This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft File: ASAlltXOzjfcNMhhBkV4_G2qXoY.mft (raw, json) Hash identifier: LAvFWQCI/bcvyp5KOIfYWGMUZYfBpEeQ57/Ibvwncs4= Subject key identifier: D6:67:73:A8:47:96:6E:0D:91:48:26:4C:FA:59:47:E9:83:33:F8:68 Authority key identifier: 01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86 Certificate issuer: /CN=01202596d5cece37dc34c861064578fc6daa5e86 Certificate serial: 019C43C6F395411EF616A195F49D05CE5994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft Manifest number: 0CDB Signing time: Mon 09 Feb 2026 19:00:37 +0000 Manifest this update: Mon 09 Feb 2026 19:00:37 +0000 Manifest next update: Tue 10 Feb 2026 19:00:37 +0000 Files and hashes: 1: ASAlltXOzjfcNMhhBkV4_G2qXoY.crl (hash: TqomQWhqvcy323c+s9epOkgfUyW/emhdU5+ek0DfShU=) 2: rlozkrq9ZzNHCZUtQGPTzboWxmI.roa (hash: +ky2eseP0hm1lozQb5MU58tNSrjncRM2hPrTaQ0J6cY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c6:f3:95:41:1e:f6:16:a1:95:f4:9d:05:ce:59:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=01202596d5cece37dc34c861064578fc6daa5e86 Validity Not Before: Feb 9 19:00:37 2026 GMT Not After : Feb 10 19:00:37 2026 GMT Subject: CN=d66773a847966e0d9148264cfa5947e98333f868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:dd:98:30:f8:94:35:16:a2:4b:d4:a3:5e: 61:b8:8a:e5:07:32:1a:67:fb:a5:f9:c8:b9:a5:17: 6c:2a:c7:3d:93:40:dc:a7:bd:22:2b:d2:44:34:63: 89:4a:da:4f:a2:05:4e:94:5c:53:ab:fb:76:15:2c: 79:85:0a:6a:6f:5b:ba:c3:d4:90:cc:f2:19:0e:05: b7:2b:cc:1b:5e:42:4a:60:57:4c:2c:67:67:5e:b2: 19:d0:e2:c0:f6:6e:fe:2b:b4:16:e9:b6:1d:82:0d: c3:f7:25:7d:4a:45:34:1a:4a:98:c5:72:0a:97:58: e1:f3:2b:85:5f:de:a0:87:9b:6b:43:a3:50:48:e8: 4d:18:03:dd:94:75:d9:40:12:71:da:3a:60:ec:8c: e7:fb:66:96:74:c8:b7:63:e2:46:80:46:4e:6c:ab: 8f:f6:3b:77:65:87:61:03:82:18:96:90:9f:27:b2: 45:b9:a5:94:67:31:5a:ce:3e:79:f8:03:d9:85:32: b8:c8:02:43:08:84:83:68:ce:68:b0:87:35:28:a7: 02:3e:ef:f7:d9:25:66:9b:97:54:92:5d:6b:6a:d3: 5e:d9:b1:a3:46:df:5a:8b:b3:43:c2:26:df:0d:8b: 98:81:55:54:64:6b:2c:73:f7:84:f6:8d:d8:80:0c: 4c:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:67:73:A8:47:96:6E:0D:91:48:26:4C:FA:59:47:E9:83:33:F8:68 X509v3 Authority Key Identifier: keyid:01:20:25:96:D5:CE:CE:37:DC:34:C8:61:06:45:78:FC:6D:AA:5E:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ASAlltXOzjfcNMhhBkV4_G2qXoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/986164-8030-4e47-98b5-481151acf329/1/ASAlltXOzjfcNMhhBkV4_G2qXoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:d3:8e:e6:60:78:69:de:75:b2:26:6f:67:27:62:57:26:bb: c0:e6:6c:62:84:a9:45:55:3d:de:32:a4:8b:ee:d8:bf:41:9b: b7:08:b8:5c:81:5a:45:3e:25:7f:0f:7f:d5:b1:c2:c6:7a:be: 6a:b4:b6:2d:b3:a8:e0:a4:17:46:d1:c6:e2:1e:17:7d:f7:13: 2e:d3:c6:5b:d6:7f:44:cd:2a:62:a7:a1:19:f2:af:25:3c:e1: c9:13:7d:97:d2:6a:85:8a:a5:fc:ae:2b:3f:a0:09:20:5b:61: 0e:32:ad:96:df:bc:0e:63:fc:9b:e0:e7:83:4b:0f:4c:19:4c: 96:55:2b:72:53:c0:01:d9:6a:88:d7:4a:c0:9f:be:86:ee:1d: 3a:72:55:6d:57:26:34:76:d2:d6:64:b7:87:31:e2:1e:d7:cf: 8a:23:e4:1e:f9:72:90:6e:65:25:e0:ab:55:ce:43:7b:78:6a: 58:80:6e:4e:67:34:31:30:42:bf:89:fc:e7:5b:59:54:69:c4: ea:07:d9:a3:dd:ae:69:fd:46:a7:e5:db:87:d1:74:81:f3:2c: 51:ce:e7:28:ec:2f:36:8a:d8:7d:b2:59:ec:47:9e:e7:29:6c: ef:58:11:2f:0d:17:4d:34:41:06:1b:0b:69:c4:1b:17:5b:3f: 51:a6:b7:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxvOVQR72FqGV9J0FzlmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAxMjAyNTk2ZDVjZWNlMzdkYzM0Yzg2MTA2NDU3OGZjNmRh YTVlODYwHhcNMjYwMjA5MTkwMDM3WhcNMjYwMjEwMTkwMDM3WjAzMTEwLwYDVQQD EyhkNjY3NzNhODQ3OTY2ZTBkOTE0ODI2NGNmYTU5NDdlOTgzMzNmODY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7/dmDD4lDUWokvUo15huIrlBzIa Z/ul+ci5pRdsKsc9k0Dcp70iK9JENGOJStpPogVOlFxTq/t2FSx5hQpqb1u6w9SQ zPIZDgW3K8wbXkJKYFdMLGdnXrIZ0OLA9m7+K7QW6bYdgg3D9yV9SkU0GkqYxXIK l1jh8yuFX96gh5trQ6NQSOhNGAPdlHXZQBJx2jpg7Izn+2aWdMi3Y+JGgEZObKuP 9jt3ZYdhA4IYlpCfJ7JFuaWUZzFazj55+APZhTK4yAJDCISDaM5osIc1KKcCPu/3 2SVmm5dUkl1ratNe2bGjRt9ai7NDwibfDYuYgVVUZGssc/eE9o3YgAxMpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNZnc6hHlm4NkUgmTPpZR+mDM/hoMB8GA1UdIwQY MBaAFAEgJZbVzs433DTIYQZFePxtql6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUt NDgxMTUxYWNmMzI5LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYi85ODYxNjQtODAzMC00ZTQ3LTk4YjUtNDgxMTUxYWNmMzI5 LzEvQVNBbGx0WE96amZjTk1oaEJrVjRfRzJxWG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMNOO5mB4 ad51siZvZydiVya7wOZsYoSpRVU93jKki+7Yv0Gbtwi4XIFaRT4lfw9/1bHCxnq+ arS2LbOo4KQXRtHG4h4XffcTLtPGW9Z/RM0qYqehGfKvJTzhyRN9l9JqhYql/K4r P6AJIFthDjKtlt+8DmP8m+Dng0sPTBlMllUrclPAAdlqiNdKwJ++hu4dOnJVbVcm NHbS1mS3hzHiHtfPiiPkHvlykG5lJeCrVc5De3hqWIBuTmc0MTBCv4n851tZVGnE 6gfZo92uaf1Gp+Xbh9F0gfMsUc7nKOwvNorYfbJZ7Eee5yls71gRLw0XTTRBBhsL acQbF1s/Uaa3IQ== -----END CERTIFICATE-----Generated at Tue Feb 10 00:17:27 2026 by rpki-client