This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft File: AIsoBYgFTtjERuJ7ScrEVYip6YA.mft (raw, json) Hash identifier: /a4JOp8+Fn15RgekMosHzf5jLiYaNFYWO/6nz/Ll62g= Subject key identifier: C0:FE:F3:02:8E:54:3A:FF:BC:3C:AB:87:18:46:39:3B:C8:1D:18:87 Authority key identifier: 00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80 Certificate issuer: /CN=008b280588054ed8c446e27b49cac45588a9e980 Certificate serial: 019C4322BE5AEB267C8D776A24C3B6B57036 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft Manifest number: 12CC Signing time: Mon 09 Feb 2026 16:01:15 +0000 Manifest this update: Mon 09 Feb 2026 16:01:15 +0000 Manifest next update: Tue 10 Feb 2026 16:01:15 +0000 Files and hashes: 1: AIsoBYgFTtjERuJ7ScrEVYip6YA.crl (hash: 42lxxL2EeIVGv9ChoTN2DB/LwHJzBOQl3nKHaX6gUAs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:be:5a:eb:26:7c:8d:77:6a:24:c3:b6:b5:70:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=008b280588054ed8c446e27b49cac45588a9e980 Validity Not Before: Feb 9 16:01:15 2026 GMT Not After : Feb 10 16:01:15 2026 GMT Subject: CN=c0fef3028e543affbc3cab871846393bc81d1887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:7f:74:68:34:52:39:3d:21:e1:e2:df:af:fe: 86:8b:36:b1:c1:5b:1c:b8:18:05:24:0d:7e:92:6e: a7:61:09:14:e1:d4:b5:87:7a:eb:49:31:48:4b:e2: 9e:5d:9b:0b:f6:02:f9:0f:b5:9d:0b:30:dd:79:dd: 49:a5:c1:c0:c6:26:d1:d4:6e:7a:a8:1d:6f:bc:38: b5:db:a8:9d:5e:1e:21:26:44:82:71:3c:3d:d0:bc: 49:40:d0:b7:33:15:e1:63:5c:37:b1:da:75:68:04: 13:bb:93:67:26:a6:e2:ff:c0:04:66:93:f5:40:65: de:fd:80:44:3b:a2:c5:13:39:b1:f3:24:c4:0d:b7: 35:17:f8:ce:aa:75:18:6e:d9:7b:39:f2:bd:0b:aa: 49:39:8f:65:e6:83:47:76:c7:62:8e:3a:4b:26:9d: c2:33:9b:b0:ad:94:a4:08:25:fc:aa:8d:60:a2:64: b9:62:0f:aa:40:97:a6:d9:f4:7d:6e:7e:33:b7:95: 10:fb:87:03:c5:87:59:5c:93:10:f3:40:32:72:e9: 09:0a:83:a6:03:b2:9b:4a:8c:8e:63:6a:bb:32:66: ac:0f:e8:81:82:55:d9:49:23:8a:29:d2:ae:7e:da: b0:da:69:3b:1a:2a:54:f5:1b:08:57:37:b1:37:90: 50:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:FE:F3:02:8E:54:3A:FF:BC:3C:AB:87:18:46:39:3B:C8:1D:18:87 X509v3 Authority Key Identifier: keyid:00:8B:28:05:88:05:4E:D8:C4:46:E2:7B:49:CA:C4:55:88:A9:E9:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AIsoBYgFTtjERuJ7ScrEVYip6YA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/78/a712d0-a3cc-4d74-9893-563d6bd3f827/1/AIsoBYgFTtjERuJ7ScrEVYip6YA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:fd:7b:9b:50:42:67:e8:61:d2:9d:2b:f0:b5:59:41:1d:0a: 6a:d1:cb:7f:e0:e7:7a:6e:b0:41:d5:26:11:a0:03:a5:24:ec: 57:f0:01:f7:4e:d3:6a:90:ab:ef:e1:69:9b:c2:d5:e6:17:40: be:5c:f5:08:9e:90:8d:6b:d1:1f:89:a1:25:c5:c4:f7:ed:03: 6f:38:06:09:7d:b3:b6:40:87:a5:9c:42:16:e7:f1:28:f3:06: 27:82:b4:15:1e:bc:da:13:54:fa:88:00:e5:e8:c0:60:50:5b: 3d:5f:e1:6d:df:8e:6b:f7:44:31:1d:19:d3:22:b7:87:86:50: 56:9c:48:84:99:34:99:74:6c:37:ab:d1:32:68:24:79:ff:02: 7e:8d:74:ec:35:11:35:92:ac:7d:16:95:05:d3:8c:b4:f0:b1: ad:e8:f2:16:2a:10:64:e2:95:04:f9:34:a9:a4:c1:c4:79:64: 8a:f9:10:ca:b2:22:5c:d8:a0:96:22:e6:b0:3f:18:0d:74:c6: b7:a4:00:8f:36:d1:67:3b:3f:2b:39:69:c0:41:40:47:7f:78: ec:0e:5c:3e:bd:3b:aa:aa:05:99:fb:06:f0:fa:a7:fb:b1:d1: d8:77:5b:18:fd:e7:6e:6b:62:4d:34:93:1a:ce:b4:29:2e:a9: 4c:a8:d2:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDIr5a6yZ8jXdqJMO2tXA2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOGIyODA1ODgwNTRlZDhjNDQ2ZTI3YjQ5Y2FjNDU1ODhh OWU5ODAwHhcNMjYwMjA5MTYwMTE1WhcNMjYwMjEwMTYwMTE1WjAzMTEwLwYDVQQD EyhjMGZlZjMwMjhlNTQzYWZmYmMzY2FiODcxODQ2MzkzYmM4MWQxODg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X90aDRSOT0h4eLfr/6GizaxwVsc uBgFJA1+km6nYQkU4dS1h3rrSTFIS+KeXZsL9gL5D7WdCzDded1JpcHAxibR1G56 qB1vvDi126idXh4hJkSCcTw90LxJQNC3MxXhY1w3sdp1aAQTu5NnJqbi/8AEZpP1 QGXe/YBEO6LFEzmx8yTEDbc1F/jOqnUYbtl7OfK9C6pJOY9l5oNHdsdijjpLJp3C M5uwrZSkCCX8qo1gomS5Yg+qQJem2fR9bn4zt5UQ+4cDxYdZXJMQ80AycukJCoOm A7KbSoyOY2q7MmasD+iBglXZSSOKKdKuftqw2mk7GipU9RsIVzexN5BQ+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD+8wKOVDr/vDyrhxhGOTvIHRiHMB8GA1UdIwQY MBaAFACLKAWIBU7YxEbie0nKxFWIqemAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMt NTYzZDZiZDNmODI3LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OC9hNzEyZDAtYTNjYy00ZDc0LTk4OTMtNTYzZDZiZDNmODI3 LzEvQUlzb0JZZ0ZUdGpFUnVKN1NjckVWWWlwNllBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/17m1BC Z+hh0p0r8LVZQR0KatHLf+Dnem6wQdUmEaADpSTsV/AB907TapCr7+Fpm8LV5hdA vlz1CJ6QjWvRH4mhJcXE9+0DbzgGCX2ztkCHpZxCFufxKPMGJ4K0FR682hNU+ogA 5ejAYFBbPV/hbd+Oa/dEMR0Z0yK3h4ZQVpxIhJk0mXRsN6vRMmgkef8Cfo107DUR NZKsfRaVBdOMtPCxrejyFioQZOKVBPk0qaTBxHlkivkQyrIiXNigliLmsD8YDXTG t6QAjzbRZzs/KzlpwEFAR3947A5cPr07qqoFmfsG8Pqn+7HR2HdbGP3nbmtiTTST Gs60KS6pTKjS4Q== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:35 2026 by rpki-client