This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json) Hash identifier: ul9Yws6fo3U+b3UVd0tOE0McFd464VeZy7/9Q5MtI5M= Subject key identifier: 7F:90:E6:2E:2A:76:DD:08:F8:1B:3D:0B:F3:FB:67:E9:98:69:C3:93 Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead Certificate serial: 019C427D867FD7345E3A1385B2E1A26B9FCB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft Manifest number: 12BB Signing time: Mon 09 Feb 2026 13:00:48 +0000 Manifest this update: Mon 09 Feb 2026 13:00:48 +0000 Manifest next update: Tue 10 Feb 2026 13:00:48 +0000 Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: B6ketSiHR7aAbO9HDsW/pMEGgfbnvc3TiUO6njGGRec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:86:7f:d7:34:5e:3a:13:85:b2:e1:a2:6b:9f:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead Validity Not Before: Feb 9 13:00:48 2026 GMT Not After : Feb 10 13:00:48 2026 GMT Subject: CN=7f90e62e2a76dd08f81b3d0bf3fb67e99869c393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:02:3b:bb:35:43:73:b3:c1:ad:49:99:d4: 08:ce:60:21:8c:10:cd:a5:03:92:90:12:10:0e:cc: 93:96:6a:2b:eb:52:b8:8b:ea:b7:3e:24:a0:a4:e6: c4:57:23:40:50:4d:7e:b2:16:d7:9c:bd:6a:73:b4: 66:c3:6c:15:4b:3d:ca:d6:d8:a3:a4:7f:54:15:64: a7:69:f5:de:61:45:85:c1:77:3c:b1:6e:d2:b2:aa: 1c:e9:0f:40:88:94:bc:07:06:3f:c8:1e:71:10:99: 90:6e:83:ab:e9:a0:8c:09:ca:33:92:93:c6:bc:8b: da:df:b8:c7:b8:e8:95:d6:3d:5c:3a:3b:c3:da:d0: 9d:0b:40:4d:7c:c4:56:ee:20:d6:f4:b1:12:22:a6: 59:ad:2a:d6:86:8f:1d:03:ea:7f:c6:a8:2f:7a:80: c1:51:ad:a7:89:4d:0f:f2:4b:6c:cf:6b:30:c8:e0: de:77:02:4c:89:ba:70:29:2d:0c:af:7d:ad:94:83: 16:e6:28:a9:66:73:5a:f3:cf:aa:e3:26:ad:12:9b: 5a:24:56:dd:f1:3f:09:26:4e:61:8d:1a:71:3e:5d: 57:32:62:ab:76:b2:ab:20:b7:58:d5:b1:aa:da:73: 94:b8:eb:e7:6a:fe:15:a6:84:e0:19:0e:b8:86:bf: 4a:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:90:E6:2E:2A:76:DD:08:F8:1B:3D:0B:F3:FB:67:E9:98:69:C3:93 X509v3 Authority Key Identifier: keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:25:1f:8f:5e:35:f8:8f:a8:85:28:e1:21:3e:a7:e8:86:61: bb:e6:0c:db:21:f2:f4:bf:a9:c6:92:fa:34:c9:59:5b:3b:b1: 16:57:9b:55:ec:13:3d:93:5a:dc:13:44:c5:6a:c6:76:91:98: 70:7e:c0:66:bc:d1:2b:0e:40:37:a4:78:20:9e:d1:85:5a:34: 1f:57:99:ea:09:47:68:a7:ff:7f:28:af:6b:0f:08:9a:d8:83: 29:7f:1c:40:f9:9b:c4:ae:7c:b2:c6:52:e3:d5:2a:de:26:18: 70:e8:59:e8:12:42:5c:f7:5f:b6:cd:42:9c:fd:c4:68:e2:b9: d5:7e:11:69:ce:8d:0a:eb:c1:51:c7:01:61:df:d6:15:64:7c: e2:55:a0:65:a5:ad:5f:2a:00:29:16:2d:f5:e1:d1:c4:31:7d: ab:3b:54:9e:f3:87:b8:fd:05:c0:bc:25:05:5b:59:cc:4c:b0: cd:50:27:e7:de:77:d3:09:d2:39:45:00:8e:30:0d:17:6e:9a: 04:8f:69:9c:52:8b:0f:5a:4d:95:b4:43:46:90:44:f7:ad:a4: 05:24:70:ff:6b:fa:13:c8:6b:25:8e:29:d5:cb:d6:3a:36:ef: dd:5f:60:90:a3:aa:5e:b2:d8:6e:9f:70:4d:40:37:d0:cf:d1: f9:bb:30:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfYZ/1zReOhOFsuGia5/LMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMmFkZTY0YTNkMmJkYmU4ZjdjZTgzNjEwZDJlN2M2NWZi MzNlYWQwHhcNMjYwMjA5MTMwMDQ4WhcNMjYwMjEwMTMwMDQ4WjAzMTEwLwYDVQQD Eyg3ZjkwZTYyZTJhNzZkZDA4ZjgxYjNkMGJmM2ZiNjdlOTk4NjljMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXoCO7s1Q3Ozwa1JmdQIzmAhjBDN pQOSkBIQDsyTlmor61K4i+q3PiSgpObEVyNAUE1+shbXnL1qc7Rmw2wVSz3K1tij pH9UFWSnafXeYUWFwXc8sW7Ssqoc6Q9AiJS8BwY/yB5xEJmQboOr6aCMCcozkpPG vIva37jHuOiV1j1cOjvD2tCdC0BNfMRW7iDW9LESIqZZrSrWho8dA+p/xqgveoDB Ua2niU0P8ktsz2swyODedwJMibpwKS0Mr32tlIMW5iipZnNa88+q4yatEptaJFbd 8T8JJk5hjRpxPl1XMmKrdrKrILdY1bGq2nOUuOvnav4VpoTgGQ64hr9KXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH+Q5i4qdt0I+Bs9C/P7Z+mYacOTMB8GA1UdIwQY MBaAFAAq3mSj0r2+j3zoNhDS58Zfsz6tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQt YzU3Y2Y4ZjFjZDU0LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84NjEzNGEtZWU0ZC00NjM3LWE0ZDQtYzU3Y2Y4ZjFjZDU0 LzEvQUNyZVpLUFN2YjZQZk9nMkVOTG54bC16UHEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOiUfj141 +I+ohSjhIT6n6IZhu+YM2yHy9L+pxpL6NMlZWzuxFlebVewTPZNa3BNExWrGdpGY cH7AZrzRKw5AN6R4IJ7RhVo0H1eZ6glHaKf/fyivaw8ImtiDKX8cQPmbxK58ssZS 49Uq3iYYcOhZ6BJCXPdfts1CnP3EaOK51X4Rac6NCuvBUccBYd/WFWR84lWgZaWt XyoAKRYt9eHRxDF9qztUnvOHuP0FwLwlBVtZzEywzVAn59530wnSOUUAjjANF26a BI9pnFKLD1pNlbRDRpBE962kBSRw/2v6E8hrJY4p1cvWOjbv3V9gkKOqXrLYbp9w TUA30M/R+bswKg== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:24 2026 by rpki-client