This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft File: aErIoCEnBoJ2XSPvAzjzXHht2zU.mft (raw, json) Hash identifier: FU7Iontuf28MFiGy3zUMAaz1QKBwED5lb/pBN8Dc9FA= Subject key identifier: 77:F4:CC:5D:25:B3:02:B4:E2:91:8D:C6:11:3F:96:D3:F0:A9:7C:0B Authority key identifier: 68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35 Certificate issuer: /CN=684ac8a021270682765d23ef0338f35c786ddb35 Certificate serial: 019C43C7485F47908862CA08C6E9DD96B48F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft Manifest number: 14BF Signing time: Mon 09 Feb 2026 19:00:59 +0000 Manifest this update: Mon 09 Feb 2026 19:00:59 +0000 Manifest next update: Tue 10 Feb 2026 19:00:59 +0000 Files and hashes: 1: aErIoCEnBoJ2XSPvAzjzXHht2zU.crl (hash: jL5BLg0rSpWkTVhr8rU/w60vA8NT24X11845AawQ9yA=) 2: cQSoOImIWHLQqvwma-mbQwTjc30.roa (hash: CvEfeGMhdPBsYF3CWWhLxK0Vg1UuXavAs76jMv4L1vA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:48:5f:47:90:88:62:ca:08:c6:e9:dd:96:b4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=684ac8a021270682765d23ef0338f35c786ddb35 Validity Not Before: Feb 9 19:00:59 2026 GMT Not After : Feb 10 19:00:59 2026 GMT Subject: CN=77f4cc5d25b302b4e2918dc6113f96d3f0a97c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a1:31:5f:29:c5:21:f2:5e:40:ac:a2:ac:e7: 41:b9:36:84:82:d1:c9:dc:56:1b:0c:bc:ff:17:9e: 80:2f:a0:8d:d8:c6:92:1a:4f:80:1c:fe:41:fd:ef: 63:65:c8:bc:3d:20:16:ab:cf:15:3b:48:3a:6e:64: 3b:00:5c:6f:28:54:44:ff:19:75:c0:2e:4c:d4:3f: 75:82:42:f1:2d:ec:a8:d9:4e:5a:00:d2:75:1b:a9: f5:63:52:a2:21:18:07:53:21:9a:60:ee:85:0f:49: df:94:d2:64:5a:db:1b:7f:06:d6:b4:36:cc:64:30: 36:a1:bb:08:be:44:49:cb:d0:1c:24:2a:f4:79:29: 61:a7:ca:2c:41:c4:aa:17:24:94:16:41:a9:46:4a: 22:26:17:dc:39:55:4e:cf:6d:e9:d9:ee:3b:86:3a: c1:c8:1e:0c:01:cd:56:d6:fe:e8:6d:7d:1e:ea:15: 79:75:0b:0f:f8:b0:15:b3:15:09:26:d7:d3:ec:bf: 4e:4b:7d:d4:73:fc:e3:8c:e9:d4:d1:0c:40:bc:c5: cc:8a:70:45:35:09:f2:45:8b:e8:a3:a5:2b:ad:b2: d9:37:09:38:bb:37:52:66:ae:6e:5f:28:64:9a:cc: bd:98:52:5c:14:08:eb:7d:ef:0c:40:a3:04:2e:06: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F4:CC:5D:25:B3:02:B4:E2:91:8D:C6:11:3F:96:D3:F0:A9:7C:0B X509v3 Authority Key Identifier: keyid:68:4A:C8:A0:21:27:06:82:76:5D:23:EF:03:38:F3:5C:78:6D:DB:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aErIoCEnBoJ2XSPvAzjzXHht2zU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d30b5d-7f3b-4a5a-9897-0c011c9c927d/1/aErIoCEnBoJ2XSPvAzjzXHht2zU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9a:54:ac:fd:59:2c:94:4b:f9:f7:02:56:98:cc:fc:4d:36: 69:0c:93:04:8a:01:3b:f9:f5:8c:83:7b:10:90:ef:3d:f5:45: 06:e0:5b:d8:8d:a8:30:df:2f:6b:0b:59:1d:39:dd:35:c9:79: ba:ea:19:45:72:39:5d:ee:04:f3:f3:37:53:27:73:3a:b7:73: c8:d6:75:b5:62:9c:49:83:29:a0:2b:9b:a6:af:a9:af:0b:ef: 88:6a:75:b7:16:14:f6:62:af:0b:55:96:b6:97:69:a5:9c:60: 87:77:44:2a:7d:4e:e9:4d:23:25:bf:01:4c:2e:3b:3d:d8:fe: 13:12:d6:d7:9b:28:19:f4:cc:62:80:55:85:ad:c6:a4:67:ef: f8:16:f3:c0:ca:08:a1:c1:d9:41:86:3b:3d:89:f6:13:72:30: e7:e3:b3:99:34:d5:45:0a:63:04:6c:57:dd:db:d4:4e:d5:93: d7:ea:b8:56:f8:3c:30:14:70:34:c9:ad:70:8e:27:0a:08:4d: ac:ae:e4:00:0d:8b:a5:f4:d9:dc:49:1f:d4:12:eb:f1:82:4b: 95:f5:8c:1f:65:ea:2c:70:0d:80:91:40:38:e8:03:06:aa:fe: 9a:d8:93:34:34:b5:c7:78:3c:79:77:9b:b4:c4:b6:15:97:12: c5:de:ae:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDx0hfR5CIYsoIxundlrSPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NGFjOGEwMjEyNzA2ODI3NjVkMjNlZjAzMzhmMzVjNzg2 ZGRiMzUwHhcNMjYwMjA5MTkwMDU5WhcNMjYwMjEwMTkwMDU5WjAzMTEwLwYDVQQD Eyg3N2Y0Y2M1ZDI1YjMwMmI0ZTI5MThkYzYxMTNmOTZkM2YwYTk3YzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6ExXynFIfJeQKyirOdBuTaEgtHJ 3FYbDLz/F56AL6CN2MaSGk+AHP5B/e9jZci8PSAWq88VO0g6bmQ7AFxvKFRE/xl1 wC5M1D91gkLxLeyo2U5aANJ1G6n1Y1KiIRgHUyGaYO6FD0nflNJkWtsbfwbWtDbM ZDA2obsIvkRJy9AcJCr0eSlhp8osQcSqFySUFkGpRkoiJhfcOVVOz23p2e47hjrB yB4MAc1W1v7obX0e6hV5dQsP+LAVsxUJJtfT7L9OS33Uc/zjjOnU0QxAvMXMinBF NQnyRYvoo6UrrbLZNwk4uzdSZq5uXyhkmsy9mFJcFAjrfe8MQKMELgZKfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHf0zF0lswK04pGNxhE/ltPwqXwLMB8GA1UdIwQY MBaAFGhKyKAhJwaCdl0j7wM481x4bds1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kMzBiNWQtN2YzYi00YTVhLTk4OTct MGMwMTFjOWM5MjdkLzEvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNy9kMzBiNWQtN2YzYi00YTVhLTk4OTctMGMwMTFjOWM5Mjdk LzEvYUVySW9DRW5Cb0oyWFNQdkF6anpYSGh0MnpVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgppUrP1Z LJRL+fcCVpjM/E02aQyTBIoBO/n1jIN7EJDvPfVFBuBb2I2oMN8vawtZHTndNcl5 uuoZRXI5Xe4E8/M3UydzOrdzyNZ1tWKcSYMpoCubpq+prwvviGp1txYU9mKvC1WW tpdppZxgh3dEKn1O6U0jJb8BTC47Pdj+ExLW15soGfTMYoBVha3GpGfv+BbzwMoI ocHZQYY7PYn2E3Iw5+OzmTTVRQpjBGxX3dvUTtWT1+q4Vvg8MBRwNMmtcI4nCghN rK7kAA2LpfTZ3Ekf1BLr8YJLlfWMH2XqLHANgJFAOOgDBqr+mtiTNDS1x3g8eXeb tMS2FZcSxd6uxA== -----END CERTIFICATE-----Generated at Mon Feb 9 21:05:45 2026 by rpki-client