This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft File: aLReYLH18sssYUoANB6BmW2U0TQ.mft (raw, json) Hash identifier: 5unuERsKbTXz1kFJASipWcnTKdxWAkTusfIsGA2DxhQ= Subject key identifier: DB:83:FA:FE:40:AF:B4:5C:78:88:85:F4:F9:88:A3:DC:CD:35:7B:C0 Authority key identifier: 68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 Certificate issuer: /CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Certificate serial: 019C43C6A0CC27A68C083FDFA473BC60D511 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft Manifest number: 04F1 Signing time: Mon 09 Feb 2026 19:00:16 +0000 Manifest this update: Mon 09 Feb 2026 19:00:16 +0000 Manifest next update: Tue 10 Feb 2026 19:00:16 +0000 Files and hashes: 1: IIK_PCi18i4nJOHS2yy-kPNRbU8.roa (hash: aOKFLng/u9P5owW+nSLDrOFMq+zEl4wTq8j05LITn5g=) 2: aLReYLH18sssYUoANB6BmW2U0TQ.crl (hash: FVp/Nb0jPPsnGUXLpAMpqnBZVu4GAMYkmcvWrgjjCA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:a0:cc:27:a6:8c:08:3f:df:a4:73:bc:60:d5:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68b45e60b1f5f2cb2c614a00341e81996d94d134 Validity Not Before: Feb 9 19:00:16 2026 GMT Not After : Feb 10 19:00:16 2026 GMT Subject: CN=db83fafe40afb45c788885f4f988a3dccd357bc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:56:a6:06:28:40:ef:44:a1:ce:e5:94:d0:5e: 1d:bf:33:49:5a:c9:f9:7f:98:a3:ce:a1:bf:70:84: 35:c7:8e:27:14:f4:9d:20:15:38:ae:cc:50:40:3b: 7f:19:89:08:4f:2e:ad:e9:28:f5:86:ad:3a:a3:b0: 80:a6:f7:a4:47:7e:ca:c6:1e:54:b7:c5:b1:c7:ad: 3d:09:6e:dc:b6:d8:81:53:25:db:3c:cd:6a:2d:78: 44:b0:a3:d7:59:24:90:42:d4:ff:fe:98:b6:58:5c: 83:46:c6:f8:6c:6b:dc:e7:7a:6f:9c:33:82:44:4d: 32:e8:d0:05:25:51:72:32:2a:af:2a:2c:ea:69:d3: 2e:31:16:4f:fc:97:f1:d2:80:b3:10:d6:1e:cf:a9: 49:0d:61:d1:40:3a:80:e8:e9:1b:cb:14:ec:c1:43: b3:b1:9b:70:09:87:59:3f:27:6f:26:54:97:32:ae: ca:21:13:20:0e:b6:e3:0f:3f:8d:19:2e:aa:41:36: 54:a5:c7:87:7a:01:de:e3:b7:95:b3:36:cb:ef:fa: 3b:af:e3:bc:62:54:05:09:6b:10:10:cd:9f:65:58: 7b:7b:a7:51:1b:48:c5:b7:32:39:aa:e5:ad:cf:d2: bd:61:90:79:9a:f5:92:2a:35:de:74:65:9b:f1:85: 44:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:83:FA:FE:40:AF:B4:5C:78:88:85:F4:F9:88:A3:DC:CD:35:7B:C0 X509v3 Authority Key Identifier: keyid:68:B4:5E:60:B1:F5:F2:CB:2C:61:4A:00:34:1E:81:99:6D:94:D1:34 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aLReYLH18sssYUoANB6BmW2U0TQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/087a56-0c63-4738-99fc-e3c55bb7728e/1/aLReYLH18sssYUoANB6BmW2U0TQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:45:f7:d6:f9:0a:71:d3:64:a8:93:5d:fb:84:e2:d4:41:c8: bd:e2:85:f7:3a:58:0a:c0:de:db:6c:f2:2e:7e:67:dd:12:b5: ae:6a:07:b9:71:5d:c7:83:f0:4d:41:e2:e5:c6:96:be:b3:60: 47:6f:cc:0b:10:7b:9c:1f:21:d6:1d:03:a5:51:07:3a:cc:c3: 65:40:28:d3:be:8b:02:32:72:91:4c:15:90:ac:9d:00:73:42: cb:14:be:ec:bd:1d:4d:d8:11:3c:c8:03:ff:06:80:01:c4:d5: b8:73:80:f4:fc:aa:73:9a:ad:0a:a4:0f:cb:ff:43:52:6c:72: 9f:9f:95:2d:c4:c6:aa:79:bb:df:1f:d2:1c:20:1b:de:09:c9: 1e:0e:0e:71:18:9b:06:16:c6:5b:fe:f8:f0:f8:e6:58:3b:eb: 69:5f:6b:2b:bc:64:2f:67:e2:bc:f7:74:e9:0a:9e:84:37:90: cc:8c:5c:e3:5d:07:2c:c5:e3:d6:17:9f:73:96:01:e2:2c:91: c5:aa:c2:e5:5c:1b:19:c5:1a:28:01:62:b6:aa:44:1e:42:5e: 72:45:0f:62:9b:9a:0e:46:ab:04:42:69:1d:cf:5d:c3:21:3a: 8a:b5:ae:cc:32:9d:47:a9:74:32:d4:67:ea:23:39:39:aa:6e: 28:79:72:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxqDMJ6aMCD/fpHO8YNURMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YjQ1ZTYwYjFmNWYyY2IyYzYxNGEwMDM0MWU4MTk5NmQ5 NGQxMzQwHhcNMjYwMjA5MTkwMDE2WhcNMjYwMjEwMTkwMDE2WjAzMTEwLwYDVQQD EyhkYjgzZmFmZTQwYWZiNDVjNzg4ODg1ZjRmOTg4YTNkY2NkMzU3YmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FamBihA70ShzuWU0F4dvzNJWsn5 f5ijzqG/cIQ1x44nFPSdIBU4rsxQQDt/GYkITy6t6Sj1hq06o7CApvekR37Kxh5U t8Wxx609CW7cttiBUyXbPM1qLXhEsKPXWSSQQtT//pi2WFyDRsb4bGvc53pvnDOC RE0y6NAFJVFyMiqvKizqadMuMRZP/Jfx0oCzENYez6lJDWHRQDqA6OkbyxTswUOz sZtwCYdZPydvJlSXMq7KIRMgDrbjDz+NGS6qQTZUpceHegHe47eVszbL7/o7r+O8 YlQFCWsQEM2fZVh7e6dRG0jFtzI5quWtz9K9YZB5mvWSKjXedGWb8YVEywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNuD+v5Ar7RceIiF9PmIo9zNNXvAMB8GA1UdIwQY MBaAFGi0XmCx9fLLLGFKADQegZltlNE0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMt ZTNjNTViYjc3MjhlLzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8wODdhNTYtMGM2My00NzM4LTk5ZmMtZTNjNTViYjc3Mjhl LzEvYUxSZVlMSDE4c3NzWVVvQU5CNkJtVzJVMFRRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf0X31vkK cdNkqJNd+4Ti1EHIveKF9zpYCsDe22zyLn5n3RK1rmoHuXFdx4PwTUHi5caWvrNg R2/MCxB7nB8h1h0DpVEHOszDZUAo076LAjJykUwVkKydAHNCyxS+7L0dTdgRPMgD /waAAcTVuHOA9Pyqc5qtCqQPy/9DUmxyn5+VLcTGqnm73x/SHCAb3gnJHg4OcRib BhbGW/748PjmWDvraV9rK7xkL2fivPd06QqehDeQzIxc410HLMXj1hefc5YB4iyR xarC5VwbGcUaKAFitqpEHkJeckUPYpuaDkarBEJpHc9dwyE6irWuzDKdR6l0MtRn 6iM5OapuKHlyTA== -----END CERTIFICATE-----Generated at Tue Feb 10 00:16:08 2026 by rpki-client