This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft File: aQetffrtuWAyDtF0BxUki4lasIQ.mft (raw, json) Hash identifier: KPQzcU5Q+RzSWTkj8yQUkNNlHN2UaxKjTB/8Jf2vg3o= Subject key identifier: 14:4F:13:D2:CA:98:E4:BE:54:CB:0E:A4:FD:19:8C:61:9D:84:95:BF Authority key identifier: 69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84 Certificate issuer: /CN=6907ad7dfaedb960320ed1740715248b895ab084 Certificate serial: 019C438FCA83E7211CA0B401A64D6EEB0AE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft Manifest number: 0692 Signing time: Mon 09 Feb 2026 18:00:22 +0000 Manifest this update: Mon 09 Feb 2026 18:00:22 +0000 Manifest next update: Tue 10 Feb 2026 18:00:22 +0000 Files and hashes: 1: aQetffrtuWAyDtF0BxUki4lasIQ.crl (hash: ZSsikWzF0V59h8otzzidtI9YmxU3uNiFRuE1ENQxcYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:8f:ca:83:e7:21:1c:a0:b4:01:a6:4d:6e:eb:0a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6907ad7dfaedb960320ed1740715248b895ab084 Validity Not Before: Feb 9 18:00:22 2026 GMT Not After : Feb 10 18:00:22 2026 GMT Subject: CN=144f13d2ca98e4be54cb0ea4fd198c619d8495bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:77:8b:0d:37:66:d9:7b:9a:b8:c7:c1:64:a2: 2b:bd:e2:b7:7c:38:5e:b4:e0:f1:33:bd:cd:25:9f: a5:77:41:52:59:21:48:95:e2:42:20:c9:79:d1:9b: a3:ea:55:59:d4:bd:31:6a:50:20:93:3d:88:52:75: a8:08:9f:9c:e2:10:3e:99:c8:0e:04:2f:e3:e2:32: 00:c6:b7:e2:37:ac:c0:08:3d:06:ab:d0:f0:52:be: 99:c1:a2:dc:18:4f:35:4d:09:e5:c4:f9:06:45:90: 49:3b:48:9d:67:94:b9:c0:7a:bd:45:ec:a3:cf:53: 4c:b1:26:4a:3d:1c:0a:55:4b:f2:b3:6f:b2:9a:f0: 1a:d5:a1:59:27:71:dc:ae:68:74:fd:2a:ac:e3:5d: a8:2d:61:e5:f0:36:67:d0:79:64:29:cb:29:82:3d: 7c:a3:75:80:f3:72:48:73:d0:c4:50:c9:5f:7c:64: 56:4e:8a:f0:ba:f6:f9:a4:ec:02:58:33:df:3d:91: db:f6:46:95:15:f1:63:ac:db:86:15:9a:1c:c0:52: 8e:4b:c0:6b:36:1b:1f:2b:90:32:38:01:46:bc:d4: 39:13:01:91:5b:8f:18:4b:0c:57:f8:0e:76:ab:c8: c0:0d:b9:dc:18:5d:6e:c7:77:2a:90:ac:e9:6a:47: 4c:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:4F:13:D2:CA:98:E4:BE:54:CB:0E:A4:FD:19:8C:61:9D:84:95:BF X509v3 Authority Key Identifier: keyid:69:07:AD:7D:FA:ED:B9:60:32:0E:D1:74:07:15:24:8B:89:5A:B0:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQetffrtuWAyDtF0BxUki4lasIQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/88/dc07ce-34f1-4ac9-93d7-d1b56c844188/1/aQetffrtuWAyDtF0BxUki4lasIQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:17:6b:ca:b2:f2:c7:1f:44:ed:41:c1:3e:d6:51:07:34:c4: 51:23:ab:80:bd:b1:bf:d1:fd:29:13:e2:6a:d5:54:4f:04:5c: 27:a6:a3:5f:08:b4:ce:7f:df:92:55:9b:28:0d:8e:1e:98:33: ba:95:9b:25:5a:6e:65:1c:b8:e5:a6:4f:f5:bb:47:3f:ec:a2: 91:25:3a:3d:e7:20:76:8a:3e:6d:86:b4:3f:0a:d0:42:21:f4: 4a:d7:f1:d3:93:1d:18:e2:1b:f6:3a:7e:75:39:3d:a7:5f:ee: 91:6a:90:cf:58:03:e8:4b:52:68:a3:01:c2:2f:76:c2:81:1d: 8f:d9:9f:25:8a:8b:ef:95:99:c2:d8:3c:46:12:94:fb:dd:5d: 18:24:95:e2:d5:33:b7:69:be:5f:e8:70:f9:a2:bf:da:9f:ec: bd:1a:06:ae:5c:c7:b1:7d:8a:cc:3d:09:bf:73:7e:7c:4f:73: 50:cb:05:8a:5d:cd:ca:c4:d8:dc:7c:9b:94:98:f0:40:96:27: d0:4f:0f:4d:bc:5a:bf:b5:c7:15:57:d3:eb:e9:74:76:2d:10: 63:d9:fc:40:dc:f1:b7:74:7d:72:45:25:c8:32:fe:a9:da:8b: 0e:f4:78:29:21:17:48:3d:9b:c2:22:02:b2:47:f8:10:f4:c4: 8f:8c:40:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDj8qD5yEcoLQBpk1u6wrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5MDdhZDdkZmFlZGI5NjAzMjBlZDE3NDA3MTUyNDhiODk1 YWIwODQwHhcNMjYwMjA5MTgwMDIyWhcNMjYwMjEwMTgwMDIyWjAzMTEwLwYDVQQD EygxNDRmMTNkMmNhOThlNGJlNTRjYjBlYTRmZDE5OGM2MTlkODQ5NWJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyneLDTdm2XuauMfBZKIrveK3fDhe tODxM73NJZ+ld0FSWSFIleJCIMl50Zuj6lVZ1L0xalAgkz2IUnWoCJ+c4hA+mcgO BC/j4jIAxrfiN6zACD0Gq9DwUr6ZwaLcGE81TQnlxPkGRZBJO0idZ5S5wHq9Reyj z1NMsSZKPRwKVUvys2+ymvAa1aFZJ3Hcrmh0/Sqs412oLWHl8DZn0HlkKcspgj18 o3WA83JIc9DEUMlffGRWTorwuvb5pOwCWDPfPZHb9kaVFfFjrNuGFZocwFKOS8Br NhsfK5AyOAFGvNQ5EwGRW48YSwxX+A52q8jADbncGF1ux3cqkKzpakdMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBRPE9LKmOS+VMsOpP0ZjGGdhJW/MB8GA1UdIwQY MBaAFGkHrX367blgMg7RdAcVJIuJWrCEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9kYzA3Y2UtMzRmMS00YWM5LTkzZDct ZDFiNTZjODQ0MTg4LzEvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OC9kYzA3Y2UtMzRmMS00YWM5LTkzZDctZDFiNTZjODQ0MTg4 LzEvYVFldGZmcnR1V0F5RHRGMEJ4VWtpNGxhc0lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQBdryrLy xx9E7UHBPtZRBzTEUSOrgL2xv9H9KRPiatVUTwRcJ6ajXwi0zn/fklWbKA2OHpgz upWbJVpuZRy45aZP9btHP+yikSU6Pecgdoo+bYa0PwrQQiH0Stfx05MdGOIb9jp+ dTk9p1/ukWqQz1gD6EtSaKMBwi92woEdj9mfJYqL75WZwtg8RhKU+91dGCSV4tUz t2m+X+hw+aK/2p/svRoGrlzHsX2KzD0Jv3N+fE9zUMsFil3NysTY3HyblJjwQJYn 0E8PTbxav7XHFVfT6+l0di0QY9n8QNzxt3R9ckUlyDL+qdqLDvR4KSEXSD2bwiIC skf4EPTEj4xAuA== -----END CERTIFICATE-----Generated at Tue Feb 10 03:00:05 2026 by rpki-client