This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft File: aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft (raw, json) Hash identifier: i4Gqmbu7Ei44HKWjiyJQOefZwHcPejE2FxfqHKQIhus= Subject key identifier: 12:2E:50:87:E5:6F:74:1E:4F:1E:F2:AC:B7:C9:8A:8A:CC:07:D7:B9 Authority key identifier: 68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2 Certificate issuer: /CN=68c16663692f6c684574f6460aace6257fb792a2 Certificate serial: 019C41D873D17740C0E9DAE038CF88CF5FE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft Manifest number: 0358 Signing time: Mon 09 Feb 2026 10:00:30 +0000 Manifest this update: Mon 09 Feb 2026 10:00:30 +0000 Manifest next update: Tue 10 Feb 2026 10:00:30 +0000 Files and hashes: 1: Yw7NMxdJYOxSPv5-0Sfz5ahXRag.roa (hash: ZnICYKONJJxjDwVZ62F3+nflf0A7dKQxRmtplOM55/A=) 2: aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl (hash: NDKpAj1XFp8BlBpBckVthT0pGz9hDmQ4OjgpD90Q82g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:d8:73:d1:77:40:c0:e9:da:e0:38:cf:88:cf:5f:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68c16663692f6c684574f6460aace6257fb792a2 Validity Not Before: Feb 9 10:00:30 2026 GMT Not After : Feb 10 10:00:30 2026 GMT Subject: CN=122e5087e56f741e4f1ef2acb7c98a8acc07d7b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:9b:1c:fb:bb:fb:56:b9:99:2e:40:6b:8d:80: 0f:c3:c8:3a:1e:8d:f9:0e:d5:a7:0b:0f:8b:b1:8c: 93:0c:8c:f8:ce:db:ae:fb:f6:4c:96:b6:be:d4:cd: e9:bb:87:96:dc:bc:76:48:6f:ab:26:18:58:42:8d: ea:cc:d5:36:b5:90:36:36:d1:27:79:7c:43:e5:b7: c8:be:76:56:d7:42:dc:70:ee:de:63:82:3b:7f:ed: 2f:f7:b8:4a:a8:ad:39:19:07:48:49:5d:e9:95:34: 26:ae:88:50:4e:5e:88:b1:fc:5a:8c:6e:fa:29:14: 33:29:19:a9:07:73:f8:5f:48:77:95:25:ad:71:0a: 0e:fb:75:9e:38:cd:e6:17:87:98:ac:14:72:27:a6: f2:e8:8d:f4:dc:27:d3:ad:3c:db:d3:dd:91:83:59: 3d:ae:d0:8c:fa:92:0c:6a:69:bd:6a:14:45:61:2c: c9:62:32:0e:15:f2:e2:db:04:36:8d:06:27:1d:02: 3b:24:45:1c:aa:53:53:03:02:50:c7:cb:29:77:57: 17:0e:a2:e9:91:28:ff:d4:d5:e0:fe:17:c9:07:e9: 36:7a:a4:13:b1:a5:fd:99:b8:e0:9a:00:74:40:bb: e0:b6:fc:a8:58:ee:55:d3:b0:ba:f8:2e:99:34:86: 61:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:2E:50:87:E5:6F:74:1E:4F:1E:F2:AC:B7:C9:8A:8A:CC:07:D7:B9 X509v3 Authority Key Identifier: keyid:68:C1:66:63:69:2F:6C:68:45:74:F6:46:0A:AC:E6:25:7F:B7:92:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMFmY2kvbGhFdPZGCqzmJX-3kqI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/57c6ea-1bb5-42a0-8679-d07fa3e6b3d3/1/aMFmY2kvbGhFdPZGCqzmJX-3kqI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:49:81:d9:3a:f3:b8:a6:65:59:c6:05:22:3f:ea:09:ef:75: a7:7b:f0:e7:5a:a8:b2:89:13:42:5a:2b:9f:a6:fc:76:46:e2: d5:00:86:78:3a:33:c0:4d:51:40:34:80:08:e6:f5:42:92:e0: a1:d1:3e:31:b2:d9:f7:0b:14:94:4f:b1:db:18:a3:d0:80:d3: 54:d2:98:72:70:65:73:7f:2c:f6:b2:5a:52:02:7d:db:73:90: 30:08:25:2f:1b:5a:0a:84:ab:0d:55:c6:a7:33:a1:85:3a:32: e8:00:d2:5b:51:98:66:16:ef:93:45:21:bd:ba:48:b8:59:ac: 8c:20:73:28:0c:19:a0:dc:66:fa:3b:91:1d:95:c1:f4:d1:17: 4e:06:fb:13:52:f4:7f:7b:ba:a9:81:17:29:fd:d1:b1:31:f4: 9c:9e:ac:cc:4a:ac:a8:17:e5:ca:21:8d:2e:39:d1:7a:c9:3d: 35:b7:ad:25:c2:c2:5f:f0:5f:a9:b6:71:e7:65:10:77:23:a6: b1:c1:df:a7:af:ab:70:71:f0:3e:be:9d:76:3b:56:80:8d:ca: 1f:c5:ec:5a:ed:6e:23:24:0a:b4:fa:29:15:aa:eb:0b:7a:00: 0b:42:d8:81:14:09:cf:8e:78:eb:24:5e:87:12:3e:cc:58:91: 01:89:56:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxB2HPRd0DA6drgOM+Iz1/pMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4YzE2NjYzNjkyZjZjNjg0NTc0ZjY0NjBhYWNlNjI1N2Zi NzkyYTIwHhcNMjYwMjA5MTAwMDMwWhcNMjYwMjEwMTAwMDMwWjAzMTEwLwYDVQQD EygxMjJlNTA4N2U1NmY3NDFlNGYxZWYyYWNiN2M5OGE4YWNjMDdkN2I5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35sc+7v7VrmZLkBrjYAPw8g6Ho35 DtWnCw+LsYyTDIz4ztuu+/ZMlra+1M3pu4eW3Lx2SG+rJhhYQo3qzNU2tZA2NtEn eXxD5bfIvnZW10LccO7eY4I7f+0v97hKqK05GQdISV3plTQmrohQTl6IsfxajG76 KRQzKRmpB3P4X0h3lSWtcQoO+3WeOM3mF4eYrBRyJ6by6I303CfTrTzb092Rg1k9 rtCM+pIMamm9ahRFYSzJYjIOFfLi2wQ2jQYnHQI7JEUcqlNTAwJQx8spd1cXDqLp kSj/1NXg/hfJB+k2eqQTsaX9mbjgmgB0QLvgtvyoWO5V07C6+C6ZNIZhTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBIuUIflb3QeTx7yrLfJiorMB9e5MB8GA1UdIwQY MBaAFGjBZmNpL2xoRXT2Rgqs5iV/t5KiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81N2M2ZWEtMWJiNS00MmEwLTg2Nzkt ZDA3ZmEzZTZiM2QzLzEvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi81N2M2ZWEtMWJiNS00MmEwLTg2NzktZDA3ZmEzZTZiM2Qz LzEvYU1GbVkya3ZiR2hGZFBaR0Nxem1KWC0za3FJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWUmB2Trz uKZlWcYFIj/qCe91p3vw51qosokTQlorn6b8dkbi1QCGeDozwE1RQDSACOb1QpLg odE+MbLZ9wsUlE+x2xij0IDTVNKYcnBlc38s9rJaUgJ923OQMAglLxtaCoSrDVXG pzOhhToy6ADSW1GYZhbvk0UhvbpIuFmsjCBzKAwZoNxm+juRHZXB9NEXTgb7E1L0 f3u6qYEXKf3RsTH0nJ6szEqsqBflyiGNLjnResk9NbetJcLCX/BfqbZx52UQdyOm scHfp6+rcHHwPr6ddjtWgI3KH8XsWu1uIyQKtPopFarrC3oAC0LYgRQJz4546yRe hxI+zFiRAYlWgA== -----END CERTIFICATE-----Generated at Mon Feb 9 19:48:23 2026 by rpki-client