This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft File: mhjHkFgumb-1DudYRj3Fr9zL9L0.mft (raw, json) Hash identifier: AltcUz9HGBufBorc5AyFpl1uplE9DdbxxZ0XOzlyiY8= Subject key identifier: FD:AA:C2:74:4E:98:2E:B6:97:4B:D4:15:E8:79:86:1C:72:DB:FF:2C Authority key identifier: 9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD Certificate issuer: /CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Certificate serial: 019C446C70D41C0706B6B32E54AF372DBC3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft Manifest number: 0EF7 Signing time: Mon 09 Feb 2026 22:01:23 +0000 Manifest this update: Mon 09 Feb 2026 22:01:23 +0000 Manifest next update: Tue 10 Feb 2026 22:01:23 +0000 Files and hashes: 1: H50t-PIobmATZjn7AyyJjzFukns.roa (hash: 3sVvkD5sRr0QXHZkHSWyDx8GSm4R4JlcKC5UqxIF5J0=) 2: mhjHkFgumb-1DudYRj3Fr9zL9L0.crl (hash: PIGooUImgPAstluOMuNNPvq43R/t8mFd5DVx0lO6Umo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:44:6c:70:d4:1c:07:06:b6:b3:2e:54:af:37:2d:bc:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a18c790582e99bfb50ee758463dc5afdccbf4bd Validity Not Before: Feb 9 22:01:23 2026 GMT Not After : Feb 10 22:01:23 2026 GMT Subject: CN=fdaac2744e982eb6974bd415e879861c72dbff2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:aa:92:b8:a7:16:3b:40:1f:16:db:11:d1:56: db:d1:66:8a:7d:b9:fc:03:49:5d:ae:29:09:7a:fa: 17:12:d5:87:42:b6:bd:94:42:3d:10:a9:4b:2f:87: 7f:a1:a9:b7:c6:d4:d8:47:b0:1f:a5:3f:7e:5c:5d: c2:50:94:9a:59:ba:db:62:0f:60:d0:44:3d:5f:22: 94:67:7e:b8:63:e5:9b:f2:24:cb:47:57:2c:33:47: 25:f1:28:e5:1c:f7:2d:79:d5:1a:b1:c4:62:e1:45: 9c:79:fa:aa:93:0f:84:8e:2a:8c:12:07:69:7f:c0: 0d:17:91:18:8a:88:32:0c:8a:fb:01:f9:ff:cc:43: 62:fb:f0:74:ab:bd:6a:e4:3e:ef:66:39:24:3f:ed: 85:7d:65:88:c9:bf:80:fb:e9:36:1c:19:a0:5f:a0: c3:be:2c:88:45:83:f3:fb:2b:24:5e:b2:b7:2f:d1: 5d:74:9d:2f:f4:31:62:96:3e:79:c1:3d:c3:cd:23: c2:2e:2d:7a:4f:47:7d:50:f2:33:12:6b:11:9d:96: 1b:5f:d8:f9:90:01:1c:fc:47:24:4d:f7:09:5f:4e: 8f:e0:0c:20:96:ec:d3:d8:1b:4f:84:3d:b1:3c:05: aa:45:9e:33:b3:cd:33:9c:91:00:13:b2:75:a7:c3: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:AA:C2:74:4E:98:2E:B6:97:4B:D4:15:E8:79:86:1C:72:DB:FF:2C X509v3 Authority Key Identifier: keyid:9A:18:C7:90:58:2E:99:BF:B5:0E:E7:58:46:3D:C5:AF:DC:CB:F4:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mhjHkFgumb-1DudYRj3Fr9zL9L0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/1cd01e-e449-4520-906f-5c35dbaba24b/1/mhjHkFgumb-1DudYRj3Fr9zL9L0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:b2:aa:ee:43:43:dc:9b:9f:f8:fa:36:c6:aa:91:ed:31:d8: 31:7b:d9:7a:d0:56:d7:c7:7b:30:8c:6c:28:f5:57:22:9a:31: fa:b1:74:70:27:70:75:db:da:5c:d7:3c:f2:6a:2e:a7:03:ac: dd:34:dc:c3:e0:1d:75:ea:39:e7:88:98:c4:76:1e:80:36:d9: 02:2c:5b:30:4a:7f:55:92:5b:5d:da:7a:5c:ee:f2:b9:eb:28: bc:79:3c:30:33:8b:75:90:ed:fc:bd:72:5e:d4:ee:79:08:ee: fe:97:6e:6f:05:78:8f:76:42:9e:a5:71:34:a8:18:dd:d5:9a: c3:fe:9c:e5:3a:47:73:19:da:44:0a:2e:b4:76:02:1c:d5:bc: 64:f7:8e:52:e7:c4:3b:a5:79:03:a9:a9:97:51:73:21:75:6e: d3:75:87:33:ab:83:49:6c:9d:13:7b:a1:3d:da:91:cd:1a:43: 8a:3e:cd:42:f1:3b:f2:cd:4d:21:87:dd:c5:43:d2:51:c4:88: f4:8b:9a:60:79:f0:ba:17:0e:49:67:ce:16:b2:a7:66:ee:cd: 35:48:76:dd:a4:ef:57:61:c6:76:de:29:9d:4e:e3:66:a5:48: 49:3c:9c:f5:cd:3d:6c:79:e3:9c:3c:b1:92:91:8c:29:3e:29: cc:bd:34:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxEbHDUHAcGtrMuVK83Lbw/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMThjNzkwNTgyZTk5YmZiNTBlZTc1ODQ2M2RjNWFmZGNj YmY0YmQwHhcNMjYwMjA5MjIwMTIzWhcNMjYwMjEwMjIwMTIzWjAzMTEwLwYDVQQD EyhmZGFhYzI3NDRlOTgyZWI2OTc0YmQ0MTVlODc5ODYxYzcyZGJmZjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKqSuKcWO0AfFtsR0Vbb0WaKfbn8 A0ldrikJevoXEtWHQra9lEI9EKlLL4d/oam3xtTYR7AfpT9+XF3CUJSaWbrbYg9g 0EQ9XyKUZ364Y+Wb8iTLR1csM0cl8SjlHPctedUascRi4UWcefqqkw+EjiqMEgdp f8ANF5EYiogyDIr7Afn/zENi+/B0q71q5D7vZjkkP+2FfWWIyb+A++k2HBmgX6DD viyIRYPz+yskXrK3L9FddJ0v9DFilj55wT3DzSPCLi16T0d9UPIzEmsRnZYbX9j5 kAEc/EckTfcJX06P4AwgluzT2BtPhD2xPAWqRZ4zs80znJEAE7J1p8MRWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP2qwnROmC62l0vUFeh5hhxy2/8sMB8GA1UdIwQY MBaAFJoYx5BYLpm/tQ7nWEY9xa/cy/S9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYt NWMzNWRiYWJhMjRiLzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC8xY2QwMWUtZTQ0OS00NTIwLTkwNmYtNWMzNWRiYWJhMjRi LzEvbWhqSGtGZ3VtYi0xRHVkWVJqM0ZyOXpMOUwwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnbKq7kND 3Juf+Po2xqqR7THYMXvZetBW18d7MIxsKPVXIpox+rF0cCdwddvaXNc88moupwOs 3TTcw+Addeo554iYxHYegDbZAixbMEp/VZJbXdp6XO7yuesovHk8MDOLdZDt/L1y XtTueQju/pdubwV4j3ZCnqVxNKgY3dWaw/6c5TpHcxnaRAoutHYCHNW8ZPeOUufE O6V5A6mpl1FzIXVu03WHM6uDSWydE3uhPdqRzRpDij7NQvE78s1NIYfdxUPSUcSI 9IuaYHnwuhcOSWfOFrKnZu7NNUh23aTvV2HGdt4pnU7jZqVISTyc9c09bHnjnDyx kpGMKT4pzL00vA== -----END CERTIFICATE-----Generated at Tue Feb 10 01:42:46 2026 by rpki-client