This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft File: AahezixTn1hQ-nAfLUWiEn3IZ1U.mft (raw, json) Hash identifier: DdWY/6SiQrq7MKCi1voxY3o1zA4Q3Tq/wDYlsVn3Pz0= Subject key identifier: B9:C6:EF:6A:66:D7:C1:4A:0E:AE:FC:0E:D0:63:6B:9B:29:D0:1E:DB Authority key identifier: 01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55 Certificate issuer: /CN=01a85ece2c539f5850fa701f2d45a2127dc86755 Certificate serial: 019C42EB0102E68606D9A8ADABFBA5AE0B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft Manifest number: 0AB5 Signing time: Mon 09 Feb 2026 15:00:23 +0000 Manifest this update: Mon 09 Feb 2026 15:00:23 +0000 Manifest next update: Tue 10 Feb 2026 15:00:23 +0000 Files and hashes: 1: AahezixTn1hQ-nAfLUWiEn3IZ1U.crl (hash: 3jqs7y8BWHKRHXJloQPBRENIm5rHY4v1rgNOITy4CoQ=) 2: MaRtt04jowFFk86_uuutN8hcKss.roa (hash: fZU76DAwqdxnrxuVOqFEOQy5RWDLvAlUDG+K/0ngLTA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:01:02:e6:86:06:d9:a8:ad:ab:fb:a5:ae:0b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01a85ece2c539f5850fa701f2d45a2127dc86755 Validity Not Before: Feb 9 15:00:23 2026 GMT Not After : Feb 10 15:00:23 2026 GMT Subject: CN=b9c6ef6a66d7c14a0eaefc0ed0636b9b29d01edb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:e1:ac:68:4d:ee:c6:77:a9:c0:c1:73:db: f7:7e:0b:21:8c:35:94:b2:0a:17:d6:49:f8:3f:07: bb:32:1d:1b:b5:33:80:b4:a4:65:92:d5:1f:72:8f: 72:48:cf:42:18:ce:91:70:77:5f:8e:7c:6c:de:b4: cd:f4:06:13:e9:94:9d:93:c6:3e:93:a7:5d:e6:9e: fe:f4:93:3a:b4:eb:7b:f7:1d:93:46:32:63:2a:b1: 94:eb:1d:0c:3f:7b:c9:b9:aa:75:25:3a:06:aa:52: 0d:a7:2a:e3:3e:09:5d:3b:00:69:43:66:1e:04:40: 0a:ca:45:b5:18:f8:40:aa:25:e1:cf:c9:b1:b8:0d: 11:ee:26:22:d7:6a:42:9b:b9:d5:50:c9:28:8b:33: 23:32:fa:8e:98:97:45:f0:7b:f0:05:8b:4d:a5:c8: 99:b2:2e:f1:93:12:64:5f:7f:5d:1b:d0:ca:44:b5: 25:51:fa:e7:0d:76:7a:4a:1c:06:17:b9:4d:d2:25: bb:cd:f3:4a:d4:3c:e9:5d:cd:62:70:8b:e8:c4:59: c8:ec:47:6f:59:5b:72:ec:dc:8a:7b:cf:c6:7f:5d: 30:a7:42:31:24:93:19:6a:d4:a8:0c:7d:b2:dd:be: 17:95:61:17:0b:06:4d:f6:65:14:ca:63:14:42:31: 6a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:C6:EF:6A:66:D7:C1:4A:0E:AE:FC:0E:D0:63:6B:9B:29:D0:1E:DB X509v3 Authority Key Identifier: keyid:01:A8:5E:CE:2C:53:9F:58:50:FA:70:1F:2D:45:A2:12:7D:C8:67:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AahezixTn1hQ-nAfLUWiEn3IZ1U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/43a91c-3aac-495c-8081-752a45c32dff/1/AahezixTn1hQ-nAfLUWiEn3IZ1U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:ee:a1:db:c0:66:25:22:9b:e9:53:d9:cd:45:bc:7e:75:ed: 3b:76:2d:d1:8f:21:29:a8:2f:28:00:14:02:b3:9d:fd:7f:44: e5:65:dc:91:d6:d0:23:86:c1:31:ad:1a:c2:3a:1c:b2:b7:bb: 2f:3c:93:12:b5:72:4b:a2:e4:aa:f1:26:67:0e:5a:e4:1a:63: 09:44:f2:c8:c7:0f:6d:0e:6f:1b:5a:dc:4c:09:8c:80:1c:f7: 6a:67:59:97:e9:e2:bf:05:f9:a9:ed:42:75:17:af:be:7c:2e: 35:7d:dd:7e:21:95:3f:30:03:ee:b5:e2:65:ae:ab:ae:6b:18: 24:8b:17:a1:a5:53:d8:58:9d:65:5d:65:8e:fa:55:fa:ac:50: f9:9b:c5:bc:5b:50:af:5e:df:11:69:46:43:ca:a1:a6:78:d9: c4:95:00:9e:a6:23:25:42:63:9c:bc:bf:90:61:d2:34:24:ae: 36:3a:21:f5:88:53:53:06:e0:4c:e8:26:ba:f5:7c:78:97:8d: ba:a8:d6:70:1e:fc:d1:60:db:be:ca:30:23:32:74:de:55:48: 28:e8:8c:b3:0b:89:59:67:68:1f:d8:5c:43:17:35:cf:8d:72: b4:c2:f6:d0:d6:25:dd:ba:1b:9e:7c:5b:72:3f:92:7a:90:9b: f9:1d:e2:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6wEC5oYG2aitq/ulrgsKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxYTg1ZWNlMmM1MzlmNTg1MGZhNzAxZjJkNDVhMjEyN2Rj ODY3NTUwHhcNMjYwMjA5MTUwMDIzWhcNMjYwMjEwMTUwMDIzWjAzMTEwLwYDVQQD EyhiOWM2ZWY2YTY2ZDdjMTRhMGVhZWZjMGVkMDYzNmI5YjI5ZDAxZWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbfhrGhN7sZ3qcDBc9v3fgshjDWU sgoX1kn4Pwe7Mh0btTOAtKRlktUfco9ySM9CGM6RcHdfjnxs3rTN9AYT6ZSdk8Y+ k6dd5p7+9JM6tOt79x2TRjJjKrGU6x0MP3vJuap1JToGqlINpyrjPgldOwBpQ2Ye BEAKykW1GPhAqiXhz8mxuA0R7iYi12pCm7nVUMkoizMjMvqOmJdF8HvwBYtNpciZ si7xkxJkX39dG9DKRLUlUfrnDXZ6ShwGF7lN0iW7zfNK1DzpXc1icIvoxFnI7Edv WVty7NyKe8/Gf10wp0IxJJMZatSoDH2y3b4XlWEXCwZN9mUUymMUQjFqAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnG72pm18FKDq78DtBja5sp0B7bMB8GA1UdIwQY MBaAFAGoXs4sU59YUPpwHy1FohJ9yGdVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWFoZXppeFRuMWhRLW5BZkxVV2lFbjNJWjFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy80M2E5MWMtM2FhYy00OTVjLTgwODEt NzUyYTQ1YzMyZGZmLzEvQWFoZXppeFRuMWhRLW5BZkxVV2lFbjNJWjFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy80M2E5MWMtM2FhYy00OTVjLTgwODEtNzUyYTQ1YzMyZGZm LzEvQWFoZXppeFRuMWhRLW5BZkxVV2lFbjNJWjFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZO6h28Bm JSKb6VPZzUW8fnXtO3Yt0Y8hKagvKAAUArOd/X9E5WXckdbQI4bBMa0awjocsre7 LzyTErVyS6LkqvEmZw5a5BpjCUTyyMcPbQ5vG1rcTAmMgBz3amdZl+nivwX5qe1C dRevvnwuNX3dfiGVPzAD7rXiZa6rrmsYJIsXoaVT2FidZV1ljvpV+qxQ+ZvFvFtQ r17fEWlGQ8qhpnjZxJUAnqYjJUJjnLy/kGHSNCSuNjoh9YhTUwbgTOgmuvV8eJeN uqjWcB780WDbvsowIzJ03lVIKOiMswuJWWdoH9hcQxc1z41ytML20NYl3bobnnxb cj+SepCb+R3i8w== -----END CERTIFICATE-----Generated at Mon Feb 9 22:41:56 2026 by rpki-client