This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json) Hash identifier: XVnD0WfeAhnbysWhllirCnwIOqvbu9RNVzuoMUVBB80= Subject key identifier: BA:05:83:7A:AF:10:2D:A1:70:19:AF:20:F1:F0:52:11:21:20:3A:71 Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a Certificate serial: 019C427D663DC95293CB28AD0B01F50967A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft Manifest number: 180E Signing time: Mon 09 Feb 2026 13:00:40 +0000 Manifest this update: Mon 09 Feb 2026 13:00:40 +0000 Manifest next update: Tue 10 Feb 2026 13:00:40 +0000 Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: f652V4uT2asan4C0pd2FNW2AG9Uo+C7lbisKMPFYQeg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:66:3d:c9:52:93:cb:28:ad:0b:01:f5:09:67:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a Validity Not Before: Feb 9 13:00:40 2026 GMT Not After : Feb 10 13:00:40 2026 GMT Subject: CN=ba05837aaf102da17019af20f1f0521121203a71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:01:dd:d1:76:be:d8:65:dd:e5:ef:2d:1e:0f: 76:eb:b7:6b:ad:58:0f:45:23:25:86:89:ab:ed:ed: d0:a5:63:0d:17:49:3c:92:b5:8a:fe:50:5a:f9:19: 24:a4:fc:c9:2b:7f:63:ab:db:77:65:d6:cb:74:cc: 13:c6:bf:76:d3:48:67:02:43:c9:e3:a3:06:d5:cd: c6:bb:08:71:99:01:5e:43:b1:5c:49:8a:30:11:9e: 87:0e:2f:5e:30:63:ce:f7:37:d9:22:56:72:19:91: 98:c2:d5:17:46:ab:26:6a:b0:58:8f:21:10:8a:94: e9:75:cd:35:cb:8f:0c:e4:7d:41:32:4a:fb:10:d7: ba:fa:d1:bc:00:b6:fc:d9:1a:a1:5c:ec:dd:4f:87: 3c:ce:0b:ea:91:c2:41:91:d2:08:2b:a6:8b:3e:a6: b3:c6:1b:f4:9c:9f:28:40:d5:65:87:c3:b3:43:fe: b3:33:bd:69:6d:d3:51:be:e3:48:ba:6b:6e:98:34: 7f:bb:50:07:0b:13:74:d9:63:aa:14:33:49:42:88: ea:b5:2f:f6:dc:2b:b2:21:0d:bd:24:07:6e:3b:ef: 2b:78:55:8e:e6:a9:9e:fa:e3:9b:5a:5c:f8:1c:c0: 59:7b:db:bc:35:7e:d8:11:f8:fe:27:b5:71:7c:3d: 2f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:05:83:7A:AF:10:2D:A1:70:19:AF:20:F1:F0:52:11:21:20:3A:71 X509v3 Authority Key Identifier: keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:b7:4e:15:91:bc:05:ba:70:a9:84:51:18:d6:9b:3f:7d:85: 34:7f:f5:17:49:66:18:61:2b:68:4e:cb:f9:3b:c6:68:36:06: 31:79:43:40:af:36:56:89:e8:0d:6c:8f:3d:34:ed:d9:7b:b0: 3a:8b:23:4a:0c:f1:5f:2c:43:4e:b7:78:5c:72:70:33:20:fb: 6d:53:db:24:e5:b5:91:74:df:14:e0:0f:c9:1b:a4:d2:86:15: 49:54:93:57:d2:e7:9f:ce:90:8f:f9:f5:10:bb:37:56:45:a5: df:88:eb:12:89:df:03:fa:67:01:8b:53:3f:d1:7c:c0:18:0d: fe:bd:72:b2:67:38:28:7e:e1:60:06:72:26:08:fe:14:52:1f: cc:9c:b0:13:7d:f0:ab:40:b1:b2:80:87:92:aa:2f:6f:48:d1: 79:57:4a:29:09:bd:84:0f:b9:ee:f8:40:9e:aa:6e:44:6c:98: 3e:71:5f:ae:93:50:88:27:cd:2a:55:7b:e3:c3:a8:6d:f0:8d: e3:3e:61:14:71:9e:1c:bd:00:79:77:58:25:0b:f4:be:0d:17: 66:01:94:f5:a2:5d:74:62:7a:7f:da:ab:19:8f:74:90:be:1d: 0a:13:70:a9:ac:fd:30:14:54:44:d0:17:7b:0e:92:47:9b:62: 8c:d9:93:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfWY9yVKTyyitCwH1CWemMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkYTY2OWI2ZDVlMjI0MDUwMTdhZDM1OTg3Y2M1N2FjOTYy MzljOWEwHhcNMjYwMjA5MTMwMDQwWhcNMjYwMjEwMTMwMDQwWjAzMTEwLwYDVQQD EyhiYTA1ODM3YWFmMTAyZGExNzAxOWFmMjBmMWYwNTIxMTIxMjAzYTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAHd0Xa+2GXd5e8tHg9267drrVgP RSMlhomr7e3QpWMNF0k8krWK/lBa+RkkpPzJK39jq9t3ZdbLdMwTxr9200hnAkPJ 46MG1c3GuwhxmQFeQ7FcSYowEZ6HDi9eMGPO9zfZIlZyGZGYwtUXRqsmarBYjyEQ ipTpdc01y48M5H1BMkr7ENe6+tG8ALb82RqhXOzdT4c8zgvqkcJBkdIIK6aLPqaz xhv0nJ8oQNVlh8OzQ/6zM71pbdNRvuNIumtumDR/u1AHCxN02WOqFDNJQojqtS/2 3CuyIQ29JAduO+8reFWO5qme+uObWlz4HMBZe9u8NX7YEfj+J7VxfD0vQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLoFg3qvEC2hcBmvIPHwUhEhIDpxMB8GA1UdIwQY MBaAFP2mabbV4iQFAXrTWYfMV6yWI5yaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lY2NlODUtZTYxZi00ODIwLWFiMzYt ODlkM2NmNmM3MDI3LzEvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC9lY2NlODUtZTYxZi00ODIwLWFiMzYtODlkM2NmNmM3MDI3 LzEvX2FacHR0WGlKQVVCZXROWmg4eFhySllqbkpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjbdOFZG8 BbpwqYRRGNabP32FNH/1F0lmGGEraE7L+TvGaDYGMXlDQK82VonoDWyPPTTt2Xuw OosjSgzxXyxDTrd4XHJwMyD7bVPbJOW1kXTfFOAPyRuk0oYVSVSTV9Lnn86Qj/n1 ELs3VkWl34jrEonfA/pnAYtTP9F8wBgN/r1ysmc4KH7hYAZyJgj+FFIfzJywE33w q0CxsoCHkqovb0jReVdKKQm9hA+57vhAnqpuRGyYPnFfrpNQiCfNKlV748OobfCN 4z5hFHGeHL0AeXdYJQv0vg0XZgGU9aJddGJ6f9qrGY90kL4dChNwqaz9MBRURNAX ew6SR5tijNmTHQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:43 2026 by rpki-client