This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json) Hash identifier: Bn2h4Cg3qYjbsxliAq0w9OuvfjscHFSTNp2rE5X+xRs= Subject key identifier: 10:0B:E8:99:F0:32:B5:1B:37:BE:C9:38:4C:51:09:45:C5:BD:42:60 Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Certificate serial: 019C420F972A0CCA9FA65218BA95F1E5901C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft Manifest number: 17A3 Signing time: Mon 09 Feb 2026 11:00:43 +0000 Manifest this update: Mon 09 Feb 2026 11:00:43 +0000 Manifest next update: Tue 10 Feb 2026 11:00:43 +0000 Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: E9zfS3hZXbwrdQU7YiLgtwFJ2lcsRU3FDk25XSQYVNE=) 2: X3jNBw8Lh4wM_nlBrKCyZ_CiKpA.roa (hash: 0JM67ptoryLNsC+bVRRWV80kYyTFg1yBjH5eusPhq4I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:97:2a:0c:ca:9f:a6:52:18:ba:95:f1:e5:90:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d Validity Not Before: Feb 9 11:00:43 2026 GMT Not After : Feb 10 11:00:43 2026 GMT Subject: CN=100be899f032b51b37bec9384c510945c5bd4260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:13:bf:e0:7d:c3:d7:25:ad:74:b4:5a:e5:dd: 93:48:e4:ef:ef:e8:fe:42:58:2f:52:e5:82:64:0d: bd:1a:af:d3:8c:a3:3e:1b:8e:d5:43:98:51:69:51: ec:08:aa:29:9d:dd:c3:cd:78:49:70:13:13:eb:aa: 73:85:56:c4:10:5c:46:2a:87:b0:b1:99:06:e1:52: bb:b1:7b:c4:c8:22:65:53:63:39:9d:a6:b4:18:30: 71:27:3b:e4:7c:18:6a:10:39:1c:a3:ed:13:a8:16: ad:8c:ad:80:31:9f:6c:e3:6a:21:32:96:3b:59:c4: d8:a8:83:33:f4:74:b4:56:2d:e1:8d:01:4a:51:28: c0:86:d5:ac:28:f7:de:c8:c3:14:38:2d:34:2b:44: d8:25:a8:a4:ab:4d:85:86:79:e1:3b:ee:5f:20:13: 59:fa:a7:75:a2:18:8a:16:c1:7d:17:ce:64:10:ad: 20:7f:e9:c2:44:3b:71:cb:8e:9f:e3:da:d0:f1:b6: 07:a7:2d:f9:eb:93:74:32:62:93:d7:a4:fc:8d:55: ad:0c:83:83:ce:59:50:99:67:01:97:1c:2d:d1:c3: 99:8d:e6:8b:8b:d9:3b:8b:ab:41:02:04:c0:c5:03: f0:80:f8:90:80:ef:fc:c6:a9:a9:b0:c6:b1:1f:0b: 07:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:0B:E8:99:F0:32:B5:1B:37:BE:C9:38:4C:51:09:45:C5:BD:42:60 X509v3 Authority Key Identifier: keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bd:b5:06:12:de:59:27:4a:b4:e3:47:11:84:ee:5a:7b:09: eb:87:cc:86:24:f1:4c:15:f6:cd:1d:d6:71:bc:a8:d2:94:1c: 5c:1e:8c:a6:97:1d:ff:2e:0a:aa:7a:3f:9e:cd:f7:c1:09:5d: b8:5d:80:aa:7b:2f:8f:32:ae:9f:95:26:40:9c:07:ba:a8:29: fc:70:a5:af:bb:e0:06:4f:3e:30:2a:17:d0:e6:04:1d:fa:ee: bb:f2:e9:70:cb:b2:29:62:49:31:7e:05:06:7c:4f:f2:7f:08: c8:d6:70:eb:7d:82:46:8d:e6:90:a6:b0:1b:79:a3:ed:46:f3: 1c:d3:c0:c4:fb:7e:af:ed:1c:fb:67:7b:e0:3f:fa:d6:5f:57: 74:38:6f:b7:ee:84:04:ef:af:ac:fb:51:06:fa:93:eb:1e:86: d6:cb:ca:b3:c6:60:ce:8a:29:95:e2:bf:30:00:f4:e8:51:60: 4c:b6:10:94:24:95:60:9d:dc:ee:9a:3c:0e:22:12:61:27:e9: 8a:d0:13:fb:34:38:8f:0c:55:ad:29:87:f9:91:89:11:95:ad: de:f7:42:88:8a:59:d6:90:64:2a:2b:e7:74:f8:3e:be:17:7e: ca:40:87:5a:b4:62:8b:c6:1a:c0:b6:53:9d:f1:57:00:33:fb: cb:60:b5:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCD5cqDMqfplIYupXx5ZAcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwNzRlYzNlYzUzZjUyZjdmNTI4MzViYjUxMGFiNmJlZGFh MDBhM2QwHhcNMjYwMjA5MTEwMDQzWhcNMjYwMjEwMTEwMDQzWjAzMTEwLwYDVQQD EygxMDBiZTg5OWYwMzJiNTFiMzdiZWM5Mzg0YzUxMDk0NWM1YmQ0MjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BO/4H3D1yWtdLRa5d2TSOTv7+j+ QlgvUuWCZA29Gq/TjKM+G47VQ5hRaVHsCKopnd3DzXhJcBMT66pzhVbEEFxGKoew sZkG4VK7sXvEyCJlU2M5naa0GDBxJzvkfBhqEDkco+0TqBatjK2AMZ9s42ohMpY7 WcTYqIMz9HS0Vi3hjQFKUSjAhtWsKPfeyMMUOC00K0TYJaikq02FhnnhO+5fIBNZ +qd1ohiKFsF9F85kEK0gf+nCRDtxy46f49rQ8bYHpy3565N0MmKT16T8jVWtDIOD zllQmWcBlxwt0cOZjeaLi9k7i6tBAgTAxQPwgPiQgO/8xqmpsMaxHwsHAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBAL6JnwMrUbN77JOExRCUXFvUJgMB8GA1UdIwQY MBaAFAB07D7FP1L39Sg1u1EKtr7aoAo9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUt MWFjMmVkZGE4ZTJhLzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYy85MDhhOGEtNThkYi00NTA5LWEyODUtMWFjMmVkZGE4ZTJh LzEvQUhUc1BzVV9VdmYxS0RXN1VRcTJ2dHFnQ2owLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar21BhLe WSdKtONHEYTuWnsJ64fMhiTxTBX2zR3Wcbyo0pQcXB6Mppcd/y4Kqno/ns33wQld uF2AqnsvjzKun5UmQJwHuqgp/HClr7vgBk8+MCoX0OYEHfruu/LpcMuyKWJJMX4F BnxP8n8IyNZw632CRo3mkKawG3mj7UbzHNPAxPt+r+0c+2d74D/61l9XdDhvt+6E BO+vrPtRBvqT6x6G1svKs8ZgzoopleK/MAD06FFgTLYQlCSVYJ3c7po8DiISYSfp itAT+zQ4jwxVrSmH+ZGJEZWt3vdCiIpZ1pBkKivndPg+vhd+ykCHWrRii8YawLZT nfFXADP7y2C1lg== -----END CERTIFICATE-----Generated at Mon Feb 9 16:53:42 2026 by rpki-client