This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft File: AObmXtdPBsIjqaScPqbT7uyyOFA.mft (raw, json) Hash identifier: 6Eon5qSV4K4nWr4jLiyDeoeTaELgRdKW/xsVNBcZhUE= Subject key identifier: E4:CA:1C:6F:57:2C:00:5D:0A:5F:CD:DC:36:BA:E3:33:A7:64:46:22 Authority key identifier: 00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 Certificate issuer: /CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Certificate serial: 019C427D383963375001533B1859A2FD72DF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 13:00:28 +0000 Manifest this update: Mon 09 Feb 2026 13:00:28 +0000 Manifest next update: Tue 10 Feb 2026 13:00:28 +0000 Files and hashes: 1: AObmXtdPBsIjqaScPqbT7uyyOFA.crl (hash: c03Nqvj2SDSnC+q9+hgwhREWBRy6kIASPNkhinXT4XM=) 2: P1a-wy-41SGB2vgjhP8VvtqZ32c.roa (hash: 8eDEG1cF3oj7ePCmIr7bInU5XFHVVJIT2TT9CuFv1Es=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:38:39:63:37:50:01:53:3b:18:59:a2:fd:72:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00e6e65ed74f06c223a9a49c3ea6d3eeecb23850 Validity Not Before: Feb 9 13:00:28 2026 GMT Not After : Feb 10 13:00:28 2026 GMT Subject: CN=e4ca1c6f572c005d0a5fcddc36bae333a7644622 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ed:87:69:4f:47:c4:b6:0e:57:58:58:c6:f8: 6d:03:d8:92:1c:a0:51:83:bb:36:76:af:92:6d:b3: 22:9c:7c:6a:a6:5f:07:2c:c4:77:b4:8f:1e:82:1a: f9:7c:18:02:fd:f1:5a:da:9e:be:f0:01:a1:65:b7: 50:94:d4:e2:d3:b9:8e:c7:c6:18:05:f4:41:70:a5: ca:bb:5b:13:9f:b3:e8:f9:61:56:51:f5:1d:c0:a6: 98:8e:5c:61:74:31:06:52:af:70:b9:49:c6:41:96: 5f:1d:be:c1:df:fd:a2:bd:9c:d4:ba:2d:0a:7a:46: 6e:a2:66:7d:ca:45:96:9e:59:b1:bf:32:b7:2e:f3: 20:fb:05:0b:5e:2f:8d:34:1a:37:10:2c:4f:58:96: 89:09:b5:af:db:17:17:bc:09:56:aa:43:25:a7:56: 27:6b:91:20:cd:d0:bf:f1:e0:2b:a4:87:a1:a2:15: 40:23:76:1a:ae:a2:77:4e:d8:5b:41:6c:f8:d9:82: 8c:b6:29:11:09:1a:d4:11:45:8c:42:0e:70:a5:6d: b4:e5:a1:fc:96:b4:1c:08:bb:28:7a:dc:00:0d:0e: c1:04:bf:2f:25:94:f4:c1:d4:82:c9:19:be:c2:a6: b0:34:e7:9a:ec:d4:cc:1a:f8:2b:4f:a9:f1:67:f3: ce:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CA:1C:6F:57:2C:00:5D:0A:5F:CD:DC:36:BA:E3:33:A7:64:46:22 X509v3 Authority Key Identifier: keyid:00:E6:E6:5E:D7:4F:06:C2:23:A9:A4:9C:3E:A6:D3:EE:EC:B2:38:50 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AObmXtdPBsIjqaScPqbT7uyyOFA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/24da6f-5053-414e-9370-16b9eafeb4ea/1/AObmXtdPBsIjqaScPqbT7uyyOFA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:19:5d:2e:1b:79:20:5a:52:3a:8d:7c:b8:e0:35:b2:4d:b9: d7:8a:b1:26:84:0a:52:2e:ea:8a:6f:22:fe:44:0a:4f:83:44: a1:15:c8:2a:27:ec:a6:8b:13:0d:59:4d:1e:65:7e:49:75:36: b7:df:f3:62:9c:49:33:db:89:49:56:b2:29:44:de:69:01:e2: 1d:69:b7:50:77:ae:7b:dc:4c:b5:27:a9:a6:49:92:ad:36:a7: 37:b6:08:8b:4c:ae:6d:04:aa:c1:a3:1e:dd:72:de:a7:58:12: 72:d3:b1:74:42:6f:f1:04:ec:a6:de:27:8e:78:05:53:54:41: 96:3d:e0:2c:8e:43:a7:30:59:a7:bf:24:70:b3:ea:11:4b:af: c9:f8:f2:22:e4:5f:fa:ef:6d:f7:3f:9d:0d:22:11:bd:84:18: 9e:03:59:bb:ba:f0:d9:eb:c9:24:fe:14:bf:8e:3f:9c:55:e3: 39:0b:b1:64:8f:41:92:4f:ed:70:91:40:03:7d:a8:3a:45:b6: 7a:05:3a:f8:c9:b7:91:45:f3:e2:41:8e:fc:c4:9b:a4:24:d4: a0:5a:db:be:06:59:eb:2f:ef:8d:fd:d0:9b:e8:5f:1a:f7:05: f3:1f:e4:c6:16:2e:ee:53:38:08:ad:62:54:99:cc:47:75:76: 64:3a:ff:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfTg5YzdQAVM7GFmi/XLfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwZTZlNjVlZDc0ZjA2YzIyM2E5YTQ5YzNlYTZkM2VlZWNi MjM4NTAwHhcNMjYwMjA5MTMwMDI4WhcNMjYwMjEwMTMwMDI4WjAzMTEwLwYDVQQD EyhlNGNhMWM2ZjU3MmMwMDVkMGE1ZmNkZGMzNmJhZTMzM2E3NjQ0NjIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnu2HaU9HxLYOV1hYxvhtA9iSHKBR g7s2dq+SbbMinHxqpl8HLMR3tI8eghr5fBgC/fFa2p6+8AGhZbdQlNTi07mOx8YY BfRBcKXKu1sTn7Po+WFWUfUdwKaYjlxhdDEGUq9wuUnGQZZfHb7B3/2ivZzUui0K ekZuomZ9ykWWnlmxvzK3LvMg+wULXi+NNBo3ECxPWJaJCbWv2xcXvAlWqkMlp1Yn a5EgzdC/8eArpIehohVAI3YarqJ3TthbQWz42YKMtikRCRrUEUWMQg5wpW205aH8 lrQcCLsoetwADQ7BBL8vJZT0wdSCyRm+wqawNOea7NTMGvgrT6nxZ/POWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTKHG9XLABdCl/N3Da64zOnZEYiMB8GA1UdIwQY MBaAFADm5l7XTwbCI6mknD6m0+7ssjhQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAt MTZiOWVhZmViNGVhLzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC8yNGRhNmYtNTA1My00MTRlLTkzNzAtMTZiOWVhZmViNGVh LzEvQU9ibVh0ZFBCc0lqcWFTY1BxYlQ3dXl5T0ZBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARRldLht5 IFpSOo18uOA1sk2514qxJoQKUi7qim8i/kQKT4NEoRXIKifsposTDVlNHmV+SXU2 t9/zYpxJM9uJSVayKUTeaQHiHWm3UHeue9xMtSeppkmSrTanN7YIi0yubQSqwaMe 3XLep1gSctOxdEJv8QTspt4njngFU1RBlj3gLI5DpzBZp78kcLPqEUuvyfjyIuRf +u9t9z+dDSIRvYQYngNZu7rw2evJJP4Uv44/nFXjOQuxZI9Bkk/tcJFAA32oOkW2 egU6+Mm3kUXz4kGO/MSbpCTUoFrbvgZZ6y/vjf3Qm+hfGvcF8x/kxhYu7lM4CK1i VJnMR3V2ZDr/RA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:07:02 2026 by rpki-client