This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft File: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft (raw, json) Hash identifier: caDqxFkii4qZ6v0lT7vJ0W7MHrsV+vLmuUjp1E9SSkk= Subject key identifier: 4D:A2:8A:D6:61:0F:BC:07:DD:04:DA:B7:47:4C:D5:C8:A6:D2:0B:68 Authority key identifier: 68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD Certificate issuer: /CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Certificate serial: 019C42EB0F4EC55AAE20BDFB757FC8CF9599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft Manifest number: 0220 Signing time: Mon 09 Feb 2026 15:00:26 +0000 Manifest this update: Mon 09 Feb 2026 15:00:26 +0000 Manifest next update: Tue 10 Feb 2026 15:00:26 +0000 Files and hashes: 1: aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl (hash: iO/gMsAISOmBKCo5END93W2fG93djWSIdbqMcQL1Oos=) 2: mgz9EFBf6Cu62EGHg9y7ODrXhBY.roa (hash: +iF1P92dSD4jPGQcn6HDLmgTQXRyj8R6cxRcf4J2hNI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:0f:4e:c5:5a:ae:20:bd:fb:75:7f:c8:cf:95:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a6d2ed46f9d89b1dd621775bd9fb5536bf44cd Validity Not Before: Feb 9 15:00:26 2026 GMT Not After : Feb 10 15:00:26 2026 GMT Subject: CN=4da28ad6610fbc07dd04dab7474cd5c8a6d20b68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e5:3a:b2:dc:34:8d:fd:f3:dc:a5:fd:69:2d: a7:f4:5e:f9:1d:a9:ad:bd:86:ee:ef:ff:4b:83:90: cb:8f:ec:bf:b9:40:a2:58:8d:70:98:3f:e9:27:68: 2c:3f:2a:5d:f9:fe:e4:da:61:18:ce:28:0a:10:3d: e8:db:67:7d:39:11:9e:ae:2a:2c:66:20:b4:7e:e0: b1:1e:28:df:89:26:4b:b6:0d:3a:36:bb:8a:91:22: 9e:a2:e7:b9:2b:14:54:30:98:e1:a6:96:55:04:61: 3b:45:1b:5f:ec:7b:b5:64:5b:c1:70:37:d2:34:8a: 3f:64:a7:c8:bc:5e:6f:ae:df:06:93:0a:b5:f6:59: b8:cb:65:b1:e2:66:76:9e:3c:c2:8e:00:29:fd:ec: 08:2c:1b:58:fe:6d:a7:39:dd:1b:bc:57:e0:7f:0d: 47:95:9e:98:44:c0:bd:9e:08:6d:c8:0a:b9:34:58: c5:6e:05:da:27:27:3d:b8:33:ed:5e:6e:77:6f:a0: 5d:01:b3:85:84:ee:3d:c9:41:4f:a9:99:31:ab:41: 2a:9d:f6:11:fb:9a:18:10:26:30:08:e1:1e:a5:6e: 30:0a:fb:49:3e:7e:07:6c:d4:9d:36:af:ae:4a:f7: b0:a3:92:d8:bf:9b:3a:e4:56:72:53:ef:e9:fc:d2: f3:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:A2:8A:D6:61:0F:BC:07:DD:04:DA:B7:47:4C:D5:C8:A6:D2:0B:68 X509v3 Authority Key Identifier: keyid:68:A6:D2:ED:46:F9:D8:9B:1D:D6:21:77:5B:D9:FB:55:36:BF:44:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/84/736915-078f-44fa-8dea-08a22de77e5b/1/aKbS7Ub52Jsd1iF3W9n7VTa_RM0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:25:2a:25:85:44:d7:9e:ee:ae:51:5b:c5:20:66:4f:ea:8d: 2d:44:2e:89:ab:ea:95:0e:86:93:c5:b7:ae:a2:1e:27:1d:3e: ea:1a:fb:f9:7d:ba:e8:2b:6e:ec:5f:75:e9:39:d7:8b:f6:f3: 90:a6:9f:7e:e1:ed:58:9c:c1:51:1c:aa:4c:c2:fa:6f:32:11: 3d:b9:28:52:9d:de:df:64:0d:59:bd:aa:d4:8e:0e:9e:6e:f4: c9:20:29:7f:3a:cd:cb:4c:69:64:19:33:57:dd:fa:d4:47:06: fa:5b:a2:b3:1c:ef:d8:68:04:61:1d:d7:ff:8a:9e:46:32:b2: c2:b6:68:9c:1c:f8:64:bc:cb:35:88:31:24:b4:7a:ed:78:6f: 8d:59:de:04:7d:d6:48:f9:31:22:68:52:b1:b7:b1:43:7f:6c: 99:0e:4e:cd:be:dc:e9:a2:04:10:82:75:27:bc:a1:00:95:9e: 1e:40:33:a3:f4:d3:1a:04:bd:e3:7b:91:b1:0d:68:2a:99:de: c4:36:7f:be:8c:c6:e8:9f:bc:8c:3e:9e:c1:1b:3f:48:a4:5c: bf:6d:33:f7:80:71:fe:ca:67:e9:c2:7e:23:80:1d:0d:2d:16: d1:99:1c:60:b5:93:48:ef:18:67:ad:64:a5:74:9b:75:22:52: e5:e8:4a:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC6w9OxVquIL37dX/Iz5WZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YTZkMmVkNDZmOWQ4OWIxZGQ2MjE3NzViZDlmYjU1MzZi ZjQ0Y2QwHhcNMjYwMjA5MTUwMDI2WhcNMjYwMjEwMTUwMDI2WjAzMTEwLwYDVQQD Eyg0ZGEyOGFkNjYxMGZiYzA3ZGQwNGRhYjc0NzRjZDVjOGE2ZDIwYjY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweU6stw0jf3z3KX9aS2n9F75Hamt vYbu7/9Lg5DLj+y/uUCiWI1wmD/pJ2gsPypd+f7k2mEYzigKED3o22d9ORGerios ZiC0fuCxHijfiSZLtg06NruKkSKeoue5KxRUMJjhppZVBGE7RRtf7Hu1ZFvBcDfS NIo/ZKfIvF5vrt8Gkwq19lm4y2Wx4mZ2njzCjgAp/ewILBtY/m2nOd0bvFfgfw1H lZ6YRMC9nghtyAq5NFjFbgXaJyc9uDPtXm53b6BdAbOFhO49yUFPqZkxq0EqnfYR +5oYECYwCOEepW4wCvtJPn4HbNSdNq+uSvewo5LYv5s65FZyU+/p/NLzswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE2iitZhD7wH3QTat0dM1cim0gtoMB8GA1UdIwQY MBaAFGim0u1G+dibHdYhd1vZ+1U2v0TNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEt MDhhMjJkZTc3ZTViLzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84NC83MzY5MTUtMDc4Zi00NGZhLThkZWEtMDhhMjJkZTc3ZTVi LzEvYUtiUzdVYjUySnNkMWlGM1c5bjdWVGFfUk0wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAICUqJYVE 157urlFbxSBmT+qNLUQuiavqlQ6Gk8W3rqIeJx0+6hr7+X266Ctu7F916TnXi/bz kKaffuHtWJzBURyqTML6bzIRPbkoUp3e32QNWb2q1I4Onm70ySApfzrNy0xpZBkz V9361EcG+luisxzv2GgEYR3X/4qeRjKywrZonBz4ZLzLNYgxJLR67XhvjVneBH3W SPkxImhSsbexQ39smQ5Ozb7c6aIEEIJ1J7yhAJWeHkAzo/TTGgS943uRsQ1oKpne xDZ/vozG6J+8jD6ewRs/SKRcv20z94Bx/spn6cJ+I4AdDS0W0ZkcYLWTSO8YZ61k pXSbdSJS5ehKYg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:29:39 2026 by rpki-client