This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
File: AslIBM_MfvJY1G_DJMFnZEdgPvY.mft (raw, json)
Hash identifier: xhKlxRZdf47eNvqkL9ChKPyRql0vwzJHPd86jCQbDB8=
Subject key identifier: 75:C5:AB:A9:98:4B:C7:06:E8:21:A5:17:87:BB:B2:C6:EA:CF:DD:67
Authority key identifier: 02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
Certificate issuer: /CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Certificate serial: 019C438FE092EE68DA1FED7509B90C04894C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
Manifest number: 0848
Signing time: Mon 09 Feb 2026 18:00:28 +0000
Manifest this update: Mon 09 Feb 2026 18:00:28 +0000
Manifest next update: Tue 10 Feb 2026 18:00:28 +0000
Files and hashes: 1: AslIBM_MfvJY1G_DJMFnZEdgPvY.crl (hash: kcw4oyEWQ241uTvJ5fiESHldG/F4RzTTf33HHjhU3PM=)
2: uBdDrrOh7lGlr8QcDfUoYU2av_k.roa (hash: Cw4sLfBdvB1lBMMzs14p2jJuylUh6bwsF0YFotyYbaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Feb 2026 15:10:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:43:8f:e0:92:ee:68:da:1f:ed:75:09:b9:0c:04:89:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02c94804cfcc7ef258d46fc324c1676447603ef6
Validity
Not Before: Feb 9 18:00:28 2026 GMT
Not After : Feb 10 18:00:28 2026 GMT
Subject: CN=75c5aba9984bc706e821a51787bbb2c6eacfdd67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:ed:90:01:7c:20:ee:0a:ca:50:4c:0d:19:
93:21:46:d8:1f:ba:a8:cc:0d:d6:8f:71:51:54:1d:
2d:3c:f4:2e:20:ee:12:cf:5d:dc:fa:38:b5:9b:6f:
e8:45:e4:54:d7:ee:26:f6:02:43:c8:a5:95:61:88:
76:bf:69:19:b1:d3:47:d9:f3:bc:81:48:a1:d6:7f:
b3:29:42:56:46:08:fe:76:1f:72:8e:34:2f:82:b6:
cd:3a:c3:c9:8d:93:72:27:e9:f0:56:52:55:77:16:
a9:73:4b:66:cc:64:22:6d:7f:aa:b5:6b:07:f4:66:
3c:96:73:df:ec:cd:25:98:34:27:cf:5c:ce:a0:ad:
63:3a:e4:79:d8:b2:36:eb:da:c0:c8:96:3f:e2:bd:
34:7f:f6:1c:79:ef:14:1f:e1:ff:0a:df:31:06:c0:
eb:b7:ee:62:90:47:7e:37:c5:0e:7e:33:c8:e6:92:
fa:4c:8a:45:4d:fb:37:1d:64:01:40:94:bf:aa:94:
27:4a:e3:34:21:43:79:41:ea:15:11:42:d9:1f:56:
63:e1:ed:57:fe:21:4e:21:13:f6:3a:5c:7e:75:6b:
ad:07:de:f0:7d:f5:a2:4a:6d:ae:73:4c:98:df:c7:
91:42:57:52:a2:8a:0f:c3:c4:91:25:d4:23:04:19:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:C5:AB:A9:98:4B:C7:06:E8:21:A5:17:87:BB:B2:C6:EA:CF:DD:67
X509v3 Authority Key Identifier:
keyid:02:C9:48:04:CF:CC:7E:F2:58:D4:6F:C3:24:C1:67:64:47:60:3E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AslIBM_MfvJY1G_DJMFnZEdgPvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/85ff0a-22ab-4190-9b73-259be9fbc1f1/1/AslIBM_MfvJY1G_DJMFnZEdgPvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:18:66:03:fb:e2:6c:90:2e:2b:b0:77:a0:fd:6f:61:d4:3a:
f5:c8:94:1d:15:d3:7b:52:20:3f:90:48:4d:a4:bb:0d:7b:99:
6b:17:20:fa:28:ca:f4:6f:4b:d5:45:c8:8d:2a:ea:7c:64:bd:
43:80:bb:56:00:81:20:5f:bb:9b:23:db:d8:f3:55:16:94:94:
13:14:1c:62:e5:ba:e0:04:df:7a:d7:5a:54:20:95:5e:f6:11:
27:b4:6f:0c:6d:16:17:b1:9d:27:b2:b0:b7:2b:64:d8:39:a9:
58:7b:12:94:a4:5b:5c:39:dc:dd:12:ae:9f:47:ac:10:95:35:
ec:14:30:e6:95:2a:64:c2:1c:04:b2:ce:bb:91:4d:bb:4b:43:
ff:b5:4e:32:52:19:27:2b:95:7c:67:63:91:5b:0b:cb:5f:12:
7b:6e:75:1e:64:a8:2f:24:11:bd:dd:78:3b:6a:f9:39:15:7d:
8a:06:2b:46:78:a1:d3:fe:35:79:39:f7:22:42:9d:1b:f2:0d:
f0:5b:d1:bb:8d:02:e2:63:6f:ab:ee:6d:ba:0b:fc:43:a7:65:
8b:fb:25:fb:2c:62:ae:74:ef:3d:09:72:33:04:6f:35:ba:e1:
fb:4f:66:89:8b:5f:65:75:07:ac:21:d5:57:93:c5:b1:27:23:
d0:77:61:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZxDj+CS7mjaH+11CbkMBIlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyYzk0ODA0Y2ZjYzdlZjI1OGQ0NmZjMzI0YzE2NzY0NDc2
MDNlZjYwHhcNMjYwMjA5MTgwMDI4WhcNMjYwMjEwMTgwMDI4WjAzMTEwLwYDVQQD
Eyg3NWM1YWJhOTk4NGJjNzA2ZTgyMWE1MTc4N2JiYjJjNmVhY2ZkZDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsrtkAF8IO4KylBMDRmTIUbYH7qo
zA3Wj3FRVB0tPPQuIO4Sz13c+ji1m2/oReRU1+4m9gJDyKWVYYh2v2kZsdNH2fO8
gUih1n+zKUJWRgj+dh9yjjQvgrbNOsPJjZNyJ+nwVlJVdxapc0tmzGQibX+qtWsH
9GY8lnPf7M0lmDQnz1zOoK1jOuR52LI269rAyJY/4r00f/Ycee8UH+H/Ct8xBsDr
t+5ikEd+N8UOfjPI5pL6TIpFTfs3HWQBQJS/qpQnSuM0IUN5QeoVEULZH1Zj4e1X
/iFOIRP2Olx+dWutB97wffWiSm2uc0yY38eRQldSoooPw8SRJdQjBBnKkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHXFq6mYS8cG6CGlF4e7ssbqz91nMB8GA1UdIwQY
MBaAFALJSATPzH7yWNRvwyTBZ2RHYD72MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMt
MjU5YmU5ZmJjMWYxLzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84NWZmMGEtMjJhYi00MTkwLTliNzMtMjU5YmU5ZmJjMWYx
LzEvQXNsSUJNX01mdkpZMUdfREpNRm5aRWRnUHZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhhmA/vi
bJAuK7B3oP1vYdQ69ciUHRXTe1IgP5BITaS7DXuZaxcg+ijK9G9L1UXIjSrqfGS9
Q4C7VgCBIF+7myPb2PNVFpSUExQcYuW64ATfetdaVCCVXvYRJ7RvDG0WF7GdJ7Kw
tytk2DmpWHsSlKRbXDnc3RKun0esEJU17BQw5pUqZMIcBLLOu5FNu0tD/7VOMlIZ
JyuVfGdjkVsLy18Se251HmSoLyQRvd14O2r5ORV9igYrRnih0/41eTn3IkKdG/IN
8FvRu40C4mNvq+5tugv8Q6dli/sl+yxirnTvPQlyMwRvNbrh+09miYtfZXUHrCHV
V5PFsScj0HdhRg==
-----END CERTIFICATE-----
Generated at Mon Feb 9 20:56:08 2026 by rpki-client