This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft File: aXhsF41lvnmuUNNVhX2hOtdKvqA.mft (raw, json) Hash identifier: ujrhb/otA2d1t56gXIS4ZMWR+gW0eHFSoClvtVa67yA= Subject key identifier: 11:6A:F9:01:50:71:41:EC:66:F5:39:50:8A:02:77:F4:8D:A6:30:5E Authority key identifier: 69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 Certificate issuer: /CN=69786c178d65be79ae50d355857da13ad74abea0 Certificate serial: 019C42469E6D988D3F88A81AD34C80409427 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft Manifest number: 14A7 Signing time: Mon 09 Feb 2026 12:00:50 +0000 Manifest this update: Mon 09 Feb 2026 12:00:50 +0000 Manifest next update: Tue 10 Feb 2026 12:00:50 +0000 Files and hashes: 1: Sn2KyoKjFfROku-b9ZDgfYm_GtE.roa (hash: gXKBGj1pUODxBLRTrQNK3Rbmt+qgOzJRUgGGxVVoxKU=) 2: aXhsF41lvnmuUNNVhX2hOtdKvqA.crl (hash: gZRhzN6KJ8FGz3+NIJRykvADg0flFLntZ7DhntEb5cc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:46:9e:6d:98:8d:3f:88:a8:1a:d3:4c:80:40:94:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69786c178d65be79ae50d355857da13ad74abea0 Validity Not Before: Feb 9 12:00:50 2026 GMT Not After : Feb 10 12:00:50 2026 GMT Subject: CN=116af901507141ec66f539508a0277f48da6305e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b9:c2:03:4f:e7:43:0c:5b:4b:73:e4:8d:48: cb:0a:14:7f:95:28:8b:07:80:e9:1b:fd:75:a2:35: 10:0c:ca:2e:4c:28:bd:8d:a8:59:5d:3c:e8:cb:68: 28:27:34:b9:93:f7:94:c4:fc:c4:19:12:8a:1f:08: ce:fa:38:a0:93:1b:20:c7:c6:dc:80:f2:90:c4:97: eb:7c:fe:f3:c9:40:11:49:e8:a5:76:20:f4:ae:53: 24:96:33:8b:5a:d2:fc:ef:22:2b:ed:32:ea:c6:94: c3:b5:e8:64:55:4b:8d:ac:22:b5:35:48:f5:bd:99: 95:5f:0b:d1:e0:b0:3c:fd:1e:47:67:76:7e:e9:62: ef:68:16:d8:8e:c7:70:58:56:f8:89:41:4e:3e:82: 96:68:d9:26:ac:44:38:e5:71:94:4d:91:6f:84:cc: 8a:6f:6c:09:d7:97:1d:a3:c8:03:1d:ea:ea:f3:91: 2b:09:9a:74:33:5b:bd:47:3d:cd:b0:bd:73:26:73: f8:64:13:25:c2:20:4c:13:f0:90:3d:c1:91:a6:41: 5d:1b:7e:0b:bd:c3:9d:bf:cb:c4:9d:b3:cd:a4:20: dc:0d:b4:1b:89:a1:36:be:5b:d9:e5:aa:1f:c1:f7: da:c9:7c:13:0c:07:eb:4b:fd:14:90:86:16:f6:b6: f5:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:6A:F9:01:50:71:41:EC:66:F5:39:50:8A:02:77:F4:8D:A6:30:5E X509v3 Authority Key Identifier: keyid:69:78:6C:17:8D:65:BE:79:AE:50:D3:55:85:7D:A1:3A:D7:4A:BE:A0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aXhsF41lvnmuUNNVhX2hOtdKvqA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/034adc-c4d3-4484-88f2-8b8eec186934/1/aXhsF41lvnmuUNNVhX2hOtdKvqA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:44:4c:a9:83:8a:4a:e8:9c:05:7b:53:cc:07:22:aa:80:2f: fc:5e:02:60:11:4b:0d:65:b4:f2:96:94:74:36:7a:74:a9:0c: 4a:ad:56:c3:f3:22:bd:bc:88:34:27:c5:e3:db:dc:52:43:24: b4:1b:f0:c9:51:0c:0d:36:d5:f1:90:6b:9a:b9:aa:75:8d:e5: 18:53:22:c9:4e:36:b1:cd:da:92:b0:f6:b3:64:7a:fd:9f:ea: ac:fa:77:55:98:2e:e5:a0:ca:5d:b5:00:b9:a8:70:69:f6:7a: 47:8e:23:98:d0:48:95:c0:dc:a9:c4:ce:fd:47:ce:73:30:36: 2b:e8:0a:dd:e9:08:a0:32:71:3d:84:cf:42:ed:39:b2:7c:3b: 9f:09:67:2e:9e:b8:ec:4f:61:93:c8:98:6b:cb:63:4b:a2:86: dc:ae:2a:30:61:57:43:12:eb:71:45:e2:a0:75:c5:38:fc:9f: ef:03:03:7b:e5:2d:6d:62:46:8a:6c:ae:18:6e:f9:75:e4:41: c1:4e:c1:21:51:77:91:04:ba:cd:09:14:b5:72:6d:09:53:96: 7b:42:d6:9f:6d:24:3a:9d:a2:0a:b9:3f:53:6b:bd:66:51:0b: 1a:dd:46:b0:cd:24:4b:44:37:5d:22:35:a4:9b:38:52:8d:cb: 27:64:6e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCRp5tmI0/iKga00yAQJQnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5Nzg2YzE3OGQ2NWJlNzlhZTUwZDM1NTg1N2RhMTNhZDc0 YWJlYTAwHhcNMjYwMjA5MTIwMDUwWhcNMjYwMjEwMTIwMDUwWjAzMTEwLwYDVQQD EygxMTZhZjkwMTUwNzE0MWVjNjZmNTM5NTA4YTAyNzdmNDhkYTYzMDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7nCA0/nQwxbS3PkjUjLChR/lSiL B4DpG/11ojUQDMouTCi9jahZXTzoy2goJzS5k/eUxPzEGRKKHwjO+jigkxsgx8bc gPKQxJfrfP7zyUARSeildiD0rlMkljOLWtL87yIr7TLqxpTDtehkVUuNrCK1NUj1 vZmVXwvR4LA8/R5HZ3Z+6WLvaBbYjsdwWFb4iUFOPoKWaNkmrEQ45XGUTZFvhMyK b2wJ15cdo8gDHerq85ErCZp0M1u9Rz3NsL1zJnP4ZBMlwiBME/CQPcGRpkFdG34L vcOdv8vEnbPNpCDcDbQbiaE2vlvZ5aofwffayXwTDAfrS/0UkIYW9rb1RwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBFq+QFQcUHsZvU5UIoCd/SNpjBeMB8GA1UdIwQY MBaAFGl4bBeNZb55rlDTVYV9oTrXSr6gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjIt OGI4ZWVjMTg2OTM0LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC8wMzRhZGMtYzRkMy00NDg0LTg4ZjItOGI4ZWVjMTg2OTM0 LzEvYVhoc0Y0MWx2bm11VU5OVmhYMmhPdGRLdnFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArURMqYOK SuicBXtTzAciqoAv/F4CYBFLDWW08paUdDZ6dKkMSq1Ww/MivbyINCfF49vcUkMk tBvwyVEMDTbV8ZBrmrmqdY3lGFMiyU42sc3akrD2s2R6/Z/qrPp3VZgu5aDKXbUA uahwafZ6R44jmNBIlcDcqcTO/UfOczA2K+gK3ekIoDJxPYTPQu05snw7nwlnLp64 7E9hk8iYa8tjS6KG3K4qMGFXQxLrcUXioHXFOPyf7wMDe+UtbWJGimyuGG75deRB wU7BIVF3kQS6zQkUtXJtCVOWe0LWn20kOp2iCrk/U2u9ZlELGt1GsM0kS0Q3XSI1 pJs4Uo3LJ2RuqQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:46:01 2026 by rpki-client