This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json) Hash identifier: UUGa2du7Mi+0jHHVTd1C9czkbt4JQ75NBgQ9tQob2mo= Subject key identifier: 28:66:EC:F0:BA:75:F9:3F:8F:38:39:04:E8:10:4F:C9:71:94:50:6D Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6 Certificate serial: 019C41A20EE1E7F2190675F41CB0D0ED0F85 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft Manifest number: 122C Signing time: Mon 09 Feb 2026 09:01:05 +0000 Manifest this update: Mon 09 Feb 2026 09:01:05 +0000 Manifest next update: Tue 10 Feb 2026 09:01:05 +0000 Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 502/G8gVevCaXDekdT0FGklVgnINCvQvG7OCRirLuLU=) 2: Jp1OMn26Xbl5QB8cFqtJzyjK7b8.roa (hash: YCd6cvHJBCdabpC8lbHyTL8mL5CdagCiCJRtT8E/huA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a2:0e:e1:e7:f2:19:06:75:f4:1c:b0:d0:ed:0f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00933848021d3888860dadf7188094d792af6ae6 Validity Not Before: Feb 9 09:01:05 2026 GMT Not After : Feb 10 09:01:05 2026 GMT Subject: CN=2866ecf0ba75f93f8f383904e8104fc97194506d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:62:30:0f:54:c0:de:bd:33:0b:08:4d:30:88: 23:fe:b8:c1:4e:4c:c8:76:f9:f0:26:82:f0:94:b9: 90:7c:04:4a:b2:81:eb:ce:0a:5a:c6:c2:9c:bf:67: f5:d7:b0:06:fd:87:01:a5:2a:c2:e7:b5:b4:f2:a2: 24:ed:e6:16:ca:c2:a1:25:54:93:07:7b:f3:41:4b: 7a:42:9a:78:f8:10:d5:ff:f7:c9:f3:1d:82:74:c7: 52:ea:9f:75:82:2a:5e:25:f2:b7:aa:d4:83:7d:7b: 51:dd:ea:17:3f:2a:53:1e:b2:76:c3:ff:e0:71:0d: c4:24:d2:06:f0:48:a9:db:cd:17:30:05:89:bb:f3: ca:cd:30:21:d4:e6:73:b3:f5:44:be:65:a1:f2:4b: 87:bb:db:c6:26:43:7c:e1:32:1a:e3:f8:02:05:39: d3:26:53:93:03:47:37:a0:03:91:8c:68:57:d2:b9: 72:1b:2b:82:03:e5:9e:6c:d8:95:fc:94:67:2b:a1: d2:fa:8c:1d:b1:ac:21:b7:66:ce:d2:7e:2c:ab:22: 10:f7:a4:09:c6:1c:71:b5:00:4d:89:d9:76:cd:4b: bb:d0:da:ca:77:c2:6a:e5:cb:ce:10:13:82:b5:b7: 8a:a9:6c:1f:30:48:f8:aa:3e:dd:cb:50:89:c5:0e: cd:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:66:EC:F0:BA:75:F9:3F:8F:38:39:04:E8:10:4F:C9:71:94:50:6D X509v3 Authority Key Identifier: keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:f1:1e:cb:d9:20:64:44:06:dd:36:e0:e0:4a:71:d4:73:fe: e8:c4:1c:75:80:76:4e:5e:2b:d4:14:ea:81:f1:64:d5:e5:ab: 35:3a:f8:fd:d9:e3:f9:9e:06:6a:1c:dc:5e:df:5f:fb:82:63: 21:a4:05:10:bb:fe:b6:a3:8d:9f:0d:be:7e:27:cc:3c:e3:9b: df:b7:93:38:5e:3d:84:7f:ff:4c:26:a8:54:b3:f7:cb:06:74: 69:d3:fa:3f:49:e5:e2:6e:73:71:72:28:67:0a:bb:fb:5b:c2: d9:d1:7f:22:75:e7:36:08:1f:b1:2a:9b:1a:cc:18:98:b0:e1: cf:de:f4:70:78:08:2e:1d:18:e2:e2:41:99:e6:c8:73:c0:a8: 28:26:a0:91:10:e9:ac:f9:22:46:08:6d:ee:d8:da:7f:d3:65: f4:3c:cb:26:c2:92:a9:57:e5:2d:74:35:db:0a:d9:ba:c4:48: dd:fc:ca:c2:e4:7f:ba:3e:09:26:74:b2:28:af:32:c7:46:82: 47:e6:a1:6f:60:b4:28:c4:99:5d:51:89:f4:df:dd:cb:ea:b3: cd:7c:ed:71:c4:db:09:9b:8e:c1:61:58:6a:33:74:47:86:47: d2:c3:55:12:2e:ac:89:13:27:dc:c3:f5:d2:84:f1:ac:cf:37: 41:60:50:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBog7h5/IZBnX0HLDQ7Q+FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTMzODQ4MDIxZDM4ODg4NjBkYWRmNzE4ODA5NGQ3OTJh ZjZhZTYwHhcNMjYwMjA5MDkwMTA1WhcNMjYwMjEwMDkwMTA1WjAzMTEwLwYDVQQD EygyODY2ZWNmMGJhNzVmOTNmOGYzODM5MDRlODEwNGZjOTcxOTQ1MDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWIwD1TA3r0zCwhNMIgj/rjBTkzI dvnwJoLwlLmQfARKsoHrzgpaxsKcv2f117AG/YcBpSrC57W08qIk7eYWysKhJVST B3vzQUt6Qpp4+BDV//fJ8x2CdMdS6p91gipeJfK3qtSDfXtR3eoXPypTHrJ2w//g cQ3EJNIG8Eip280XMAWJu/PKzTAh1OZzs/VEvmWh8kuHu9vGJkN84TIa4/gCBTnT JlOTA0c3oAORjGhX0rlyGyuCA+WebNiV/JRnK6HS+owdsawht2bO0n4sqyIQ96QJ xhxxtQBNidl2zUu70NrKd8Jq5cvOEBOCtbeKqWwfMEj4qj7dy1CJxQ7NVQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFChm7PC6dfk/jzg5BOgQT8lxlFBtMB8GA1UdIwQY MBaAFACTOEgCHTiIhg2t9xiAlNeSr2rmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTkt OTdmMzliYjEzMzJkLzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82My84Njc2MmItYWE2MS00ODRhLWIxNTktOTdmMzliYjEzMzJk LzEvQUpNNFNBSWRPSWlHRGEzM0dJQ1UxNUt2YXVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsvEey9kg ZEQG3Tbg4Epx1HP+6MQcdYB2Tl4r1BTqgfFk1eWrNTr4/dnj+Z4GahzcXt9f+4Jj IaQFELv+tqONnw2+fifMPOOb37eTOF49hH//TCaoVLP3ywZ0adP6P0nl4m5zcXIo Zwq7+1vC2dF/InXnNggfsSqbGswYmLDhz970cHgILh0Y4uJBmebIc8CoKCagkRDp rPkiRght7tjaf9Nl9DzLJsKSqVflLXQ12wrZusRI3fzKwuR/uj4JJnSyKK8yx0aC R+ahb2C0KMSZXVGJ9N/dy+qzzXztccTbCZuOwWFYajN0R4ZH0sNVEi6siRMn3MP1 0oTxrM83QWBQaA== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:55 2026 by rpki-client