This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft File: aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft (raw, json) Hash identifier: CnZjisucMdPfvRYj6iN3ncwV7JIlnd5NCeb7hyCPqpQ= Subject key identifier: 8A:AF:E8:E1:E5:AE:9D:D1:DA:F9:0E:E9:CC:01:0A:94:34:38:14:EC Authority key identifier: 69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 Certificate issuer: /CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Certificate serial: 019C42EB518574D163D0416A84F75C7B7138 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft Manifest number: 1460 Signing time: Mon 09 Feb 2026 15:00:43 +0000 Manifest this update: Mon 09 Feb 2026 15:00:43 +0000 Manifest next update: Tue 10 Feb 2026 15:00:43 +0000 Files and hashes: 1: aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl (hash: b4QIXu+B5YQa4gKdPVQjIQL3nZP6AMfQ2U7y55L+Mt0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:eb:51:85:74:d1:63:d0:41:6a:84:f7:5c:7b:71:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=695bfacb5a134d13805eef95fd8fbd12de6a01f3 Validity Not Before: Feb 9 15:00:43 2026 GMT Not After : Feb 10 15:00:43 2026 GMT Subject: CN=8aafe8e1e5ae9dd1daf90ee9cc010a94343814ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:c9:f9:ae:d1:45:76:c2:45:90:63:3e:16: 65:43:eb:91:09:0a:cb:57:e2:73:96:bd:5e:78:4e: c5:7d:73:a6:0e:21:11:38:1f:7f:c7:bb:60:9e:44: cd:80:3a:f3:bf:9b:bf:6b:38:8e:ca:07:4b:32:36: 31:da:59:a5:3a:79:9a:18:fd:6a:1f:ce:7e:ec:80: 74:0f:77:67:ed:63:d3:78:05:2c:78:17:f1:9c:aa: 65:9a:e5:cc:fa:52:b9:26:4a:fe:de:a9:0e:b7:6c: 8e:61:4b:ad:97:2c:15:2b:05:d3:8c:a0:aa:c5:fb: 04:43:37:79:34:1d:a6:36:d9:84:cf:02:9b:f3:89: 1c:15:7d:81:04:b0:ab:e8:d3:8b:bd:da:d6:f3:e1: 60:f2:50:56:1a:6b:cc:a9:e5:b8:10:dd:1d:06:b9: 9c:29:be:5b:d6:dc:b5:a3:ee:8f:b1:10:ff:c2:c6: 64:c7:ae:c6:42:a3:cc:03:aa:46:eb:e7:30:1d:b2: 50:01:3c:05:89:fe:bb:4e:c0:8a:dc:0a:81:69:a7: 1b:bc:d1:d0:f0:a7:66:cb:29:d5:b0:6f:0a:81:d9: b7:f5:3a:fb:fc:a7:07:73:ee:fa:84:56:04:5d:70: 80:df:41:6e:9e:27:b6:11:33:e1:ad:c4:fd:e0:02: 6e:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:AF:E8:E1:E5:AE:9D:D1:DA:F9:0E:E9:CC:01:0A:94:34:38:14:EC X509v3 Authority Key Identifier: keyid:69:5B:FA:CB:5A:13:4D:13:80:5E:EF:95:FD:8F:BD:12:DE:6A:01:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVv6y1oTTROAXu-V_Y-9Et5qAfM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/35d5f0-083a-40a5-804a-994ccd10fa44/1/aVv6y1oTTROAXu-V_Y-9Et5qAfM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:55:4f:3a:4f:a5:21:b3:cd:33:9b:de:60:43:23:7d:53:6d: f8:95:63:5f:01:b7:7a:4c:1a:7a:41:02:9f:b1:d2:e8:22:40: 8b:53:ad:56:88:28:60:15:9c:99:5f:ee:ee:1e:dc:4f:4e:79: 0f:94:f1:1c:0f:12:f4:24:1c:ec:6e:41:21:ba:f4:2d:67:34: 77:bd:ed:34:b5:8d:5d:74:b0:00:cb:cf:70:1d:43:7f:a2:0b: 1f:32:eb:1b:6c:01:06:fa:8a:8d:7f:ee:fa:09:f4:90:e7:a7: a5:89:ac:99:bf:98:c6:6a:b0:40:0b:95:c4:40:a1:44:52:f0: 2d:7a:bf:bf:5b:ad:f2:d7:3d:b5:92:cd:91:9d:8a:d1:b4:e7: 0a:c3:30:42:a8:ff:80:f2:16:ff:33:ca:1b:57:91:b3:f8:64: 42:b1:db:fc:46:a1:41:f7:54:ce:f0:5b:be:e7:37:90:fa:ce: b3:90:0f:7b:b2:3e:bf:ec:d5:1d:bf:b9:92:26:b5:4e:1f:f5: 76:37:89:43:7b:82:bc:fb:9b:06:0d:40:12:90:07:52:60:17: 95:f8:d9:c3:aa:50:65:10:d8:48:cb:49:af:3e:06:9d:bd:63: 92:88:97:55:01:6e:3f:5b:3c:b2:7c:08:b8:a1:d1:5a:35:94: 07:b5:28:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxC61GFdNFj0EFqhPdce3E4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5NWJmYWNiNWExMzRkMTM4MDVlZWY5NWZkOGZiZDEyZGU2 YTAxZjMwHhcNMjYwMjA5MTUwMDQzWhcNMjYwMjEwMTUwMDQzWjAzMTEwLwYDVQQD Eyg4YWFmZThlMWU1YWU5ZGQxZGFmOTBlZTljYzAxMGE5NDM0MzgxNGVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAym3J+a7RRXbCRZBjPhZlQ+uRCQrL V+Jzlr1eeE7FfXOmDiEROB9/x7tgnkTNgDrzv5u/aziOygdLMjYx2lmlOnmaGP1q H85+7IB0D3dn7WPTeAUseBfxnKplmuXM+lK5Jkr+3qkOt2yOYUutlywVKwXTjKCq xfsEQzd5NB2mNtmEzwKb84kcFX2BBLCr6NOLvdrW8+Fg8lBWGmvMqeW4EN0dBrmc Kb5b1ty1o+6PsRD/wsZkx67GQqPMA6pG6+cwHbJQATwFif67TsCK3AqBaacbvNHQ 8KdmyynVsG8Kgdm39Tr7/KcHc+76hFYEXXCA30Funie2ETPhrcT94AJukQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIqv6OHlrp3R2vkO6cwBCpQ0OBTsMB8GA1UdIwQY MBaAFGlb+staE00TgF7vlf2PvRLeagHzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEt OTk0Y2NkMTBmYTQ0LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8zNWQ1ZjAtMDgzYS00MGE1LTgwNGEtOTk0Y2NkMTBmYTQ0 LzEvYVZ2Nnkxb1RUUk9BWHUtVl9ZLTlFdDVxQWZNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhlVPOk+l IbPNM5veYEMjfVNt+JVjXwG3ekwaekECn7HS6CJAi1OtVogoYBWcmV/u7h7cT055 D5TxHA8S9CQc7G5BIbr0LWc0d73tNLWNXXSwAMvPcB1Df6ILHzLrG2wBBvqKjX/u +gn0kOenpYmsmb+YxmqwQAuVxEChRFLwLXq/v1ut8tc9tZLNkZ2K0bTnCsMwQqj/ gPIW/zPKG1eRs/hkQrHb/EahQfdUzvBbvuc3kPrOs5APe7I+v+zVHb+5kia1Th/1 djeJQ3uCvPubBg1AEpAHUmAXlfjZw6pQZRDYSMtJrz4Gnb1jkoiXVQFuP1s8snwI uKHRWjWUB7UoxA== -----END CERTIFICATE-----Generated at Mon Feb 9 20:07:16 2026 by rpki-client