This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft File: afGmtIBLtqOFSkThBp8lcmdBeAU.mft (raw, json) Hash identifier: x49xC8Zyip0l9im1tHfWTFzThhx9fJ6pePn7MQBQMTo= Subject key identifier: 4A:2B:BD:71:17:09:CF:98:EC:7A:A0:FF:6E:58:A4:11:23:DD:63:84 Authority key identifier: 69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05 Certificate issuer: /CN=69f1a6b4804bb6a3854a44e1069f257267417805 Certificate serial: 019C43C72D4480C42620620EB112436DF8C9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft Manifest number: 05E7 Signing time: Mon 09 Feb 2026 19:00:52 +0000 Manifest this update: Mon 09 Feb 2026 19:00:52 +0000 Manifest next update: Tue 10 Feb 2026 19:00:52 +0000 Files and hashes: 1: EWm46AI1rMUSMZthGRFJLKzdg5w.roa (hash: VkQfmMtNp47GhBpBHPy5YMBbYpA58g2YnMi7hmT4lRU=) 2: afGmtIBLtqOFSkThBp8lcmdBeAU.crl (hash: prjyYlxZeIh7i417C7c2GICYu6/USCyiAnCYLi/Vw2A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:43:c7:2d:44:80:c4:26:20:62:0e:b1:12:43:6d:f8:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69f1a6b4804bb6a3854a44e1069f257267417805 Validity Not Before: Feb 9 19:00:52 2026 GMT Not After : Feb 10 19:00:52 2026 GMT Subject: CN=4a2bbd711709cf98ec7aa0ff6e58a41123dd6384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:71:13:0b:77:7c:c7:b6:41:ab:1f:ed:ec:93: 53:ff:a2:2f:b6:7b:6c:81:43:bc:25:98:e8:ed:f3: 32:f2:0b:59:4b:3c:38:b5:c9:0b:a9:c6:e5:2a:c9: ff:a9:bf:ed:e2:75:76:12:21:b9:e3:f7:82:89:6a: 61:d6:c7:4b:8c:5b:3c:82:2a:42:f6:19:16:4d:61: 65:00:d8:19:b6:ea:ca:8d:76:8e:ba:88:4b:83:f3: c3:c1:6b:17:ab:27:ad:69:83:de:e8:5e:4f:8d:79: dc:69:d7:54:c5:ed:81:46:8a:8a:ed:06:ee:9d:f9: 79:8d:ca:04:77:95:78:52:99:cc:28:16:4a:e9:70: e2:ec:5b:1a:bd:96:77:f4:7e:35:ea:ad:34:59:87: 25:25:07:e8:a6:e2:71:14:1c:7f:34:25:df:02:8d: 8a:33:93:60:d3:4d:5c:c0:6c:6b:a3:f0:e3:63:a4: 26:6c:89:31:5e:cf:00:a3:c7:8d:11:f6:cd:3f:b4: b5:f7:c1:fa:32:42:3b:82:d8:f6:f7:2f:25:d4:ad: 6b:53:dd:53:a2:52:97:cb:e4:cb:e7:3c:f4:3c:8c: 8e:30:0b:a8:ec:01:d7:47:f3:e4:3f:d2:c4:e3:63: 0d:1e:c3:db:82:ee:ca:ea:29:95:61:c2:54:6c:cb: 14:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:2B:BD:71:17:09:CF:98:EC:7A:A0:FF:6E:58:A4:11:23:DD:63:84 X509v3 Authority Key Identifier: keyid:69:F1:A6:B4:80:4B:B6:A3:85:4A:44:E1:06:9F:25:72:67:41:78:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afGmtIBLtqOFSkThBp8lcmdBeAU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3f1f2e-5c52-4fb0-b538-17366ff96379/1/afGmtIBLtqOFSkThBp8lcmdBeAU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:74:48:55:4d:0e:d6:58:71:40:75:46:fc:8b:35:0f:90:25: 53:98:17:0e:16:70:9d:27:f8:54:50:bb:db:cb:68:ef:46:a9: 4e:4b:01:c4:b7:0e:25:82:86:0e:61:1d:18:87:42:7c:9d:4f: b8:e2:f2:86:d8:bc:db:c9:c4:09:9d:ea:5c:5a:e3:41:63:c0: b6:40:ec:2a:9b:ca:3a:81:d6:77:16:4c:82:c2:3f:c7:19:b9: 48:9d:80:7f:42:5c:d0:b7:9e:10:4b:cd:4b:70:d0:a7:6b:6e: 38:20:9f:94:c8:f2:24:d4:02:10:2c:f4:5a:03:e6:c4:5d:0c: 85:a4:16:f0:07:f7:7f:3d:5c:5f:ac:0a:22:f3:7a:4e:03:5f: 8e:6a:fa:a0:5f:69:92:69:a6:d6:80:6c:31:ac:48:c2:f4:37: 45:41:2e:e4:17:89:7a:ef:96:f5:bd:ae:4c:3a:41:26:c5:9a: 92:6a:77:97:fe:06:41:f8:12:13:1f:8c:e8:a6:c1:c9:67:20: 98:d2:c5:46:8e:ed:a9:37:c7:e1:de:10:e0:9f:2c:7b:c5:be: ae:50:c3:0a:ec:1e:61:dc:fa:f9:9c:9d:f0:98:be:8e:55:9c: 19:6c:56:e3:c0:66:dd:d9:37:2d:cf:82:23:22:de:a8:9d:7b: a5:25:97:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxDxy1EgMQmIGIOsRJDbfjJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZjFhNmI0ODA0YmI2YTM4NTRhNDRlMTA2OWYyNTcyNjc0 MTc4MDUwHhcNMjYwMjA5MTkwMDUyWhcNMjYwMjEwMTkwMDUyWjAzMTEwLwYDVQQD Eyg0YTJiYmQ3MTE3MDljZjk4ZWM3YWEwZmY2ZTU4YTQxMTIzZGQ2Mzg0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3ETC3d8x7ZBqx/t7JNT/6Ivtnts gUO8JZjo7fMy8gtZSzw4tckLqcblKsn/qb/t4nV2EiG54/eCiWph1sdLjFs8gipC 9hkWTWFlANgZturKjXaOuohLg/PDwWsXqyetaYPe6F5PjXncaddUxe2BRoqK7Qbu nfl5jcoEd5V4UpnMKBZK6XDi7FsavZZ39H416q00WYclJQfopuJxFBx/NCXfAo2K M5Ng001cwGxro/DjY6QmbIkxXs8Ao8eNEfbNP7S198H6MkI7gtj29y8l1K1rU91T olKXy+TL5zz0PIyOMAuo7AHXR/PkP9LE42MNHsPbgu7K6imVYcJUbMsULQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEorvXEXCc+Y7Hqg/25YpBEj3WOEMB8GA1UdIwQY MBaAFGnxprSAS7ajhUpE4QafJXJnQXgFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1Mzgt MTczNjZmZjk2Mzc5LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi8zZjFmMmUtNWM1Mi00ZmIwLWI1MzgtMTczNjZmZjk2Mzc5 LzEvYWZHbXRJQkx0cU9GU2tUaEJwOGxjbWRCZUFVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfnRIVU0O 1lhxQHVG/Is1D5AlU5gXDhZwnSf4VFC728to70apTksBxLcOJYKGDmEdGIdCfJ1P uOLyhti828nECZ3qXFrjQWPAtkDsKpvKOoHWdxZMgsI/xxm5SJ2Af0Jc0LeeEEvN S3DQp2tuOCCflMjyJNQCECz0WgPmxF0MhaQW8Af3fz1cX6wKIvN6TgNfjmr6oF9p kmmm1oBsMaxIwvQ3RUEu5BeJeu+W9b2uTDpBJsWakmp3l/4GQfgSEx+M6KbByWcg mNLFRo7tqTfH4d4Q4J8se8W+rlDDCuweYdz6+Zyd8Ji+jlWcGWxW48Bm3dk3Lc+C IyLeqJ17pSWXfw== -----END CERTIFICATE-----Generated at Mon Feb 9 23:53:11 2026 by rpki-client