This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft File: ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft (raw, json) Hash identifier: l9G0Du7FksTLZAPSKkWrmT3p9EkGnm2FzVXhjS3azLg= Subject key identifier: 84:ED:03:C3:8E:C8:88:81:7A:40:6B:A6:EA:CD:50:48:25:71:E2:34 Authority key identifier: 6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74 Certificate issuer: /CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974 Certificate serial: 019C420F8B8967452EDCAD6BDEF41ABEAA8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft Manifest number: 1812 Signing time: Mon 09 Feb 2026 11:00:40 +0000 Manifest this update: Mon 09 Feb 2026 11:00:40 +0000 Manifest next update: Tue 10 Feb 2026 11:00:40 +0000 Files and hashes: 1: ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl (hash: FSQKiV2Liy60S9nBfATmCcUmGEM2cXJlz7w4Gv086T8=) 2: goauVICOFKFE1porgUT28qkrY40.roa (hash: FzUBYAt3u7B+H1TQuJndqSy/KOs9unqwMiMZuvpu6gk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:8b:89:67:45:2e:dc:ad:6b:de:f4:1a:be:aa:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b20818b186b0b9cb09af5420d1e5ae334fe3974 Validity Not Before: Feb 9 11:00:40 2026 GMT Not After : Feb 10 11:00:40 2026 GMT Subject: CN=84ed03c38ec888817a406ba6eacd50482571e234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bd:f0:44:34:f5:61:94:ba:88:5d:8a:84:bc: 0b:1d:36:d4:2e:40:54:6d:28:c8:3a:ea:04:a8:11: 93:08:06:90:c3:5f:9b:89:d5:ed:c1:cc:4e:d6:bd: 94:4e:f7:e0:76:f1:c3:14:ea:82:76:3f:67:04:82: e6:1f:91:49:64:16:b1:1a:f1:df:94:63:06:fe:46: 2c:5d:88:c7:62:1d:22:33:1f:98:8c:5e:b0:6d:22: 33:fb:67:8b:34:60:8e:51:1c:1a:82:c1:79:86:ad: 83:ca:e2:ea:c5:b3:85:2e:22:48:fb:4b:f5:ff:f9: 3e:ab:d1:05:5a:a4:5f:37:6f:ab:53:04:dc:02:e4: b8:3d:93:a9:a4:ec:4a:62:48:3e:3d:43:70:b8:2a: bb:c7:a5:33:db:a0:45:ca:32:6a:00:0c:46:9d:8a: 28:61:10:6d:db:26:0a:c3:13:4a:0a:c6:85:ba:64: c2:67:53:ed:35:fb:a0:24:d3:01:2b:55:7a:fa:96: 3c:5e:05:ec:0b:44:0f:92:43:12:d0:15:ba:61:38: f7:7d:84:f5:17:6e:81:21:3d:de:2d:fc:f2:44:9e: 07:e3:33:e7:a3:6d:02:0b:f8:76:f4:58:b2:78:eb: 2c:be:46:8f:b8:87:7e:6c:af:30:42:ee:4e:d3:7c: b4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:ED:03:C3:8E:C8:88:81:7A:40:6B:A6:EA:CD:50:48:25:71:E2:34 X509v3 Authority Key Identifier: keyid:6B:20:81:8B:18:6B:0B:9C:B0:9A:F5:42:0D:1E:5A:E3:34:FE:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayCBixhrC5ywmvVCDR5a4zT-OXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/02f95e-5fe5-4c9a-84d7-e5c9c2e8e9bf/1/ayCBixhrC5ywmvVCDR5a4zT-OXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:b8:0f:7c:92:30:2a:7f:4c:7a:20:63:aa:09:2d:06:02:2a: d2:93:8f:83:1f:51:9f:98:7d:2f:35:03:bb:2a:3b:31:5b:77: 39:ba:4c:5a:b8:f6:85:38:38:a4:a4:dc:5e:8d:b4:33:b4:01: 88:9c:16:4d:6e:23:36:a6:f3:58:08:c8:65:ea:fe:1d:3e:8b: 6a:10:1e:eb:15:1d:5a:7b:f9:2f:2e:34:c0:6a:8f:56:9b:43: ab:67:94:5c:2a:2a:34:a5:64:16:0a:b3:83:29:fa:64:74:9f: b7:09:10:db:4d:1d:1f:96:ef:6d:f9:84:83:94:79:8a:1e:15: 02:ec:17:99:cf:c8:28:9c:dd:4e:d3:f7:26:e6:f4:49:81:03: 20:3a:6a:7f:d9:a6:13:d5:d1:61:fb:52:f4:70:d3:98:63:73: dd:e6:50:84:4a:76:de:d3:95:84:c9:90:1f:ba:d3:49:d5:0a: 25:32:97:19:d2:12:d9:d8:a1:a2:01:2a:33:bc:7e:39:68:34: 0c:cc:47:af:38:ad:d9:00:53:91:7e:a4:62:60:c4:96:6d:30: f0:d7:01:07:58:60:b8:a1:3e:08:9c:fd:e1:ef:3b:bb:a1:28: fe:6a:97:0a:5f:6e:20:b1:1f:4c:5d:04:84:72:55:45:95:e0: f6:b6:9d:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD4uJZ0Uu3K1r3vQavqqMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMjA4MThiMTg2YjBiOWNiMDlhZjU0MjBkMWU1YWUzMzRm ZTM5NzQwHhcNMjYwMjA5MTEwMDQwWhcNMjYwMjEwMTEwMDQwWjAzMTEwLwYDVQQD Eyg4NGVkMDNjMzhlYzg4ODgxN2E0MDZiYTZlYWNkNTA0ODI1NzFlMjM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0L3wRDT1YZS6iF2KhLwLHTbULkBU bSjIOuoEqBGTCAaQw1+bidXtwcxO1r2UTvfgdvHDFOqCdj9nBILmH5FJZBaxGvHf lGMG/kYsXYjHYh0iMx+YjF6wbSIz+2eLNGCOURwagsF5hq2DyuLqxbOFLiJI+0v1 //k+q9EFWqRfN2+rUwTcAuS4PZOppOxKYkg+PUNwuCq7x6Uz26BFyjJqAAxGnYoo YRBt2yYKwxNKCsaFumTCZ1PtNfugJNMBK1V6+pY8XgXsC0QPkkMS0BW6YTj3fYT1 F26BIT3eLfzyRJ4H4zPno20CC/h29FiyeOssvkaPuId+bK8wQu5O03y02QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFITtA8OOyIiBekBrpurNUEglceI0MB8GA1UdIwQY MBaAFGsggYsYawucsJr1Qg0eWuM0/jl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8wMmY5NWUtNWZlNS00YzlhLTg0ZDct ZTVjOWMyZThlOWJmLzEvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8wMmY5NWUtNWZlNS00YzlhLTg0ZDctZTVjOWMyZThlOWJm LzEvYXlDQml4aHJDNXl3bXZWQ0RSNWE0elQtT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn7gPfJIw Kn9MeiBjqgktBgIq0pOPgx9Rn5h9LzUDuyo7MVt3ObpMWrj2hTg4pKTcXo20M7QB iJwWTW4jNqbzWAjIZer+HT6LahAe6xUdWnv5Ly40wGqPVptDq2eUXCoqNKVkFgqz gyn6ZHSftwkQ200dH5bvbfmEg5R5ih4VAuwXmc/IKJzdTtP3Jub0SYEDIDpqf9mm E9XRYftS9HDTmGNz3eZQhEp23tOVhMmQH7rTSdUKJTKXGdIS2dihogEqM7x+OWg0 DMxHrzit2QBTkX6kYmDElm0w8NcBB1hguKE+CJz94e87u6Eo/mqXCl9uILEfTF0E hHJVRZXg9rad0Q== -----END CERTIFICATE-----Generated at Mon Feb 9 21:04:34 2026 by rpki-client