This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft File: aeoVk9ahKCtuhMLTMlEeoqmahCA.mft (raw, json) Hash identifier: 3TXKbZY/dRZIDJQ70PbeU2BDnjJ1II/UnwGr2XVoLIg= Subject key identifier: 8C:48:AD:B5:60:01:D4:A1:AD:7A:F1:C0:A2:34:CC:32:93:81:26:FB Authority key identifier: 69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20 Certificate issuer: /CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420 Certificate serial: 019C41A1AB9BDD232B3AB44B5D42933CFDA7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft Manifest number: 0A18 Signing time: Mon 09 Feb 2026 09:00:40 +0000 Manifest this update: Mon 09 Feb 2026 09:00:40 +0000 Manifest next update: Tue 10 Feb 2026 09:00:40 +0000 Files and hashes: 1: aeoVk9ahKCtuhMLTMlEeoqmahCA.crl (hash: fcpHTprjhfVQ5ba4r+pY9z6YXuHr0SsmcnidKjhmx78=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:ab:9b:dd:23:2b:3a:b4:4b:5d:42:93:3c:fd:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69ea1593d6a1282b6e84c2d332511ea2a99a8420 Validity Not Before: Feb 9 09:00:40 2026 GMT Not After : Feb 10 09:00:40 2026 GMT Subject: CN=8c48adb56001d4a1ad7af1c0a234cc32938126fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:ce:20:3b:a6:ff:2d:e0:80:9e:30:74:cc:3f: c6:c5:bc:d8:50:bf:d1:a0:29:3e:77:ea:81:a7:bf: ce:92:5a:cc:d0:56:4a:2b:88:e7:b4:de:fa:56:51: 4c:84:3f:7c:65:84:7b:f2:4a:22:15:71:0c:62:d3: 6f:81:15:f3:e7:9f:f9:d7:e6:16:40:90:ac:e3:c7: e4:b5:d9:1d:a2:ec:7e:44:28:a8:06:aa:02:81:24: 0a:57:3e:8c:60:8c:79:ea:67:8f:a1:46:87:af:a3: aa:42:f5:b8:26:aa:65:04:41:5f:cb:97:38:26:27: f0:54:3f:ba:b0:7b:cb:cd:07:89:f8:6d:7f:e4:36: e2:12:3c:70:05:2c:88:fc:47:0d:1d:83:bf:34:39: 39:c7:db:d7:18:84:3c:e2:4e:dd:bb:90:06:49:1a: 24:1e:09:39:24:64:ad:e5:b9:5b:d0:c7:8b:82:eb: 1b:91:ec:cb:9a:ac:d0:27:90:66:16:15:72:73:cb: f1:19:89:2a:d8:d9:fe:e7:a8:5d:59:4f:9e:69:09: d4:d1:e8:49:6b:fe:51:77:56:32:db:1e:bf:e0:d3: 10:7d:62:7e:86:7a:1b:b9:7a:56:4e:3d:f2:f8:d3: 88:3e:6a:99:c4:cd:cd:22:ef:65:51:9b:3f:69:7b: 93:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:48:AD:B5:60:01:D4:A1:AD:7A:F1:C0:A2:34:CC:32:93:81:26:FB X509v3 Authority Key Identifier: keyid:69:EA:15:93:D6:A1:28:2B:6E:84:C2:D3:32:51:1E:A2:A9:9A:84:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aeoVk9ahKCtuhMLTMlEeoqmahCA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/eb7b62-c46c-4462-bd8d-796fbb6ae9be/1/aeoVk9ahKCtuhMLTMlEeoqmahCA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:23:c0:2f:6e:85:6b:b6:b4:34:23:4d:63:c6:73:25:36:4c: 56:94:a7:90:4f:0d:d6:85:e3:6a:db:5e:d0:7d:e6:42:45:3f: 56:ab:2a:5c:e0:72:54:cc:06:9e:b3:e4:80:1d:8e:2f:88:0c: 38:10:3f:68:31:e3:c7:b2:14:1e:ec:a7:37:aa:96:bc:c9:cc: 0e:0c:7e:66:64:d3:0b:9a:a4:c5:b1:ec:0f:e4:cc:7e:d0:01: 5a:c5:a9:ec:6d:77:8c:22:24:45:75:bb:f5:ad:0b:42:a7:a9: 41:b0:64:5d:94:c1:65:04:32:86:c0:5c:75:93:cd:3f:e1:fb: 07:23:6b:7b:a1:5c:75:b8:ee:ec:f8:6b:65:9d:b5:c1:82:36: 6e:4b:bb:9b:86:a7:43:15:36:80:3c:e7:33:10:f2:d6:c1:a8: a4:5f:01:78:54:09:14:e2:8c:19:e9:1c:e8:c2:9e:f9:e6:b2: 08:cf:18:0f:57:49:56:8e:e8:68:f8:25:ac:e5:74:bd:f8:10: 87:73:93:53:14:ec:14:ab:94:0e:c5:d4:69:e6:4e:48:26:2c: c1:c8:f2:fd:af:31:26:15:50:a3:54:db:2a:80:af:f7:46:38: 0e:dc:e8:2b:76:1f:62:8c:73:fc:00:36:70:89:a2:3c:43:d4: 5a:18:a4:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoaub3SMrOrRLXUKTPP2nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZWExNTkzZDZhMTI4MmI2ZTg0YzJkMzMyNTExZWEyYTk5 YTg0MjAwHhcNMjYwMjA5MDkwMDQwWhcNMjYwMjEwMDkwMDQwWjAzMTEwLwYDVQQD Eyg4YzQ4YWRiNTYwMDFkNGExYWQ3YWYxYzBhMjM0Y2MzMjkzODEyNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8c4gO6b/LeCAnjB0zD/GxbzYUL/R oCk+d+qBp7/OklrM0FZKK4jntN76VlFMhD98ZYR78koiFXEMYtNvgRXz55/51+YW QJCs48fktdkdoux+RCioBqoCgSQKVz6MYIx56mePoUaHr6OqQvW4JqplBEFfy5c4 JifwVD+6sHvLzQeJ+G1/5DbiEjxwBSyI/EcNHYO/NDk5x9vXGIQ84k7du5AGSRok Hgk5JGSt5blb0MeLgusbkezLmqzQJ5BmFhVyc8vxGYkq2Nn+56hdWU+eaQnU0ehJ a/5Rd1Yy2x6/4NMQfWJ+hnobuXpWTj3y+NOIPmqZxM3NIu9lUZs/aXuTOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIxIrbVgAdShrXrxwKI0zDKTgSb7MB8GA1UdIwQY MBaAFGnqFZPWoSgrboTC0zJRHqKpmoQgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQt Nzk2ZmJiNmFlOWJlLzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYy9lYjdiNjItYzQ2Yy00NDYyLWJkOGQtNzk2ZmJiNmFlOWJl LzEvYWVvVms5YWhLQ3R1aE1MVE1sRWVvcW1haENBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSPAL26F a7a0NCNNY8ZzJTZMVpSnkE8N1oXjatte0H3mQkU/VqsqXOByVMwGnrPkgB2OL4gM OBA/aDHjx7IUHuynN6qWvMnMDgx+ZmTTC5qkxbHsD+TMftABWsWp7G13jCIkRXW7 9a0LQqepQbBkXZTBZQQyhsBcdZPNP+H7ByNre6Fcdbju7PhrZZ21wYI2bku7m4an QxU2gDznMxDy1sGopF8BeFQJFOKMGekc6MKe+eayCM8YD1dJVo7oaPglrOV0vfgQ h3OTUxTsFKuUDsXUaeZOSCYswcjy/a8xJhVQo1TbKoCv90Y4DtzoK3YfYoxz/AA2 cImiPEPUWhikAg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:47 2026 by rpki-client