This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft File: AvxcBk9RWcih-kBmyMuP9wFnHdI.mft (raw, json) Hash identifier: AhD1zBsTwHCDwvgfcdK7z/5zQApm55zca/8g/ErhKxc= Subject key identifier: 1C:30:A1:0A:ED:CA:8B:E7:40:E5:A8:29:50:4D:64:A4:09:75:98:E2 Authority key identifier: 02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2 Certificate issuer: /CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2 Certificate serial: 019C4322AAF097E9D317A70D1B6E5A499E40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft Manifest number: 0D31 Signing time: Mon 09 Feb 2026 16:01:11 +0000 Manifest this update: Mon 09 Feb 2026 16:01:11 +0000 Manifest next update: Tue 10 Feb 2026 16:01:11 +0000 Files and hashes: 1: AvxcBk9RWcih-kBmyMuP9wFnHdI.crl (hash: MqrM45s8Oj9jG4Yhdu8TjpEszHx7jj9duE7ANBmD0Hs=) 2: aieeYAXcHf6iZv5A5jAAy7zNKfU.roa (hash: +Mh/5aHvThjQydJerYwnqxyvk8cU5lJddJlC7wDae6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:aa:f0:97:e9:d3:17:a7:0d:1b:6e:5a:49:9e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02fc5c064f5159c8a1fa4066c8cb8ff701671dd2 Validity Not Before: Feb 9 16:01:11 2026 GMT Not After : Feb 10 16:01:11 2026 GMT Subject: CN=1c30a10aedca8be740e5a829504d64a4097598e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:9b:36:26:78:06:6e:d7:ba:d5:ca:9d:c6:e9: ea:27:a7:fb:64:42:12:da:1a:a4:51:ef:fa:0f:89: a5:37:7f:f9:e5:40:e0:cc:fa:ad:e0:40:1b:ea:a1: a4:fa:9f:5a:20:bf:d8:24:bc:39:74:45:b8:24:c6: df:a3:c3:48:e8:39:ed:9e:48:c8:18:61:51:a9:af: 43:ca:6b:17:2b:a5:1e:32:ce:75:2e:7f:35:42:11: b0:20:88:fe:ef:1a:fa:22:e3:8a:01:02:a6:65:35: 88:ac:b9:71:50:28:77:3d:5d:6d:72:91:02:29:b8: 21:92:18:a5:ce:6f:76:4f:f3:68:67:29:29:8d:32: 47:7c:c2:0e:fc:9e:a3:6e:da:7c:bd:2c:2b:34:c4: 7e:c4:19:39:7a:4d:a7:f9:f5:c2:03:53:57:f5:7e: 3b:fb:fc:fc:99:f0:d3:27:1b:ff:8a:bb:be:a5:41: ea:e3:31:0e:d3:9f:04:43:e8:3c:4e:41:4c:c7:c0: 30:6f:b8:b6:ac:c5:d4:9a:b5:62:ef:1e:3d:fb:2b: db:93:a8:c2:e8:42:5e:9f:58:05:dd:cc:3a:39:7d: 60:66:d8:6d:b7:fe:07:a6:fb:4b:1d:9a:61:0d:42: d3:4a:58:5b:8a:a1:0e:02:cc:09:7a:ca:a0:ab:b4: b8:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:30:A1:0A:ED:CA:8B:E7:40:E5:A8:29:50:4D:64:A4:09:75:98:E2 X509v3 Authority Key Identifier: keyid:02:FC:5C:06:4F:51:59:C8:A1:FA:40:66:C8:CB:8F:F7:01:67:1D:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvxcBk9RWcih-kBmyMuP9wFnHdI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/b15a7d-5aee-4d40-be5a-792a91c5ca2b/1/AvxcBk9RWcih-kBmyMuP9wFnHdI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:87:a4:16:52:cb:e4:32:8a:a1:04:22:25:1e:e4:da:66:72: bc:b9:c5:31:cf:d0:a1:a2:e3:5b:06:88:d6:ab:40:a5:db:16: c2:84:d6:75:e7:f6:d6:6d:cc:cf:ae:3e:cc:f1:a3:a1:b0:f2: 0f:7b:84:8e:2e:94:d6:5c:93:29:82:34:d9:02:25:8f:98:6b: 0d:cd:cc:d9:dc:ec:7f:48:0b:ff:81:ad:28:03:b4:52:a1:9e: 4e:89:4f:20:cf:d8:09:2d:9e:70:f2:4c:0e:41:7d:2b:a6:eb: 75:e7:97:7e:50:ef:ef:c1:01:f1:ef:24:d9:87:0d:a8:a3:01: f8:af:73:6b:65:26:b8:92:bf:0d:f4:d9:34:20:d0:fc:cf:29: d4:10:15:08:50:a7:20:b2:b0:5e:44:b9:79:60:6c:36:c6:c3: e3:6c:b6:45:ea:e7:14:b9:ad:8e:0c:0e:cf:75:b1:1c:5d:1d: 67:e7:44:3d:32:01:4c:ee:76:ef:91:1c:91:e7:ee:fb:0a:0e: 68:39:b8:af:55:47:bc:6a:17:b5:b4:95:cb:d9:09:de:43:03: 6c:74:db:53:91:4f:b6:35:21:51:ea:9e:b9:24:1a:19:73:3b: 94:ed:0e:36:36:ce:aa:11:e9:52:35:a4:8a:07:a7:b6:b6:ec: 04:42:e4:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIqrwl+nTF6cNG25aSZ5AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyZmM1YzA2NGY1MTU5YzhhMWZhNDA2NmM4Y2I4ZmY3MDE2 NzFkZDIwHhcNMjYwMjA5MTYwMTExWhcNMjYwMjEwMTYwMTExWjAzMTEwLwYDVQQD EygxYzMwYTEwYWVkY2E4YmU3NDBlNWE4Mjk1MDRkNjRhNDA5NzU5OGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJs2JngGbte61cqdxunqJ6f7ZEIS 2hqkUe/6D4mlN3/55UDgzPqt4EAb6qGk+p9aIL/YJLw5dEW4JMbfo8NI6DntnkjI GGFRqa9DymsXK6UeMs51Ln81QhGwIIj+7xr6IuOKAQKmZTWIrLlxUCh3PV1tcpEC Kbghkhilzm92T/NoZykpjTJHfMIO/J6jbtp8vSwrNMR+xBk5ek2n+fXCA1NX9X47 +/z8mfDTJxv/iru+pUHq4zEO058EQ+g8TkFMx8Awb7i2rMXUmrVi7x49+yvbk6jC 6EJen1gF3cw6OX1gZthtt/4HpvtLHZphDULTSlhbiqEOAswJesqgq7S4vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBwwoQrtyovnQOWoKVBNZKQJdZjiMB8GA1UdIwQY MBaAFAL8XAZPUVnIofpAZsjLj/cBZx3SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEt NzkyYTkxYzVjYTJiLzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYi9iMTVhN2QtNWFlZS00ZDQwLWJlNWEtNzkyYTkxYzVjYTJi LzEvQXZ4Y0JrOVJXY2loLWtCbXlNdVA5d0ZuSGRJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQIekFlLL 5DKKoQQiJR7k2mZyvLnFMc/QoaLjWwaI1qtApdsWwoTWdef21m3Mz64+zPGjobDy D3uEji6U1lyTKYI02QIlj5hrDc3M2dzsf0gL/4GtKAO0UqGeTolPIM/YCS2ecPJM DkF9K6brdeeXflDv78EB8e8k2YcNqKMB+K9za2UmuJK/DfTZNCDQ/M8p1BAVCFCn ILKwXkS5eWBsNsbD42y2RernFLmtjgwOz3WxHF0dZ+dEPTIBTO5275Eckefu+woO aDm4r1VHvGoXtbSVy9kJ3kMDbHTbU5FPtjUhUeqeuSQaGXM7lO0ONjbOqhHpUjWk igentrbsBELkRQ== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:08 2026 by rpki-client