This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft File: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft (raw, json) Hash identifier: Vra7VNTD87eGksCuPP3O4LZS5Vgkjg0q0BIrVJF/7mY= Subject key identifier: 05:B3:FF:22:DF:CD:D2:28:97:E6:2E:C4:41:54:A3:C9:1B:3E:18:94 Authority key identifier: 69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 Certificate issuer: /CN=690ae175fbe63b0e930469097c9492d42ed79249 Certificate serial: 019C42EB567A47F2A5E7A267B0D8C5A99E6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft Manifest number: 01F8 Signing time: Mon 09 Feb 2026 15:00:45 +0000 Manifest this update: Mon 09 Feb 2026 15:00:45 +0000 Manifest next update: Tue 10 Feb 2026 15:00:45 +0000 Files and hashes: 1: XCvwouQb8EHjnYaba0fCxCrBwa0.roa (hash: 7OCxz9+g4uYWDzH37RsGVsHV2ZDZWkC8HmqPtc1bvkQ=) 2: aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl (hash: j9KCJuejoOhMbI8u1J7aVFVXJacEIzuAe0RiCzNlXMA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:56:7a:47:f2:a5:e7:a2:67:b0:d8:c5:a9:9e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=690ae175fbe63b0e930469097c9492d42ed79249 Validity Not Before: Feb 9 15:00:45 2026 GMT Not After : Feb 10 15:00:45 2026 GMT Subject: CN=05b3ff22dfcdd22897e62ec44154a3c91b3e1894 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0c:82:07:1e:dd:21:83:55:3d:1b:fd:c8:b5: 6d:58:80:b6:6f:8a:e5:43:cc:7d:aa:b6:6d:a3:e4: 10:cf:1d:96:1c:70:28:99:4e:f0:f2:8a:ef:8b:24: a3:1a:15:59:22:2b:8e:be:d7:03:6f:81:9f:45:cc: 6a:6a:92:34:8b:5b:46:6d:58:29:a5:24:17:a6:76: 87:90:11:19:fe:ff:c5:70:b8:cc:c9:c9:15:a9:0c: 8a:85:9f:e6:4e:32:66:28:5e:7a:8b:07:bb:ae:76: 91:28:e4:69:5f:04:e8:83:a4:30:86:0f:d9:50:06: 4e:97:bb:c6:bd:75:c5:b5:d0:46:bb:23:74:f5:f8: 9b:8f:3b:d2:1b:27:52:3f:75:ee:f8:ea:19:d5:62: c8:0b:3b:4f:fa:3f:ba:01:2d:37:55:28:8f:02:53: aa:bd:4a:b3:98:87:b4:b8:2e:56:e5:67:58:ad:fd: b8:5c:9e:96:6e:57:7a:4a:a1:9c:47:b4:44:03:94: 72:91:1a:26:6c:8f:36:dd:22:46:c2:0a:54:df:2e: a3:c5:c4:e7:36:47:77:12:7d:e1:17:89:e3:cc:44: 77:33:ac:79:71:90:f6:7b:89:3d:92:10:08:ed:5d: a4:e3:3a:6a:31:fb:cc:bf:02:9b:54:84:c0:cc:af: ac:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B3:FF:22:DF:CD:D2:28:97:E6:2E:C4:41:54:A3:C9:1B:3E:18:94 X509v3 Authority Key Identifier: keyid:69:0A:E1:75:FB:E6:3B:0E:93:04:69:09:7C:94:92:D4:2E:D7:92:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/b884c0-4d05-4401-9858-8a086ea94be5/1/aQrhdfvmOw6TBGkJfJSS1C7Xkkk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5e:01:8f:1d:7b:19:3a:b4:99:0a:88:10:f6:92:30:4f:64: 40:2a:70:1c:07:87:fd:4b:9e:56:23:ee:2a:c6:4d:89:74:9a: 83:fb:40:e0:ae:3c:dc:b9:22:9e:86:bd:36:36:3f:91:16:4e: 7d:3e:d6:82:82:ea:a8:8d:73:99:8d:f5:b4:9a:dc:15:bb:d8: a0:4e:73:11:c5:cc:b9:6c:5a:5b:55:16:ac:6c:f2:7a:84:37: 8b:b9:8b:3e:f1:d1:1d:cd:11:18:c2:ab:21:26:1e:e8:83:95: 0e:94:c2:f1:5a:1b:d4:5e:2d:dd:e3:00:b1:38:43:f1:b4:61: 64:5a:69:ea:b2:91:0e:41:fb:cc:29:db:fa:5b:34:79:68:fc: cb:51:5a:9c:ab:be:9c:6c:5d:67:73:a8:9d:fe:d4:ce:a7:e0: 91:f1:0f:f9:fd:a3:6c:4d:06:b5:7d:78:db:10:c1:64:e0:c5: 3e:c5:5c:f9:36:85:f1:1e:24:c4:fe:34:c5:51:b4:69:69:9a: fe:b9:cb:22:85:b9:3a:b3:7e:2c:30:c5:05:2d:61:e7:d3:d6: 1a:53:b4:59:6c:e9:c5:a2:3c:6c:8e:47:85:af:7a:c6:32:0d: 0e:03:b4:41:01:4e:f9:a8:e7:4d:dc:b3:2d:d5:4c:72:ec:1f: 3f:51:4e:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61Z6R/Kl56JnsNjFqZ5sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MGFlMTc1ZmJlNjNiMGU5MzA0NjkwOTdjOTQ5MmQ0MmVk NzkyNDkwHhcNMjYwMjA5MTUwMDQ1WhcNMjYwMjEwMTUwMDQ1WjAzMTEwLwYDVQQD EygwNWIzZmYyMmRmY2RkMjI4OTdlNjJlYzQ0MTU0YTNjOTFiM2UxODk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgyCBx7dIYNVPRv9yLVtWIC2b4rl Q8x9qrZto+QQzx2WHHAomU7w8orviySjGhVZIiuOvtcDb4GfRcxqapI0i1tGbVgp pSQXpnaHkBEZ/v/FcLjMyckVqQyKhZ/mTjJmKF56iwe7rnaRKORpXwTog6Qwhg/Z UAZOl7vGvXXFtdBGuyN09fibjzvSGydSP3Xu+OoZ1WLICztP+j+6AS03VSiPAlOq vUqzmIe0uC5W5WdYrf24XJ6Wbld6SqGcR7REA5RykRombI823SJGwgpU3y6jxcTn Nkd3En3hF4njzER3M6x5cZD2e4k9khAI7V2k4zpqMfvMvwKbVITAzK+siwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAWz/yLfzdIol+YuxEFUo8kbPhiUMB8GA1UdIwQY MBaAFGkK4XX75jsOkwRpCXyUktQu15JJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgt OGEwODZlYTk0YmU1LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9iODg0YzAtNGQwNS00NDAxLTk4NTgtOGEwODZlYTk0YmU1 LzEvYVFyaGRmdm1PdzZUQkdrSmZKU1MxQzdYa2trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh14Bjx17 GTq0mQqIEPaSME9kQCpwHAeH/UueViPuKsZNiXSag/tA4K483Lkinoa9NjY/kRZO fT7WgoLqqI1zmY31tJrcFbvYoE5zEcXMuWxaW1UWrGzyeoQ3i7mLPvHRHc0RGMKr ISYe6IOVDpTC8Vob1F4t3eMAsThD8bRhZFpp6rKRDkH7zCnb+ls0eWj8y1FanKu+ nGxdZ3Oonf7UzqfgkfEP+f2jbE0GtX142xDBZODFPsVc+TaF8R4kxP40xVG0aWma /rnLIoW5OrN+LDDFBS1h59PWGlO0WWzpxaI8bI5Hha96xjINDgO0QQFO+ajnTdyz LdVMcuwfP1FO6g== -----END CERTIFICATE-----Generated at Mon Feb 9 22:44:51 2026 by rpki-client