This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft File: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft (raw, json) Hash identifier: c0y739BFd53rwPpCZVsb4cu/e9cL6Cc2Ux5R5RsM6A4= Subject key identifier: C0:F6:00:05:79:2A:FB:D9:3F:33:CA:1F:90:24:83:A0:56:B8:1B:3B Authority key identifier: 02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57 Certificate issuer: /CN=023d0542210850cbc6639638cf7fffbcfbaf1e57 Certificate serial: 019C432261C695EA3A78C4ACAAEB0592247A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft Manifest number: 03 Signing time: Mon 09 Feb 2026 16:00:52 +0000 Manifest this update: Mon 09 Feb 2026 16:00:52 +0000 Manifest next update: Tue 10 Feb 2026 16:00:52 +0000 Files and hashes: 1: Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl (hash: eOysFShWJXgToTwkP+qvWkETLSKVMQmclLuMAvvJmtk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:22:61:c6:95:ea:3a:78:c4:ac:aa:eb:05:92:24:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=023d0542210850cbc6639638cf7fffbcfbaf1e57 Validity Not Before: Feb 9 16:00:52 2026 GMT Not After : Feb 10 16:00:52 2026 GMT Subject: CN=c0f60005792afbd93f33ca1f902483a056b81b3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:d1:a7:29:80:8d:73:6a:be:ea:c0:1f:fa: 4b:45:dd:d6:94:43:e3:b0:50:0b:97:40:e7:d8:dd: fc:42:b4:10:08:df:00:e9:9b:b2:f8:77:22:3d:64: c1:89:c5:18:e6:a0:85:2a:5f:47:50:c1:6c:7c:3c: ea:e8:50:10:13:83:e2:e3:cd:b2:3c:d3:c4:b0:99: c2:b5:b3:28:a0:35:82:05:84:07:a9:39:fc:32:93: 21:2e:37:a3:66:a8:6c:2f:c8:fc:f3:e2:2c:4e:61: fe:1f:da:8b:c2:a2:d5:90:ed:9e:66:22:7a:15:93: 0b:80:05:b8:f2:60:1a:34:43:93:65:62:a4:d4:fe: 8a:56:60:b5:1f:41:0d:90:ba:61:3c:02:f2:2e:5f: f7:fc:ac:76:f8:22:82:c3:80:55:00:c7:9e:f4:b2: f1:35:2e:96:a6:14:13:95:93:02:7a:b4:67:83:3a: eb:78:49:f2:67:b1:94:15:1f:e4:80:22:4e:37:39: 14:68:39:d6:37:50:30:ab:da:3b:ee:fd:16:fd:ef: 47:b6:b5:2d:a4:c1:da:86:37:9a:48:46:3f:50:0c: 83:42:5f:d8:10:78:c3:9e:ab:be:a3:19:28:63:84: 1f:b8:e1:e6:0c:ac:a1:43:4e:99:6c:e1:d6:c4:df: b5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F6:00:05:79:2A:FB:D9:3F:33:CA:1F:90:24:83:A0:56:B8:1B:3B X509v3 Authority Key Identifier: keyid:02:3D:05:42:21:08:50:CB:C6:63:96:38:CF:7F:FF:BC:FB:AF:1E:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/62d5a8-6669-403f-b00f-7aca98638958/1/Aj0FQiEIUMvGY5Y4z3__vPuvHlc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:cf:05:60:36:6c:44:42:21:5c:2d:23:78:bb:43:72:33:4b: 65:cd:a9:7c:65:29:58:8d:09:11:55:20:ba:4c:00:02:8a:ff: 9c:33:71:a3:3d:5b:b8:2b:ad:b8:4e:67:c8:a0:05:f4:b0:db: 9c:21:d2:08:ec:6c:ad:c3:fc:26:46:f7:6f:24:03:f0:bc:81: c1:b0:28:0b:db:68:29:3b:df:27:4d:3f:d4:eb:a7:43:dd:7a: b6:94:a6:4d:5a:07:aa:5c:2f:2f:e2:bf:cc:af:c5:83:f5:3f: fe:99:d9:28:55:c2:5d:ef:d0:aa:0a:80:2b:f1:ce:24:e3:98: 61:04:5d:b0:47:8a:64:81:07:b4:63:c0:c0:00:b3:55:5b:b6: 4c:9d:6b:0f:2b:62:e5:48:26:59:4c:80:b8:d0:e6:c8:50:87: 9d:09:14:a6:3a:c0:b5:a5:48:f0:85:9a:c6:74:af:db:b8:66: 61:a5:c4:03:bf:c4:5f:35:b9:4c:4e:51:61:20:c5:d9:d1:67: db:87:e1:f8:1b:da:76:50:38:bc:23:fe:7f:83:bf:29:dc:19: 8a:17:41:ba:84:6d:c1:f2:12:ed:3a:0c:eb:a0:c9:09:73:c8: 65:d6:1a:e2:e5:62:46:b4:5c:6e:34:23:13:0a:71:6c:6d:30: 70:64:19:0a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDImHGleo6eMSsqusFkiR6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyM2QwNTQyMjEwODUwY2JjNjYzOTYzOGNmN2ZmZmJjZmJh ZjFlNTcwHhcNMjYwMjA5MTYwMDUyWhcNMjYwMjEwMTYwMDUyWjAzMTEwLwYDVQQD EyhjMGY2MDAwNTc5MmFmYmQ5M2YzM2NhMWY5MDI0ODNhMDU2YjgxYjNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSDRpymAjXNqvurAH/pLRd3WlEPj sFALl0Dn2N38QrQQCN8A6Zuy+HciPWTBicUY5qCFKl9HUMFsfDzq6FAQE4Pi482y PNPEsJnCtbMooDWCBYQHqTn8MpMhLjejZqhsL8j88+IsTmH+H9qLwqLVkO2eZiJ6 FZMLgAW48mAaNEOTZWKk1P6KVmC1H0ENkLphPALyLl/3/Kx2+CKCw4BVAMee9LLx NS6WphQTlZMCerRngzrreEnyZ7GUFR/kgCJONzkUaDnWN1Awq9o77v0W/e9HtrUt pMHahjeaSEY/UAyDQl/YEHjDnqu+oxkoY4QfuOHmDKyhQ06ZbOHWxN+1UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMD2AAV5KvvZPzPKH5Akg6BWuBs7MB8GA1UdIwQY MBaAFAI9BUIhCFDLxmOWOM9//7z7rx5XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWowRlFpRUlVTXZHWTVZNHozX192UHV2SGxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82MmQ1YTgtNjY2OS00MDNmLWIwMGYt N2FjYTk4NjM4OTU4LzEvQWowRlFpRUlVTXZHWTVZNHozX192UHV2SGxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS82MmQ1YTgtNjY2OS00MDNmLWIwMGYtN2FjYTk4NjM4OTU4 LzEvQWowRlFpRUlVTXZHWTVZNHozX192UHV2SGxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoM8FYDZs REIhXC0jeLtDcjNLZc2pfGUpWI0JEVUgukwAAor/nDNxoz1buCutuE5nyKAF9LDb nCHSCOxsrcP8Jkb3byQD8LyBwbAoC9toKTvfJ00/1OunQ916tpSmTVoHqlwvL+K/ zK/Fg/U//pnZKFXCXe/QqgqAK/HOJOOYYQRdsEeKZIEHtGPAwACzVVu2TJ1rDyti 5UgmWUyAuNDmyFCHnQkUpjrAtaVI8IWaxnSv27hmYaXEA7/EXzW5TE5RYSDF2dFn 24fh+BvadlA4vCP+f4O/KdwZihdBuoRtwfIS7ToM66DJCXPIZdYa4uViRrRcbjQj EwpxbG0wcGQZCg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:23:34 2026 by rpki-client