This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft File: AJJn8-O54eu5eZaQgLDfqyTDYBo.mft (raw, json) Hash identifier: up5ZFUQ2b3qoBlVDP06lM2ZmrZNks1UzWs8VePF6WgY= Subject key identifier: 43:E0:08:77:12:A6:BF:52:8B:6D:D0:1C:21:22:B7:02:00:20:41:F9 Authority key identifier: 00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A Certificate issuer: /CN=009267f3e3b9e1ebb979969080b0dfab24c3601a Certificate serial: 019C439070393FB4920E0A6DE2B2579AE198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft Manifest number: 03E3 Signing time: Mon 09 Feb 2026 18:01:05 +0000 Manifest this update: Mon 09 Feb 2026 18:01:05 +0000 Manifest next update: Tue 10 Feb 2026 18:01:05 +0000 Files and hashes: 1: AJJn8-O54eu5eZaQgLDfqyTDYBo.crl (hash: nASl0PbG7feeLoALUgUsIVikLLjcW3r4MMWdfN0v3Bg=) 2: d9OmlBe2GpKLvl3u0mUGOFIDWgo.roa (hash: Ba/7rGgRRFa7/HkHrFHCRps9ypeyWifGgSmqxh5y+b8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:90:70:39:3f:b4:92:0e:0a:6d:e2:b2:57:9a:e1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=009267f3e3b9e1ebb979969080b0dfab24c3601a Validity Not Before: Feb 9 18:01:05 2026 GMT Not After : Feb 10 18:01:05 2026 GMT Subject: CN=43e0087712a6bf528b6dd01c2122b702002041f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:08:53:3e:c1:09:23:ed:07:d9:a3:1e:5e:77: 22:d4:ae:49:94:16:e6:1c:39:cf:04:40:51:f2:c8: 73:5e:fd:bb:79:bf:63:08:83:c2:63:73:97:b5:ed: 1c:b7:b8:2b:fe:8d:f6:dd:27:36:26:a9:34:af:85: 4a:4b:ec:a0:ae:6a:cf:f8:db:93:a6:d2:6f:95:3e: 4a:81:43:6e:60:0d:56:a3:3e:d4:0d:bf:30:c4:e3: ca:2f:26:23:88:e3:35:84:1f:02:88:28:98:8f:0d: 09:8d:a9:83:91:9a:21:17:42:5e:f3:03:ba:1a:65: 30:6c:01:d7:ff:48:78:87:0f:a5:2e:fe:6b:d0:d5: ed:0d:0f:7a:61:78:06:7e:94:d4:51:dc:cc:1a:00: ed:79:01:61:44:fc:8d:3b:8a:5a:20:5d:c7:77:ca: ee:4f:4f:59:e1:90:7a:e2:99:36:cf:fa:0c:bb:64: 90:33:41:a3:f1:6a:50:f7:c1:66:3f:98:d6:b7:ed: bc:93:9e:81:61:1a:3d:8f:52:12:50:4d:1e:82:99: 28:18:79:99:8c:d8:13:ee:fc:3f:a2:dc:d1:5b:ad: 39:cb:5a:4c:48:71:df:c3:bf:4a:1f:cf:c8:4e:f2: b5:1c:a4:b8:db:b2:36:18:3e:44:e3:ac:13:13:93: 12:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:E0:08:77:12:A6:BF:52:8B:6D:D0:1C:21:22:B7:02:00:20:41:F9 X509v3 Authority Key Identifier: keyid:00:92:67:F3:E3:B9:E1:EB:B9:79:96:90:80:B0:DF:AB:24:C3:60:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJJn8-O54eu5eZaQgLDfqyTDYBo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f4dba6-6d94-410f-9be2-d6903825018c/1/AJJn8-O54eu5eZaQgLDfqyTDYBo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7c:63:fd:2f:4f:9e:66:b6:8a:db:93:75:cc:c0:e5:36:6b: cb:49:de:cf:9a:e7:36:c5:8a:ae:66:62:70:5a:57:fd:16:43: 1f:bf:cb:72:d2:9e:3b:64:3f:ce:12:ce:98:11:0a:10:fc:d1: 37:16:37:43:66:4e:aa:5e:56:11:d5:3b:e5:8e:3a:92:fe:cb: 38:2f:85:1f:f4:21:0c:87:c5:75:b0:d1:66:64:6f:0f:64:62: b3:6a:9c:38:d6:a9:75:d2:5d:6f:cb:75:53:ef:53:e1:9a:a2: aa:bb:7e:12:0e:d6:9b:af:aa:3b:00:0c:da:36:55:48:51:48: 32:cb:ef:d8:b9:15:d7:dc:6f:57:54:14:5b:c7:a5:bd:d3:78: 2b:4b:47:a1:72:7f:1b:09:8a:f7:9e:93:86:38:3e:85:29:10: 2e:b3:a9:b8:f6:06:6a:00:01:68:3f:af:27:8b:46:c6:ac:f5: 68:0e:59:a3:8c:12:08:9f:08:24:d3:d5:19:cd:80:bc:db:32: 72:eb:4d:3e:87:ac:d9:03:f8:cf:d0:f9:43:62:24:99:67:c8: 5d:6c:3f:d1:9e:ec:88:b3:07:6e:0f:ef:8c:37:4c:0f:62:29: 27:73:99:03:ae:b1:e1:62:9e:52:83:28:e1:87:83:9e:2d:8d: 87:4d:ac:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDkHA5P7SSDgpt4rJXmuGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwOTI2N2YzZTNiOWUxZWJiOTc5OTY5MDgwYjBkZmFiMjRj MzYwMWEwHhcNMjYwMjA5MTgwMTA1WhcNMjYwMjEwMTgwMTA1WjAzMTEwLwYDVQQD Eyg0M2UwMDg3NzEyYTZiZjUyOGI2ZGQwMWMyMTIyYjcwMjAwMjA0MWY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQhTPsEJI+0H2aMeXnci1K5JlBbm HDnPBEBR8shzXv27eb9jCIPCY3OXte0ct7gr/o323Sc2Jqk0r4VKS+ygrmrP+NuT ptJvlT5KgUNuYA1Woz7UDb8wxOPKLyYjiOM1hB8CiCiYjw0JjamDkZohF0Je8wO6 GmUwbAHX/0h4hw+lLv5r0NXtDQ96YXgGfpTUUdzMGgDteQFhRPyNO4paIF3Hd8ru T09Z4ZB64pk2z/oMu2SQM0Gj8WpQ98FmP5jWt+28k56BYRo9j1ISUE0egpkoGHmZ jNgT7vw/otzRW605y1pMSHHfw79KH8/ITvK1HKS427I2GD5E46wTE5MS0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEPgCHcSpr9Si23QHCEitwIAIEH5MB8GA1UdIwQY MBaAFACSZ/PjueHruXmWkICw36skw2AaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9mNGRiYTYtNmQ5NC00MTBmLTliZTIt ZDY5MDM4MjUwMThjLzEvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9mNGRiYTYtNmQ5NC00MTBmLTliZTItZDY5MDM4MjUwMThj LzEvQUpKbjgtTzU0ZXU1ZVphUWdMRGZxeVREWUJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaXxj/S9P nma2ituTdczA5TZry0nez5rnNsWKrmZicFpX/RZDH7/LctKeO2Q/zhLOmBEKEPzR NxY3Q2ZOql5WEdU75Y46kv7LOC+FH/QhDIfFdbDRZmRvD2Ris2qcONapddJdb8t1 U+9T4Zqiqrt+Eg7Wm6+qOwAM2jZVSFFIMsvv2LkV19xvV1QUW8elvdN4K0tHoXJ/ GwmK956Thjg+hSkQLrOpuPYGagABaD+vJ4tGxqz1aA5Zo4wSCJ8IJNPVGc2AvNsy cutNPoes2QP4z9D5Q2IkmWfIXWw/0Z7siLMHbg/vjDdMD2IpJ3OZA66x4WKeUoMo 4YeDni2Nh02sGw== -----END CERTIFICATE-----Generated at Mon Feb 9 19:57:55 2026 by rpki-client