This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json) Hash identifier: qYNaBGrluKkRmXA1CBinBYm6rM63ZViJildl2GjC4jM= Subject key identifier: 24:A4:22:86:D9:7C:99:84:8A:8D:44:E5:BC:81:6C:CF:3E:B7:6A:E6 Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Certificate serial: 019C420FA9BB515AF4B5696F00032399494D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft Manifest number: 14A8 Signing time: Mon 09 Feb 2026 11:00:48 +0000 Manifest this update: Mon 09 Feb 2026 11:00:48 +0000 Manifest next update: Tue 10 Feb 2026 11:00:48 +0000 Files and hashes: 1: HG9Ba2gI8LG--fPNC-99z5G5PR0.roa (hash: r0cs2bG9l/hgCfQjE51Q5Mu/ZRB68nj2PZBwDW/XxSM=) 2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: Hgt1UfTxIGYkbM+vsK6GhbZh9JKSVBpM7SkWXjp4DRE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:a9:bb:51:5a:f4:b5:69:6f:00:03:23:99:49:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef Validity Not Before: Feb 9 11:00:48 2026 GMT Not After : Feb 10 11:00:48 2026 GMT Subject: CN=24a42286d97c99848a8d44e5bc816ccf3eb76ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:82:37:bb:f9:79:d0:44:a0:e0:94:1d:6b:20: 2b:e3:8c:d4:c7:dc:06:44:83:e7:c8:1e:d0:f8:41: 15:77:8e:75:1d:b3:2a:bc:1c:69:ac:05:ef:cb:9c: 30:e0:bb:a4:3c:9c:07:42:d4:62:a3:c9:e5:6d:77: d8:12:05:c5:7f:4c:be:fc:5c:7d:33:00:bf:3b:3d: 4c:7e:46:65:ba:c0:e8:42:70:b3:51:e7:ae:71:58: 53:4a:18:66:4b:25:64:21:7a:e9:1c:82:46:88:d5: 3b:4f:ea:68:19:cf:89:37:79:0f:6a:f6:6a:df:16: 5b:71:28:a7:c6:fd:b3:59:24:b7:bb:62:75:35:ae: a5:a7:e3:48:4b:23:92:4d:29:d3:24:77:c1:1b:9b: 5d:1e:96:53:20:55:68:88:e0:e7:4e:a3:18:92:75: c8:48:4f:32:3c:a4:a2:d9:4c:a3:a1:86:fb:3d:bc: 2d:ef:0a:9d:a3:a9:4e:f0:ff:d2:e5:f2:65:55:78: 81:37:d0:f1:5f:f0:c7:a6:d1:cc:32:39:42:7d:9c: 87:94:c7:c0:1d:73:5e:31:cf:4d:bb:a0:95:99:1d: 33:cb:4e:95:90:9f:f2:a2:09:18:41:99:ac:cf:8f: 77:62:af:48:42:f3:23:e6:c9:c2:ce:8e:5a:f5:67: 6b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A4:22:86:D9:7C:99:84:8A:8D:44:E5:BC:81:6C:CF:3E:B7:6A:E6 X509v3 Authority Key Identifier: keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:1d:06:28:85:51:f2:94:2c:b3:95:3a:cb:4e:ba:67:5c:e9: 5b:51:5e:22:34:92:d2:3e:eb:e8:ef:c4:ff:d0:3a:80:80:cc: cf:a0:ef:0d:53:10:c2:8c:db:f3:75:2a:fc:55:7a:b3:85:95: 6f:87:da:1a:e5:82:63:cc:e0:5d:bb:59:64:81:bc:ce:1a:06: 3f:7a:c3:8a:7b:b0:44:fb:7b:8c:18:da:d2:40:c5:58:64:4f: 1c:15:2c:8e:2e:db:47:98:a6:7c:79:bc:ac:1e:d5:38:69:fe: 97:20:e6:af:c3:f1:b9:2e:07:fc:7b:81:a5:b8:d4:bd:73:c0: d3:1d:1f:7a:84:dc:3b:4e:bc:41:de:65:5c:5f:ef:9d:c9:b9: 5e:bb:f2:0d:44:f7:2c:1b:07:17:42:57:e3:29:44:14:b0:12: 2a:50:21:17:51:97:ec:43:bd:a7:20:ac:e8:24:57:ca:b8:47: 04:62:77:a1:93:e0:bc:d3:93:e8:b9:a0:91:c2:b9:9c:69:f5: 9c:2a:e6:42:f0:9c:b4:2d:84:41:b5:41:56:e7:31:6c:44:52: a0:9c:92:39:98:9f:d6:13:40:f9:c5:2d:13:b0:93:0a:5a:20: c4:ca:ee:73:65:5e:17:74:71:a6:81:05:f6:e3:28:66:7d:ee: 53:3c:d9:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD6m7UVr0tWlvAAMjmUlNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMTg3Y2E1YjhhZWUxOTVjYzhjYWRjZmI0OGM1NDRiMTgx NDc3ZWYwHhcNMjYwMjA5MTEwMDQ4WhcNMjYwMjEwMTEwMDQ4WjAzMTEwLwYDVQQD EygyNGE0MjI4NmQ5N2M5OTg0OGE4ZDQ0ZTViYzgxNmNjZjNlYjc2YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoI3u/l50ESg4JQdayAr44zUx9wG RIPnyB7Q+EEVd451HbMqvBxprAXvy5ww4LukPJwHQtRio8nlbXfYEgXFf0y+/Fx9 MwC/Oz1MfkZlusDoQnCzUeeucVhTShhmSyVkIXrpHIJGiNU7T+poGc+JN3kPavZq 3xZbcSinxv2zWSS3u2J1Na6lp+NISyOSTSnTJHfBG5tdHpZTIFVoiODnTqMYknXI SE8yPKSi2UyjoYb7Pbwt7wqdo6lO8P/S5fJlVXiBN9DxX/DHptHMMjlCfZyHlMfA HXNeMc9Nu6CVmR0zy06VkJ/yogkYQZmsz493Yq9IQvMj5snCzo5a9WdrpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSkIobZfJmEio1E5byBbM8+t2rmMB8GA1UdIwQY MBaAFGoYfKW4ruGVzIytz7SMVEsYFHfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmIt YmYwM2RjODM3OTAwLzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi85NWMwOGItNTA1Ni00Mzg2LWE0MmItYmYwM2RjODM3OTAw LzEvYWhoOHBiaXU0WlhNakszUHRJeFVTeGdVZC04LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsh0GKIVR 8pQss5U6y066Z1zpW1FeIjSS0j7r6O/E/9A6gIDMz6DvDVMQwozb83Uq/FV6s4WV b4faGuWCY8zgXbtZZIG8zhoGP3rDinuwRPt7jBja0kDFWGRPHBUsji7bR5imfHm8 rB7VOGn+lyDmr8PxuS4H/HuBpbjUvXPA0x0feoTcO068Qd5lXF/vncm5XrvyDUT3 LBsHF0JX4ylEFLASKlAhF1GX7EO9pyCs6CRXyrhHBGJ3oZPgvNOT6LmgkcK5nGn1 nCrmQvCctC2EQbVBVucxbERSoJySOZif1hNA+cUtE7CTClogxMruc2VeF3RxpoEF 9uMoZn3uUzzZSg== -----END CERTIFICATE-----Generated at Mon Feb 9 21:09:56 2026 by rpki-client