This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft File: aYjEvrrTj55yR6yyj7Xh5c72WIs.mft (raw, json) Hash identifier: dvjL+oPdbZSnE7dr/+29nCROwWSStj5j0YXtOm2tCag= Subject key identifier: 7C:01:4E:2E:2E:3D:C7:64:8E:3A:F9:39:A7:04:91:17:D6:3E:C2:11 Authority key identifier: 69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B Certificate issuer: /CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b Certificate serial: 019C432206F60B4AB4BD03CE7F319428D795 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft Manifest number: 49 Signing time: Mon 09 Feb 2026 16:00:29 +0000 Manifest this update: Mon 09 Feb 2026 16:00:29 +0000 Manifest next update: Tue 10 Feb 2026 16:00:29 +0000 Files and hashes: 1: aYjEvrrTj55yR6yyj7Xh5c72WIs.crl (hash: rV/xujsbYd/8fspKMabh4RHfmEWJE4cDrm+acxzwaNE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:06:f6:0b:4a:b4:bd:03:ce:7f:31:94:28:d7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6988c4bebad38f9e7247acb28fb5e1e5cef6588b Validity Not Before: Feb 9 16:00:29 2026 GMT Not After : Feb 10 16:00:29 2026 GMT Subject: CN=7c014e2e2e3dc7648e3af939a7049117d63ec211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:75:9f:46:b2:13:de:65:96:e2:ea:98:4d: b7:be:20:58:ca:c8:ab:a3:5e:27:87:06:05:3a:98: 83:0e:e0:7c:f7:f0:72:ce:c3:00:ab:bb:16:e3:10: 84:ac:9f:0e:a2:48:36:91:fe:55:4d:15:e1:cc:2a: 31:35:9b:33:82:7c:83:86:29:83:3f:d2:62:19:e7: db:ab:8f:56:df:ce:de:50:77:69:92:c1:57:54:f2: 1b:12:5a:15:4e:12:c7:aa:5a:a0:ff:fe:96:7e:6d: 69:1b:a5:f2:20:44:39:8f:38:fd:f7:1a:a9:4b:8e: d9:8c:69:ed:19:83:34:53:b3:f5:7b:80:74:70:c1: 2d:2b:20:2d:8a:aa:99:4a:5f:82:2b:ea:b5:5a:5e: ab:76:cf:8c:16:e7:07:81:7c:a9:6a:a9:e9:b9:c7: dc:a1:85:5b:cf:68:86:c4:0f:ff:dd:16:c4:c9:39: 26:16:b3:40:1c:84:46:2e:4e:1f:70:07:70:84:4a: f4:2f:ef:35:72:21:5f:36:93:03:ff:76:05:04:bb: 44:49:0a:6a:bf:c0:eb:8f:98:2a:e6:e5:6f:7d:6f: 4b:40:9c:b5:63:33:4b:66:09:85:24:7d:ff:f7:09: 97:3f:85:c0:c0:93:7d:a7:dc:79:fb:78:69:c4:79: 4f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:01:4E:2E:2E:3D:C7:64:8E:3A:F9:39:A7:04:91:17:D6:3E:C2:11 X509v3 Authority Key Identifier: keyid:69:88:C4:BE:BA:D3:8F:9E:72:47:AC:B2:8F:B5:E1:E5:CE:F6:58:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYjEvrrTj55yR6yyj7Xh5c72WIs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/51cdfe-2929-4630-9f8b-a7ac1190a707/1/aYjEvrrTj55yR6yyj7Xh5c72WIs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:06:3a:1b:16:9b:43:29:04:cb:76:68:aa:33:03:fa:c0:6a: c3:44:15:55:3a:bb:3d:77:a5:64:46:7e:d3:e5:d3:e1:87:ef: 4c:b2:f9:89:43:6f:26:7b:1b:f4:da:f1:a5:08:cd:89:3e:28: a1:b1:1e:aa:69:83:7e:d6:8d:8f:1f:64:6a:e6:39:3a:d2:28: b5:fa:5c:67:a3:c1:f5:af:ef:a4:ad:58:db:57:c8:2f:23:d1: 9e:34:c1:97:f1:bd:4c:c4:1b:60:a8:c3:33:4e:ac:29:e9:e4: 26:da:28:9b:5e:ab:20:b3:2b:80:ad:23:92:3e:83:ee:e7:16: 8f:4f:b3:a0:aa:87:93:46:c0:ac:9e:89:9c:30:d5:83:c8:1b: 04:a1:b6:0d:d0:46:f3:61:e0:89:cd:c9:a0:1f:2b:fe:51:c0: 3c:c6:d8:6d:2b:9d:e3:c0:10:64:e9:80:c6:75:2a:64:8c:f7: 89:30:b6:8a:27:54:88:b0:61:47:8b:c4:3d:e6:9a:0c:dc:0c: 22:40:dc:9b:0a:3f:a5:63:71:9d:85:9b:6d:50:70:b5:bc:cd: 24:83:33:39:27:ee:3e:4b:b0:74:3c:97:bd:d7:18:ec:09:13: bb:64:58:89:c3:fe:cb:ce:b3:93:55:67:99:88:bc:58:b6:99: 87:9d:59:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgb2C0q0vQPOfzGUKNeVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ODhjNGJlYmFkMzhmOWU3MjQ3YWNiMjhmYjVlMWU1Y2Vm NjU4OGIwHhcNMjYwMjA5MTYwMDI5WhcNMjYwMjEwMTYwMDI5WjAzMTEwLwYDVQQD Eyg3YzAxNGUyZTJlM2RjNzY0OGUzYWY5MzlhNzA0OTExN2Q2M2VjMjExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD51n0ayE95lluLqmE23viBYysir o14nhwYFOpiDDuB89/ByzsMAq7sW4xCErJ8Ookg2kf5VTRXhzCoxNZszgnyDhimD P9JiGefbq49W387eUHdpksFXVPIbEloVThLHqlqg//6Wfm1pG6XyIEQ5jzj99xqp S47ZjGntGYM0U7P1e4B0cMEtKyAtiqqZSl+CK+q1Wl6rds+MFucHgXypaqnpucfc oYVbz2iGxA//3RbEyTkmFrNAHIRGLk4fcAdwhEr0L+81ciFfNpMD/3YFBLtESQpq v8Drj5gq5uVvfW9LQJy1YzNLZgmFJH3/9wmXP4XAwJN9p9x5+3hpxHlP9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHwBTi4uPcdkjjr5OacEkRfWPsIRMB8GA1UdIwQY MBaAFGmIxL6604+eckesso+14eXO9liLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVlqRXZyclRqNTV5UjZ5eWo3WGg1YzcyV0lzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny81MWNkZmUtMjkyOS00NjMwLTlmOGIt YTdhYzExOTBhNzA3LzEvYVlqRXZyclRqNTV5UjZ5eWo3WGg1YzcyV0lzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny81MWNkZmUtMjkyOS00NjMwLTlmOGItYTdhYzExOTBhNzA3 LzEvYVlqRXZyclRqNTV5UjZ5eWo3WGg1YzcyV0lzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANAY6Gxab QykEy3ZoqjMD+sBqw0QVVTq7PXelZEZ+0+XT4YfvTLL5iUNvJnsb9NrxpQjNiT4o obEeqmmDftaNjx9kauY5OtIotfpcZ6PB9a/vpK1Y21fILyPRnjTBl/G9TMQbYKjD M06sKenkJtoom16rILMrgK0jkj6D7ucWj0+zoKqHk0bArJ6JnDDVg8gbBKG2DdBG 82Hgic3JoB8r/lHAPMbYbSud48AQZOmAxnUqZIz3iTC2iidUiLBhR4vEPeaaDNwM IkDcmwo/pWNxnYWbbVBwtbzNJIMzOSfuPkuwdDyXvdcY7AkTu2RYicP+y86zk1Vn mYi8WLaZh51ZZA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:27 2026 by rpki-client