This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft File: avUBb_idoMjK_uIV72JBwwvJMAM.mft (raw, json) Hash identifier: P6Dt7fHHyQRba1GH0Tar1BDQ8dxho/AlUHkswU71UZg= Subject key identifier: C2:07:A8:5F:08:C4:89:F1:66:0E:B3:D1:D6:40:FE:37:93:0C:F3:BB Authority key identifier: 6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03 Certificate issuer: /CN=6af5016ff89da0c8cafee215ef6241c30bc93003 Certificate serial: 019C43C7191E702F9B18F12771F11A1AB5D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft Manifest number: 0EF0 Signing time: Mon 09 Feb 2026 19:00:47 +0000 Manifest this update: Mon 09 Feb 2026 19:00:47 +0000 Manifest next update: Tue 10 Feb 2026 19:00:47 +0000 Files and hashes: 1: avUBb_idoMjK_uIV72JBwwvJMAM.crl (hash: 7bJ4r4zUlO9sPNxm10S6phWvM4UkV+Qrza+HeKjcUHY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:19:1e:70:2f:9b:18:f1:27:71:f1:1a:1a:b5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6af5016ff89da0c8cafee215ef6241c30bc93003 Validity Not Before: Feb 9 19:00:47 2026 GMT Not After : Feb 10 19:00:47 2026 GMT Subject: CN=c207a85f08c489f1660eb3d1d640fe37930cf3bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:e9:1a:70:61:61:aa:05:df:02:46:7e:2a:4e: e0:4d:03:16:7c:b9:9b:35:51:45:39:c6:d3:71:72: ea:49:c6:a8:0c:f9:28:c8:1a:65:1a:6b:7a:42:a9: e8:dd:cd:56:30:ea:d7:4e:a8:3a:fe:b5:e4:d1:2a: 77:ea:9d:c7:e9:9f:8e:98:f9:10:a8:ed:1a:0a:33: 6b:80:d3:de:e5:66:b4:a8:40:bc:38:11:f9:af:99: 61:54:ac:5f:bf:27:42:47:b4:cd:25:f7:c4:8a:e2: 57:20:a7:10:5e:dd:ec:03:a2:80:de:aa:c2:f8:8f: 26:ca:7d:52:d7:f6:69:44:49:8f:62:70:e4:d7:9c: 9a:37:d4:ac:d2:89:85:ae:e9:c4:8d:99:f3:bf:e7: 8c:d2:ee:e6:30:79:52:87:38:0a:76:bb:d5:e2:98: 25:d3:82:7d:aa:b1:36:35:02:fb:f0:ca:5b:bc:e3: 0e:1a:b4:1a:c8:80:27:cf:94:f7:37:73:bd:2b:72: 18:6a:a7:94:f3:80:70:79:6a:e6:68:d2:31:9f:c0: d8:e0:44:4d:38:04:5a:c6:6f:c0:5e:02:38:e5:f5: 73:37:ce:6d:05:3f:23:f2:33:44:6f:2e:86:07:7c: 95:ea:54:68:ad:36:09:bf:d4:ed:e1:93:8e:58:cb: 7a:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:07:A8:5F:08:C4:89:F1:66:0E:B3:D1:D6:40:FE:37:93:0C:F3:BB X509v3 Authority Key Identifier: keyid:6A:F5:01:6F:F8:9D:A0:C8:CA:FE:E2:15:EF:62:41:C3:0B:C9:30:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/avUBb_idoMjK_uIV72JBwwvJMAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a07485-97df-47d9-aa96-df0c74d545d2/1/avUBb_idoMjK_uIV72JBwwvJMAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ab:76:61:46:3a:fb:bc:49:3b:66:55:e8:d6:70:6d:44:9a: c3:76:6d:c2:0d:b9:44:78:02:3b:18:dd:cd:45:1e:7a:48:0d: dc:bc:f9:e2:29:bb:3d:d7:3b:d3:72:cd:3d:aa:5d:32:1b:56: ac:5f:76:6d:59:72:2c:8d:b5:1d:1e:e1:83:cc:12:f4:0e:95: c3:d4:bf:7c:a2:17:da:a9:5d:a8:44:88:de:a9:11:6d:00:47: 74:26:17:8d:ac:0d:0d:72:4d:04:b7:d4:da:95:0b:4e:53:63: 54:67:cf:b5:31:22:d6:28:f7:74:40:5f:68:32:73:38:49:f9: 99:95:db:ad:8c:66:49:c5:9f:b7:51:1e:95:0c:21:d6:9e:cb: ea:93:89:54:13:b1:9c:40:72:9e:04:e7:8b:22:0e:bf:ff:db: 06:4f:88:b0:43:6b:39:64:15:eb:41:b1:b5:d5:4b:35:78:2c: 22:5b:e0:b8:b4:48:c0:92:28:0f:4f:63:a6:ea:44:ae:a8:36: 7b:df:64:b8:1e:0a:18:a4:b6:e5:b9:f2:82:6e:9b:78:ac:d2: b4:70:c8:70:a9:39:31:84:8c:a7:d5:04:8e:81:ba:9c:3b:17: d1:ad:c8:b2:65:14:07:a9:b7:0b:92:a9:6d:d8:37:93:c8:26: fa:b0:1a:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxxkecC+bGPEncfEaGrXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhZjUwMTZmZjg5ZGEwYzhjYWZlZTIxNWVmNjI0MWMzMGJj OTMwMDMwHhcNMjYwMjA5MTkwMDQ3WhcNMjYwMjEwMTkwMDQ3WjAzMTEwLwYDVQQD EyhjMjA3YTg1ZjA4YzQ4OWYxNjYwZWIzZDFkNjQwZmUzNzkzMGNmM2JiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+kacGFhqgXfAkZ+Kk7gTQMWfLmb NVFFOcbTcXLqScaoDPkoyBplGmt6Qqno3c1WMOrXTqg6/rXk0Sp36p3H6Z+OmPkQ qO0aCjNrgNPe5Wa0qEC8OBH5r5lhVKxfvydCR7TNJffEiuJXIKcQXt3sA6KA3qrC +I8myn1S1/ZpREmPYnDk15yaN9Ss0omFrunEjZnzv+eM0u7mMHlShzgKdrvV4pgl 04J9qrE2NQL78MpbvOMOGrQayIAnz5T3N3O9K3IYaqeU84BweWrmaNIxn8DY4ERN OARaxm/AXgI45fVzN85tBT8j8jNEby6GB3yV6lRorTYJv9Tt4ZOOWMt64QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMIHqF8IxInxZg6z0dZA/jeTDPO7MB8GA1UdIwQY MBaAFGr1AW/4naDIyv7iFe9iQcMLyTADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYt ZGYwYzc0ZDU0NWQyLzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYS9hMDc0ODUtOTdkZi00N2Q5LWFhOTYtZGYwYzc0ZDU0NWQy LzEvYXZVQmJfaWRvTWpLX3VJVjcySkJ3d3ZKTUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMat2YUY6 +7xJO2ZV6NZwbUSaw3Ztwg25RHgCOxjdzUUeekgN3Lz54im7Pdc703LNPapdMhtW rF92bVlyLI21HR7hg8wS9A6Vw9S/fKIX2qldqESI3qkRbQBHdCYXjawNDXJNBLfU 2pULTlNjVGfPtTEi1ij3dEBfaDJzOEn5mZXbrYxmScWft1EelQwh1p7L6pOJVBOx nEByngTniyIOv//bBk+IsENrOWQV60GxtdVLNXgsIlvguLRIwJIoD09jpupErqg2 e99kuB4KGKS25bnygm6beKzStHDIcKk5MYSMp9UEjoG6nDsX0a3IsmUUB6m3C5Kp bdg3k8gm+rAafA== -----END CERTIFICATE-----Generated at Mon Feb 9 22:39:13 2026 by rpki-client