This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft File: aXJqlhM2--eCCz10joEvSVyHLTU.mft (raw, json) Hash identifier: U70+JSU4mvucLnu3kY6ssOLgrky/7pVCU0IBWJ8lK/I= Subject key identifier: 20:A5:3C:47:4C:E1:3F:C2:03:C7:5A:54:26:FD:74:36:27:7E:C4:DB Authority key identifier: 69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35 Certificate issuer: /CN=69726a961336fbe7820b3d748e812f495c872d35 Certificate serial: 019C432275C7AC13D99A5F4D4034D27B2AFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft Manifest number: 1000 Signing time: Mon 09 Feb 2026 16:00:57 +0000 Manifest this update: Mon 09 Feb 2026 16:00:57 +0000 Manifest next update: Tue 10 Feb 2026 16:00:57 +0000 Files and hashes: 1: K9_4CpntBLOvMEDnKhqNBu7SoZA.roa (hash: OTRSlqVwxM3FVwoxRVSPz7oWV0SpiqYOgPWN/+iIXpM=) 2: aXJqlhM2--eCCz10joEvSVyHLTU.crl (hash: QxX+AtysUevHhr9C0v83Wrt6nGldP4oFchkaDWU95S4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:75:c7:ac:13:d9:9a:5f:4d:40:34:d2:7b:2a:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69726a961336fbe7820b3d748e812f495c872d35 Validity Not Before: Feb 9 16:00:57 2026 GMT Not After : Feb 10 16:00:57 2026 GMT Subject: CN=20a53c474ce13fc203c75a5426fd7436277ec4db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a0:0c:26:fe:c0:cd:80:d0:87:0c:f8:b8:f7: 15:e1:cf:af:32:e0:e8:12:e5:f5:a6:c2:0f:7c:12: a6:47:37:78:6b:ca:9a:8b:32:7e:51:3c:8f:4b:06: e0:db:05:cf:14:bc:41:94:7c:07:34:7f:49:cd:9b: 3c:45:08:4b:94:9f:92:8c:2c:83:9e:d4:6c:a4:c0: 10:a4:e6:98:37:a2:d8:f0:c1:86:ec:b3:c4:94:01: 8c:c4:d1:7c:ff:3c:a5:65:42:58:0e:6e:85:56:1c: 45:88:42:95:31:4a:ed:67:54:03:41:9d:e6:08:44: c4:15:4e:59:b4:ec:37:c1:d1:7f:5a:e6:da:7a:92: 0b:00:33:9c:c7:cd:1d:4f:40:ba:4b:24:c6:e8:02: f6:24:60:6d:02:e4:da:81:fb:1f:4b:1f:b5:4f:b0: 95:79:f4:fe:f2:48:e2:a9:46:5b:5c:e8:36:83:be: 32:10:fb:7d:30:b9:8e:ce:8c:df:95:f1:66:ab:6c: 7e:dd:88:67:8a:98:c8:9e:2b:a5:eb:ab:ec:82:4f: 58:4f:88:05:bf:a6:e0:db:4c:2a:4c:18:0f:fc:24: 41:d4:de:8f:fe:2a:10:bd:25:67:f7:da:e7:a2:e7: 8d:1e:53:48:e7:a8:52:8c:ef:9a:25:23:88:a2:5c: 58:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A5:3C:47:4C:E1:3F:C2:03:C7:5A:54:26:FD:74:36:27:7E:C4:DB X509v3 Authority Key Identifier: keyid:69:72:6A:96:13:36:FB:E7:82:0B:3D:74:8E:81:2F:49:5C:87:2D:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXJqlhM2--eCCz10joEvSVyHLTU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/25e972-2842-4514-8ade-c0166d97010d/1/aXJqlhM2--eCCz10joEvSVyHLTU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:52:21:4c:91:f3:52:61:f8:b7:81:56:62:ca:4c:01:fe:63: 58:7b:42:11:ce:a2:7d:4b:0d:7c:fb:d0:a5:8c:cc:5f:ea:b0: 14:7f:8c:56:11:a1:55:e6:58:21:95:07:a7:81:32:c4:7b:22: 9f:99:73:18:fe:0a:75:9c:4f:ba:1a:95:5c:b4:a3:6c:e3:9f: 2d:5d:77:07:82:f7:d3:64:6e:5d:d9:a6:ae:5e:9b:cc:d2:86: 05:bb:e4:b3:f9:aa:38:e4:ba:38:d0:69:85:07:8b:56:80:4f: 62:28:44:9b:0d:c4:fa:55:2c:ec:e9:44:14:73:a2:2e:d7:d3: bf:cb:d1:bb:08:6f:db:b5:e9:b0:a6:46:bc:95:27:3f:f8:80: 24:39:27:bf:ad:5d:17:de:94:ee:0b:05:c5:92:86:df:d0:a0: 50:2c:85:2d:3c:eb:a2:6a:81:26:ea:6f:1e:b2:ce:89:f9:36: 61:b8:c0:09:91:19:6b:56:9d:a6:df:57:13:ad:ea:c9:55:f2: e7:68:ea:d1:63:03:4b:08:6c:e2:e6:26:f1:5f:26:d5:48:ec: d1:86:94:72:25:35:c5:19:b2:02:92:7b:0d:4e:31:e3:08:a2: 02:bc:a7:be:b0:75:30:24:ce:6d:51:be:55:56:b9:27:e5:5c: 4e:ad:18:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDInXHrBPZml9NQDTSeyr8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NzI2YTk2MTMzNmZiZTc4MjBiM2Q3NDhlODEyZjQ5NWM4 NzJkMzUwHhcNMjYwMjA5MTYwMDU3WhcNMjYwMjEwMTYwMDU3WjAzMTEwLwYDVQQD EygyMGE1M2M0NzRjZTEzZmMyMDNjNzVhNTQyNmZkNzQzNjI3N2VjNGRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraAMJv7AzYDQhwz4uPcV4c+vMuDo EuX1psIPfBKmRzd4a8qaizJ+UTyPSwbg2wXPFLxBlHwHNH9JzZs8RQhLlJ+SjCyD ntRspMAQpOaYN6LY8MGG7LPElAGMxNF8/zylZUJYDm6FVhxFiEKVMUrtZ1QDQZ3m CETEFU5ZtOw3wdF/WubaepILADOcx80dT0C6SyTG6AL2JGBtAuTagfsfSx+1T7CV efT+8kjiqUZbXOg2g74yEPt9MLmOzozflfFmq2x+3YhnipjIniul66vsgk9YT4gF v6bg20wqTBgP/CRB1N6P/ioQvSVn99rnoueNHlNI56hSjO+aJSOIolxYkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCClPEdM4T/CA8daVCb9dDYnfsTbMB8GA1UdIwQY MBaAFGlyapYTNvvnggs9dI6BL0lchy01MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUt YzAxNjZkOTcwMTBkLzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS8yNWU5NzItMjg0Mi00NTE0LThhZGUtYzAxNjZkOTcwMTBk LzEvYVhKcWxoTTItLWVDQ3oxMGpvRXZTVnlITFRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVIhTJHz UmH4t4FWYspMAf5jWHtCEc6ifUsNfPvQpYzMX+qwFH+MVhGhVeZYIZUHp4EyxHsi n5lzGP4KdZxPuhqVXLSjbOOfLV13B4L302RuXdmmrl6bzNKGBbvks/mqOOS6ONBp hQeLVoBPYihEmw3E+lUs7OlEFHOiLtfTv8vRuwhv27XpsKZGvJUnP/iAJDknv61d F96U7gsFxZKG39CgUCyFLTzromqBJupvHrLOifk2YbjACZEZa1adpt9XE63qyVXy 52jq0WMDSwhs4uYm8V8m1Ujs0YaUciU1xRmyApJ7DU4x4wiiArynvrB1MCTObVG+ VVa5J+VcTq0Ylg== -----END CERTIFICATE-----Generated at Mon Feb 9 23:59:44 2026 by rpki-client