This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft File: rnIxk3EEsmkAemyoPH_ZKes59Hc.mft (raw, json) Hash identifier: aSuXV6tJ3POd1tO/7M2y/8u5JFXTXSg87BLz4jWTV5o= Subject key identifier: 05:63:D2:D0:A0:BA:45:C6:78:E8:D7:1B:37:FA:86:5B:74:A4:E8:05 Authority key identifier: AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77 Certificate issuer: /CN=ae7231937104b269007a6ca83c7fd929eb39f477 Certificate serial: 019C43905A02CA5303783878A6B8F8DFD5BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft Manifest number: 17A0 Signing time: Mon 09 Feb 2026 18:00:59 +0000 Manifest this update: Mon 09 Feb 2026 18:00:59 +0000 Manifest next update: Tue 10 Feb 2026 18:00:59 +0000 Files and hashes: 1: rnIxk3EEsmkAemyoPH_ZKes59Hc.crl (hash: 1pTJz+NSWVgB/6Z9gHXMIInH54H4m9FAgqIrGmfJSo8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:5a:02:ca:53:03:78:38:78:a6:b8:f8:df:d5:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae7231937104b269007a6ca83c7fd929eb39f477 Validity Not Before: Feb 9 18:00:59 2026 GMT Not After : Feb 10 18:00:59 2026 GMT Subject: CN=0563d2d0a0ba45c678e8d71b37fa865b74a4e805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1a:42:b1:bb:2f:7a:c1:66:84:20:82:29:f7: ef:d1:aa:fd:3e:2b:77:9e:8d:2b:be:88:57:c4:ff: 6b:5f:61:23:e8:81:db:7d:21:5c:d5:66:9b:74:89: 88:63:59:a9:3c:f4:74:88:7c:a8:b0:88:aa:d4:18: 0b:e3:61:4b:8b:02:79:25:20:27:ca:a9:a6:35:49: 00:f3:05:07:4e:86:4a:12:b6:59:a7:48:49:67:25: 07:4f:43:b5:d0:49:8b:e5:ee:5c:5f:0c:ee:11:aa: c6:b8:83:39:fd:36:0f:95:8e:f9:cc:10:44:46:bd: d1:61:27:e7:13:a7:10:34:bf:11:1f:c9:d1:a0:1b: 8c:fd:1f:08:34:20:ef:47:89:cd:08:d3:7d:8b:57: 8c:b7:54:6b:93:30:27:36:0c:ea:85:2c:a9:c7:8b: e8:fc:83:dc:5d:d1:58:d7:88:26:17:14:f8:88:6a: e2:89:c8:44:42:e6:b9:50:97:80:eb:bc:17:90:67: 94:2e:f8:23:e7:a9:41:b6:cf:fb:37:a4:3d:7c:f2: c8:f7:e6:b8:93:ed:78:40:13:cc:4c:1c:19:f5:31: c4:ae:81:6f:17:64:61:e2:60:77:e3:ee:f5:a5:17: f5:4a:58:21:f7:be:73:ee:0c:1e:31:56:11:97:0e: 27:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:63:D2:D0:A0:BA:45:C6:78:E8:D7:1B:37:FA:86:5B:74:A4:E8:05 X509v3 Authority Key Identifier: keyid:AE:72:31:93:71:04:B2:69:00:7A:6C:A8:3C:7F:D9:29:EB:39:F4:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnIxk3EEsmkAemyoPH_ZKes59Hc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/aeb1cc-2c4b-46ed-bc23-f35f0c6c46a9/1/rnIxk3EEsmkAemyoPH_ZKes59Hc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:55:2c:73:b9:42:47:d1:38:8f:f4:bf:65:3a:8f:0a:55:77: 34:0f:c4:61:ae:eb:96:83:03:d4:1f:9a:c4:be:df:a9:b5:e2: 93:4f:35:da:ed:2f:05:4f:09:8b:3e:c6:66:a3:ba:14:1b:02: f1:92:ef:fe:7c:bc:0a:6e:ee:0e:13:36:3e:34:d3:b3:4f:86: dd:77:c2:cb:4e:11:6d:9f:64:60:26:2b:74:2c:4e:7e:df:07: 5c:49:c8:bc:89:c2:4f:05:a9:ca:82:7d:38:f0:28:53:e7:4c: 5a:f6:28:a9:a7:ee:d2:63:f1:7d:41:bc:49:59:e1:ac:a3:95: b9:e1:a6:f1:57:d6:26:09:94:57:65:94:a6:61:dd:db:78:e0: 04:ec:1f:c2:77:22:30:66:fc:98:0e:6a:07:21:ee:fb:ff:9e: bf:e2:ba:92:7f:fe:1c:91:91:8e:05:02:57:30:be:1d:a8:a7: 36:8b:42:4c:78:04:85:23:21:73:36:e6:47:05:b3:a9:9e:db: 88:19:60:a8:d5:71:d3:bb:de:ed:1c:db:a2:15:5a:27:4c:2b: ef:f0:0f:58:99:88:c9:b9:f1:da:18:b9:5c:60:53:e9:b3:9b: a7:3a:31:c2:98:7f:53:1c:37:04:ae:09:a6:c4:a9:35:7f:9d: c8:fd:0a:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkFoCylMDeDh4prj439W7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzIzMTkzNzEwNGIyNjkwMDdhNmNhODNjN2ZkOTI5ZWIz OWY0NzcwHhcNMjYwMjA5MTgwMDU5WhcNMjYwMjEwMTgwMDU5WjAzMTEwLwYDVQQD EygwNTYzZDJkMGEwYmE0NWM2NzhlOGQ3MWIzN2ZhODY1Yjc0YTRlODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxpCsbsvesFmhCCCKffv0ar9Pit3 no0rvohXxP9rX2Ej6IHbfSFc1WabdImIY1mpPPR0iHyosIiq1BgL42FLiwJ5JSAn yqmmNUkA8wUHToZKErZZp0hJZyUHT0O10EmL5e5cXwzuEarGuIM5/TYPlY75zBBE Rr3RYSfnE6cQNL8RH8nRoBuM/R8INCDvR4nNCNN9i1eMt1RrkzAnNgzqhSypx4vo /IPcXdFY14gmFxT4iGriichEQua5UJeA67wXkGeULvgj56lBts/7N6Q9fPLI9+a4 k+14QBPMTBwZ9THEroFvF2Rh4mB34+71pRf1Slgh975z7gweMVYRlw4n6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAVj0tCgukXGeOjXGzf6hlt0pOgFMB8GA1UdIwQY MBaAFK5yMZNxBLJpAHpsqDx/2SnrOfR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMt ZjM1ZjBjNmM0NmE5LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9hZWIxY2MtMmM0Yi00NmVkLWJjMjMtZjM1ZjBjNmM0NmE5 LzEvcm5JeGszRUVzbWtBZW15b1BIX1pLZXM1OUhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACFUsc7lC R9E4j/S/ZTqPClV3NA/EYa7rloMD1B+axL7fqbXik0812u0vBU8Jiz7GZqO6FBsC 8ZLv/ny8Cm7uDhM2PjTTs0+G3XfCy04RbZ9kYCYrdCxOft8HXEnIvInCTwWpyoJ9 OPAoU+dMWvYoqafu0mPxfUG8SVnhrKOVueGm8VfWJgmUV2WUpmHd23jgBOwfwnci MGb8mA5qByHu+/+ev+K6kn/+HJGRjgUCVzC+HainNotCTHgEhSMhczbmRwWzqZ7b iBlgqNVx07ve7RzbohVaJ0wr7/APWJmIybnx2hi5XGBT6bObpzoxwph/Uxw3BK4J psSpNX+dyP0Kpw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:56:14 2026 by rpki-client