This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json) Hash identifier: JlAIu4loFuV4eeqTVzrVVlZdNMMYJmrizRVgNm0fsF4= Subject key identifier: 8C:D3:54:A7:36:55:1B:79:31:23:72:C7:7E:AB:CE:F0:42:2F:F1:63 Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc Certificate serial: 019C427D286F10F6E04715C844A0C9DD4EFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft Manifest number: 0AC9 Signing time: Mon 09 Feb 2026 13:00:24 +0000 Manifest this update: Mon 09 Feb 2026 13:00:24 +0000 Manifest next update: Tue 10 Feb 2026 13:00:24 +0000 Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: 33+iCJvo+zv5+PqzCEfA5jBjOMXR8/9Ns/4zB1D1l00=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:28:6f:10:f6:e0:47:15:c8:44:a0:c9:dd:4e:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc Validity Not Before: Feb 9 13:00:24 2026 GMT Not After : Feb 10 13:00:24 2026 GMT Subject: CN=8cd354a736551b79312372c77eabcef0422ff163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:14:b0:a2:00:e7:c7:27:d0:c3:d5:9c:fa:ea: 71:5a:2f:43:6d:ca:a5:63:34:4f:76:57:d4:cd:42: 31:7c:8e:e0:88:23:1d:26:05:81:09:c7:cd:5e:47: 13:4b:f7:ff:9e:89:bc:b2:dc:b1:5f:82:98:b0:12: c7:3b:2b:88:f8:f9:cd:27:ae:a7:be:48:97:4c:2a: c4:07:43:a3:44:e3:57:6c:8f:c8:1a:b5:ff:fd:56: 6c:da:80:0d:4d:a5:2d:5b:82:3f:f3:da:84:a0:f3: ef:6d:e6:a3:c4:e3:5a:f5:c4:60:e5:a4:fc:38:40: 3c:d7:c2:8a:eb:b8:5b:a4:7c:12:42:66:f6:e7:45: 4b:be:14:e6:41:9b:cb:01:b3:4e:ce:51:c0:34:27: 00:7b:26:22:a7:7a:30:c2:07:02:ab:f5:ae:28:0c: 58:04:02:73:5f:22:bd:b5:f9:aa:49:9e:17:ad:b1: 83:3d:42:df:68:1e:cc:24:48:e3:12:21:70:54:6a: 45:8b:40:00:13:fb:f2:48:93:f0:49:c6:3f:fc:df: 51:1b:74:47:3b:04:49:bb:8d:43:76:d4:a3:74:ef: e1:41:87:a3:bf:a5:df:a2:f7:91:06:e7:1b:aa:2a: ac:cb:b6:fb:b2:fd:67:97:52:87:3f:37:56:12:ae: 39:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D3:54:A7:36:55:1B:79:31:23:72:C7:7E:AB:CE:F0:42:2F:F1:63 X509v3 Authority Key Identifier: keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:94:6e:9b:41:fc:47:81:64:32:29:97:ee:92:4a:6f:1c:e2: 6e:d2:63:12:8c:b4:9b:a2:59:35:39:58:eb:8c:99:98:9c:c8: 7b:41:4b:f8:35:44:bf:d0:3f:33:59:dc:ac:b9:d2:5c:4c:1a: c9:60:70:b8:9c:29:ce:17:f7:bd:0e:04:79:c9:9e:64:5d:25: 60:57:95:31:56:5b:fc:f8:02:59:73:ed:45:ab:a2:23:06:60: 03:a4:f4:63:c1:7a:fa:19:3e:fb:98:77:48:cc:a4:b3:6b:00: 7e:d9:4d:2f:41:26:a9:29:94:4b:e2:57:36:00:b7:60:f8:df: 01:8e:53:7a:16:d7:14:0e:f0:ad:41:09:85:25:1c:d2:33:82: 69:32:22:5c:24:15:2a:d0:6c:6d:c9:4a:c4:1f:d2:c0:5e:18: 81:8a:ca:20:3b:5e:10:4a:df:d4:58:70:c5:fe:b8:d4:e3:ca: 89:fb:94:eb:6f:f9:24:fa:e0:ca:d3:92:44:7e:7e:f2:62:b0: ae:dc:2d:48:ec:dd:5b:7d:ce:09:60:9f:2e:b2:93:01:e7:2b: b8:df:ab:47:5a:cf:3f:a8:58:3f:9b:31:e7:11:6a:dd:bd:55: d8:4b:52:54:63:93:6d:ac:5a:94:64:9a:3b:fb:6f:b4:70:eb: 18:e7:94:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfShvEPbgRxXIRKDJ3U7+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh NzBlZGMwHhcNMjYwMjA5MTMwMDI0WhcNMjYwMjEwMTMwMDI0WjAzMTEwLwYDVQQD Eyg4Y2QzNTRhNzM2NTUxYjc5MzEyMzcyYzc3ZWFiY2VmMDQyMmZmMTYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhSwogDnxyfQw9Wc+upxWi9Dbcql YzRPdlfUzUIxfI7giCMdJgWBCcfNXkcTS/f/nom8styxX4KYsBLHOyuI+PnNJ66n vkiXTCrEB0OjRONXbI/IGrX//VZs2oANTaUtW4I/89qEoPPvbeajxONa9cRg5aT8 OEA818KK67hbpHwSQmb250VLvhTmQZvLAbNOzlHANCcAeyYip3owwgcCq/WuKAxY BAJzXyK9tfmqSZ4XrbGDPULfaB7MJEjjEiFwVGpFi0AAE/vySJPwScY//N9RG3RH OwRJu41DdtSjdO/hQYejv6XfoveRBucbqiqsy7b7sv1nl1KHPzdWEq45jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzTVKc2VRt5MSNyx36rzvBCL/FjMB8GA1UdIwQY MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0 LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv5Rum0H8 R4FkMimX7pJKbxzibtJjEoy0m6JZNTlY64yZmJzIe0FL+DVEv9A/M1ncrLnSXEwa yWBwuJwpzhf3vQ4EecmeZF0lYFeVMVZb/PgCWXPtRauiIwZgA6T0Y8F6+hk++5h3 SMyks2sAftlNL0EmqSmUS+JXNgC3YPjfAY5TehbXFA7wrUEJhSUc0jOCaTIiXCQV KtBsbclKxB/SwF4YgYrKIDteEErf1Fhwxf641OPKifuU62/5JPrgytOSRH5+8mKw rtwtSOzdW33OCWCfLrKTAecruN+rR1rPP6hYP5sx5xFq3b1V2EtSVGOTbaxalGSa O/tvtHDrGOeU1Q== -----END CERTIFICATE-----Generated at Mon Feb 9 19:53:28 2026 by rpki-client