This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft File: MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft (raw, json) Hash identifier: cc5ACiibDeJShDXRwllHQ76oPTAWrQ5ZLShCNAiZ0Bw= Subject key identifier: CD:D1:91:19:3C:67:FB:24:D3:48:9D:E9:60:CA:18:29:15:97:1D:14 Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Certificate serial: 019C27ABBA8F4F2D1B9A7774A8C43591F85B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft Manifest number: 1802 Signing time: Wed 04 Feb 2026 08:01:31 +0000 Manifest this update: Wed 04 Feb 2026 08:01:31 +0000 Manifest next update: Thu 05 Feb 2026 08:01:31 +0000 Files and hashes: 1: MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl (hash: 8zZDChmQ1vxyAKKvjfmgACl2p9pgtL3S4cjD/w6lGFA=) 2: cWWM9ZpSxCOLjBSdEIJNLYZmfIc.roa (hash: /VirzHss1ndnL0VauqeSmTCntzhbwvddkhihXgztiNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Feb 2026 00:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:27:ab:ba:8f:4f:2d:1b:9a:77:74:a8:c4:35:91:f8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4 Validity Not Before: Feb 4 08:01:31 2026 GMT Not After : Feb 5 08:01:31 2026 GMT Subject: CN=cdd191193c67fb24d3489de960ca182915971d14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:84:a2:d1:4d:98:49:6c:68:7f:05:c2:0f:80: 72:bd:c7:17:be:5b:d2:ee:4a:28:42:f8:40:f5:f7: db:f3:75:38:c6:64:ec:ac:01:49:9f:54:06:bb:e9: 9c:38:bd:8c:51:37:58:5f:c7:0a:5e:41:90:78:f7: 21:da:47:d1:e0:b9:83:38:79:24:5b:cc:bf:6d:cb: 6d:d4:14:0e:2c:ba:7f:9c:f5:c7:e2:13:81:05:86: c9:4e:76:e8:8d:e5:95:c3:b1:9d:b7:c0:67:60:b4: 60:4d:07:49:8d:41:e2:38:62:e3:98:68:d4:01:34: 9f:50:f6:7a:a2:ed:58:d9:11:c7:a2:f1:48:c5:5f: 28:fe:0d:92:c9:87:af:ca:04:9c:c5:b6:c8:5b:9a: 4c:df:76:f9:32:6d:b8:a4:e7:4c:26:f5:35:81:00: ee:0d:cc:2c:72:16:b3:ed:e2:bd:a5:55:e7:d6:47: f6:78:09:69:7f:dc:6d:c4:d5:45:5e:f2:d7:aa:c1: 83:0f:5c:66:12:17:5d:d6:17:22:bd:54:fc:8a:06: 3c:d9:49:ba:22:01:e2:c7:20:ad:73:f4:b0:1c:09: 81:32:c0:e9:58:12:32:f4:b4:5e:fd:9a:c5:83:0f: e2:d6:3e:dc:7b:d5:df:91:f4:e9:0a:32:bb:11:80: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D1:91:19:3C:67:FB:24:D3:48:9D:E9:60:CA:18:29:15:97:1D:14 X509v3 Authority Key Identifier: keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:ce:ee:24:c1:28:c4:18:f4:d6:5d:71:f7:76:60:94:9a:a2: 9e:a1:ce:40:30:dc:25:33:0f:58:73:48:c2:e3:10:d9:c8:95: 01:46:05:38:41:4a:35:0a:2b:15:5a:48:7f:d7:fd:04:f2:82: ba:15:6c:02:36:d1:25:96:2e:15:e1:66:65:33:88:bc:51:4e: 34:df:ea:91:cb:6a:85:48:cd:5d:82:cb:15:bb:49:99:a4:87: a5:01:61:90:20:89:a2:fa:bb:84:e3:d8:a8:36:ae:7a:35:56: 92:3e:c0:2f:77:fd:db:a4:a1:49:d8:fc:6f:f2:68:96:3f:5e: 15:15:9f:6b:49:d4:ee:e7:01:87:3b:ba:0d:cb:6a:57:1c:40: 53:9c:10:20:4b:35:f6:68:10:25:23:8d:85:0a:3d:30:d3:3c: 8e:e7:7e:64:90:8d:25:27:6c:a9:aa:b2:bc:0a:ad:56:3b:8e: f1:db:2d:31:d4:bd:95:7a:40:8e:04:e1:c7:eb:dd:8a:be:07: 0b:ce:78:93:3b:d3:f1:fe:b6:f4:41:e6:3e:07:68:0e:d5:2e: 3f:02:31:1a:14:94:8a:7e:02:59:3a:f1:f6:c2:35:f5:a4:da: 92:33:f9:8b:51:4a:3c:73:67:cf:47:b5:5b:3f:01:b2:e9:60: b6:25:ba:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZwnq7qPTy0bmnd0qMQ1kfhbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwYWVlMTFiMjk0MzU3MmQxMWJlY2M0MjVjNjg0YjQ4YmJi MmNiZDQwHhcNMjYwMjA0MDgwMTMxWhcNMjYwMjA1MDgwMTMxWjAzMTEwLwYDVQQD EyhjZGQxOTExOTNjNjdmYjI0ZDM0ODlkZTk2MGNhMTgyOTE1OTcxZDE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyISi0U2YSWxofwXCD4ByvccXvlvS 7kooQvhA9ffb83U4xmTsrAFJn1QGu+mcOL2MUTdYX8cKXkGQePch2kfR4LmDOHkk W8y/bctt1BQOLLp/nPXH4hOBBYbJTnbojeWVw7Gdt8BnYLRgTQdJjUHiOGLjmGjU ATSfUPZ6ou1Y2RHHovFIxV8o/g2SyYevygScxbbIW5pM33b5Mm24pOdMJvU1gQDu Dcwschaz7eK9pVXn1kf2eAlpf9xtxNVFXvLXqsGDD1xmEhdd1hcivVT8igY82Um6 IgHixyCtc/SwHAmBMsDpWBIy9LRe/ZrFgw/i1j7ce9XfkfTpCjK7EYD8MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3RkRk8Z/sk00id6WDKGCkVlx0UMB8GA1UdIwQY MBaAFDCu4RspQ1ctEb7MQlxoS0i7ssvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEt MWI0NmQyZWI1NDEyLzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEtMWI0NmQyZWI1NDEy LzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3c7uJMEo xBj01l1x93ZglJqinqHOQDDcJTMPWHNIwuMQ2ciVAUYFOEFKNQorFVpIf9f9BPKC uhVsAjbRJZYuFeFmZTOIvFFONN/qkctqhUjNXYLLFbtJmaSHpQFhkCCJovq7hOPY qDauejVWkj7AL3f926ShSdj8b/Jolj9eFRWfa0nU7ucBhzu6DctqVxxAU5wQIEs1 9mgQJSONhQo9MNM8jud+ZJCNJSdsqaqyvAqtVjuO8dstMdS9lXpAjgThx+vdir4H C854kzvT8f629EHmPgdoDtUuPwIxGhSUin4CWTrx9sI19aTakjP5i1FKPHNnz0e1 Wz8BsulgtiW69A== -----END CERTIFICATE-----Generated at Wed Feb 4 09:53:22 2026 by rpki-client