:57:90:30:5f:cd:00:be:d4:3f:81:cd:d0:4b:f8:84: b6:1e:a7:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/jSbrCJCEKPWhU1IcHMvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyNjQwYmNjYjcxNzFmMTk5YzQzYTBhOTc0Y2FiODI3ZWQx OGU3NTAwHhcNMjYwMjA5MjAwMDU4WhcNMjYwMjEwMjAwMDU4WjAzMTEwLwYDVQQD Eyg1ZTMyOTMxN2FhM2E3MjY0MmIyZGMzM2U2ODk0YWZiNWE1OTlkMTI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5t8arYXx8TghYv6TRkQg53a8gUA D09pElupQkuaCmiCvKMNaMb1Q+FHeGdSAHT+kwtRuZCOUGvZHwrlX02y+FIrbYBZ Ht9fFqZwGGq8RRWreCU8Cpra0xbmmij+h14JEMrtIetjA8MBtYporfEE0XdOlsdj eKsuupjehfSgn0aAPYv7O8vxLAG+0gwHG0akHyURx1x8ojEVgXmKBUkzflDBUOJP MDSdd/w7Wba9qJFsKz3B1Q4zRlE/FeK/6LLLHX2Ens+sDMR8NrTWEbO2zQ0XKdaP uR4KDKGczqAKsPnFFo5HSiiLSWCYP0V1dz2h5a3EjKiD8FloQQz6Y3U5ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4ykxeqOnJkKy3DPmiUr7WlmdEkMB8GA1UdIwQY MBaAFAJkC8y3Fx8ZnEOgqXTKuCftGOdQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYt YzdiZjk1ZTVhYjdiLzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi80MjRiZDEtOTUzYi00MjYyLTgzOTYtYzdiZjk1ZTVhYjdi LzEvQW1RTHpMY1hIeG1jUTZDcGRNcTRKLTBZNTFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg7/cJxDT 9ctmqCsiiTBVwREEfU2aHSNFgyQVREaFOpijW7vMw/PwqL42STVNBh+dP/Tsuwp8 ryj50KBzUbBW7BYtsGMoZQWvPijGyqAkMPaIAA7ElAAs7++qxm6dOLAV9rAc/Xlf 07XN6jhbwhRoi5zGWOqjWbY3/muMkywpdrrmA+sJlGCOCL+CXXy2WuLNrdU3TfVS JO7QPjMt3fppnXOi9uLSexUucu8tUDEiH3LPAQmxxacCi/oqCY+umqo9GAl53Nwe V0SZH0B/8oybHT8CqGAnysTi4fYWzDfiCnXNf5h9Tn/o8l+ebg8LV5AwX80AvtQ/ gc3QS/iEth6nxg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:42:38 2026 by rpki-client