This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft File: 0AEr-PVySEpvYGhWLKmRnG2lRG8.mft (raw, json) Hash identifier: gX/R6DX6LmAlAUaWF81z+kGX/vYT60ieRhE07a3mHxk= Subject key identifier: 9A:73:DD:49:4D:24:37:91:44:C6:2B:49:DD:3D:65:A9:3A:A4:BC:D4 Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f Certificate serial: 019C43594E0862A9B15AB436B09046952ADB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft Manifest number: 114C Signing time: Mon 09 Feb 2026 17:00:51 +0000 Manifest this update: Mon 09 Feb 2026 17:00:51 +0000 Manifest next update: Tue 10 Feb 2026 17:00:51 +0000 Files and hashes: 1: 0AEr-PVySEpvYGhWLKmRnG2lRG8.crl (hash: 7BjvueY6fkYWA35cHoAk0GBcIHBe+p1SiU6gM0VL0Ac=) 2: 2f5dXJrT7zuKxhEnBTwrq6ei-_s.roa (hash: RkvyHwjfWKAPyzciHocJpPKvG0Wkaxk6iDB72eKrEGY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:59:4e:08:62:a9:b1:5a:b4:36:b0:90:46:95:2a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f Validity Not Before: Feb 9 17:00:51 2026 GMT Not After : Feb 10 17:00:51 2026 GMT Subject: CN=9a73dd494d24379144c62b49dd3d65a93aa4bcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:3a:69:62:70:b0:b9:10:69:3b:bd:f7:4e:69: 75:25:dd:f4:5a:ad:fb:94:07:d8:d8:75:67:c0:d1: de:36:11:c4:e1:1c:b1:a0:97:0e:b4:a5:75:eb:c2: e0:e2:c4:0a:94:61:59:77:f4:83:d9:4d:eb:33:54: 35:be:f1:c6:e2:42:c3:f2:2a:fe:95:34:d0:3c:f7: ac:47:6f:f2:e3:5f:54:c6:f2:9f:8d:81:01:1b:14: 38:78:fd:74:ad:90:aa:45:69:75:98:b7:0f:9c:2b: 8a:13:e2:42:a7:cf:23:72:cf:69:cd:c4:79:27:7a: 4d:fe:a9:d9:d8:c7:dc:67:5b:ed:88:12:48:72:3b: 4f:18:ab:ac:fb:55:5e:c3:38:a6:b2:02:58:45:0b: ae:e7:95:6f:58:93:f0:6c:8e:93:35:f1:53:8e:f7: 13:61:20:56:ea:11:27:6c:78:85:f2:3d:39:f8:42: 39:83:3b:ca:43:8d:35:13:34:a5:ef:a2:e3:71:8b: 88:c0:ff:e9:2f:a7:7c:c2:4b:aa:2a:7e:ae:65:95: c1:e5:08:6f:ce:91:71:84:ed:2a:bd:10:3e:1e:43: f2:e6:7b:6a:74:f7:61:b0:06:e1:e3:71:4d:85:29: 7a:fe:7a:ad:1f:00:ca:65:2c:c3:be:c2:45:09:dc: cf:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:73:DD:49:4D:24:37:91:44:C6:2B:49:DD:3D:65:A9:3A:A4:BC:D4 X509v3 Authority Key Identifier: keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:8d:68:59:a1:f7:c0:77:3b:65:01:db:fe:c4:fa:5f:03:10: 31:60:a5:79:7d:fc:e9:dc:59:e6:85:84:42:5b:57:fd:1b:57: 9d:c3:1c:fa:c4:c4:5d:1f:2a:8b:b9:22:65:d3:0a:98:2c:64: 18:11:d9:1d:76:03:5f:2c:14:30:1c:99:70:9c:48:96:55:06: e0:67:14:3e:c5:77:9f:f2:c6:cd:66:3c:c6:66:ef:58:92:d0: a9:92:6e:a8:7f:bb:f2:a4:42:9a:c3:e0:1c:6d:c3:ad:fa:f8: 32:d4:5c:44:c9:d0:0c:a3:b1:2f:a0:82:0b:78:0a:71:8b:c0: 53:4a:81:7a:a0:4a:6b:1d:9c:05:70:17:e5:2e:40:64:86:d1: 90:49:49:af:ac:6c:12:9c:dc:82:2e:51:31:8a:75:a3:1a:e8: 2b:ea:b6:47:fc:eb:17:88:2d:3a:3f:9e:a5:37:ca:6a:59:ef: b7:78:82:70:8f:69:02:df:2e:9a:f4:0a:3c:6b:51:ea:48:4b: dc:56:3c:ca:33:9c:08:01:ef:1c:38:ca:65:92:56:97:4e:7b: 49:f0:f6:83:5b:dc:cc:7e:f8:1f:74:79:5b:99:47:df:c5:c0: 60:23:2d:f9:44:c5:68:dd:4e:97:bb:99:8f:d8:e5:b2:64:ac: 2b:08:b0:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWU4IYqmxWrQ2sJBGlSrbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh NTQ0NmYwHhcNMjYwMjA5MTcwMDUxWhcNMjYwMjEwMTcwMDUxWjAzMTEwLwYDVQQD Eyg5YTczZGQ0OTRkMjQzNzkxNDRjNjJiNDlkZDNkNjVhOTNhYTRiY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jppYnCwuRBpO733Tml1Jd30Wq37 lAfY2HVnwNHeNhHE4RyxoJcOtKV168Lg4sQKlGFZd/SD2U3rM1Q1vvHG4kLD8ir+ lTTQPPesR2/y419UxvKfjYEBGxQ4eP10rZCqRWl1mLcPnCuKE+JCp88jcs9pzcR5 J3pN/qnZ2MfcZ1vtiBJIcjtPGKus+1VewzimsgJYRQuu55VvWJPwbI6TNfFTjvcT YSBW6hEnbHiF8j05+EI5gzvKQ401EzSl76LjcYuIwP/pL6d8wkuqKn6uZZXB5Qhv zpFxhO0qvRA+HkPy5ntqdPdhsAbh43FNhSl6/nqtHwDKZSzDvsJFCdzPCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpz3UlNJDeRRMYrSd09Zak6pLzUMB8GA1UdIwQY MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt ODQ3N2I2NjM4ZjMxLzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHI1oWaH3 wHc7ZQHb/sT6XwMQMWCleX386dxZ5oWEQltX/RtXncMc+sTEXR8qi7kiZdMKmCxk GBHZHXYDXywUMByZcJxIllUG4GcUPsV3n/LGzWY8xmbvWJLQqZJuqH+78qRCmsPg HG3Drfr4MtRcRMnQDKOxL6CCC3gKcYvAU0qBeqBKax2cBXAX5S5AZIbRkElJr6xs Epzcgi5RMYp1oxroK+q2R/zrF4gtOj+epTfKalnvt3iCcI9pAt8umvQKPGtR6khL 3FY8yjOcCAHvHDjKZZJWl057SfD2g1vczH74H3R5W5lH38XAYCMt+UTFaN1Ol7uZ j9jlsmSsKwiwYw== -----END CERTIFICATE-----Generated at Mon Feb 9 20:01:07 2026 by rpki-client