This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft File: MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft (raw, json) Hash identifier: 73mGfbi57mYNVsHLbg05+ahYziScVA1/9BM2dNny/kU= Subject key identifier: 58:FD:8A:11:BC:19:69:4E:C7:DD:8B:FE:20:6C:9E:66:83:81:8E:07 Authority key identifier: 31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02 Certificate issuer: /CN=31db0f883cf94491451e908c6e682ace36b13602 Certificate serial: 019C420F32ED46964DF05D459A6C49549CDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft Manifest number: 0A1F Signing time: Mon 09 Feb 2026 11:00:18 +0000 Manifest this update: Mon 09 Feb 2026 11:00:18 +0000 Manifest next update: Tue 10 Feb 2026 11:00:18 +0000 Files and hashes: 1: MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl (hash: 3GDzbkqfCztHH5LknQenPoXBbBSiaEa+TPyBFbJXaQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 11:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:42:0f:32:ed:46:96:4d:f0:5d:45:9a:6c:49:54:9c:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31db0f883cf94491451e908c6e682ace36b13602 Validity Not Before: Feb 9 11:00:18 2026 GMT Not After : Feb 10 11:00:18 2026 GMT Subject: CN=58fd8a11bc19694ec7dd8bfe206c9e6683818e07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:53:06:75:f6:1f:28:ae:7c:c5:be:4b:87:48: 45:5e:9e:e0:68:f2:3e:69:4d:01:4c:ad:ae:71:a9: c2:78:a6:fe:4e:a0:1c:1f:29:fe:9a:ea:2b:01:8f: af:d7:ef:da:14:bf:df:25:8f:e2:ae:71:08:f7:56: ac:36:3a:66:62:1c:d9:9d:87:37:ef:f6:47:b2:00: c0:ab:38:38:2b:85:1e:a5:cd:20:e1:c7:5d:68:84: 2c:cb:bd:ca:a2:e9:f8:75:09:08:22:53:64:55:e8: f6:0c:29:fb:3a:b1:22:09:16:34:19:f8:2b:93:5b: 88:f8:ae:1a:15:ce:5b:f3:6f:e7:80:5b:be:eb:fc: 44:ba:6f:fd:ad:ab:a9:14:8a:d8:e4:6b:22:24:fb: f2:20:e9:1f:a9:15:66:0d:96:e3:04:d5:45:31:d2: 6e:0d:ba:b2:b8:da:06:e1:96:68:41:0e:31:3a:bb: 6d:e3:3e:6a:5e:ca:3e:83:12:e1:3d:38:df:40:71: da:b5:c8:94:d1:2b:a6:05:07:57:ca:78:87:8d:71: 4a:95:ae:20:54:e5:01:42:10:35:da:41:05:4b:4f: 88:c4:69:3c:3f:71:6c:75:ad:4d:53:ed:a3:e4:8b: 22:bc:1d:47:1f:4e:4b:0f:7a:e4:0e:44:ff:7d:d4: 0e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:8A:11:BC:19:69:4E:C7:DD:8B:FE:20:6C:9E:66:83:81:8E:07 X509v3 Authority Key Identifier: keyid:31:DB:0F:88:3C:F9:44:91:45:1E:90:8C:6E:68:2A:CE:36:B1:36:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdsPiDz5RJFFHpCMbmgqzjaxNgI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/a70e5f-0480-415c-8512-921a2e7a5608/1/MdsPiDz5RJFFHpCMbmgqzjaxNgI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f4:72:88:3d:e8:cf:0e:28:ae:1c:0d:50:19:c6:96:10:bb: 43:57:c1:ab:ba:5d:bf:9a:d5:74:6e:e1:db:09:26:f6:49:7e: 97:32:ad:2e:d0:9a:7d:74:44:53:25:30:ba:29:f1:3d:12:0b: e3:8f:91:a0:c7:a6:f8:b5:69:89:4a:e4:49:7f:f5:09:4f:64: d0:2d:ad:ab:75:d6:ef:a3:cd:05:60:14:00:dd:6d:15:c2:c3: f7:5f:d0:0d:97:d4:97:b3:03:9c:95:0a:ea:c6:cb:77:ee:f5: 1b:35:68:71:3a:e7:22:81:3b:56:f9:3b:c4:1a:2e:b4:21:62: 3d:fa:03:84:5b:49:86:d9:25:69:90:a2:6d:0c:76:ce:85:05: d8:f9:de:14:77:f1:f4:a4:64:84:e0:db:b8:39:13:ef:64:77: 01:66:72:9e:8b:03:21:a2:a4:93:62:01:d1:b5:25:1c:93:91: 44:5b:a0:02:b5:0a:f9:67:a9:34:a1:d5:57:e0:b5:c4:66:44: a7:44:1a:57:bf:e6:05:fc:ca:85:34:cc:65:28:84:d4:59:80: 5b:e5:63:3b:74:2e:b0:db:f7:a3:1f:86:4c:49:33:79:0e:61: 5a:69:9d:f1:84:5a:fe:24:81:43:a9:fb:74:c6:22:03:b3:22: 05:aa:c6:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZxCDzLtRpZN8F1FmmxJVJzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxZGIwZjg4M2NmOTQ0OTE0NTFlOTA4YzZlNjgyYWNlMzZi MTM2MDIwHhcNMjYwMjA5MTEwMDE4WhcNMjYwMjEwMTEwMDE4WjAzMTEwLwYDVQQD Eyg1OGZkOGExMWJjMTk2OTRlYzdkZDhiZmUyMDZjOWU2NjgzODE4ZTA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVMGdfYfKK58xb5Lh0hFXp7gaPI+ aU0BTK2ucanCeKb+TqAcHyn+muorAY+v1+/aFL/fJY/irnEI91asNjpmYhzZnYc3 7/ZHsgDAqzg4K4Uepc0g4cddaIQsy73Koun4dQkIIlNkVej2DCn7OrEiCRY0Gfgr k1uI+K4aFc5b82/ngFu+6/xEum/9raupFIrY5GsiJPvyIOkfqRVmDZbjBNVFMdJu DbqyuNoG4ZZoQQ4xOrtt4z5qXso+gxLhPTjfQHHatciU0SumBQdXyniHjXFKla4g VOUBQhA12kEFS0+IxGk8P3Fsda1NU+2j5IsivB1HH05LD3rkDkT/fdQOOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFj9ihG8GWlOx92L/iBsnmaDgY4HMB8GA1UdIwQY MBaAFDHbD4g8+USRRR6QjG5oKs42sTYCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTIt OTIxYTJlN2E1NjA4LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC9hNzBlNWYtMDQ4MC00MTVjLTg1MTItOTIxYTJlN2E1NjA4 LzEvTWRzUGlEejVSSkZGSHBDTWJtZ3F6amF4TmdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfRyiD3o zw4orhwNUBnGlhC7Q1fBq7pdv5rVdG7h2wkm9kl+lzKtLtCafXREUyUwuinxPRIL 44+RoMem+LVpiUrkSX/1CU9k0C2tq3XW76PNBWAUAN1tFcLD91/QDZfUl7MDnJUK 6sbLd+71GzVocTrnIoE7Vvk7xBoutCFiPfoDhFtJhtklaZCibQx2zoUF2PneFHfx 9KRkhODbuDkT72R3AWZynosDIaKkk2IB0bUlHJORRFugArUK+WepNKHVV+C1xGZE p0QaV7/mBfzKhTTMZSiE1FmAW+VjO3QusNv3ox+GTEkzeQ5hWmmd8YRa/iSBQ6n7 dMYiA7MiBarGJA== -----END CERTIFICATE-----Generated at Mon Feb 9 18:32:27 2026 by rpki-client