This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft File: aaX4To643Eyfm9j9rug-yK9uAl4.mft (raw, json) Hash identifier: x/yH7RfsMBkg18pGE3yEbh/Hnl42ME71mAHGSsQhWIU= Subject key identifier: 8D:34:5F:D1:65:A6:6B:6F:D8:BA:EC:4C:33:25:FB:A3:F0:FF:3F:6C Authority key identifier: 69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E Certificate issuer: /CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e Certificate serial: 019C4358C7E7F17CA3F8AA769755ACC7CE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft Manifest number: 0172 Signing time: Mon 09 Feb 2026 17:00:17 +0000 Manifest this update: Mon 09 Feb 2026 17:00:17 +0000 Manifest next update: Tue 10 Feb 2026 17:00:17 +0000 Files and hashes: 1: aaX4To643Eyfm9j9rug-yK9uAl4.crl (hash: 7HN/2JNo6caSkXi21LOIhnc0cRbpn515GQEch0N6XGA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:58:c7:e7:f1:7c:a3:f8:aa:76:97:55:ac:c7:ce:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69a5f84e8eb8dc4c9f9bd8fdaee83ec8af6e025e Validity Not Before: Feb 9 17:00:17 2026 GMT Not After : Feb 10 17:00:17 2026 GMT Subject: CN=8d345fd165a66b6fd8baec4c3325fba3f0ff3f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:97:76:a5:07:68:40:67:dd:7a:7a:2e:5a:ee: b2:a8:ae:0a:0b:83:53:06:3b:b7:4f:77:38:b7:62: 01:77:80:64:09:73:d1:14:fe:82:d9:41:1d:61:75: c6:51:05:92:b4:71:76:95:1e:93:0f:d0:40:07:11: cc:d7:e5:40:5b:5d:1f:cd:f1:75:19:d4:49:ba:c4: ab:27:1d:02:ea:69:13:7f:c0:43:98:0f:12:32:4c: 36:81:be:62:15:ed:9d:a8:b3:55:7d:f6:8e:46:1f: 16:57:99:fc:49:0a:f0:9b:c0:71:30:e3:64:d6:7d: 6e:d8:88:89:ab:f2:e4:6f:f6:57:ac:b2:e6:18:27: 01:4d:fe:16:55:00:78:4d:00:59:a5:04:7b:7a:d5: ec:2a:8e:d1:7b:a4:04:04:a4:11:4e:54:51:ca:6b: fa:f9:e3:2c:b5:ca:c2:77:60:b2:4c:de:5b:e1:0e: f4:9c:14:f1:60:82:10:bc:d1:2b:8c:63:ae:3f:5a: 85:34:1a:78:29:d0:57:d1:9e:99:e2:5f:32:ae:58: bc:72:4b:81:2e:ce:29:0a:93:47:d8:63:c6:74:49: 82:e9:7d:99:2f:1c:90:58:9d:11:7f:99:c0:be:96: 7c:8f:6e:9e:08:e6:35:e8:72:61:b1:92:7e:af:9f: f4:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:34:5F:D1:65:A6:6B:6F:D8:BA:EC:4C:33:25:FB:A3:F0:FF:3F:6C X509v3 Authority Key Identifier: keyid:69:A5:F8:4E:8E:B8:DC:4C:9F:9B:D8:FD:AE:E8:3E:C8:AF:6E:02:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aaX4To643Eyfm9j9rug-yK9uAl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/54af3d-4b1e-4ecd-939d-ad5e6b7857c0/1/aaX4To643Eyfm9j9rug-yK9uAl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:5b:2b:b5:03:55:bc:0c:44:6f:8a:94:01:68:07:a1:a4:0f: 53:89:16:32:e0:45:d1:f6:b0:e8:39:68:fd:e4:15:03:76:7f: de:3a:3a:67:a1:36:07:4f:5d:0b:6d:09:cc:7f:f6:80:d3:f7: 92:3f:68:f2:64:6e:e7:ea:68:60:47:8a:12:87:4f:d0:a2:31: c0:2c:09:98:fa:df:83:48:dd:14:db:18:5c:ab:4a:2f:c5:d0: ae:1c:73:28:28:2e:e5:30:45:e1:fa:3f:f2:19:6a:63:28:c6: 63:8f:1c:c4:34:e5:66:71:32:df:f8:2c:c8:52:97:68:aa:d9: 40:d8:ed:14:18:03:56:80:d5:cd:1d:88:b4:45:a1:35:af:56: ec:35:09:ba:6c:93:45:da:67:4a:7c:c6:64:82:b3:09:08:31: 2c:d1:e6:11:a7:ba:ed:7f:77:8f:2b:4a:6e:49:4c:24:69:c1: 9e:a0:00:06:d2:ad:ff:b8:ab:08:d7:74:cb:dd:38:82:64:e2: ec:69:c5:59:18:47:a4:1f:e7:70:23:21:7f:99:2c:a8:d7:ff: 25:69:85:c0:d6:ce:36:9f:65:9d:93:2b:c8:93:29:c5:0d:b8: cf:77:43:99:dd:a1:b2:ab:33:ce:4c:a0:50:ca:aa:17:08:04: b6:70:e1:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDWMfn8Xyj+Kp2l1Wsx85CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5YTVmODRlOGViOGRjNGM5ZjliZDhmZGFlZTgzZWM4YWY2 ZTAyNWUwHhcNMjYwMjA5MTcwMDE3WhcNMjYwMjEwMTcwMDE3WjAzMTEwLwYDVQQD Eyg4ZDM0NWZkMTY1YTY2YjZmZDhiYWVjNGMzMzI1ZmJhM2YwZmYzZjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5d2pQdoQGfdenouWu6yqK4KC4NT Bju3T3c4t2IBd4BkCXPRFP6C2UEdYXXGUQWStHF2lR6TD9BABxHM1+VAW10fzfF1 GdRJusSrJx0C6mkTf8BDmA8SMkw2gb5iFe2dqLNVffaORh8WV5n8SQrwm8BxMONk 1n1u2IiJq/Lkb/ZXrLLmGCcBTf4WVQB4TQBZpQR7etXsKo7Re6QEBKQRTlRRymv6 +eMstcrCd2CyTN5b4Q70nBTxYIIQvNErjGOuP1qFNBp4KdBX0Z6Z4l8yrli8ckuB Ls4pCpNH2GPGdEmC6X2ZLxyQWJ0Rf5nAvpZ8j26eCOY16HJhsZJ+r5/0cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI00X9Flpmtv2LrsTDMl+6Pw/z9sMB8GA1UdIwQY MBaAFGml+E6OuNxMn5vY/a7oPsivbgJeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQt YWQ1ZTZiNzg1N2MwLzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC81NGFmM2QtNGIxZS00ZWNkLTkzOWQtYWQ1ZTZiNzg1N2Mw LzEvYWFYNFRvNjQzRXlmbTlqOXJ1Zy15Szl1QWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1srtQNV vAxEb4qUAWgHoaQPU4kWMuBF0faw6Dlo/eQVA3Z/3jo6Z6E2B09dC20JzH/2gNP3 kj9o8mRu5+poYEeKEodP0KIxwCwJmPrfg0jdFNsYXKtKL8XQrhxzKCgu5TBF4fo/ 8hlqYyjGY48cxDTlZnEy3/gsyFKXaKrZQNjtFBgDVoDVzR2ItEWhNa9W7DUJumyT RdpnSnzGZIKzCQgxLNHmEae67X93jytKbklMJGnBnqAABtKt/7irCNd0y904gmTi 7GnFWRhHpB/ncCMhf5ksqNf/JWmFwNbONp9lnZMryJMpxQ24z3dDmd2hsqszzkyg UMqqFwgEtnDhqA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:06:30 2026 by rpki-client