This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft File: aqso6A3xrWqgQDFbhOMmqiOgQXw.mft (raw, json) Hash identifier: ldKrUtuB8wcZSG+l/aEU7WoihKwq7ZapChfytiYAd6s= Subject key identifier: 0C:FF:DA:91:ED:9A:66:A6:74:B8:A3:DF:17:95:A7:C5:48:97:B1:00 Authority key identifier: 6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C Certificate issuer: /CN=6aab28e80df1ad6aa040315b84e326aa23a0417c Certificate serial: 019C41A1E07FE00435B131A511EE1532F229 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft Manifest number: 0979 Signing time: Mon 09 Feb 2026 09:00:53 +0000 Manifest this update: Mon 09 Feb 2026 09:00:53 +0000 Manifest next update: Tue 10 Feb 2026 09:00:53 +0000 Files and hashes: 1: aqso6A3xrWqgQDFbhOMmqiOgQXw.crl (hash: xLVjVVniuYAiLUyk3lK/RV1SQXv9vvcXK1GHhAY4G8s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 09:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:a1:e0:7f:e0:04:35:b1:31:a5:11:ee:15:32:f2:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6aab28e80df1ad6aa040315b84e326aa23a0417c Validity Not Before: Feb 9 09:00:53 2026 GMT Not After : Feb 10 09:00:53 2026 GMT Subject: CN=0cffda91ed9a66a674b8a3df1795a7c54897b100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a0:2c:92:d6:33:6a:57:3f:c3:75:10:98:a3: 22:7c:e7:f4:54:d9:98:32:be:d1:49:88:0d:19:be: 5f:38:e0:45:88:de:5b:15:8f:4c:d7:f8:c3:5d:d7: bc:f4:eb:08:8e:a5:eb:90:dd:be:94:c0:4e:f5:cc: ee:1b:61:0d:d8:bb:31:d2:89:df:ff:39:63:82:39: 4e:ab:cd:d2:ed:75:c3:99:c5:b5:82:14:0a:f7:93: db:eb:8c:cf:63:c4:8e:6e:89:4c:be:de:90:b3:51: f1:d1:94:db:d2:1b:21:c7:d4:6c:27:b7:5f:93:56: 00:39:69:e2:13:6a:f5:a5:8f:93:81:07:54:73:90: 79:82:49:f1:6f:0d:76:d0:04:08:ce:fa:ed:b0:a0: ed:a9:4f:d0:4a:99:42:22:5b:f1:59:8d:15:83:6d: fc:11:d8:71:4a:55:6b:a4:ea:f9:db:99:9a:86:00: 34:9d:9f:83:84:3f:01:f3:99:ff:d1:9d:01:8b:a8: dc:09:ab:ff:4c:b6:d0:c7:41:e9:5f:24:d1:ff:6a: ae:b3:36:56:ed:24:fb:97:78:a5:02:31:2a:6d:45: d7:34:08:76:59:75:62:bc:bf:7c:1e:3b:63:4e:14: 45:5c:30:54:81:88:44:2c:2c:69:3c:b0:61:f3:56: 5c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FF:DA:91:ED:9A:66:A6:74:B8:A3:DF:17:95:A7:C5:48:97:B1:00 X509v3 Authority Key Identifier: keyid:6A:AB:28:E8:0D:F1:AD:6A:A0:40:31:5B:84:E3:26:AA:23:A0:41:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqso6A3xrWqgQDFbhOMmqiOgQXw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/961e05-3778-48fa-ae38-490c2eda162f/1/aqso6A3xrWqgQDFbhOMmqiOgQXw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:24:de:3e:bb:b3:28:e7:4a:65:5d:a0:2e:94:0c:10:8a:aa: 7a:1d:1b:8c:46:a1:c8:f2:bd:b6:f5:ee:e0:ea:cc:20:55:33: 40:8c:95:43:bb:e9:8a:15:d2:77:0b:11:cb:36:9d:72:40:e8: f3:70:7e:15:d9:a2:e1:98:d1:0a:59:19:ea:67:b6:ce:fd:53: c8:fd:a9:00:f1:92:22:99:eb:1f:b3:67:c9:54:2b:e1:60:b4: c2:9e:7f:a9:67:16:ea:5c:3a:63:57:86:e1:1b:95:74:16:24: 1c:d3:ec:e1:16:e4:b9:04:76:e4:c3:cc:88:84:de:b5:17:33: 05:2d:48:4d:0d:9a:83:d2:00:cb:d8:63:14:da:ec:37:d1:7a: 7b:f1:7e:b3:81:7c:a6:93:a8:3b:99:32:31:7c:57:ce:cf:ab: df:a4:8e:b4:49:7b:c3:8d:27:21:c2:41:06:e6:b7:93:ab:9f: f0:db:3a:49:33:f5:7e:ff:a7:51:d1:19:05:a3:20:2f:74:bb: c0:c8:80:a6:ab:0e:bd:e0:17:18:3e:0e:ff:29:8c:9d:bd:f4: 61:5d:63:d8:ff:a8:f2:ab:ca:d1:78:2c:61:2a:3f:ab:a6:f4: 56:68:f7:9b:2e:26:3d:c7:c9:52:e9:e1:c1:9b:d9:c4:81:3e: 60:e0:6d:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBoeB/4AQ1sTGlEe4VMvIpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhYWIyOGU4MGRmMWFkNmFhMDQwMzE1Yjg0ZTMyNmFhMjNh MDQxN2MwHhcNMjYwMjA5MDkwMDUzWhcNMjYwMjEwMDkwMDUzWjAzMTEwLwYDVQQD EygwY2ZmZGE5MWVkOWE2NmE2NzRiOGEzZGYxNzk1YTdjNTQ4OTdiMTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqAsktYzalc/w3UQmKMifOf0VNmY Mr7RSYgNGb5fOOBFiN5bFY9M1/jDXde89OsIjqXrkN2+lMBO9czuG2EN2Lsx0onf /zljgjlOq83S7XXDmcW1ghQK95Pb64zPY8SObolMvt6Qs1Hx0ZTb0hshx9RsJ7df k1YAOWniE2r1pY+TgQdUc5B5gknxbw120AQIzvrtsKDtqU/QSplCIlvxWY0Vg238 EdhxSlVrpOr525mahgA0nZ+DhD8B85n/0Z0Bi6jcCav/TLbQx0HpXyTR/2quszZW 7ST7l3ilAjEqbUXXNAh2WXVivL98HjtjThRFXDBUgYhELCxpPLBh81ZcLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAz/2pHtmmamdLij3xeVp8VIl7EAMB8GA1UdIwQY MBaAFGqrKOgN8a1qoEAxW4TjJqojoEF8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny85NjFlMDUtMzc3OC00OGZhLWFlMzgt NDkwYzJlZGExNjJmLzEvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny85NjFlMDUtMzc3OC00OGZhLWFlMzgtNDkwYzJlZGExNjJm LzEvYXFzbzZBM3hyV3FnUURGYmhPTW1xaU9nUVh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyTePruz KOdKZV2gLpQMEIqqeh0bjEahyPK9tvXu4OrMIFUzQIyVQ7vpihXSdwsRyzadckDo 83B+Fdmi4ZjRClkZ6me2zv1TyP2pAPGSIpnrH7NnyVQr4WC0wp5/qWcW6lw6Y1eG 4RuVdBYkHNPs4RbkuQR25MPMiITetRczBS1ITQ2ag9IAy9hjFNrsN9F6e/F+s4F8 ppOoO5kyMXxXzs+r36SOtEl7w40nIcJBBua3k6uf8Ns6STP1fv+nUdEZBaMgL3S7 wMiApqsOveAXGD4O/ymMnb30YV1j2P+o8qvK0XgsYSo/q6b0Vmj3my4mPcfJUunh wZvZxIE+YOBtlQ== -----END CERTIFICATE-----Generated at Mon Feb 9 16:56:42 2026 by rpki-client