This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft File: Aoek4s-o7NArUHMCs8bbF_IRdC8.mft (raw, json) Hash identifier: JLQrHNwXAMGmg+5uSTkxJk9lbY2bK4WWZY3M0U3alNs= Subject key identifier: A5:65:06:5F:D1:F6:9D:4F:38:FD:E9:95:11:3A:E9:A5:18:58:DC:73 Authority key identifier: 02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F Certificate issuer: /CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f Certificate serial: 019C42EB351E47416374407CB29CB84B52EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft Manifest number: 01DF Signing time: Mon 09 Feb 2026 15:00:36 +0000 Manifest this update: Mon 09 Feb 2026 15:00:36 +0000 Manifest next update: Tue 10 Feb 2026 15:00:36 +0000 Files and hashes: 1: 3DpnlXPjDQo6s3MFIV18FHk0jxQ.roa (hash: NIhxzfLk3mbiT3cRk3puqCB8KvdXHUd8N5EcFBnPSDo=) 2: Aoek4s-o7NArUHMCs8bbF_IRdC8.crl (hash: EjaaxmXWRApcKD3NElI8DQTW4PU8V3ihQffx6NAVSV0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:35:1e:47:41:63:74:40:7c:b2:9c:b8:4b:52:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0287a4e2cfa8ecd02b507302b3c6db17f211742f Validity Not Before: Feb 9 15:00:36 2026 GMT Not After : Feb 10 15:00:36 2026 GMT Subject: CN=a565065fd1f69d4f38fde995113ae9a51858dc73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:74:02:52:2d:50:dc:37:5d:27:dd:e2:a1: 47:c7:d4:75:ce:37:79:80:fd:6f:64:21:c8:01:c3: 1c:64:3f:98:f6:39:b7:99:4b:32:b1:f6:e6:b2:fc: 8e:10:7d:4c:e5:c9:4d:88:72:af:52:05:04:c0:6f: 6d:bf:c1:04:29:a3:c8:af:c2:23:f1:30:8a:2d:3a: ef:7f:71:69:52:db:22:4b:f9:6d:aa:b3:25:e3:ba: ab:d2:55:59:6e:ff:2f:fd:3b:c3:f3:7e:c9:af:16: 49:6f:cf:3e:94:df:59:49:57:f7:8a:ef:ab:59:92: df:16:d3:ab:c0:42:10:77:23:da:03:09:c1:74:10: 59:d0:96:7d:18:2b:8f:37:51:87:7a:6e:08:82:71: 34:43:0d:49:02:6e:0e:78:9e:46:b2:10:37:d5:b4: 45:00:54:1e:03:d7:34:49:1e:3b:8c:5e:9e:8e:8e: e1:68:21:8b:0c:e2:7e:31:11:1f:a7:23:29:91:7a: 0d:06:b0:43:38:8d:38:44:9d:ae:4e:79:c0:fa:38: d1:43:f4:34:f0:57:93:6a:0c:60:a3:ce:48:e6:ad: 6a:27:7c:a5:78:69:2b:f4:b1:87:bb:c2:80:be:42: 79:b6:a8:d9:24:97:77:82:ee:46:03:1c:a7:81:52: 10:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:65:06:5F:D1:F6:9D:4F:38:FD:E9:95:11:3A:E9:A5:18:58:DC:73 X509v3 Authority Key Identifier: keyid:02:87:A4:E2:CF:A8:EC:D0:2B:50:73:02:B3:C6:DB:17:F2:11:74:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aoek4s-o7NArUHMCs8bbF_IRdC8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/58/a624d1-3feb-486d-b020-9ef967fc77d8/1/Aoek4s-o7NArUHMCs8bbF_IRdC8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4f:24:99:20:59:a3:4c:5d:83:a6:4a:36:1d:e4:00:aa:e1: 19:db:e1:b6:99:42:85:08:cc:ab:59:78:92:13:51:a5:d7:5a: cd:3b:1c:f9:fe:e3:42:b1:42:2d:5c:dd:80:5c:ff:a2:c0:ad: e8:08:f5:1c:39:de:eb:b2:d7:fa:95:bc:48:05:b7:08:df:dd: 1c:67:24:8d:a2:3e:19:34:9c:01:f7:8d:76:9b:f2:95:c0:13: 37:a7:94:dd:2c:45:e2:cd:b1:80:a0:0a:51:34:96:0f:5e:95: 30:75:6f:3c:01:84:3b:58:a1:42:79:da:3c:80:1b:1a:8a:41: 6f:67:51:4f:71:73:ce:bd:d1:1e:62:69:0b:8d:36:5c:52:85: 06:da:de:0f:ae:95:cf:57:d6:99:28:ad:f3:7a:f1:27:aa:60: 0e:37:97:b3:d1:32:d6:8a:b2:e3:4a:f5:20:40:aa:9f:a4:81: e8:86:74:3e:79:77:7e:7a:91:54:11:17:c6:60:b1:3b:f4:c9: 42:7a:bd:61:5b:0b:06:bc:d0:25:bc:d6:87:8e:1e:34:e7:04: 7c:e0:c5:1d:69:e1:ae:3a:ba:15:c4:68:e0:24:09:d9:15:e3: fc:a8:26:91:d8:17:66:3f:f0:c5:79:48:98:0d:00:52:cc:08: 7d:ff:8d:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6zUeR0FjdEB8spy4S1LvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODdhNGUyY2ZhOGVjZDAyYjUwNzMwMmIzYzZkYjE3ZjIx MTc0MmYwHhcNMjYwMjA5MTUwMDM2WhcNMjYwMjEwMTUwMDM2WjAzMTEwLwYDVQQD EyhhNTY1MDY1ZmQxZjY5ZDRmMzhmZGU5OTUxMTNhZTlhNTE4NThkYzczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq10AlItUNw3XSfd4qFHx9R1zjd5 gP1vZCHIAcMcZD+Y9jm3mUsysfbmsvyOEH1M5clNiHKvUgUEwG9tv8EEKaPIr8Ij 8TCKLTrvf3FpUtsiS/ltqrMl47qr0lVZbv8v/TvD837JrxZJb88+lN9ZSVf3iu+r WZLfFtOrwEIQdyPaAwnBdBBZ0JZ9GCuPN1GHem4IgnE0Qw1JAm4OeJ5GshA31bRF AFQeA9c0SR47jF6ejo7haCGLDOJ+MREfpyMpkXoNBrBDOI04RJ2uTnnA+jjRQ/Q0 8FeTagxgo85I5q1qJ3yleGkr9LGHu8KAvkJ5tqjZJJd3gu5GAxyngVIQvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVlBl/R9p1POP3plRE66aUYWNxzMB8GA1UdIwQY MBaAFAKHpOLPqOzQK1BzArPG2xfyEXQvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAt OWVmOTY3ZmM3N2Q4LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OC9hNjI0ZDEtM2ZlYi00ODZkLWIwMjAtOWVmOTY3ZmM3N2Q4 LzEvQW9lazRzLW83TkFyVUhNQ3M4YmJGX0lSZEM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArU8kmSBZ o0xdg6ZKNh3kAKrhGdvhtplChQjMq1l4khNRpddazTsc+f7jQrFCLVzdgFz/osCt 6Aj1HDne67LX+pW8SAW3CN/dHGckjaI+GTScAfeNdpvylcATN6eU3SxF4s2xgKAK UTSWD16VMHVvPAGEO1ihQnnaPIAbGopBb2dRT3Fzzr3RHmJpC402XFKFBtreD66V z1fWmSit83rxJ6pgDjeXs9Ey1oqy40r1IECqn6SB6IZ0Pnl3fnqRVBEXxmCxO/TJ Qnq9YVsLBrzQJbzWh44eNOcEfODFHWnhrjq6FcRo4CQJ2RXj/KgmkdgXZj/wxXlI mA0AUswIff+N0A== -----END CERTIFICATE-----Generated at Mon Feb 9 19:47:26 2026 by rpki-client