This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft File: aFepuyl_CzxESrCvZzpSdQ6Xm04.mft (raw, json) Hash identifier: GSSBeFwyfG/vKdp90wF68bEjI49fysoT/K+aNhYHEoM= Subject key identifier: 96:4D:47:90:D8:0E:07:6D:CB:64:6B:AD:1D:B5:F5:39:49:46:7D:D1 Authority key identifier: 68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E Certificate issuer: /CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Certificate serial: 019C42B437DC930216B591C9D054B9BA970B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft Manifest number: 1810 Signing time: Mon 09 Feb 2026 14:00:32 +0000 Manifest this update: Mon 09 Feb 2026 14:00:32 +0000 Manifest next update: Tue 10 Feb 2026 14:00:32 +0000 Files and hashes: 1: MFYkRU3grNRPvLbyPaISwxG8sRc.roa (hash: Kn7dq6VQMBUK2el7CpBxhmeZzkXVRbxFBsXov0HWD6Q=) 2: aFepuyl_CzxESrCvZzpSdQ6Xm04.crl (hash: TjUaEAguYhAyC4o3Uj0SG72Y+ui6WkfO9llorXEguRI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 14:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:b4:37:dc:93:02:16:b5:91:c9:d0:54:b9:ba:97:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6857a9bb297f0b3c444ab0af673a52750e979b4e Validity Not Before: Feb 9 14:00:32 2026 GMT Not After : Feb 10 14:00:32 2026 GMT Subject: CN=964d4790d80e076dcb646bad1db5f53949467dd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c3:b8:03:7f:e5:3f:19:75:cb:35:e0:3d:6b: 79:5a:31:89:ee:c4:ef:0b:13:89:56:a6:fc:32:ee: fc:6c:f5:0a:8b:e5:1e:00:ff:2e:13:0f:af:30:cc: 45:0c:31:cb:5b:13:a4:2f:75:84:84:f1:b5:c9:0b: 38:39:01:7b:73:f0:97:6b:f6:5e:e1:c0:3a:97:7f: 48:54:63:3e:8c:b3:c6:6c:f2:5a:95:c0:83:36:67: 85:b5:65:db:9e:bf:1e:cf:31:c7:72:96:45:ea:a7: 1e:7f:30:06:66:4f:dd:90:60:a7:93:fe:4d:14:ca: 98:96:c2:66:f2:ef:a3:15:aa:0c:34:e2:db:5e:33: 2e:5f:46:66:39:b5:fe:af:da:5e:51:3b:58:ac:a3: 4a:e3:10:56:a9:1f:ad:fa:d6:6e:f5:b9:be:d2:90: 39:a2:2e:b8:1c:c9:86:63:19:68:f6:15:7d:b3:80: b1:fe:c3:63:04:91:1c:56:46:de:e7:af:78:4a:a0: 1f:a2:52:7d:c1:89:2c:6b:50:97:c0:f7:03:37:65: c5:ac:4c:66:a9:84:85:83:fc:c0:57:85:bb:ff:cf: 27:b2:5d:d1:b1:d9:b4:d4:7a:34:fd:7a:db:b0:aa: 9e:34:47:32:6e:eb:9b:f7:c1:fb:d8:ac:86:36:e7: fd:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:4D:47:90:D8:0E:07:6D:CB:64:6B:AD:1D:B5:F5:39:49:46:7D:D1 X509v3 Authority Key Identifier: keyid:68:57:A9:BB:29:7F:0B:3C:44:4A:B0:AF:67:3A:52:75:0E:97:9B:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aFepuyl_CzxESrCvZzpSdQ6Xm04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9d0a15-d546-4970-9a81-8596c2af9dcc/1/aFepuyl_CzxESrCvZzpSdQ6Xm04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:73:33:a7:53:e7:a4:0c:4a:7e:de:8d:14:15:81:02:eb:78: 88:ce:c9:e6:6e:3f:17:67:de:39:0f:94:1c:2f:3a:24:a2:05: 4b:22:5b:2f:82:b9:4f:22:b2:3e:83:32:c6:49:92:64:7a:de: 3e:b7:88:bc:21:ad:07:6c:8a:f8:3b:69:b6:a1:63:ed:90:af: e7:55:11:c8:50:4b:ea:02:b7:df:4d:5a:e2:db:91:50:4b:6c: 69:33:64:80:2e:37:b2:89:05:af:a6:9e:6c:1d:f6:7d:50:eb: 9c:3f:97:59:58:9f:e3:53:50:70:4b:83:61:01:cf:c9:3f:c2: 5e:fb:95:24:96:90:d0:22:e6:3b:85:98:4f:9f:75:9b:ba:01: 59:71:2a:62:bd:1c:50:01:f6:58:b2:4c:f3:45:ec:6b:eb:79: 17:e4:b1:a7:e6:cb:4d:2f:21:ad:5c:2f:07:00:20:ac:36:4e: 2a:1c:a2:e8:88:43:a0:bf:e3:a0:92:75:e1:c0:1d:60:5a:72: 03:49:16:77:b4:66:e8:29:0a:5b:de:df:02:20:96:df:c6:4b: a5:e4:d6:7a:9c:dd:74:69:48:90:c3:37:11:02:7b:0d:42:b8: bb:20:3d:55:35:60:88:35:25:74:1e:fa:ad:84:51:3e:c6:7d: 33:d1:af:91 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCtDfckwIWtZHJ0FS5upcLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NTdhOWJiMjk3ZjBiM2M0NDRhYjBhZjY3M2E1Mjc1MGU5 NzliNGUwHhcNMjYwMjA5MTQwMDMyWhcNMjYwMjEwMTQwMDMyWjAzMTEwLwYDVQQD Eyg5NjRkNDc5MGQ4MGUwNzZkY2I2NDZiYWQxZGI1ZjUzOTQ5NDY3ZGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MO4A3/lPxl1yzXgPWt5WjGJ7sTv CxOJVqb8Mu78bPUKi+UeAP8uEw+vMMxFDDHLWxOkL3WEhPG1yQs4OQF7c/CXa/Ze 4cA6l39IVGM+jLPGbPJalcCDNmeFtWXbnr8ezzHHcpZF6qcefzAGZk/dkGCnk/5N FMqYlsJm8u+jFaoMNOLbXjMuX0ZmObX+r9peUTtYrKNK4xBWqR+t+tZu9bm+0pA5 oi64HMmGYxlo9hV9s4Cx/sNjBJEcVkbe5694SqAfolJ9wYksa1CXwPcDN2XFrExm qYSFg/zAV4W7/88nsl3Rsdm01Ho0/XrbsKqeNEcybuub98H72KyGNuf9KwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZNR5DYDgdty2RrrR219TlJRn3RMB8GA1UdIwQY MBaAFGhXqbspfws8REqwr2c6UnUOl5tOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEt ODU5NmMyYWY5ZGNjLzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC85ZDBhMTUtZDU0Ni00OTcwLTlhODEtODU5NmMyYWY5ZGNj LzEvYUZlcHV5bF9DenhFU3JDdlp6cFNkUTZYbTA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3Mzp1Pn pAxKft6NFBWBAut4iM7J5m4/F2feOQ+UHC86JKIFSyJbL4K5TyKyPoMyxkmSZHre PreIvCGtB2yK+DtptqFj7ZCv51URyFBL6gK3301a4tuRUEtsaTNkgC43sokFr6ae bB32fVDrnD+XWVif41NQcEuDYQHPyT/CXvuVJJaQ0CLmO4WYT591m7oBWXEqYr0c UAH2WLJM80Xsa+t5F+Sxp+bLTS8hrVwvBwAgrDZOKhyi6IhDoL/joJJ14cAdYFpy A0kWd7Rm6CkKW97fAiCW38ZLpeTWepzddGlIkMM3EQJ7DUK4uyA9VTVgiDUldB76 rYRRPsZ9M9GvkQ== -----END CERTIFICATE-----Generated at Mon Feb 9 18:33:02 2026 by rpki-client