This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft File: amy2jfouNjg5NN5oDtAlGsOu3Mo.mft (raw, json) Hash identifier: d7n4nG4+znS43xbHh9bfAXmujYFKXS/dMzaNcZntyHc= Subject key identifier: B4:77:8D:9F:15:C4:F0:5B:38:72:EF:DC:DF:F3:A1:0F:4B:3B:1A:1B Authority key identifier: 6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA Certificate issuer: /CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca Certificate serial: 019C42B408BD7782A1C6A0E75D4E03C40FC6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft Manifest number: 0214 Signing time: Mon 09 Feb 2026 14:00:20 +0000 Manifest this update: Mon 09 Feb 2026 14:00:20 +0000 Manifest next update: Tue 10 Feb 2026 14:00:20 +0000 Files and hashes: 1: amy2jfouNjg5NN5oDtAlGsOu3Mo.crl (hash: +e9j2VKRb/pTgeNyQWrqyi+3aCDmeoYrPYTrwxx4G2Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:08:bd:77:82:a1:c6:a0:e7:5d:4e:03:c4:0f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6cb68dfa2e36383934de680ed0251ac3aedcca Validity Not Before: Feb 9 14:00:20 2026 GMT Not After : Feb 10 14:00:20 2026 GMT Subject: CN=b4778d9f15c4f05b3872efdcdff3a10f4b3b1a1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c7:62:fe:d1:e9:35:36:ac:dd:e7:0c:9d:ef: da:18:fa:98:ba:0a:9e:1f:ce:af:3c:95:38:8f:de: 81:95:44:2a:86:50:99:97:6b:c7:6f:37:9c:57:4a: 39:c8:1e:29:0f:85:df:35:28:06:88:a0:b9:f9:65: df:7b:10:73:c0:79:7b:44:f5:2e:5a:f0:94:c3:64: b1:a6:5f:ff:80:0b:3b:a3:39:f3:f7:a2:b3:c4:39: 8d:67:78:9a:f7:ff:da:ae:ff:ca:ee:05:0d:28:ce: 2f:41:43:38:ae:e2:6e:62:68:88:2d:43:de:67:17: 9b:61:1d:98:57:ac:8c:cb:78:37:b3:e9:cc:bb:49: 71:02:59:51:63:38:70:4d:22:79:23:37:7c:49:14: 5f:5b:b9:59:2e:0b:d5:28:bb:d1:0e:94:9c:ea:fe: 65:c6:d1:14:e6:13:de:1a:65:56:37:ae:8f:09:0c: 80:90:36:d4:cf:b6:e0:37:e7:11:56:8e:04:1a:30: ce:91:6a:b7:1a:6f:1d:b2:95:ea:5a:24:2c:b5:59: 19:d3:d2:b9:04:26:64:55:f7:48:2c:6f:cc:f0:c7: ab:66:65:9a:ef:c0:39:e9:46:29:78:65:74:d9:3c: 0d:75:44:8f:24:79:5f:63:3d:ff:2b:57:78:38:46: ef:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:77:8D:9F:15:C4:F0:5B:38:72:EF:DC:DF:F3:A1:0F:4B:3B:1A:1B X509v3 Authority Key Identifier: keyid:6A:6C:B6:8D:FA:2E:36:38:39:34:DE:68:0E:D0:25:1A:C3:AE:DC:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/amy2jfouNjg5NN5oDtAlGsOu3Mo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0f3be6-293a-4bce-9a72-87ff6e690591/1/amy2jfouNjg5NN5oDtAlGsOu3Mo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:b1:e4:1a:1b:93:22:d3:12:63:d1:26:8d:71:3f:e4:0f:16: 05:67:16:f9:ed:92:ed:af:63:d5:d8:ae:1d:5d:60:97:bd:f2: ce:7c:72:58:e7:21:75:f5:c9:24:48:43:22:40:ca:0b:c4:3d: 89:69:87:f5:a9:2f:0a:83:ca:a0:70:70:72:ca:77:e9:4d:16: d3:0e:44:e0:2c:34:7a:18:3c:84:67:2d:24:4c:da:fd:b2:85: 70:03:a0:9d:98:4a:3f:4d:60:c1:8b:1d:7a:92:51:a1:d0:19: 5e:09:ab:6c:db:7f:42:5a:ad:e8:06:9e:8f:9e:64:31:e9:08: 8d:e7:18:a5:32:05:69:c1:00:f0:61:e4:b6:2f:1f:59:5f:43: ed:14:ba:86:5e:ca:c7:98:74:3d:cd:b6:9c:0e:75:fc:54:86: ae:d3:e6:90:97:75:1c:55:5b:91:9a:43:6a:94:2e:e6:e8:28: e9:5a:5b:21:fa:0c:ae:4a:38:ee:f5:e0:5b:89:d9:f4:1c:2f: 82:52:4f:95:6a:25:e0:bb:28:54:d7:0b:16:f7:e0:f1:f8:88: d5:b2:cd:9d:37:69:f9:3a:10:e7:df:4c:da:96:8c:c3:36:02: 20:6b:7d:14:88:26:a8:fb:c0:88:56:2b:04:c8:8b:38:28:5a: 14:2e:92:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtAi9d4KhxqDnXU4DxA/GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhNmNiNjhkZmEyZTM2MzgzOTM0ZGU2ODBlZDAyNTFhYzNh ZWRjY2EwHhcNMjYwMjA5MTQwMDIwWhcNMjYwMjEwMTQwMDIwWjAzMTEwLwYDVQQD EyhiNDc3OGQ5ZjE1YzRmMDViMzg3MmVmZGNkZmYzYTEwZjRiM2IxYTFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocdi/tHpNTas3ecMne/aGPqYugqe H86vPJU4j96BlUQqhlCZl2vHbzecV0o5yB4pD4XfNSgGiKC5+WXfexBzwHl7RPUu WvCUw2Sxpl//gAs7oznz96KzxDmNZ3ia9//arv/K7gUNKM4vQUM4ruJuYmiILUPe ZxebYR2YV6yMy3g3s+nMu0lxAllRYzhwTSJ5Izd8SRRfW7lZLgvVKLvRDpSc6v5l xtEU5hPeGmVWN66PCQyAkDbUz7bgN+cRVo4EGjDOkWq3Gm8dspXqWiQstVkZ09K5 BCZkVfdILG/M8MerZmWa78A56UYpeGV02TwNdUSPJHlfYz3/K1d4OEbvKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLR3jZ8VxPBbOHLv3N/zoQ9LOxobMB8GA1UdIwQY MBaAFGpsto36LjY4OTTeaA7QJRrDrtzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZjNiZTYtMjkzYS00YmNlLTlhNzIt ODdmZjZlNjkwNTkxLzEvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC8wZjNiZTYtMjkzYS00YmNlLTlhNzItODdmZjZlNjkwNTkx LzEvYW15Mmpmb3VOamc1Tk41b0R0QWxHc091M01vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcrHkGhuT ItMSY9EmjXE/5A8WBWcW+e2S7a9j1diuHV1gl73yznxyWOchdfXJJEhDIkDKC8Q9 iWmH9akvCoPKoHBwcsp36U0W0w5E4Cw0ehg8hGctJEza/bKFcAOgnZhKP01gwYsd epJRodAZXgmrbNt/Qlqt6Aaej55kMekIjecYpTIFacEA8GHkti8fWV9D7RS6hl7K x5h0Pc22nA51/FSGrtPmkJd1HFVbkZpDapQu5ugo6VpbIfoMrko47vXgW4nZ9Bwv glJPlWol4LsoVNcLFvfg8fiI1bLNnTdp+ToQ599M2paMwzYCIGt9FIgmqPvAiFYr BMiLOChaFC6SsQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:38 2026 by rpki-client