This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft File: aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft (raw, json) Hash identifier: bCJjwCT58zdkLKLEnpGA8wUABbpg81aS5X4HewUxaEg= Subject key identifier: B0:C4:A3:D1:D7:9A:CD:5C:27:86:9D:66:DF:A9:E5:B8:5D:E3:09:35 Authority key identifier: 69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5 Certificate issuer: /CN=696193e55638864ed69cd947b750f321674a64a5 Certificate serial: 019C42467AA66532A6D8951A1C872E58B4D9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft Manifest number: 075B Signing time: Mon 09 Feb 2026 12:00:41 +0000 Manifest this update: Mon 09 Feb 2026 12:00:41 +0000 Manifest next update: Tue 10 Feb 2026 12:00:41 +0000 Files and hashes: 1: aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl (hash: /PP1fNR/LkFeAm+wrpySrHo7q20HAd74PmIijY//Y6E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:7a:a6:65:32:a6:d8:95:1a:1c:87:2e:58:b4:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=696193e55638864ed69cd947b750f321674a64a5 Validity Not Before: Feb 9 12:00:41 2026 GMT Not After : Feb 10 12:00:41 2026 GMT Subject: CN=b0c4a3d1d79acd5c27869d66dfa9e5b85de30935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:d6:b5:50:c1:77:b6:c0:e4:72:60:5a:29:c1: 49:a7:f7:06:8c:1e:cb:54:f8:ee:c7:9a:59:d0:5a: 1b:d6:de:f5:03:13:a7:e1:a4:08:ea:d1:a6:08:53: 7b:a1:44:e7:49:b8:32:bc:6a:23:7c:9c:0f:ee:22: 71:8a:6b:d9:29:83:32:c1:bb:39:db:4c:39:27:5e: 07:a9:b6:ee:af:63:b8:c9:04:de:b9:49:af:85:54: f5:4a:84:80:8c:2f:8c:80:ff:13:00:78:c9:29:ae: c1:9a:0f:86:a1:89:3b:30:eb:d6:ae:10:2f:29:96: 5d:7b:51:0a:fe:a7:3c:2c:e6:48:08:41:0a:9e:44: 23:bc:93:8c:5f:a6:a8:22:62:59:97:8e:b2:57:63: bb:a7:c0:97:0b:d4:b6:e7:74:fb:44:7b:8a:8e:79: 3f:21:65:a5:56:e4:37:a1:02:fa:4f:f0:57:ab:42: c5:3e:29:94:d9:66:7c:5e:ef:f8:11:41:dc:90:f6: 28:ac:1f:07:5b:48:ca:f6:14:a9:60:29:5d:a9:b8: 16:ad:af:0d:2a:91:8e:e1:4b:98:11:9c:55:8c:1a: 9e:6f:ed:71:be:91:b7:82:b7:d0:4a:f4:e3:13:9a: 9f:54:7f:17:f0:12:a3:34:6e:19:5c:c9:17:6b:3b: 23:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C4:A3:D1:D7:9A:CD:5C:27:86:9D:66:DF:A9:E5:B8:5D:E3:09:35 X509v3 Authority Key Identifier: keyid:69:61:93:E5:56:38:86:4E:D6:9C:D9:47:B7:50:F3:21:67:4A:64:A5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWGT5VY4hk7WnNlHt1DzIWdKZKU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/83/baf952-4ba7-443a-bc0c-7d43b3357cd7/1/aWGT5VY4hk7WnNlHt1DzIWdKZKU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:0d:d8:e4:11:3e:b3:7f:7b:27:13:e8:fa:6f:76:db:f6:99: 43:f9:b7:98:24:e0:3c:01:f3:65:82:84:dc:da:71:27:05:05: 79:31:c9:10:98:5e:b7:63:ae:37:04:56:cd:14:78:94:1a:1c: c1:67:5f:1e:4e:76:ce:19:7b:0c:d2:66:b3:dc:6f:f6:9a:cc: bf:42:e3:05:1e:9a:bd:e3:82:49:84:e2:b3:c6:ee:e2:b3:5e: c0:16:7e:c9:99:25:44:27:ff:d2:7b:c7:f7:19:3c:dd:a9:80: 80:f8:b9:9a:50:8b:0b:3b:0a:cf:48:e4:f5:7d:62:f5:de:d8: ca:14:4b:31:d3:ca:11:d2:01:ce:67:75:39:00:1f:db:bf:40: b9:0d:e2:eb:45:06:99:ea:b8:c9:59:2a:13:7c:d1:d3:9f:68: be:18:4b:60:28:1e:a5:d2:a6:0d:ff:c7:d6:d3:39:a1:37:7a: ef:2c:d1:1c:83:d7:93:8f:2b:f5:51:3e:a2:fb:03:c9:0f:1d: f6:25:81:4c:36:b0:c6:e6:05:b3:ed:c1:a2:40:67:39:ea:41: fd:78:79:19:75:74:6e:ae:b1:09:b3:92:43:6c:00:7e:a2:73: a5:a0:df:e1:e7:40:9e:fe:17:f6:44:4b:6d:12:59:d5:3a:a7: c6:3b:2b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRnqmZTKm2JUaHIcuWLTZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NjE5M2U1NTYzODg2NGVkNjljZDk0N2I3NTBmMzIxNjc0 YTY0YTUwHhcNMjYwMjA5MTIwMDQxWhcNMjYwMjEwMTIwMDQxWjAzMTEwLwYDVQQD EyhiMGM0YTNkMWQ3OWFjZDVjMjc4NjlkNjZkZmE5ZTViODVkZTMwOTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2da1UMF3tsDkcmBaKcFJp/cGjB7L VPjux5pZ0Fob1t71AxOn4aQI6tGmCFN7oUTnSbgyvGojfJwP7iJximvZKYMywbs5 20w5J14Hqbbur2O4yQTeuUmvhVT1SoSAjC+MgP8TAHjJKa7Bmg+GoYk7MOvWrhAv KZZde1EK/qc8LOZICEEKnkQjvJOMX6aoImJZl46yV2O7p8CXC9S253T7RHuKjnk/ IWWlVuQ3oQL6T/BXq0LFPimU2WZ8Xu/4EUHckPYorB8HW0jK9hSpYCldqbgWra8N KpGO4UuYEZxVjBqeb+1xvpG3grfQSvTjE5qfVH8X8BKjNG4ZXMkXazsj7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLDEo9HXms1cJ4adZt+p5bhd4wk1MB8GA1UdIwQY MBaAFGlhk+VWOIZO1pzZR7dQ8yFnSmSlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMt N2Q0M2IzMzU3Y2Q3LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84My9iYWY5NTItNGJhNy00NDNhLWJjMGMtN2Q0M2IzMzU3Y2Q3 LzEvYVdHVDVWWTRoazdXbk5sSHQxRHpJV2RLWktVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHA3Y5BE+ s397JxPo+m922/aZQ/m3mCTgPAHzZYKE3NpxJwUFeTHJEJhet2OuNwRWzRR4lBoc wWdfHk52zhl7DNJms9xv9prMv0LjBR6aveOCSYTis8bu4rNewBZ+yZklRCf/0nvH 9xk83amAgPi5mlCLCzsKz0jk9X1i9d7YyhRLMdPKEdIBzmd1OQAf279AuQ3i60UG meq4yVkqE3zR059ovhhLYCgepdKmDf/H1tM5oTd67yzRHIPXk48r9VE+ovsDyQ8d 9iWBTDawxuYFs+3BokBnOepB/Xh5GXV0bq6xCbOSQ2wAfqJzpaDf4edAnv4X9kRL bRJZ1TqnxjsrFQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:39 2026 by rpki-client