This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft File: aAImjB8WbJ31GjQgRbsTLw-WyC0.mft (raw, json) Hash identifier: TKpLa5mxNuhcb85558S8iZd+y3V+Xp3AoNoCm5r6NAo= Subject key identifier: 0F:BE:98:0D:65:42:C2:6D:0F:CC:97:A8:3D:92:07:D4:11:BE:1E:CF Authority key identifier: 68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D Certificate issuer: /CN=6802268c1f166c9df51a342045bb132f0f96c82d Certificate serial: 019C43222998718AF2ED2316D56390E8F31C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft Manifest number: 0D92 Signing time: Mon 09 Feb 2026 16:00:38 +0000 Manifest this update: Mon 09 Feb 2026 16:00:38 +0000 Manifest next update: Tue 10 Feb 2026 16:00:38 +0000 Files and hashes: 1: aAImjB8WbJ31GjQgRbsTLw-WyC0.crl (hash: LtbWuHIjyCz2F4bGz8nN0oB5Y4klriRsx2me80mP2+s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 16:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:29:98:71:8a:f2:ed:23:16:d5:63:90:e8:f3:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6802268c1f166c9df51a342045bb132f0f96c82d Validity Not Before: Feb 9 16:00:38 2026 GMT Not After : Feb 10 16:00:38 2026 GMT Subject: CN=0fbe980d6542c26d0fcc97a83d9207d411be1ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:6d:2c:1d:3f:f1:5b:e4:eb:90:a0:95:41:5b: e1:35:6c:e4:72:02:ba:4c:a3:fc:5b:67:ce:d3:f1: 53:c8:9e:bf:5d:ae:7a:78:81:6f:d4:7d:a9:91:34: 2a:2b:77:17:65:87:9d:81:21:3c:91:eb:39:28:a2: d5:d4:63:9f:59:94:e4:24:26:66:0a:e8:2c:b6:19: ae:84:9e:f0:17:33:8a:26:a8:ed:9b:79:a7:1b:28: df:af:7a:d4:01:46:bd:2a:f3:e3:b4:46:b6:4e:36: 35:af:c2:db:69:f7:1f:05:d5:3c:d0:1d:39:dd:26: 12:01:61:db:47:cd:ca:d5:d0:df:5b:63:33:34:2b: 39:ab:b7:00:cc:b4:9b:90:18:d0:15:43:3b:fc:46: b7:52:56:a1:82:e6:3a:8b:8d:c9:ef:5a:31:6b:17: de:ce:dc:44:0d:79:99:72:32:47:8b:bc:ec:28:f1: 1b:94:3b:51:36:1e:19:0e:e2:af:35:48:bc:90:83: 3f:a7:66:57:4d:cf:63:25:3d:db:d9:a8:72:45:bf: b5:e1:02:60:62:3f:d1:98:4b:e3:d9:16:4d:1c:53: 0d:9d:37:a6:2b:00:99:86:d2:f9:ff:f9:87:b6:94: 75:14:9d:30:09:fe:d7:69:0f:e4:8b:1b:91:fa:80: c0:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:BE:98:0D:65:42:C2:6D:0F:CC:97:A8:3D:92:07:D4:11:BE:1E:CF X509v3 Authority Key Identifier: keyid:68:02:26:8C:1F:16:6C:9D:F5:1A:34:20:45:BB:13:2F:0F:96:C8:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aAImjB8WbJ31GjQgRbsTLw-WyC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/c8649d-2f00-4663-8e4e-e3c22d0f6207/1/aAImjB8WbJ31GjQgRbsTLw-WyC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:13:d6:b6:b9:c4:15:64:71:66:f2:b5:2a:d6:1b:da:a9:c6: f9:07:3f:91:dd:c0:3c:da:0f:70:47:bd:91:d5:0b:d5:f6:2a: a8:c1:06:52:62:03:7f:3f:9c:b8:ee:b1:0b:1b:ba:f7:ee:a0: ac:03:29:54:b8:62:8d:6b:45:36:8f:5e:83:2c:c6:21:ec:fd: c1:e5:03:5b:09:37:96:d9:51:84:38:8c:13:28:70:77:6d:aa: c3:a2:42:9e:e9:cf:05:9b:dd:d0:e5:45:2a:9c:37:a9:ca:7c: c6:07:38:3c:7e:a3:6d:5c:ba:8f:c1:e1:fd:05:76:87:e7:2e: d8:1a:e8:11:c1:01:7b:f7:cc:b6:b5:b1:c5:d3:fa:f7:55:b5: cc:74:f8:51:38:20:f5:da:f6:6d:fa:35:86:40:85:13:69:08: 80:db:56:cd:0f:05:4f:36:90:01:e2:d3:8a:cf:3c:1b:2c:d1: 9c:e1:ec:86:9e:a8:0f:ba:ef:ef:6a:b6:73:dd:98:fa:42:97: 79:1b:1f:07:a0:66:ee:90:bd:5d:60:97:cb:6e:49:ee:ad:78: e7:09:42:71:b1:fd:bd:5c:c8:df:94:96:c9:5c:8e:82:78:31: a1:68:bf:28:fe:4a:9a:89:0c:a2:89:07:9f:3e:70:4c:d0:6c: 18:b6:a3:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIimYcYry7SMW1WOQ6PMcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4MDIyNjhjMWYxNjZjOWRmNTFhMzQyMDQ1YmIxMzJmMGY5 NmM4MmQwHhcNMjYwMjA5MTYwMDM4WhcNMjYwMjEwMTYwMDM4WjAzMTEwLwYDVQQD EygwZmJlOTgwZDY1NDJjMjZkMGZjYzk3YTgzZDkyMDdkNDExYmUxZWNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA420sHT/xW+TrkKCVQVvhNWzkcgK6 TKP8W2fO0/FTyJ6/Xa56eIFv1H2pkTQqK3cXZYedgSE8kes5KKLV1GOfWZTkJCZm CugsthmuhJ7wFzOKJqjtm3mnGyjfr3rUAUa9KvPjtEa2TjY1r8LbafcfBdU80B05 3SYSAWHbR83K1dDfW2MzNCs5q7cAzLSbkBjQFUM7/Ea3UlahguY6i43J71oxaxfe ztxEDXmZcjJHi7zsKPEblDtRNh4ZDuKvNUi8kIM/p2ZXTc9jJT3b2ahyRb+14QJg Yj/RmEvj2RZNHFMNnTemKwCZhtL5//mHtpR1FJ0wCf7XaQ/kixuR+oDAXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA++mA1lQsJtD8yXqD2SB9QRvh7PMB8GA1UdIwQY MBaAFGgCJowfFmyd9Ro0IEW7Ey8PlsgtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUt ZTNjMjJkMGY2MjA3LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9jODY0OWQtMmYwMC00NjYzLThlNGUtZTNjMjJkMGY2MjA3 LzEvYUFJbWpCOFdiSjMxR2pRZ1Jic1RMdy1XeUMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFhPWtrnE FWRxZvK1KtYb2qnG+Qc/kd3APNoPcEe9kdUL1fYqqMEGUmIDfz+cuO6xCxu69+6g rAMpVLhijWtFNo9egyzGIez9weUDWwk3ltlRhDiMEyhwd22qw6JCnunPBZvd0OVF Kpw3qcp8xgc4PH6jbVy6j8Hh/QV2h+cu2BroEcEBe/fMtrWxxdP691W1zHT4UTgg 9dr2bfo1hkCFE2kIgNtWzQ8FTzaQAeLTis88GyzRnOHshp6oD7rv72q2c92Y+kKX eRsfB6Bm7pC9XWCXy25J7q145wlCcbH9vVzI35SWyVyOgngxoWi/KP5KmokMookH nz5wTNBsGLajoA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:41:15 2026 by rpki-client