This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft File: aNogbIPVBeJUs-88dlD5-5NFNDU.mft (raw, json) Hash identifier: wv8JPw9yzaZ4kcSg8ol21/wK4cy6jCCuTe5QROyL4Gc= Subject key identifier: 53:4A:EF:49:DB:6C:5C:27:48:F5:65:E0:07:A0:DF:9D:E4:3E:24:15 Authority key identifier: 68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35 Certificate issuer: /CN=68da206c83d505e254b3ef3c7650f9fb93453435 Certificate serial: 019C41D86168E2C12480702CD395531DFA66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft Manifest number: 0AFF Signing time: Mon 09 Feb 2026 10:00:25 +0000 Manifest this update: Mon 09 Feb 2026 10:00:25 +0000 Manifest next update: Tue 10 Feb 2026 10:00:25 +0000 Files and hashes: 1: aNogbIPVBeJUs-88dlD5-5NFNDU.crl (hash: K8oggWh8wljSz3907Udcy/ZorNVUoDoZFxh8g92aCVw=) 2: tI5e6iAaAZ4nNbkpCHsMqp1-ktQ.roa (hash: A9GN5Q7BwonPYBSN1TVcg69kmzmTkS/zhmBwNF2zRqM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:61:68:e2:c1:24:80:70:2c:d3:95:53:1d:fa:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da206c83d505e254b3ef3c7650f9fb93453435 Validity Not Before: Feb 9 10:00:25 2026 GMT Not After : Feb 10 10:00:25 2026 GMT Subject: CN=534aef49db6c5c2748f565e007a0df9de43e2415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:19:55:18:6b:6b:1f:83:93:8c:fc:10:c8:bf: 6b:5f:ad:18:02:2b:dc:92:ca:1b:ac:08:a6:81:d6: 47:ac:7b:eb:d1:c4:cc:51:f7:be:4f:93:11:19:c9: 00:98:d2:8c:1a:df:ac:23:ed:94:3f:2f:31:e3:eb: e4:c7:8b:a1:5c:8b:93:87:90:a7:bf:12:31:31:10: 9e:54:42:92:81:e7:f4:c1:95:31:3c:1b:e5:d3:25: b3:f9:3d:b3:51:49:bb:2c:f7:82:e3:3c:6a:45:ec: d3:80:7e:e4:47:35:c3:2c:1a:92:f5:7b:9f:ae:7d: 70:57:3a:45:80:87:7f:9f:12:95:91:f3:8d:f5:f5: 2d:9c:40:93:ec:3c:12:9d:f7:66:48:67:45:72:9d: c7:75:f9:33:a4:88:bf:e2:fc:21:ac:c2:b8:40:5a: e8:55:c6:13:dc:d4:d3:58:01:b9:9f:40:ca:a8:99: 5a:b2:31:74:4e:75:87:f0:1a:eb:08:d3:83:65:a3: b6:cd:13:37:fa:11:23:9a:5a:04:f1:45:f4:22:17: cb:2b:1c:52:b3:7f:cf:c7:21:f0:4f:17:3d:99:08: e0:24:1b:75:da:ca:b7:a6:c3:62:2a:e5:04:ea:6d: 21:0f:bb:1b:05:aa:b7:ad:e8:ee:93:61:bd:aa:58: 5e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:4A:EF:49:DB:6C:5C:27:48:F5:65:E0:07:A0:DF:9D:E4:3E:24:15 X509v3 Authority Key Identifier: keyid:68:DA:20:6C:83:D5:05:E2:54:B3:EF:3C:76:50:F9:FB:93:45:34:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNogbIPVBeJUs-88dlD5-5NFNDU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/bb298b-3c39-49b2-abb1-11d636b56dab/1/aNogbIPVBeJUs-88dlD5-5NFNDU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:88:be:61:20:aa:1c:ef:61:1c:fb:41:b9:d8:07:e6:ad:d7: 89:e3:34:d7:8c:d9:80:4c:7e:d4:73:4c:2f:1c:e1:c3:64:6c: 47:8d:da:70:77:54:34:a4:95:7e:99:a4:3f:77:e0:98:ff:b6: 9c:cf:3c:a2:a1:c0:74:1a:d0:5f:59:c9:ac:5d:13:cb:8c:dc: f6:ee:75:84:e9:be:24:a4:29:2a:f6:21:c8:a0:f0:31:e5:a3: 09:95:0c:2d:51:32:6c:8b:31:68:86:2d:77:e9:59:b9:f9:a9: 42:2f:9d:fc:61:7d:8e:63:70:5a:1a:2f:38:cb:07:cd:0b:64: 52:0e:bd:6e:d1:79:46:33:68:17:1a:46:3e:02:9c:bf:c3:25: 82:ee:67:a0:0f:b7:1f:82:34:e1:50:6d:ff:84:81:cc:95:8e: 0e:74:5c:cb:84:26:f3:a4:d5:4e:10:a4:82:71:36:0b:ea:22: 5c:df:b6:d6:76:06:90:21:03:26:16:dc:4f:a6:c3:52:55:9c: 09:63:80:70:31:eb:f9:6c:b2:6c:3f:09:bc:f1:ce:1d:95:6c: e2:72:73:0f:d7:e7:74:59:ea:4e:9a:7b:7c:34:d5:05:07:5f: f6:89:27:4a:ca:86:cd:87:44:b0:0f:6b:11:a1:33:e9:c7:4e: ce:6d:99:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2GFo4sEkgHAs05VTHfpmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGEyMDZjODNkNTA1ZTI1NGIzZWYzYzc2NTBmOWZiOTM0 NTM0MzUwHhcNMjYwMjA5MTAwMDI1WhcNMjYwMjEwMTAwMDI1WjAzMTEwLwYDVQQD Eyg1MzRhZWY0OWRiNmM1YzI3NDhmNTY1ZTAwN2EwZGY5ZGU0M2UyNDE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRlVGGtrH4OTjPwQyL9rX60YAivc ksobrAimgdZHrHvr0cTMUfe+T5MRGckAmNKMGt+sI+2UPy8x4+vkx4uhXIuTh5Cn vxIxMRCeVEKSgef0wZUxPBvl0yWz+T2zUUm7LPeC4zxqRezTgH7kRzXDLBqS9Xuf rn1wVzpFgId/nxKVkfON9fUtnECT7DwSnfdmSGdFcp3HdfkzpIi/4vwhrMK4QFro VcYT3NTTWAG5n0DKqJlasjF0TnWH8BrrCNODZaO2zRM3+hEjmloE8UX0IhfLKxxS s3/PxyHwTxc9mQjgJBt12sq3psNiKuUE6m0hD7sbBaq3rejuk2G9qlhesQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFNK70nbbFwnSPVl4Aeg353kPiQVMB8GA1UdIwQY MBaAFGjaIGyD1QXiVLPvPHZQ+fuTRTQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vZ2JJUFZCZUpVcy04OGRsRDUtNU5GTkRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9iYjI5OGItM2MzOS00OWIyLWFiYjEt MTFkNjM2YjU2ZGFiLzEvYU5vZ2JJUFZCZUpVcy04OGRsRDUtNU5GTkRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9iYjI5OGItM2MzOS00OWIyLWFiYjEtMTFkNjM2YjU2ZGFi LzEvYU5vZ2JJUFZCZUpVcy04OGRsRDUtNU5GTkRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIi+YSCq HO9hHPtBudgH5q3XieM014zZgEx+1HNMLxzhw2RsR43acHdUNKSVfpmkP3fgmP+2 nM88oqHAdBrQX1nJrF0Ty4zc9u51hOm+JKQpKvYhyKDwMeWjCZUMLVEybIsxaIYt d+lZufmpQi+d/GF9jmNwWhovOMsHzQtkUg69btF5RjNoFxpGPgKcv8Mlgu5noA+3 H4I04VBt/4SBzJWODnRcy4Qm86TVThCkgnE2C+oiXN+21nYGkCEDJhbcT6bDUlWc CWOAcDHr+WyybD8JvPHOHZVs4nJzD9fndFnqTpp7fDTVBQdf9oknSsqGzYdEsA9r EaEz6cdOzm2ZJw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:49:19 2026 by rpki-client