This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft File: gAepWOaz39eNo1CxA9O5An4P4_A.mft (raw, json) Hash identifier: +K6FcjqlHXzsHkF/YAjCoLLwbExckPZjTmukS0spkpQ= Subject key identifier: 20:88:08:02:D4:CC:F0:DD:92:96:0A:AB:54:F3:55:24:12:31:1B:FB Authority key identifier: 80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 Certificate issuer: /CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Certificate serial: 019C4547B533BB1131AC5CB471E7D3FB297A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft Manifest number: 1209 Signing time: Tue 10 Feb 2026 02:00:53 +0000 Manifest this update: Tue 10 Feb 2026 02:00:53 +0000 Manifest next update: Wed 11 Feb 2026 02:00:53 +0000 Files and hashes: 1: Uhdd2LHjn5iOA9Ff6w9g0pvCay0.roa (hash: GWSvUjVdu1UDo6lvgspGXIRNDtNx+fESVlxZbXeFX7g=) 2: gAepWOaz39eNo1CxA9O5An4P4_A.crl (hash: 6sKcHvsZOcPyqFmFTPJ2siGIG0XiBk4JTYGwOmDorlo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:45:47:b5:33:bb:11:31:ac:5c:b4:71:e7:d3:fb:29:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8007a958e6b3dfd78da350b103d3b9027e0fe3f0 Validity Not Before: Feb 10 02:00:53 2026 GMT Not After : Feb 11 02:00:53 2026 GMT Subject: CN=20880802d4ccf0dd92960aab54f3552412311bfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0e:a3:7d:fd:cb:0b:1f:48:dd:4f:18:f6:d8: f0:79:c1:56:d2:d8:cc:43:99:e4:75:45:45:e8:56: 0c:38:b7:cc:d7:a5:80:3b:74:2b:9b:9b:5c:75:9b: 95:c8:86:bf:eb:98:5b:49:ee:b0:55:02:b0:7d:56: 7b:9c:d0:e3:97:2a:50:19:ae:61:18:59:0f:92:c3: 2f:1f:ac:7a:0f:b8:ec:b4:02:a6:49:9e:41:be:68: a2:35:92:c9:88:34:8f:15:32:88:b6:3e:4a:62:7e: 7b:c7:cc:df:ca:b3:96:b3:31:e8:2f:b7:c7:6d:2d: a1:d9:ce:ac:15:09:8e:37:66:97:81:f9:ab:fe:d8: 66:ee:d9:0a:78:cb:d4:96:e5:b0:1b:b0:71:40:65: b4:aa:81:9e:ee:5e:cd:f0:81:ae:08:0d:1c:10:bf: a1:7f:ca:36:29:02:f3:5a:4b:69:bc:f3:b1:07:bc: 83:8a:f2:e1:da:df:47:5c:1b:3f:45:a1:09:9e:ae: 88:a3:97:40:e9:3d:50:0b:cc:32:01:d6:c9:60:5d: 95:7f:00:d4:ae:39:49:3c:99:fe:2d:15:d0:48:37: ae:df:f8:6b:b7:13:db:b0:a6:1f:69:0b:42:de:c3: 25:c5:98:a0:55:d7:e3:fa:88:3c:17:7a:e7:b6:3c: 47:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:88:08:02:D4:CC:F0:DD:92:96:0A:AB:54:F3:55:24:12:31:1B:FB X509v3 Authority Key Identifier: keyid:80:07:A9:58:E6:B3:DF:D7:8D:A3:50:B1:03:D3:B9:02:7E:0F:E3:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gAepWOaz39eNo1CxA9O5An4P4_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8e1b5d-77b5-43b6-9f0a-3e171bd5efc3/1/gAepWOaz39eNo1CxA9O5An4P4_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b4:b1:3a:41:ae:9e:fd:3d:be:16:f2:db:d0:b4:dc:2c:4f: 70:9a:44:89:6a:18:81:de:d5:16:3c:08:6d:30:6b:33:c5:36: 19:27:a2:30:d5:0f:ab:dd:c4:f7:14:bb:f4:0f:8b:31:07:3f: 8a:ba:6f:54:d7:c3:2f:2e:fb:1b:4e:d2:02:37:b2:08:c1:4a: ab:3b:67:f9:ec:3f:10:b8:94:76:18:31:1f:3d:16:63:3b:71: 03:54:a3:ca:f6:54:27:de:62:11:e8:e1:2a:ce:74:0d:49:33: 31:28:04:66:5a:ff:68:89:6e:3c:9c:a3:ad:f7:00:98:eb:cb: af:f3:f1:95:1d:dd:02:55:e0:5a:a9:8f:a4:7b:7b:b2:28:1d: 21:a4:fb:3b:47:21:5d:ef:34:77:c4:2e:22:ad:a8:d2:4c:76: 3a:eb:3c:3e:11:f3:4e:e6:f3:50:e2:ea:56:cc:9d:cf:43:90: b1:c0:2d:26:df:6a:62:0b:46:f1:81:15:27:ea:2c:88:37:3b: a7:25:6d:0d:94:5f:47:07:a0:af:ba:02:32:0c:ad:2b:7d:20: 41:82:97:9f:24:5c:6a:6e:e1:94:9e:ec:3a:c7:4f:ab:23:7c: b6:13:55:93:17:00:e1:69:02:0c:5a:60:98:59:c5:c3:e3:e7: 41:a4:2c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxFR7UzuxExrFy0cefT+yl6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgwMDdhOTU4ZTZiM2RmZDc4ZGEzNTBiMTAzZDNiOTAyN2Uw ZmUzZjAwHhcNMjYwMjEwMDIwMDUzWhcNMjYwMjExMDIwMDUzWjAzMTEwLwYDVQQD EygyMDg4MDgwMmQ0Y2NmMGRkOTI5NjBhYWI1NGYzNTUyNDEyMzExYmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ6jff3LCx9I3U8Y9tjwecFW0tjM Q5nkdUVF6FYMOLfM16WAO3Qrm5tcdZuVyIa/65hbSe6wVQKwfVZ7nNDjlypQGa5h GFkPksMvH6x6D7jstAKmSZ5BvmiiNZLJiDSPFTKItj5KYn57x8zfyrOWszHoL7fH bS2h2c6sFQmON2aXgfmr/thm7tkKeMvUluWwG7BxQGW0qoGe7l7N8IGuCA0cEL+h f8o2KQLzWktpvPOxB7yDivLh2t9HXBs/RaEJnq6Io5dA6T1QC8wyAdbJYF2VfwDU rjlJPJn+LRXQSDeu3/hrtxPbsKYfaQtC3sMlxZigVdfj+og8F3rntjxH1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCCICALUzPDdkpYKq1TzVSQSMRv7MB8GA1UdIwQY MBaAFIAHqVjms9/XjaNQsQPTuQJ+D+PwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEt M2UxNzFiZDVlZmMzLzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZTFiNWQtNzdiNS00M2I2LTlmMGEtM2UxNzFiZDVlZmMz LzEvZ0FlcFdPYXozOWVObzFDeEE5TzVBbjRQNF9BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPLSxOkGu nv09vhby29C03CxPcJpEiWoYgd7VFjwIbTBrM8U2GSeiMNUPq93E9xS79A+LMQc/ irpvVNfDLy77G07SAjeyCMFKqztn+ew/ELiUdhgxHz0WYztxA1SjyvZUJ95iEejh Ks50DUkzMSgEZlr/aIluPJyjrfcAmOvLr/PxlR3dAlXgWqmPpHt7sigdIaT7O0ch Xe80d8QuIq2o0kx2Ous8PhHzTubzUOLqVsydz0OQscAtJt9qYgtG8YEVJ+osiDc7 pyVtDZRfRwegr7oCMgytK30gQYKXnyRcam7hlJ7sOsdPqyN8thNVkxcA4WkCDFpg mFnFw+PnQaQspA== -----END CERTIFICATE-----Generated at Tue Feb 10 04:33:29 2026 by rpki-client