This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft File: A-aapu504w79uBm5yxvyHnhub6M.mft (raw, json) Hash identifier: hetX1AqyyvH1XkXJ39mgca5FqpgtoQHZn++bUV28Lz4= Subject key identifier: A1:AE:5A:53:ED:1D:84:13:F7:71:7E:34:DB:2F:7A:46:F7:7B:68:BE Authority key identifier: 03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3 Certificate issuer: /CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3 Certificate serial: 019C42B49A7D1297436766D018AF9B00A98E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft Manifest number: 06AC Signing time: Mon 09 Feb 2026 14:00:58 +0000 Manifest this update: Mon 09 Feb 2026 14:00:58 +0000 Manifest next update: Tue 10 Feb 2026 14:00:58 +0000 Files and hashes: 1: A-aapu504w79uBm5yxvyHnhub6M.crl (hash: ErBFki8lz1zUO2K65rdu3dRLUaQJ7Ex31tDV23e6P94=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:9a:7d:12:97:43:67:66:d0:18:af:9b:00:a9:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03e69aa6ee74e30efdb819b9cb1bf21e786e6fa3 Validity Not Before: Feb 9 14:00:58 2026 GMT Not After : Feb 10 14:00:58 2026 GMT Subject: CN=a1ae5a53ed1d8413f7717e34db2f7a46f77b68be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:f3:2e:e6:e4:35:c3:6f:c2:ab:29:d3:36:da: 8f:cd:68:93:1e:cf:bc:c4:3c:9b:36:5d:fb:f0:a2: 92:0d:83:14:08:4b:b8:c3:f1:6c:dd:fa:c7:68:e9: 0c:82:84:4a:a9:5a:b4:b4:b9:df:a3:6f:b2:37:e4: 2d:fe:9c:48:fa:bc:8f:48:81:54:21:26:6e:44:f4: b2:cb:14:6d:82:e2:7c:19:74:3d:a4:14:30:1b:d0: 1a:de:59:ff:e1:f2:ea:45:7b:35:f5:3c:46:85:13: 26:87:60:e4:61:c2:a1:90:14:95:8b:73:23:1b:f3: f1:80:80:ba:8e:5c:c7:64:16:f0:f3:a2:d9:18:48: 08:e0:eb:b6:e8:e7:84:19:bd:c4:5d:44:c3:22:3d: 00:74:c3:4c:77:97:3a:22:e0:b3:c8:46:0d:12:be: f9:e8:2f:f5:e3:70:e3:f0:0e:2d:37:95:ae:13:dd: 93:cb:68:5b:fa:77:0d:41:37:99:5f:ab:dd:4b:3f: 7d:ed:b0:d2:aa:66:bd:bc:87:2b:4e:bf:8a:cf:14: 90:b9:29:04:af:66:08:86:36:8a:86:05:27:71:eb: 3c:a9:f5:a0:ec:ca:78:b2:c4:c5:cb:da:6f:cb:b0: 96:03:aa:1c:ec:19:91:25:52:b9:ad:4f:62:c9:74: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AE:5A:53:ED:1D:84:13:F7:71:7E:34:DB:2F:7A:46:F7:7B:68:BE X509v3 Authority Key Identifier: keyid:03:E6:9A:A6:EE:74:E3:0E:FD:B8:19:B9:CB:1B:F2:1E:78:6E:6F:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-aapu504w79uBm5yxvyHnhub6M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a9e8fa-41d7-4bc6-9841-05a83ed70bc3/1/A-aapu504w79uBm5yxvyHnhub6M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:8f:a5:20:14:ee:f2:91:3e:2c:96:d7:1c:29:29:2f:ee:5b: 8e:de:02:5d:f2:8a:7e:93:5e:d5:94:8e:dc:3a:be:07:92:7d: 6d:2d:35:e4:1c:37:ed:c6:0a:56:df:b5:d0:14:77:5e:e4:ee: 2c:6f:b7:a7:36:e3:01:a9:e1:51:61:cf:72:dc:9f:91:b1:8c: 00:a1:ef:10:8c:91:60:53:42:3e:3b:b6:8e:e6:aa:42:95:03: 21:ed:f7:eb:73:63:2d:36:e6:51:15:99:b0:41:10:f1:97:2d: c0:4c:fc:7e:40:f5:a2:41:ab:c6:aa:4c:43:45:e2:30:cf:44: 49:74:b1:99:06:09:52:cd:bb:73:7c:a2:fe:ec:52:43:41:29: cd:fc:e4:01:32:48:e3:b9:c1:2f:96:e9:36:33:e5:98:f8:1a: a6:95:9e:03:99:3b:10:b7:06:c9:9d:ce:5e:35:f6:8a:b1:44: ff:6f:7a:d5:06:5a:40:5d:5a:ba:0e:19:e2:34:5a:1b:f2:bb: 23:32:0e:4f:9f:9f:af:79:9f:d8:17:c7:cc:21:c9:c1:5b:93: 44:af:d7:c6:c8:c0:dd:a9:bf:4e:57:72:a1:91:41:cf:e4:2a: 22:1a:c6:25:d8:35:1d:d5:09:0e:4e:fe:d6:15:b7:cf:f0:14: a2:ce:69:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtJp9EpdDZ2bQGK+bAKmOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZTY5YWE2ZWU3NGUzMGVmZGI4MTliOWNiMWJmMjFlNzg2 ZTZmYTMwHhcNMjYwMjA5MTQwMDU4WhcNMjYwMjEwMTQwMDU4WjAzMTEwLwYDVQQD EyhhMWFlNWE1M2VkMWQ4NDEzZjc3MTdlMzRkYjJmN2E0NmY3N2I2OGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/Mu5uQ1w2/CqynTNtqPzWiTHs+8 xDybNl378KKSDYMUCEu4w/Fs3frHaOkMgoRKqVq0tLnfo2+yN+Qt/pxI+ryPSIFU ISZuRPSyyxRtguJ8GXQ9pBQwG9Aa3ln/4fLqRXs19TxGhRMmh2DkYcKhkBSVi3Mj G/PxgIC6jlzHZBbw86LZGEgI4Ou26OeEGb3EXUTDIj0AdMNMd5c6IuCzyEYNEr75 6C/143Dj8A4tN5WuE92Ty2hb+ncNQTeZX6vdSz997bDSqma9vIcrTr+KzxSQuSkE r2YIhjaKhgUnces8qfWg7Mp4ssTFy9pvy7CWA6oc7BmRJVK5rU9iyXQyuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKGuWlPtHYQT93F+NNsvekb3e2i+MB8GA1UdIwQY MBaAFAPmmqbudOMO/bgZucsb8h54bm+jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9hOWU4ZmEtNDFkNy00YmM2LTk4NDEt MDVhODNlZDcwYmMzLzEvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC9hOWU4ZmEtNDFkNy00YmM2LTk4NDEtMDVhODNlZDcwYmMz LzEvQS1hYXB1NTA0dzc5dUJtNXl4dnlIbmh1YjZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGY+lIBTu 8pE+LJbXHCkpL+5bjt4CXfKKfpNe1ZSO3Dq+B5J9bS015Bw37cYKVt+10BR3XuTu LG+3pzbjAanhUWHPctyfkbGMAKHvEIyRYFNCPju2juaqQpUDIe3363NjLTbmURWZ sEEQ8ZctwEz8fkD1okGrxqpMQ0XiMM9ESXSxmQYJUs27c3yi/uxSQ0EpzfzkATJI 47nBL5bpNjPlmPgappWeA5k7ELcGyZ3OXjX2irFE/2961QZaQF1aug4Z4jRaG/K7 IzIOT5+fr3mf2BfHzCHJwVuTRK/XxsjA3am/TldyoZFBz+QqIhrGJdg1HdUJDk7+ 1hW3z/AUos5pyw== -----END CERTIFICATE-----Generated at Mon Feb 9 18:41:26 2026 by rpki-client