This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json) Hash identifier: AxcKlk+dv/0tJ7tYen/hdNaQ3KrQvJoJjGU2cLJMxc8= Subject key identifier: F4:82:6D:94:C2:88:C1:59:5D:6A:B7:B5:DB:3D:04:49:B2:4C:20:D3 Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff Certificate serial: 019C43FDBE7A63706108FF91CC0FDE1D0F98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft Manifest number: 0C7D Signing time: Mon 09 Feb 2026 20:00:28 +0000 Manifest this update: Mon 09 Feb 2026 20:00:28 +0000 Manifest next update: Tue 10 Feb 2026 20:00:28 +0000 Files and hashes: 1: IXySvGWwyIxI8nEtVddBkpUSzNs.roa (hash: PeXAtaHvOlNgD7t5U7ac8b5w1Raf72aXS6L9wTOS/m0=) 2: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: Hzw6oVZvlwL0VpWZgcLLcENOH7eVO4XxN1ME4FPF0XY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:fd:be:7a:63:70:61:08:ff:91:cc:0f:de:1d:0f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff Validity Not Before: Feb 9 20:00:28 2026 GMT Not After : Feb 10 20:00:28 2026 GMT Subject: CN=f4826d94c288c1595d6ab7b5db3d0449b24c20d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:5e:04:c0:20:e5:02:8c:b9:7b:d6:6f:52: 17:38:17:2f:77:b7:b1:3d:4e:d8:9a:dd:fa:2d:89: 22:6b:9e:cc:51:86:d0:78:49:68:17:5e:d3:a3:82: 78:3c:98:ab:7f:b1:f5:0b:1c:9c:6e:31:9e:a2:03: fc:fd:a7:4e:15:18:a2:35:0c:94:76:f0:13:3d:0b: 92:96:6d:70:68:d7:a8:d1:db:17:87:93:24:09:0e: 2c:4b:4c:af:9d:37:4f:a4:cc:a0:4c:51:bb:ea:48: b4:0f:35:55:21:87:fc:31:e9:32:d9:c8:d1:b4:70: 58:c1:cf:8e:b6:e5:76:66:c4:b5:05:42:fe:bc:88: fe:81:42:5a:d5:9b:74:ff:c8:8a:7f:11:a7:e4:93: 96:78:74:14:62:14:ba:4b:24:ab:6c:b1:25:7f:48: a9:25:ee:3b:ed:cb:21:1a:a5:34:d7:52:e6:f0:f5: b0:98:c6:55:26:79:77:58:68:2e:d6:1d:df:7a:59: 0b:fa:c6:88:72:e0:7e:8d:c2:7c:18:70:0f:02:b2: 11:da:0e:55:6b:52:d5:6c:5a:37:80:e5:0e:aa:43: d0:09:a4:f8:6b:d1:5f:0a:e5:38:0f:dd:23:f4:c6: 9f:9a:ae:76:4c:8f:3b:d7:79:9c:9f:39:f0:89:75: 9c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:82:6D:94:C2:88:C1:59:5D:6A:B7:B5:DB:3D:04:49:B2:4C:20:D3 X509v3 Authority Key Identifier: keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:c3:d3:8e:1a:c9:9d:fc:ac:59:5e:0f:35:fe:dc:8a:04:15: 50:cd:e2:77:40:d6:6d:47:85:2f:cc:3d:31:52:cb:19:30:22: 45:cf:9b:41:d8:74:17:8e:a2:33:fd:f9:c5:d4:0b:2c:99:d0: 05:70:3a:69:20:2f:ce:2c:f3:e4:42:0b:13:53:9d:6e:c2:04: a7:62:fe:e7:e2:90:9f:2f:46:c8:25:84:16:6a:58:e3:17:09: 56:99:d8:60:42:fe:f1:d9:3d:73:a0:67:a2:31:d8:4c:47:5b: 27:44:d2:17:9f:e8:77:5d:74:03:2b:24:73:09:ad:06:d8:c2: 82:a3:79:dd:ad:3e:c7:3b:73:8d:f7:fb:5a:5b:71:00:69:df: 7f:95:99:af:12:75:fd:2f:1f:8b:58:2e:03:fe:88:62:ff:1a: 62:2d:6b:3a:c9:d5:46:6e:de:a7:61:c5:2a:62:64:1e:f8:17: 7b:38:b1:74:d1:41:53:4d:87:3f:7f:fd:6e:9e:95:69:72:34: 7f:6c:82:50:dd:22:71:b4:8b:89:89:29:c1:1e:0c:10:af:36: 27:aa:1c:79:78:7f:c1:29:d9:33:d2:94:a3:6c:de:33:25:2a: d4:2e:ba:9f:39:97:e3:39:f8:92:25:b2:ca:30:3e:a8:07:f1: a5:6f:d7:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxD/b56Y3BhCP+RzA/eHQ+YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NjU5NmIzM2I0OGMyOTM1ZGQxMjlmYWM2ZTYxZGJjMDA4 MTkzZmYwHhcNMjYwMjA5MjAwMDI4WhcNMjYwMjEwMjAwMDI4WjAzMTEwLwYDVQQD EyhmNDgyNmQ5NGMyODhjMTU5NWQ2YWI3YjVkYjNkMDQ0OWIyNGMyMGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wZeBMAg5QKMuXvWb1IXOBcvd7ex PU7Ymt36LYkia57MUYbQeEloF17To4J4PJirf7H1CxycbjGeogP8/adOFRiiNQyU dvATPQuSlm1waNeo0dsXh5MkCQ4sS0yvnTdPpMygTFG76ki0DzVVIYf8Meky2cjR tHBYwc+OtuV2ZsS1BUL+vIj+gUJa1Zt0/8iKfxGn5JOWeHQUYhS6SySrbLElf0ip Je477cshGqU011Lm8PWwmMZVJnl3WGgu1h3felkL+saIcuB+jcJ8GHAPArIR2g5V a1LVbFo3gOUOqkPQCaT4a9FfCuU4D90j9Mafmq52TI8713mcnznwiXWcgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSCbZTCiMFZXWq3tds9BEmyTCDTMB8GA1UdIwQY MBaAFGhllrM7SMKTXdEp+sbmHbwAgZP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEt NDUxY2RhMDc3ZDg2LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82OS9jMDY5ZjEtOWY4Mi00ZDVhLTg2MzEtNDUxY2RhMDc3ZDg2 LzEvYUdXV3N6dEl3cE5kMFNuNnh1WWR2QUNCa184LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn8PTjhrJ nfysWV4PNf7cigQVUM3id0DWbUeFL8w9MVLLGTAiRc+bQdh0F46iM/35xdQLLJnQ BXA6aSAvzizz5EILE1OdbsIEp2L+5+KQny9GyCWEFmpY4xcJVpnYYEL+8dk9c6Bn ojHYTEdbJ0TSF5/od110AyskcwmtBtjCgqN53a0+xztzjff7WltxAGnff5WZrxJ1 /S8fi1guA/6IYv8aYi1rOsnVRm7ep2HFKmJkHvgXezixdNFBU02HP3/9bp6VaXI0 f2yCUN0icbSLiYkpwR4MEK82J6oceXh/wSnZM9KUo2zeMyUq1C66nzmX4zn4kiWy yjA+qAfxpW/Xtw== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:38 2026 by rpki-client