This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft File: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft (raw, json) Hash identifier: nyQnZ07Tj5ojIGqUIJ8afW5kqNu+APY6Z9OwrlNtfyg= Subject key identifier: F3:65:5B:89:03:5E:21:E9:4B:81:27:3C:C1:29:8E:71:52:25:7C:B3 Authority key identifier: 68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 Certificate issuer: /CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Certificate serial: 019C4434DE42C869C59F4019BE910D2A218F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft Manifest number: 124B Signing time: Mon 09 Feb 2026 21:00:41 +0000 Manifest this update: Mon 09 Feb 2026 21:00:41 +0000 Manifest next update: Tue 10 Feb 2026 21:00:41 +0000 Files and hashes: 1: OEDEDYA3SYXxsiHcF8-A5cjLPNk.roa (hash: r9PEpvr7wKafvI4ropP5Z5RymqQ4mqOf4OSTnA4BsLQ=) 2: aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl (hash: bn1k1NmKTJoSc4kDnmP6gvzeorShDkqdgXtoY+lg+EI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 15:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:34:de:42:c8:69:c5:9f:40:19:be:91:0d:2a:21:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68417da8aa4fe0b8cff188412eedda63cbdcf996 Validity Not Before: Feb 9 21:00:41 2026 GMT Not After : Feb 10 21:00:41 2026 GMT Subject: CN=f3655b89035e21e94b81273cc1298e7152257cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8a:f6:0d:78:0e:6f:e3:9e:f4:ed:30:3f:2e: 40:8a:b2:f9:27:5f:22:fd:c3:58:6a:e6:ff:1d:00: e9:95:58:dd:70:11:83:e9:1d:3d:a4:57:ca:0e:3f: 42:a3:09:3b:4a:50:27:6e:f8:66:67:4c:36:27:8f: e0:42:6e:97:0c:1e:f9:1c:20:5d:3e:9a:12:74:1c: 81:b1:05:ca:d6:7c:f2:06:58:79:e6:e6:58:0c:d0: d2:c2:07:7a:81:80:ce:2c:60:bb:c5:c9:3e:b2:9e: 2a:3b:78:40:7f:39:1d:53:2a:73:77:7d:cf:cd:fd: c8:0c:d3:44:39:ed:cb:e1:51:7a:39:99:ce:11:59: 1d:fa:9e:21:64:70:e5:28:6f:e3:a6:2c:fb:1d:19: 7c:dc:eb:9c:1e:49:4f:c3:67:16:d2:eb:28:77:37: 3d:b0:9a:fe:91:01:22:aa:90:c8:72:20:d0:22:ce: 07:ed:ce:aa:67:b2:88:fd:55:d5:03:ff:fe:22:5e: 7f:b7:d1:74:f3:f0:a7:6c:62:53:89:56:44:cc:5d: 9d:53:1a:97:26:ea:a8:17:7c:5a:b7:b6:1e:6d:e7: 62:d7:3f:5f:8e:45:b4:39:36:ea:88:73:fb:3c:41: f9:3b:b7:50:aa:86:2e:45:c7:21:52:03:16:0f:c4: 47:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:65:5B:89:03:5E:21:E9:4B:81:27:3C:C1:29:8E:71:52:25:7C:B3 X509v3 Authority Key Identifier: keyid:68:41:7D:A8:AA:4F:E0:B8:CF:F1:88:41:2E:ED:DA:63:CB:DC:F9:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2309cc-fa79-44d1-8986-4d537cf01809/1/aEF9qKpP4LjP8YhBLu3aY8vc-ZY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:3c:39:4b:d3:7d:72:1c:72:ee:0c:72:d7:31:9e:89:53:7e: ee:ae:00:e9:59:1c:3b:c3:3b:20:ea:ef:21:37:a7:53:ba:2c: f4:07:27:d1:23:34:63:bb:7e:5d:18:10:ff:3c:1f:67:6b:fa: 29:54:1e:60:2e:9e:65:49:bf:fe:8b:18:71:61:df:ce:45:f2: ce:3c:a4:a9:22:a6:eb:f4:37:d3:6f:f5:3b:08:c3:37:a3:dc: a1:87:4a:dd:48:b9:1e:b8:50:27:ac:38:d1:71:68:86:44:a3: e8:d9:b9:2f:87:8f:4a:01:51:48:e1:f6:ca:e8:64:c2:7d:ba: 39:5d:ef:b3:6a:6a:4f:9d:15:f8:bf:e5:28:e6:f9:6a:e1:a1: a1:d1:34:8a:2b:c7:c2:bf:e6:b1:b1:d6:13:d5:97:ee:ee:89: dc:74:27:9b:1a:ce:83:1b:12:91:76:fe:07:62:b0:ca:54:2f: 0d:ea:d5:14:a5:9c:e6:e6:ae:4e:ac:be:26:c4:00:4f:fc:0d: 16:aa:00:21:28:31:49:17:33:42:a1:29:85:4b:c3:4d:c2:40: ef:5f:02:89:87:35:af:d6:9d:f6:9a:71:b7:ab:6d:ac:21:09: e5:94:5e:08:82:69:80:aa:56:66:d0:9a:6b:21:69:3e:4d:b1: e4:f5:0e:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxENN5CyGnFn0AZvpENKiGPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4NDE3ZGE4YWE0ZmUwYjhjZmYxODg0MTJlZWRkYTYzY2Jk Y2Y5OTYwHhcNMjYwMjA5MjEwMDQxWhcNMjYwMjEwMjEwMDQxWjAzMTEwLwYDVQQD EyhmMzY1NWI4OTAzNWUyMWU5NGI4MTI3M2NjMTI5OGU3MTUyMjU3Y2IzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuor2DXgOb+Oe9O0wPy5AirL5J18i /cNYaub/HQDplVjdcBGD6R09pFfKDj9Cowk7SlAnbvhmZ0w2J4/gQm6XDB75HCBd PpoSdByBsQXK1nzyBlh55uZYDNDSwgd6gYDOLGC7xck+sp4qO3hAfzkdUypzd33P zf3IDNNEOe3L4VF6OZnOEVkd+p4hZHDlKG/jpiz7HRl83OucHklPw2cW0usodzc9 sJr+kQEiqpDIciDQIs4H7c6qZ7KI/VXVA//+Il5/t9F08/CnbGJTiVZEzF2dUxqX JuqoF3xat7Yebedi1z9fjkW0OTbqiHP7PEH5O7dQqoYuRcchUgMWD8RHhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPNlW4kDXiHpS4EnPMEpjnFSJXyzMB8GA1UdIwQY MBaAFGhBfaiqT+C4z/GIQS7t2mPL3PmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYt NGQ1MzdjZjAxODA5LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8yMzA5Y2MtZmE3OS00NGQxLTg5ODYtNGQ1MzdjZjAxODA5 LzEvYUVGOXFLcFA0TGpQOFloQkx1M2FZOHZjLVpZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjDw5S9N9 chxy7gxy1zGeiVN+7q4A6VkcO8M7IOrvITenU7os9Acn0SM0Y7t+XRgQ/zwfZ2v6 KVQeYC6eZUm//osYcWHfzkXyzjykqSKm6/Q302/1OwjDN6PcoYdK3Ui5HrhQJ6w4 0XFohkSj6Nm5L4ePSgFRSOH2yuhkwn26OV3vs2pqT50V+L/lKOb5auGhodE0iivH wr/msbHWE9WX7u6J3HQnmxrOgxsSkXb+B2KwylQvDerVFKWc5uauTqy+JsQAT/wN FqoAISgxSRczQqEphUvDTcJA718CiYc1r9ad9ppxt6ttrCEJ5ZReCIJpgKpWZtCa ayFpPk2x5PUOwg== -----END CERTIFICATE-----Generated at Tue Feb 10 00:15:10 2026 by rpki-client