This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json) Hash identifier: gyRj26a83YQX5EwoxdmG32TI0qZtlVkofECiTSEqcXo= Subject key identifier: 3A:EB:F4:79:87:5D:DE:BD:58:BA:5D:4C:46:88:7B:FA:68:5B:A6:C3 Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87 Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087 Certificate serial: 019C413382520433B5B51B59E8205EF6CD43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft Manifest number: 180B Signing time: Mon 09 Feb 2026 07:00:20 +0000 Manifest this update: Mon 09 Feb 2026 07:00:20 +0000 Manifest next update: Tue 10 Feb 2026 07:00:20 +0000 Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: iB0U7bdRuDRCqvixdA91grqP9SCQayCaLRu1IWu4IaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 07:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:41:33:82:52:04:33:b5:b5:1b:59:e8:20:5e:f6:cd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087 Validity Not Before: Feb 9 07:00:20 2026 GMT Not After : Feb 10 07:00:20 2026 GMT Subject: CN=3aebf479875ddebd58ba5d4c46887bfa685ba6c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:c6:1c:60:73:5b:c0:7c:56:13:77:cc:25: c5:7b:03:4c:65:e6:37:d6:3b:73:8f:07:9a:35:20: 57:90:32:10:88:4a:b7:5c:6f:1b:5b:02:1e:35:43: a9:3d:82:f2:03:e1:ac:d5:e0:d9:88:4c:75:28:50: f6:1d:ef:6c:8b:a7:b6:03:e6:f8:7a:88:0d:b0:3e: 28:89:7f:34:7e:44:90:1c:bc:69:54:c4:e9:08:db: 13:e9:fd:b5:28:e6:f0:7e:bc:b2:3b:a7:c5:24:01: dd:a4:c2:a2:8c:d6:48:2d:86:76:cc:d0:ee:cb:de: 59:cd:97:ed:81:b6:93:cd:22:26:d3:23:c5:c0:41: 6f:60:60:15:83:20:e3:72:18:11:a7:31:73:75:4c: f1:bc:67:1e:9c:78:db:b5:c2:26:82:de:43:dc:0b: b5:0a:22:b2:23:1d:89:d6:f2:6e:c4:58:e3:64:cd: 52:13:7a:d9:c0:6e:1d:83:27:2e:41:9d:be:42:3b: 6a:2a:09:38:a9:ff:08:fd:70:df:74:e1:82:31:0b: b1:40:d6:83:a8:8f:67:34:04:45:85:5b:8b:a5:74: f1:67:dc:c4:8e:4a:b9:1d:d8:7e:a2:f1:93:dd:bb: 6a:70:a7:01:45:d5:6e:19:ed:55:83:19:d2:c9:2c: ef:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:EB:F4:79:87:5D:DE:BD:58:BA:5D:4C:46:88:7B:FA:68:5B:A6:C3 X509v3 Authority Key Identifier: keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:52:53:2b:f3:96:32:6f:2a:05:41:de:b8:fa:81:30:28:1c: 9d:c7:8f:d8:45:27:d0:1c:c2:76:1c:4e:a1:32:6e:58:fc:be: 84:0c:ab:1d:52:91:f8:a4:d4:3c:92:a4:a7:a0:b4:1c:7d:b1: f8:69:2e:68:e0:6c:8a:10:04:cc:26:04:3a:40:2c:b5:73:2f: 90:cb:62:6c:73:1a:d0:d8:25:4e:c6:09:02:9e:81:b5:d4:5a: a4:40:7d:a6:d7:e7:55:81:72:5f:40:a5:52:a3:ec:7a:ea:4d: b2:45:7e:fd:16:d6:ca:aa:1d:5f:89:4e:bb:4b:b6:d6:d8:37: ef:39:e4:e8:52:04:30:ad:21:d1:2e:28:2b:1a:c1:06:a1:33: 14:2e:5f:98:8b:59:21:0a:63:c6:01:02:79:b7:b2:ca:25:85: f6:a1:3e:6a:e5:f0:1c:6e:4f:7a:ac:be:79:60:ec:e7:63:cc: 20:34:c1:5f:04:10:47:d5:78:8b:65:b7:dd:8a:ca:59:bd:ed: 21:b7:82:4a:68:30:a6:03:df:62:c6:f9:f8:49:1a:a4:57:e4: b7:a6:15:a7:b0:c9:a0:e9:45:19:40:9d:b0:81:b9:f0:e4:ab: 60:88:68:2f:2c:91:eb:9b:5f:06:91:cf:3a:f5:b5:bd:72:45: 3f:73:4a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxBM4JSBDO1tRtZ6CBe9s1DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMTY5MmE2OTUwMTdmYjVjNGJmOGMyMzgwNzhmMzAzZDhm YmYwODcwHhcNMjYwMjA5MDcwMDIwWhcNMjYwMjEwMDcwMDIwWjAzMTEwLwYDVQQD EygzYWViZjQ3OTg3NWRkZWJkNThiYTVkNGM0Njg4N2JmYTY4NWJhNmMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVjGHGBzW8B8VhN3zCXFewNMZeY3 1jtzjweaNSBXkDIQiEq3XG8bWwIeNUOpPYLyA+Gs1eDZiEx1KFD2He9si6e2A+b4 eogNsD4oiX80fkSQHLxpVMTpCNsT6f21KObwfryyO6fFJAHdpMKijNZILYZ2zNDu y95ZzZftgbaTzSIm0yPFwEFvYGAVgyDjchgRpzFzdUzxvGcenHjbtcImgt5D3Au1 CiKyIx2J1vJuxFjjZM1SE3rZwG4dgycuQZ2+QjtqKgk4qf8I/XDfdOGCMQuxQNaD qI9nNARFhVuLpXTxZ9zEjkq5Hdh+ovGT3btqcKcBRdVuGe1VgxnSySzvSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDrr9HmHXd69WLpdTEaIe/poW6bDMB8GA1UdIwQY MBaAFAIWkqaVAX+1xL+MI4B48wPY+/CHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUt NDhkMjVjMGE0OTVmLzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC8xM2JlZDUtOGQzNC00ZDNkLThlMDUtNDhkMjVjMGE0OTVm LzEvQWhhU3BwVUJmN1hFdjR3amdIanpBOWo3OEljLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr1JTK/OW Mm8qBUHeuPqBMCgcnceP2EUn0BzCdhxOoTJuWPy+hAyrHVKR+KTUPJKkp6C0HH2x +GkuaOBsihAEzCYEOkAstXMvkMtibHMa0NglTsYJAp6BtdRapEB9ptfnVYFyX0Cl UqPseupNskV+/RbWyqodX4lOu0u21tg37znk6FIEMK0h0S4oKxrBBqEzFC5fmItZ IQpjxgECebeyyiWF9qE+auXwHG5Peqy+eWDs52PMIDTBXwQQR9V4i2W33YrKWb3t IbeCSmgwpgPfYsb5+EkapFfkt6YVp7DJoOlFGUCdsIG58OSrYIhoLyyR65tfBpHP OvW1vXJFP3NKyg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:55:45 2026 by rpki-client