This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft File: AEp1iisKfpOKnw3uZCzsXkECdrU.mft (raw, json) Hash identifier: imCEdbkrpN4yoDu+sYRjFWVkVEd4JA4mzscN04kxgyg= Subject key identifier: 0F:3B:B6:C6:FE:74:AD:15:AD:44:E0:59:14:ED:94:73:A9:71:FB:09 Authority key identifier: 00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 Certificate issuer: /CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Certificate serial: 019C427DE3E94A676E93D509EDEB41DC92BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft Manifest number: 0D7C Signing time: Mon 09 Feb 2026 13:01:12 +0000 Manifest this update: Mon 09 Feb 2026 13:01:12 +0000 Manifest next update: Tue 10 Feb 2026 13:01:12 +0000 Files and hashes: 1: AEp1iisKfpOKnw3uZCzsXkECdrU.crl (hash: o0AyUdSs9cQuZPiPW5phO1kKM0KZ5XgWOSw096Cdbjg=) 2: KQvSjqYh8xEH5jGSoTapmYBK1v8.roa (hash: oIhjbUQtq0h2T8RoAxHLxlxqfimGaBYyqjdqBzIaXjs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 13:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:7d:e3:e9:4a:67:6e:93:d5:09:ed:eb:41:dc:92:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=004a758a2b0a7e938a9f0dee642cec5e410276b5 Validity Not Before: Feb 9 13:01:12 2026 GMT Not After : Feb 10 13:01:12 2026 GMT Subject: CN=0f3bb6c6fe74ad15ad44e05914ed9473a971fb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:1a:18:f3:15:fe:d4:71:e4:7c:74:41:40:e5: 99:98:95:48:af:b0:46:ce:a4:14:68:2a:d8:cb:2b: 97:33:9b:e6:35:13:de:29:97:d5:28:66:e4:2d:af: 82:0b:2a:c4:42:20:3f:f5:93:00:57:7f:61:e4:12: 4d:f0:8b:da:16:1b:b7:c5:5e:8a:e7:47:83:05:1f: 80:eb:89:05:fc:fe:1c:a5:97:ce:75:eb:52:50:07: b2:5e:6c:eb:6e:b6:23:5e:4e:c3:6a:74:d5:eb:66: 66:7e:e4:ec:9a:d4:28:bf:b5:18:d5:a8:27:74:8b: 46:e6:17:c4:7e:48:6d:47:49:51:cd:5d:8e:0f:13: e6:30:7d:16:d6:00:07:12:6d:e8:b6:53:ec:b7:af: d0:90:44:66:40:8a:34:b5:d8:fb:ef:53:5f:79:48: 0c:d9:db:97:c1:1f:c1:26:1f:f9:e7:7e:20:f7:9a: 74:73:bf:40:a5:69:c9:ff:3f:80:bc:18:0a:dc:1c: 28:90:d2:49:ba:4c:9d:49:88:9f:fd:99:0e:57:fd: b9:31:f0:ea:69:d0:51:26:41:a0:62:ea:be:4e:22: c0:59:7d:ec:03:10:89:fa:e1:a3:d9:4e:49:26:82: 20:97:25:a1:42:99:3e:8f:00:4c:80:24:c0:b6:b6: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:3B:B6:C6:FE:74:AD:15:AD:44:E0:59:14:ED:94:73:A9:71:FB:09 X509v3 Authority Key Identifier: keyid:00:4A:75:8A:2B:0A:7E:93:8A:9F:0D:EE:64:2C:EC:5E:41:02:76:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AEp1iisKfpOKnw3uZCzsXkECdrU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bf5915-96aa-4dad-af2a-0110272dec17/1/AEp1iisKfpOKnw3uZCzsXkECdrU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:4b:07:57:47:cd:85:db:41:0c:dc:b2:25:fd:19:10:9b:00: 74:0f:34:11:05:3b:a7:c8:06:97:b5:df:b2:58:c0:e4:18:06: e2:6a:b1:6b:f2:eb:b3:73:4a:c2:3d:db:18:2d:7c:13:43:8f: 99:8a:6d:0e:46:d7:39:43:37:2a:bc:ff:40:7d:1e:18:07:ce: bc:6e:cb:44:f0:23:3b:89:e9:31:97:f4:8a:78:bf:6c:06:a7: f1:75:e3:78:bd:f3:50:b4:4f:74:e5:ed:96:dd:25:92:78:a4: cb:38:0f:f8:a9:e9:2d:ed:a8:6b:fc:11:a1:60:ff:23:15:b5: 2e:ac:72:4e:ff:d3:87:04:2e:88:fd:a3:80:6e:28:4c:b3:ad: a6:ad:15:1f:ce:81:93:81:04:3a:8d:f1:96:a9:2e:83:0d:43: 1b:12:4c:ba:d0:a0:44:2c:0a:65:21:66:df:b9:a2:fa:10:7e: 7e:11:7f:d2:12:50:27:be:86:c2:b2:5a:25:35:16:90:c2:fb: 44:83:c8:6a:06:bf:3a:4b:39:a8:7c:dd:b4:df:b1:d2:f6:7f: 1e:ee:1b:71:1a:ae:c3:c5:81:ba:b0:d5:67:b3:bd:de:cf:d0: 03:26:33:a7:37:2b:fd:3c:4d:84:0c:f2:c4:25:bd:87:fd:e8: 10:7a:4a:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCfePpSmduk9UJ7etB3JK6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNGE3NThhMmIwYTdlOTM4YTlmMGRlZTY0MmNlYzVlNDEw Mjc2YjUwHhcNMjYwMjA5MTMwMTEyWhcNMjYwMjEwMTMwMTEyWjAzMTEwLwYDVQQD EygwZjNiYjZjNmZlNzRhZDE1YWQ0NGUwNTkxNGVkOTQ3M2E5NzFmYjA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphoY8xX+1HHkfHRBQOWZmJVIr7BG zqQUaCrYyyuXM5vmNRPeKZfVKGbkLa+CCyrEQiA/9ZMAV39h5BJN8IvaFhu3xV6K 50eDBR+A64kF/P4cpZfOdetSUAeyXmzrbrYjXk7DanTV62ZmfuTsmtQov7UY1agn dItG5hfEfkhtR0lRzV2ODxPmMH0W1gAHEm3otlPst6/QkERmQIo0tdj771NfeUgM 2duXwR/BJh/5534g95p0c79ApWnJ/z+AvBgK3BwokNJJukydSYif/ZkOV/25MfDq adBRJkGgYuq+TiLAWX3sAxCJ+uGj2U5JJoIglyWhQpk+jwBMgCTAtrYYawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA87tsb+dK0VrUTgWRTtlHOpcfsJMB8GA1UdIwQY MBaAFABKdYorCn6Tip8N7mQs7F5BAna1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEt MDExMDI3MmRlYzE3LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9iZjU5MTUtOTZhYS00ZGFkLWFmMmEtMDExMDI3MmRlYzE3 LzEvQUVwMWlpc0tmcE9LbnczdVpDenNYa0VDZHJVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtksHV0fN hdtBDNyyJf0ZEJsAdA80EQU7p8gGl7XfsljA5BgG4mqxa/Lrs3NKwj3bGC18E0OP mYptDkbXOUM3Krz/QH0eGAfOvG7LRPAjO4npMZf0ini/bAan8XXjeL3zULRPdOXt lt0lknikyzgP+KnpLe2oa/wRoWD/IxW1LqxyTv/ThwQuiP2jgG4oTLOtpq0VH86B k4EEOo3xlqkugw1DGxJMutCgRCwKZSFm37mi+hB+fhF/0hJQJ76GwrJaJTUWkML7 RIPIaga/Oks5qHzdtN+x0vZ/Hu4bcRquw8WBurDVZ7O93s/QAyYzpzcr/TxNhAzy xCW9h/3oEHpKyg== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:42 2026 by rpki-client