This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json) Hash identifier: j6qjuzjEHPTJk5Tr5IwrxHbQlatiPXIJF9lSIm3+LnY= Subject key identifier: 04:1D:8E:92:72:F3:90:E2:67:24:82:34:0D:F4:D3:C4:2F:40:A7:09 Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf Certificate serial: 019C4390380FAD56368DC12980B09CECB7AF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft Manifest number: 147C Signing time: Mon 09 Feb 2026 18:00:50 +0000 Manifest this update: Mon 09 Feb 2026 18:00:50 +0000 Manifest next update: Tue 10 Feb 2026 18:00:50 +0000 Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: 9A06hPbyhv+XcpV8O9LbcBkqDCSE2sy68MVVSuYI3yo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:38:0f:ad:56:36:8d:c1:29:80:b0:9c:ec:b7:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf Validity Not Before: Feb 9 18:00:50 2026 GMT Not After : Feb 10 18:00:50 2026 GMT Subject: CN=041d8e9272f390e2672482340df4d3c42f40a709 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:50:14:87:01:f6:42:a6:82:ef:27:78:52:64: 51:c6:96:a4:b4:e0:13:b4:2f:ed:a8:5c:f3:26:dc: d6:e0:30:e4:c8:bc:b1:c4:82:a4:08:9a:19:5d:ff: 1a:20:5a:98:ce:ae:7d:38:cf:0d:22:14:4c:67:5b: 44:10:94:98:2a:3d:3f:61:3c:86:e0:53:2d:9b:f3: 59:c4:a6:7e:47:e7:c4:d8:bc:37:3c:c5:87:8f:74: 35:09:35:75:57:f4:60:fc:4e:d2:e9:aa:84:1c:31: 78:1c:c5:61:56:1c:98:32:91:bb:b1:58:f4:09:cf: 34:8b:e5:83:28:7a:fa:9d:78:92:6a:4c:01:ed:05: 12:a2:94:42:8b:7a:8c:f2:c5:3e:1c:28:bc:d4:38: e2:b4:8d:fd:ea:67:a0:a6:d8:94:73:c7:f4:87:5c: 00:1d:8a:c2:8f:66:f1:7a:3f:76:a4:c0:48:3b:79: f6:63:9e:68:6e:57:1e:3d:c1:07:63:b1:45:ba:e0: db:62:ed:f1:0d:b4:89:a6:5a:6e:c7:ee:0c:a7:99: 1e:2e:9d:bf:45:e1:8f:94:c4:2f:82:2e:1b:68:f5: 89:77:e4:ef:fe:53:2f:bf:87:07:70:b1:c0:15:4f: 2c:8e:29:9c:08:3f:45:b3:f1:ed:d6:29:5f:4b:2d: 03:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:1D:8E:92:72:F3:90:E2:67:24:82:34:0D:F4:D3:C4:2F:40:A7:09 X509v3 Authority Key Identifier: keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f8:bc:2f:93:b0:36:2f:d0:9a:d8:0f:f2:7e:dd:db:04:2f: c2:8e:57:60:14:3a:68:94:0b:02:6c:a6:a7:0d:c9:1c:82:28: a4:0a:8c:f5:ac:b1:da:a8:15:4c:ab:f1:d7:d3:e5:ae:d3:6c: 0a:31:2d:77:1e:37:20:c5:fd:6b:f7:82:ef:fc:e7:77:66:9b: a6:fa:a9:73:bb:60:5f:0a:88:6a:64:20:6a:2f:e2:dd:83:91: 79:b9:03:4d:ba:ed:90:13:37:c5:51:38:90:bb:ab:aa:4e:92: cc:6a:9e:9d:c8:81:dc:e2:97:8b:75:6d:15:a6:0f:17:69:54: 7e:90:14:2a:fe:42:95:de:67:f9:a3:d2:27:69:2d:bd:4e:12: d5:48:4c:99:e6:be:37:e7:9b:c6:11:d9:5b:a4:0f:64:da:69: 94:67:de:91:58:e6:a0:b7:a9:f8:95:e3:7c:36:f1:3f:1e:20: 3f:ac:e4:7c:7f:ea:91:07:1c:cb:98:f5:fd:b9:f7:ba:47:00: b7:4a:98:ce:de:69:52:41:45:36:c3:91:b7:61:1e:ea:f0:0e: 06:9b:47:b2:98:55:7b:8d:6a:b9:39:92:b4:3f:89:48:fb:1e: ee:43:16:69:48:8e:24:10:0c:d0:1d:83:ae:60:c8:7f:ca:e4: d3:a4:20:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkDgPrVY2jcEpgLCc7LevMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2MzOTcxMDkzNDBiNzY3YmNiMzI0NTE1ZjZkMWY4MmM4 Y2M3Y2YwHhcNMjYwMjA5MTgwMDUwWhcNMjYwMjEwMTgwMDUwWjAzMTEwLwYDVQQD EygwNDFkOGU5MjcyZjM5MGUyNjcyNDgyMzQwZGY0ZDNjNDJmNDBhNzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0VAUhwH2QqaC7yd4UmRRxpaktOAT tC/tqFzzJtzW4DDkyLyxxIKkCJoZXf8aIFqYzq59OM8NIhRMZ1tEEJSYKj0/YTyG 4FMtm/NZxKZ+R+fE2Lw3PMWHj3Q1CTV1V/Rg/E7S6aqEHDF4HMVhVhyYMpG7sVj0 Cc80i+WDKHr6nXiSakwB7QUSopRCi3qM8sU+HCi81DjitI396megptiUc8f0h1wA HYrCj2bxej92pMBIO3n2Y55oblcePcEHY7FFuuDbYu3xDbSJplpux+4Mp5keLp2/ ReGPlMQvgi4baPWJd+Tv/lMvv4cHcLHAFU8sjimcCD9Fs/Ht1ilfSy0DBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAQdjpJy85DiZySCNA3008QvQKcJMB8GA1UdIwQY MBaAFAI8OXEJNAt2e8syRRX20fgsjMfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAt ZTkwZWVmZGIzYWM1LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAtZTkwZWVmZGIzYWM1 LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvi8L5Ow Ni/QmtgP8n7d2wQvwo5XYBQ6aJQLAmympw3JHIIopAqM9ayx2qgVTKvx19PlrtNs CjEtdx43IMX9a/eC7/znd2abpvqpc7tgXwqIamQgai/i3YORebkDTbrtkBM3xVE4 kLurqk6SzGqenciB3OKXi3VtFaYPF2lUfpAUKv5Cld5n+aPSJ2ktvU4S1UhMmea+ N+ebxhHZW6QPZNpplGfekVjmoLep+JXjfDbxPx4gP6zkfH/qkQccy5j1/bn3ukcA t0qYzt5pUkFFNsORt2Ee6vAOBptHsphVe41quTmStD+JSPse7kMWaUiOJBAM0B2D rmDIf8rk06QgCw== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:31 2026 by rpki-client