This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json) Hash identifier: xwT+NFSKNeBnqt0CU+cw8JZwWQXTVJ6cBkmn9EwLv8M= Subject key identifier: F9:79:22:7C:D4:13:24:24:71:0D:F6:D3:A3:05:16:33:64:81:34:1B Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e Certificate serial: 019C42B4972FA6698153F020A18D5DE329A4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft Manifest number: 040E Signing time: Mon 09 Feb 2026 14:00:57 +0000 Manifest this update: Mon 09 Feb 2026 14:00:57 +0000 Manifest next update: Tue 10 Feb 2026 14:00:57 +0000 Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: e3c3rgK6vfxx5+h+F6mpDdmaQaT0/apMjUpZJilL8n0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:97:2f:a6:69:81:53:f0:20:a1:8d:5d:e3:29:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e Validity Not Before: Feb 9 14:00:57 2026 GMT Not After : Feb 10 14:00:57 2026 GMT Subject: CN=f979227cd4132424710df6d3a30516336481341b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5d:19:e9:6f:a1:92:39:51:16:d3:e8:c5:52: d8:0a:28:27:fb:9a:0c:6e:69:9f:ab:30:21:5d:7f: d6:fb:a9:cc:ff:a1:6e:03:b2:8c:69:86:3f:65:cc: 12:79:ea:59:a3:2f:89:4f:24:82:bd:a4:e0:d8:2c: ba:6f:f1:a3:cc:f3:70:b7:e2:6f:64:0d:5f:08:5b: 57:92:1f:12:41:21:17:ae:03:06:a4:a0:6e:01:5a: 99:3f:11:f4:d5:f7:b2:31:8f:89:cc:6b:b4:af:4a: 37:2f:f0:fa:4a:44:e5:4b:03:85:bc:e0:31:a7:28: 95:a8:c0:3f:28:04:bc:f3:a5:38:c4:81:36:8a:67: 98:4c:bb:87:a1:0f:5e:f1:dc:8e:c5:c8:f6:45:43: b1:f0:b0:7e:50:d1:4e:d4:5e:f3:8f:ee:4c:e0:a9: ae:c2:00:ed:3d:51:0e:6f:1d:ed:f1:df:ae:c4:7a: fd:79:bf:8a:e9:af:fd:3e:01:bb:78:3b:b3:8c:1a: 56:02:ec:b8:5e:b5:37:f8:51:62:45:27:05:68:7f: cf:7b:97:86:15:f4:94:73:44:ac:24:a2:0e:5e:9b: 80:56:5a:c5:29:4a:e6:53:80:38:67:b7:65:a1:01: d2:aa:56:28:07:b9:73:ed:01:f6:e4:89:d1:15:5c: c0:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:79:22:7C:D4:13:24:24:71:0D:F6:D3:A3:05:16:33:64:81:34:1B X509v3 Authority Key Identifier: keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:47:ea:87:fc:28:f0:48:f0:98:20:5a:e5:9e:37:06:8b:02: 01:57:6d:c4:b9:ed:28:8d:dc:33:27:c4:97:dc:bf:79:74:62: f0:81:6f:e6:37:19:fd:78:25:bf:11:de:02:6a:90:d5:5a:bd: b2:60:76:79:0e:52:55:84:3a:9f:37:16:a4:9c:09:d6:a6:0b: 1b:5f:d3:d8:f1:2e:e0:a2:0c:0c:0d:fa:7a:6e:68:16:ee:85: 8b:bf:2e:a6:05:db:c3:02:32:d3:af:5f:03:22:39:8e:6d:e9: d5:98:bb:f8:b5:0f:51:ff:df:28:10:ce:f8:9c:81:7f:f5:dd: 5a:f2:18:b8:7d:cb:6d:68:b2:5e:fb:50:cd:3d:61:fa:da:3d: 33:1c:4b:7d:b9:68:0b:8e:66:29:1e:87:b2:f8:b1:ba:7c:92: d1:cd:a6:1b:a2:68:a4:b7:da:4e:96:39:79:8b:be:cb:43:d2: 60:b5:1c:94:18:c4:34:dd:05:49:27:f9:5a:d2:36:1d:28:3c: 3e:6f:26:10:fe:cd:b2:64:f9:8c:cb:29:be:88:69:3b:9f:9f: 18:19:98:94:f2:12:24:63:34:f0:a0:07:4e:f4:df:e6:5c:7c: ad:16:80:c9:14:a6:dd:fa:e5:bc:a4:a1:0e:11:61:b8:01:de: 2b:cc:96:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJcvpmmBU/AgoY1d4ymkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMWM0ODE5ZDBlMTlkZmE3NDBkODQ1MWFmMTM5OGQyMzBj NmQ4NGUwHhcNMjYwMjA5MTQwMDU3WhcNMjYwMjEwMTQwMDU3WjAzMTEwLwYDVQQD EyhmOTc5MjI3Y2Q0MTMyNDI0NzEwZGY2ZDNhMzA1MTYzMzY0ODEzNDFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApl0Z6W+hkjlRFtPoxVLYCign+5oM bmmfqzAhXX/W+6nM/6FuA7KMaYY/ZcwSeepZoy+JTySCvaTg2Cy6b/GjzPNwt+Jv ZA1fCFtXkh8SQSEXrgMGpKBuAVqZPxH01feyMY+JzGu0r0o3L/D6SkTlSwOFvOAx pyiVqMA/KAS886U4xIE2imeYTLuHoQ9e8dyOxcj2RUOx8LB+UNFO1F7zj+5M4Kmu wgDtPVEObx3t8d+uxHr9eb+K6a/9PgG7eDuzjBpWAuy4XrU3+FFiRScFaH/Pe5eG FfSUc0SsJKIOXpuAVlrFKUrmU4A4Z7dloQHSqlYoB7lz7QH25InRFVzAewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPl5InzUEyQkcQ3206MFFjNkgTQbMB8GA1UdIwQY MBaAFGocSBnQ4Z36dA2EUa8TmNIwxthOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYt ZDdiMjhkMmE4MmIxLzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYtZDdiMjhkMmE4MmIx LzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEfqh/wo 8EjwmCBa5Z43BosCAVdtxLntKI3cMyfEl9y/eXRi8IFv5jcZ/XglvxHeAmqQ1Vq9 smB2eQ5SVYQ6nzcWpJwJ1qYLG1/T2PEu4KIMDA36em5oFu6Fi78upgXbwwIy069f AyI5jm3p1Zi7+LUPUf/fKBDO+JyBf/XdWvIYuH3LbWiyXvtQzT1h+to9MxxLfblo C45mKR6HsvixunyS0c2mG6JopLfaTpY5eYu+y0PSYLUclBjENN0FSSf5WtI2HSg8 Pm8mEP7NsmT5jMspvohpO5+fGBmYlPISJGM08KAHTvTf5lx8rRaAyRSm3frlvKSh DhFhuAHeK8yWnA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:21 2026 by rpki-client