This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft File: aHyL8iKia_HJxmOMw1bSg1UC8tY.mft (raw, json) Hash identifier: +BKD+LeoasQjWiR/ouew9zBNIkdtWBEabzgfJSlyA4k= Subject key identifier: 4D:2F:55:A4:88:C5:E4:BC:52:CC:31:42:96:8A:21:91:CD:61:D4:50 Authority key identifier: 68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6 Certificate issuer: /CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6 Certificate serial: 019C4246252688E8ADDD802FC422D46BA9C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft Manifest number: 0950 Signing time: Mon 09 Feb 2026 12:00:19 +0000 Manifest this update: Mon 09 Feb 2026 12:00:19 +0000 Manifest next update: Tue 10 Feb 2026 12:00:19 +0000 Files and hashes: 1: aHyL8iKia_HJxmOMw1bSg1UC8tY.crl (hash: l6zYlNFV1st6/4m7tLjXO/4JfRqX1qlRmrmkbVIAC8k=) 2: aTVTcaHfSKBoGEQhyNKYBwoJu-0.roa (hash: rT/Vj6/a6YnM9d3VVAjTqdJg4CGPx8A6IhEaB6Bvdck=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:25:26:88:e8:ad:dd:80:2f:c4:22:d4:6b:a9:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=687c8bf222a26bf1c9c6638cc356d2835502f2d6 Validity Not Before: Feb 9 12:00:19 2026 GMT Not After : Feb 10 12:00:19 2026 GMT Subject: CN=4d2f55a488c5e4bc52cc3142968a2191cd61d450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:80:46:49:4d:be:5f:1e:82:e2:be:a3:15:77: a3:3d:45:a0:36:a5:03:31:3f:73:5c:54:8d:11:6f: 8c:67:a4:29:5c:bd:f2:be:4d:7b:1c:59:b1:31:22: df:ea:fd:a1:5d:fc:e9:67:ad:ba:19:17:18:64:b5: f0:be:e6:28:53:73:17:b1:da:24:43:6b:b0:25:33: 08:5b:a2:4b:8b:15:ce:0a:aa:35:0f:29:c4:59:de: 6a:2a:33:57:1c:ac:fe:bd:72:b9:0e:3b:9d:a2:36: cd:94:52:4a:b6:d3:56:b2:af:fa:ca:d8:bc:b6:1d: 70:d4:fe:8b:3a:be:80:27:cb:a8:a3:3b:7c:a3:16: 44:5f:7f:e1:e3:b0:59:2d:02:b5:dc:e4:ae:71:92: bb:11:98:8b:64:44:43:90:44:1d:35:78:b3:e7:2a: 18:de:1e:31:7c:16:5c:fb:4c:f8:87:14:3e:6d:78: 2f:3d:9c:24:49:4e:d2:aa:a1:0a:c4:fc:34:65:c2: 4b:24:66:71:b8:1a:9b:4d:0d:fa:f5:dd:09:94:81: ca:fe:27:11:1a:82:fc:f9:b3:c4:6f:82:87:22:74: 9e:4a:6a:ad:18:57:ad:75:b0:95:7d:c8:6b:ed:c0: 70:c2:d0:52:1d:75:6b:83:cf:75:18:89:87:84:ae: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:2F:55:A4:88:C5:E4:BC:52:CC:31:42:96:8A:21:91:CD:61:D4:50 X509v3 Authority Key Identifier: keyid:68:7C:8B:F2:22:A2:6B:F1:C9:C6:63:8C:C3:56:D2:83:55:02:F2:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHyL8iKia_HJxmOMw1bSg1UC8tY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/61ae21-8f63-4fd0-a6b5-d57255e25fee/1/aHyL8iKia_HJxmOMw1bSg1UC8tY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ee:a6:8f:7c:d4:7d:fa:1d:67:4f:ab:c0:43:a5:a7:ee:d9: dd:3e:e2:00:d4:6c:56:87:32:c2:ad:10:61:a7:ba:a8:85:c1: 3d:98:54:f6:34:b2:03:a5:88:e8:0f:56:f4:d3:71:a2:39:06: f2:24:1b:90:db:0c:3d:0b:84:f0:8b:53:6e:05:65:c7:38:b6: 73:28:e5:0b:d4:5a:b1:2e:74:39:ca:ec:8a:ef:7b:f0:c1:c2: 01:1b:78:5c:f9:88:49:1b:6c:f8:2c:15:87:48:47:a2:f4:c5: bd:23:90:3b:58:4e:43:6a:62:68:60:96:6c:fe:f4:b6:c5:b3: 52:1e:17:5c:31:51:d0:6b:ec:ca:1d:f8:9a:34:10:c6:81:1c: c6:1c:4a:73:eb:f0:cd:6c:87:e9:94:85:a7:2c:6a:84:cb:6f: f0:ae:9a:28:d8:92:27:94:e4:0d:81:b1:59:68:db:11:67:45: 9e:70:3e:31:f0:e7:20:03:20:95:53:3e:76:4c:71:b0:fc:dc: d3:32:cd:05:ff:b4:4d:77:1d:d9:b6:ee:e0:3b:f5:9e:f8:6b: 7a:ce:c0:07:46:d9:f8:a3:26:a1:13:bd:f9:27:c0:dc:68:b9: c3:3f:31:90:d5:c9:69:5c:21:49:29:4c:97:72:fb:ae:57:cb: 35:a4:d5:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRiUmiOit3YAvxCLUa6nDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4N2M4YmYyMjJhMjZiZjFjOWM2NjM4Y2MzNTZkMjgzNTUw MmYyZDYwHhcNMjYwMjA5MTIwMDE5WhcNMjYwMjEwMTIwMDE5WjAzMTEwLwYDVQQD Eyg0ZDJmNTVhNDg4YzVlNGJjNTJjYzMxNDI5NjhhMjE5MWNkNjFkNDUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoBGSU2+Xx6C4r6jFXejPUWgNqUD MT9zXFSNEW+MZ6QpXL3yvk17HFmxMSLf6v2hXfzpZ626GRcYZLXwvuYoU3MXsdok Q2uwJTMIW6JLixXOCqo1DynEWd5qKjNXHKz+vXK5DjudojbNlFJKttNWsq/6yti8 th1w1P6LOr6AJ8uoozt8oxZEX3/h47BZLQK13OSucZK7EZiLZERDkEQdNXiz5yoY 3h4xfBZc+0z4hxQ+bXgvPZwkSU7SqqEKxPw0ZcJLJGZxuBqbTQ369d0JlIHK/icR GoL8+bPEb4KHInSeSmqtGFetdbCVfchr7cBwwtBSHXVrg891GImHhK4/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE0vVaSIxeS8UswxQpaKIZHNYdRQMB8GA1UdIwQY MBaAFGh8i/IiomvxycZjjMNW0oNVAvLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUh5TDhpS2lhX0hKeG1PTXcxYlNnMVVDOHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC82MWFlMjEtOGY2My00ZmQwLWE2YjUt ZDU3MjU1ZTI1ZmVlLzEvYUh5TDhpS2lhX0hKeG1PTXcxYlNnMVVDOHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC82MWFlMjEtOGY2My00ZmQwLWE2YjUtZDU3MjU1ZTI1ZmVl LzEvYUh5TDhpS2lhX0hKeG1PTXcxYlNnMVVDOHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp+6mj3zU ffodZ0+rwEOlp+7Z3T7iANRsVocywq0QYae6qIXBPZhU9jSyA6WI6A9W9NNxojkG 8iQbkNsMPQuE8ItTbgVlxzi2cyjlC9RasS50Ocrsiu978MHCARt4XPmISRts+CwV h0hHovTFvSOQO1hOQ2piaGCWbP70tsWzUh4XXDFR0Gvsyh34mjQQxoEcxhxKc+vw zWyH6ZSFpyxqhMtv8K6aKNiSJ5TkDYGxWWjbEWdFnnA+MfDnIAMglVM+dkxxsPzc 0zLNBf+0TXcd2bbu4Dv1nvhres7AB0bZ+KMmoRO9+SfA3Gi5wz8xkNXJaVwhSSlM l3L7rlfLNaTVsw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:00 2026 by rpki-client