This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft File: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft (raw, json) Hash identifier: T2maAmnS1DmxAdDbsOmbHKZDwQjKTYcnu4zhFwi6mzw= Subject key identifier: B1:46:99:58:0D:14:59:0D:D2:9D:06:C6:63:0F:29:84:C9:D8:51:B8 Authority key identifier: 68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 Certificate issuer: /CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Certificate serial: 019C43220A58762ED5D546978022C62DA44C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 16:00:30 +0000 Manifest this update: Mon 09 Feb 2026 16:00:30 +0000 Manifest next update: Tue 10 Feb 2026 16:00:30 +0000 Files and hashes: 1: aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl (hash: Vav6kU2rGhN7nMDWkNShYPYv4iE8653HZmZPcKwqB+E=) 2: vog51KGgHd0dKzK6jl8SFvGeQr0.roa (hash: NjFEPRuXVC6oTMw2/sjvsPbGX/HK2xYJiVPG08AEZw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:0a:58:76:2e:d5:d5:46:97:80:22:c6:2d:a4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c21560b12219cf8eab55f74d98f2e9aed51746 Validity Not Before: Feb 9 16:00:30 2026 GMT Not After : Feb 10 16:00:30 2026 GMT Subject: CN=b14699580d14590dd29d06c6630f2984c9d851b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:46:ec:3c:42:0d:3f:11:c3:ce:e2:58:a1:83: 90:9c:31:63:a0:d7:95:6c:18:35:fb:24:95:02:7f: 6b:25:d5:68:93:97:29:c3:9a:3e:5e:c4:fa:ea:45: 18:5f:5c:8f:b5:3e:13:55:f7:84:35:18:5f:de:38: af:bf:ee:84:93:23:3e:d3:5b:f0:ba:ef:a7:46:db: 88:68:9b:94:e5:7e:c2:23:36:5a:55:24:fd:3a:a3: e0:24:e2:54:bc:ed:b9:2b:37:ee:ce:e6:f6:80:1f: e6:98:90:97:31:86:a1:49:0a:b5:6d:ec:28:5b:ee: 1e:23:de:ea:dc:f6:30:6d:87:4c:ef:a8:11:7f:0e: f8:70:ec:ac:3b:dc:6f:ba:9b:91:60:f7:3a:98:e5: 48:7a:18:9c:85:5f:3f:39:01:37:e6:93:73:9a:0b: 27:d0:3d:32:6f:3b:0b:34:a4:47:ba:5b:49:32:ab: aa:08:1a:44:b0:2b:0b:62:ab:3e:6f:99:3e:cd:7b: 0a:15:04:85:39:2d:36:8e:47:3a:6f:99:b7:4a:24: e9:50:fb:c7:ea:84:b8:63:76:8f:b3:56:6d:dc:34: 25:08:4e:17:e5:98:7b:44:46:f7:19:d6:e1:f9:0b: 88:1e:a1:61:d1:45:84:16:57:f6:54:bf:5e:b7:1f: f3:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:46:99:58:0D:14:59:0D:D2:9D:06:C6:63:0F:29:84:C9:D8:51:B8 X509v3 Authority Key Identifier: keyid:68:C2:15:60:B1:22:19:CF:8E:AB:55:F7:4D:98:F2:E9:AE:D5:17:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/bc5034-600a-49b3-84b9-ac1edbb477c0/1/aMIVYLEiGc-Oq1X3TZjy6a7VF0Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:bb:6b:dd:73:66:e6:95:f5:7c:84:14:7e:3c:de:7c:9f:15: 94:8c:c5:19:bf:05:cb:c8:d5:fb:f6:1b:ec:bc:3d:7e:21:bd: f0:26:07:da:e7:3c:9b:29:6b:64:0e:41:77:f1:29:cb:73:48: ec:14:53:b1:cb:50:2a:1e:05:4a:69:55:1a:c6:17:94:82:2d: b6:95:62:69:85:7d:f1:8e:aa:91:ad:cd:9a:26:a6:be:1a:d7: df:2e:5c:59:4e:2f:c4:09:fc:d8:5c:ad:a2:4f:00:32:d1:eb: cc:24:f4:00:44:e1:46:54:17:a3:51:51:0a:a6:aa:dd:10:0f: 83:5c:df:87:00:ad:72:65:4f:ef:9b:4b:02:b9:a2:0b:90:c0: 33:51:72:bd:6e:48:6c:13:ac:43:c4:68:ec:36:e3:cb:3c:b5: 1a:6e:83:26:47:93:18:43:38:ca:ed:1c:41:ff:04:20:d2:26: 9d:91:89:1e:6e:7d:4a:e6:37:49:2c:30:1a:1d:db:08:55:cc: 21:4a:34:89:a4:e8:02:69:97:8d:4e:bc:d6:2c:d0:21:ca:8a: 74:b4:31:2f:c0:26:50:a6:04:ba:cf:ab:90:c9:87:4a:2f:47: 07:0b:bc:90:dc:42:b8:2e:19:27:a0:62:7a:19:b0:4f:81:6b: 90:b0:99:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIgpYdi7V1UaXgCLGLaRMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzIxNTYwYjEyMjE5Y2Y4ZWFiNTVmNzRkOThmMmU5YWVk NTE3NDYwHhcNMjYwMjA5MTYwMDMwWhcNMjYwMjEwMTYwMDMwWjAzMTEwLwYDVQQD EyhiMTQ2OTk1ODBkMTQ1OTBkZDI5ZDA2YzY2MzBmMjk4NGM5ZDg1MWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUbsPEINPxHDzuJYoYOQnDFjoNeV bBg1+ySVAn9rJdVok5cpw5o+XsT66kUYX1yPtT4TVfeENRhf3jivv+6EkyM+01vw uu+nRtuIaJuU5X7CIzZaVST9OqPgJOJUvO25Kzfuzub2gB/mmJCXMYahSQq1bewo W+4eI97q3PYwbYdM76gRfw74cOysO9xvupuRYPc6mOVIehichV8/OQE35pNzmgsn 0D0ybzsLNKRHultJMquqCBpEsCsLYqs+b5k+zXsKFQSFOS02jkc6b5m3SiTpUPvH 6oS4Y3aPs1Zt3DQlCE4X5Zh7REb3Gdbh+QuIHqFh0UWEFlf2VL9etx/z9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFGmVgNFFkN0p0GxmMPKYTJ2FG4MB8GA1UdIwQY MBaAFGjCFWCxIhnPjqtV902Y8umu1RdGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0Yjkt YWMxZWRiYjQ3N2MwLzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC9iYzUwMzQtNjAwYS00OWIzLTg0YjktYWMxZWRiYjQ3N2Mw LzEvYU1JVllMRWlHYy1PcTFYM1Raank2YTdWRjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALrtr3XNm 5pX1fIQUfjzefJ8VlIzFGb8Fy8jV+/Yb7Lw9fiG98CYH2uc8mylrZA5Bd/Epy3NI 7BRTsctQKh4FSmlVGsYXlIIttpViaYV98Y6qka3NmiamvhrX3y5cWU4vxAn82Fyt ok8AMtHrzCT0AEThRlQXo1FRCqaq3RAPg1zfhwCtcmVP75tLArmiC5DAM1FyvW5I bBOsQ8Ro7Dbjyzy1Gm6DJkeTGEM4yu0cQf8EINImnZGJHm59SuY3SSwwGh3bCFXM IUo0iaToAmmXjU681izQIcqKdLQxL8AmUKYEus+rkMmHSi9HBwu8kNxCuC4ZJ6Bi ehmwT4FrkLCZag== -----END CERTIFICATE-----Generated at Mon Feb 9 19:58:49 2026 by rpki-client